Running tomcat as limited user (MS Windows)

2009-08-24 Thread Gary
I must have had this problem before but can't remember how I solved it. I normally run as a limited user. I installed tomcat okay (simply switching to an administrator account to do so) but trying to start the server results in java.util.logging.ErrorManager: 4 java.io.FileNotFoundException:

Re: Running tomcat as limited user (MS Windows)

2009-08-24 Thread Peter Crowther
2009/8/24 Gary workinginb...@gmail.com I normally run as a limited user. i.e. non-Administrator? java.io.FileNotFoundException: C:\Programme\Develop\CC_EnterpriseClient\server\t omcat\logs\catalina.2009-08-23.log (Zugriff verweigert) at

RE: Connector set up

2009-08-24 Thread Gerardo Corro
Hi, I need the intercept the calls (/*) to all webapps since these are actually wap apps; many handsets cannot process properly the 302 redirect code, so I need to deliver the final result of forward redirects to clients. I'm already able to process all follow redirects, I just need to put

Re: Running tomcat as limited user (MS Windows)

2009-08-24 Thread Gary
On 24/08/2009, Peter Crowther peter.crowt...@melandra.com wrote: 2009/8/24 Gary workinginb...@gmail.com I normally run as a limited user. i.e. non-Administrator? Yes, exactly. [...] Basically, the user I am logged in as does not have permission to write to the logs directory, and I would

Re: Running tomcat as limited user (MS Windows)

2009-08-24 Thread Gary
On 24/08/2009, Gary workinginb...@gmail.com wrote: On 24/08/2009, Peter Crowther peter.crowt...@melandra.com wrote: 2009/8/24 Gary workinginb...@gmail.com I normally run as a limited user. i.e. non-Administrator? Yes, exactly. [...] Add write permission on those directories for the

Re: Running tomcat as limited user (MS Windows)

2009-08-24 Thread Peter Crowther
2009/8/24 Gary workinginb...@gmail.com Clue for anyone else who comes across this: you have to switch off file sharing to be able to even see the place you need to make the changes - http://support.microsoft.com/kb/308419. FFS, MS... Ah - you hadn't said Windows XP, so I'd assumed a

Re: Updating Roles for a logged-in user while using SingleSignOn

2009-08-24 Thread Pid
On 23/08/2009 22:22, nkrasnov wrote: Thank you very much for your response. Yes, I did want to dynamically update the roles. The reason I was hoping to do it without making the user re-enter the credentials is because due to some peculiarities of the application this may happen quite often

Re: wrong jspInit handling

2009-08-24 Thread Mark Thomas
Stefano Nichele wrote: Am I missing something ? Yes (well your question is anyway). Most importantly: the Tomcat version you are using. Less important but usually worth mentioning: the JDK and OS you are using. Mark - To

Re: Connector set up

2009-08-24 Thread Pid
On 24/08/2009 08:03, Gerardo Corro wrote: Hi, I need the intercept the calls (/*) to all webapps since these are actually wap apps; many handsets cannot process properly the 302 redirect code, so I need to deliver the final result of forward redirects to clients. I'm already able to process

Re: wrong jspInit handling

2009-08-24 Thread Stefano Nichele
You are right, sorry. Apache Tomcat 6.0.13 jdk1.6.0_10 Windows XP SP3 but I was able to reproduce it with: Apache Tomcat 6.0.13 jdk1.6.0_07 CentOS release 5.2 Cheers, ste Mark Thomas wrote: Stefano Nichele wrote: Am I missing something ? Yes (well your question is anyway). Most

Re: Running tomcat as limited user (MS Windows)

2009-08-24 Thread Serge Fonville
Clue for anyone else who comes across this: you have to switch off file sharing to be able to even see the place you need to make the changes - http://support.microsoft.com/kb/308419. FFS, MS... Ah - you hadn't said Windows XP, so I'd assumed a server-class OS! Yes, XP comes with

RE: Connector set up

2009-08-24 Thread Martin Gainty
which method does the request use? HTTP 302 method: GET method: HEAD The temporary URI SHOULD be given by the Location field in the response. Unless the request method was HEAD, the entity of the response SHOULD contain a short hypertext note with a hyperlink to the new URI(s).

