Re: [OT] Memory Leak in Tomcat

2011-03-06 Thread הילה
Security seems to be always in the hands of the wrong people. No need for insults here, this is a new requirement which I'm not familiar with, and that's why I asked you guys.. Instead of the JTDS, can I use Tomcat Spengo? will it provide same results, as using a domain user for the tomcat

Re: [OT] Memory Leak in Tomcat

2011-03-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 3/6/2011 4:49 AM, הילה wrote: Security seems to be always in the hands of the wrong people. No need for insults here, this is a new requirement which I'm not familiar with, and that's why I asked you guys.. I don't think Jorge was

Re: [OT] Memory Leak in Tomcat

2011-03-06 Thread הילה
Thanks :] This was the task I was required to do, wit no question asked, cause this is a requirement for our application to pass some major barriers. so.. :] Hila 2011/3/7 Christopher Schultz ch...@christopherschultz.net -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 3/6/2011

Re: [OT] Memory Leak in Tomcat

2011-03-01 Thread Jorge Medina
I got a good laugh with your message. Security seems to be always in the hands of the wrong people. Once I asked for the algorithm used to hash the passwords (that happened to be HMAC SHA-1) into a database, if I was going to authenticate the users, I needed to use the same algorithm. I did not

Re: [OT] Memory Leak in Tomcat

2011-02-28 Thread הילה
continue to the discussion- How can I encrypt the password inside the xml file? Thanks Hila בתאריך 27 בפברואר 2011 19:37, מאת הילה hilavalen...@gmail.com: Original: Does this happen all the time? Under what conditions? Are you able to build a patched version of Tomcat in a test environment

RE: [OT] Memory Leak in Tomcat

2011-02-28 Thread Caldarale, Charles R
From: הילה [mailto:hilavalen...@gmail.com] Subject: Re: [OT] Memory Leak in Tomcat How can I encrypt the password inside the xml file? Short answer: pointless exercise. Long answer: search the archives. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY

Re: [OT] Memory Leak in Tomcat

2011-02-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/28/2011 5:17 AM, הילה wrote: How can I encrypt the password inside the xml file? 0. $file = conf/server.xml 1. Use your favorite encryption tool to encrypt the password and shove it into $file 2. Use that same tool in some code you

Re: [OT] Memory Leak in Tomcat

2011-02-27 Thread הילה
Original: Does this happen all the time? Under what conditions? Are you able to build a patched version of Tomcat in a test environment to test a fix I have? What version of Java and Tomcat are you running? Hey I'm not sure if you refer the question to me, since the whole topic shifted to an off

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread chris derham
All, I've only been on this mailing list for a couple of weeks, so am still not quite sure of the etiquette. I know people get upset about top posting or replying to an existing email and changing the subject only. Not sure about the intricacies of when people should attempt to help others on the

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread André Warnier
chris derham wrote: All, I've only been on this mailing list for a couple of weeks, so am still not quite sure of the etiquette. I know people get upset about top posting I think that's more a matter of personal preference. It makes it a bit harder sometimes to connect a response with the

RE: [OT] Memory Leak in Tomcat

2011-02-25 Thread Jeffrey Janner
] On Behalf Of chris derham Sent: Friday, February 25, 2011 3:55 AM To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat All, I've only been on this mailing list for a couple of weeks, so am still not quite sure of the etiquette. I know people get upset about top posting or replying

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris, On 2/25/2011 4:54 AM, chris derham wrote: It is far simpler to craft a fairly simple jsp page, that allows posting arbitrary SQL to the same jsp, which then asks tomcat for a connection, and then runs the SQL and displays the results.