Re: Updating Roles for a logged-in user while using SingleSignOn

2009-08-24 Thread nkrasnov
Pid-6 wrote: Really?! Is a role really the appropriate thing for whatever your problem is then? This is what I am trying to decide. If it was possible to update roles, then role would be the appropriate thing, as it would allow me not to have to implement my own resource/servlet

Re: Problem closing datasource when used as JNDI resource

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mohammed, On 8/24/2009 12:49 AM, Mohammed Bin Mahmood wrote: Hi Chris, 3. There is a published filter that can close the DataSource for you. Do you have any idea about the filter that can close the Datasource? What? - -chris -BEGIN PGP

Re: Tomcat 4 start up as (/sbin/service)

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sunil, On 8/24/2009 12:52 AM, sunil chandran wrote: I see that old version was started as /sbin/service tomcat4 stop /sbin/service tomcat4 start Now i have installed tomcat 4.1.40 in same machine (after removing tomcat 4..1.24) 1. How can i

Re: Connector set up

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 8/23/2009 7:23 AM, André Warnier wrote: That seems (to me) a quite complicated setup for something that looks essentially like URL rewriting. Have you looked at the urlrewrite filter ? http://www.tuckey.org/urlrewrite/ It looks more

Re: Connector set up

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 8/24/2009 4:19 AM, Pid wrote: Otherwise you'd need to run a separate Tomcat and place it in front of the other Tomcats so it can intercept the calls. http://tomcatproxy/ -- http://appserver1:8080/webapp1 That's essentially what's

Re: Updating Roles for a logged-in user while using SingleSignOn

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 8/24/2009 4:10 AM, Pid wrote: You might investigate whether the following can provide you with better functionality: http://securityfilter.sourceforge.net/ Unfortunately, there's no SSO in securityfilter. But, if you can get over that,

Newbie question

2009-08-24 Thread Malladi, Sasikanth
Hello all, I've just installed Tomcat 6.0.20. Home page loads successfully at http://myserver:8008/ (Yes, I changed the port to 8008). I'm using Core Servlets by Marty Hall as a guide. I put a couple of Hello.html, Hello.jsp pages into my .../install_dir/webapps/ROOT. Both the pages load fine

Re: How do you handle 'rewrite queries' ?

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul, Sorry, I just saw this message from while ago... On 8/13/2009 8:02 AM, Paul Taylor wrote: Hi, yes I do need rewrite because I need to be able to change a query like http://localhost:8080/ws/1/release/?query=fredfmt=xml to

Re: How to set Realm digest for base64 password

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lin, On 8/13/2009 5:37 AM, Lin Chun wrote: I am using the JDBCRealm , but the password of user is not pure text, but stored in base64 encoding As Mark says, you'll have the best luck writing a custom Realm. I have a couple of other suggestions

RE: SSL with multiple Tomcat instances

2009-08-24 Thread Don Prezioso
These are standalone Tomcat instances (Tomcat is the web server, no Apache) running on Red Hat. Each instance has it's own IP address (verified via netstat) and each address has a separate DNS entry (webadvisor.ashland.edu and webui.ashland.edu), each which resolve correctly. Each certificate

Re: JSESSIONID cookie permanent?

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mitch, On 8/12/2009 7:08 PM, Mitch Claborn wrote: The answer is: yes, there are times when the response is already committed, so the valve is not a foolproof solution. If the Valve wraps the request with an object that intercepts the addCookie

upgrade from 6.0.10 to 6.0.20 and retain conf and webapps.

2009-08-24 Thread g f
Hello all, I searched the tc website and google and havent had much luck finding info on minor upgrades...most posts pertain to major (5.5 to 6.0 etc.) I was wondering if it was possible to just overwrite the bin and the lib directory in order to accomplish this upgrade? Thanks in advance!

Re: Clearing the catalina.out file

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 George, On 8/14/2009 2:42 PM, George Sexton wrote: Sure it will. Check the copytruncate option. That's an interesting option. It seems fraught with danger, but I tested it and it does work. Yes, it is fraught with danger. But, if you want to

Re: caching query

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeffrey, On 8/14/2009 1:43 PM, Jeffrey Janner wrote: Just a word of warning: your mileage might vary with SSL/APR. We deployed our app using tomcat 5.5 with the following valve implemented in the context: Valve

Re: Tomcat Custom Authenticator

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel, On 8/14/2009 2:24 PM, Daniel Stephens wrote: For Security reasons, We need to do logging for IP,username, etc(AUDIT). We need to log success and failed attempts. We don't want to modify the internal classes(unless it's impossible).

Re: Clearing the catalina.out file

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 George, On 8/14/2009 3:21 PM, George Sexton wrote: Here's what I originally wrote and Chris responded to: In Unix, if you erase a file that's still open, that file will be removed from the directory but it will exist and consume space until the

Virtual Hosts and manager application.