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 2/25/2011 10:47 AM, André Warnier wrote: [Thread hijacking] is more annoying, because quite a few people have their client set to display messages by thread (a hierarchical display where messages neatly appear under the ones they

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeffrey, On 2/25/2011 11:13 AM, Jeffrey Janner wrote: Thanks for adding some more well-thought-out reasoning to this discussion. You've pointed out some issues that the rest of us had addressed, or even thought about, and pointing out that real

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread הילה
Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, February 23, 2011 10:11 AM To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:51 AM, הילה - צוות אגורה wrote: the user that runs

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread הילה
I'll try to check what you suggested. sounds like something that maybe shed some light on this issue. Thanks :] 2011/2/23 André Warnier a...@ice-sa.com הילה wrote: Yes, I've read you other mail about the Jprofiler. I've run the Jprofiler for a weak until it generated a stuck process on the

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread André Warnier
Jeffrey Janner wrote: .. Not sure exactly what Windows does once you've entered a verified user/pw combination for a service. I'm guessing that it stores the password somehow, because if you change the password, the service won't start next time. It is stored in whatever format,

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread Peter Crowther
On 24 February 2011 09:42, André Warnier a...@ice-sa.com wrote: Jeffrey Janner wrote: .. Not sure exactly what Windows does once you've entered a verified user/pw combination for a service. I'm guessing that it stores the password somehow, because if you change the password, the service

RE: [OT] Memory Leak in Tomcat

2011-02-24 Thread Jeffrey Janner
-Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Thursday, February 24, 2011 3:43 AM To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat Jeffrey Janner wrote: .. Not sure exactly what Windows does once you've entered a verified user/pw

RE: [OT] Memory Leak in Tomcat

2011-02-24 Thread Jeffrey Janner
-Original Message- From: peter.crowth...@googlemail.com [mailto:peter.crowth...@googlemail.com] On Behalf Of Peter Crowther Sent: Thursday, February 24, 2011 3:57 AM To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat On 24 February 2011 09:42, André Warnier a...@ice

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread André Warnier
Jeffrey Janner wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Thursday, February 24, 2011 3:43 AM To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat Jeffrey Janner wrote: .. Not sure exactly what Windows does once you've entered a verified user

Re:[OT] Memory Leak in Tomcat

2011-02-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:29 AM, הילה wrote: I trust the people in the company, but the company's work is with sites that any user all over the internet can access. so we want to perform a damage control if some hacker would gain access to our web

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread הילה
I've explained it in my mail :] change the user that runs the tomcat service to a domain user with permissions to the DB place ntlmauth.dll (from jtds-1.2.5 package) under c:\windows\system32 place jtds-1.2.5.jar (from jtds-1.2.5 package) in the tomcat 6.0\lib folder and it works. :] 2011/2/23

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:38 AM, הילה wrote: I've explained it in my mail :] change the user that runs the tomcat service to a domain user with permissions to the DB So the domain user is password-less? How does the service start without credentials?

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread הילה - צוות אגורה
Hey, the user that runs the tomcat service is a domain user, but I specify the user name and password of this user under log on tab on the service properties. it's not a problem since the password is encrypted, but in the xml file it's in clear text. so.. the problem for me is the memory leak that

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:51 AM, הילה - צוות אגורה wrote: the user that runs the tomcat service is a domain user, but I specify the user name and password of this user under log on tab on the service properties. it's not a problem since the password

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread הילה
Yes, I've read you other mail about the Jprofiler. I've run the Jprofiler for a weak until it generated a stuck process on the DB and crashed the application (even though it ran on the app server, and not the DB server) I'm not too familiar with Tomcat tweaks and java monitoring, so i'll try to go

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread André Warnier
הילה wrote: Yes, I've read you other mail about the Jprofiler. I've run the Jprofiler for a weak until it generated a stuck process on the DB and crashed the application (even though it ran on the app server, and not the DB server) I'm not too familiar with Tomcat tweaks and java monitoring, so

RE: [OT] Memory Leak in Tomcat

2011-02-23 Thread Jeffrey Janner
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, February 23, 2011 10:11 AM To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:51 AM, הילה - צוות