2009-08-24 Thread Wesley Acheson
Hi, I'm using the following configuration. *VERSION*: Tomcat 6.0.20* OS*: Fedora core 9 *uname -a*: Linux attacker.myriad.local 2.6.27.25-78.2.56.fc9.i686 #1 SMP Thu Jun 18 12:47:50 EDT 2009 i686 i686 i386 GNU/Linux *install path*: /home/servers/apache-tomcat-6.0.20 On *another* machine (windows

Re: Virtual Hosts and manager application.

2009-08-24 Thread Wesley Acheson
Thanks Jonathan. I've tried but I get the same or a similar result. See its right when the WARNING is issued but wrong two lines down. * manager.xml* ?xml version=1.0 encoding=UTF-8? Context docBase=/home/servers/apache-tomcat-6.0.20/webapps/manager privileged=true

Re: Virtual Hosts and manager application.

2009-08-24 Thread Jonathan Mast
Try placing the literal path to the manager in there instead of the ${catalina.home} variable. On Mon, Aug 24, 2009 at 11:09 AM, Wesley Acheson wesley.ache...@gmail.comwrote: Hi, I'm using the following configuration. *VERSION*: Tomcat 6.0.20* OS*: Fedora core 9 *uname -a*: Linux

Re: Virtual Hosts and manager application.

2009-08-24 Thread Jonathan Mast
You need to specify the path attribute in the Context tag. I would recommend something other than just manager as I've see malicious bots looking for it. I would also remove the anitResourceLocking and antiJARLocking attrs, why do you think you need them? On Mon, Aug 24, 2009 at 11:21 AM,

Re: Clearing the catalina.out file

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tsirkin, On 8/16/2009 3:19 AM, Tsirkin Evgeny wrote: echo -n catalina.out This is not a truncation: this is a file replacement. In bash, the command '' truncates a file, it doesn't redirect nothing to it. It's a special case of the IO

Re: Newbie question

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Malladi, On 8/24/2009 10:36 AM, Malladi, Sasikanth wrote: I'm using Core Servlets by Marty Hall as a guide. Which edition? It may be out of date. I've created a servlet, HelloServlet. Well, it just says hello. Can you post the code? I've

Re: upgrade from 6.0.10 to 6.0.20 and retain conf and webapps.

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 lowercase g, On 8/24/2009 10:59 AM, g f wrote: I searched the tc website and google and havent had much luck finding info on minor upgrades...most posts pertain to major (5.5 to 6.0 etc.) I was wondering if it was possible to just overwrite the

Re: Virtual Hosts and manager application.

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jonathan, On 8/24/2009 11:39 AM, Jonathan Mast wrote: You need to specify the path attribute in the Context tag. Er, no. The name of the file specifies the context path. No path attribute is necessary. In fact, it will likely confuse things.

Re: Virtual Hosts and manager application.

2009-08-24 Thread Wesley Acheson
Hi All, Comments below. The one thing that may be unusual about my server.xml (see initial email) is the fact that server.xml is specifying docRoots that are parellel with my tomcat installation not in a sub folder. I've a sneaking suspicion that this would fix the problem but I don't want to do

RE: upgrade from 6.0.10 to 6.0.20 and retain conf and webapps.

2009-08-24 Thread George Sexton
The way I do this is by using a CATALINA_HOME/CATALINA_BASE structure. The tomcat distribution is the CATALINA_HOME directory. You create another directory structure that becomes CATALINA_BASE. In this directory structure, you would create: temp work conf conf/EngineName/HostName logs webapps

Re: upgrade from 6.0.10 to 6.0.20 and retain conf and webapps.

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 George, On 8/24/2009 1:13 PM, George Sexton wrote: The way I do this is by using a CATALINA_HOME/CATALINA_BASE structure. +1 This is a great idea that I didn't even realize I have been doing for years. We adopt this strategy because we have

RE: upgrade from 6.0.10 to 6.0.20 and retain conf and webapps.

2009-08-24 Thread George Sexton
-Original Message- From: David kerber [mailto:dcker...@verizon.net] Sent: Monday, August 24, 2009 12:24 PM To: Tomcat Users List Subject: Re: upgrade from 6.0.10 to 6.0.20 and retain conf and webapps. George Sexton wrote: The way I do this is by using a

Re: upgrade from 6.0.10 to 6.0.20 and retain conf and webapps.

2009-08-24 Thread David kerber
George Sexton wrote: The way I do this is by using a CATALINA_HOME/CATALINA_BASE structure. The tomcat distribution is the CATALINA_HOME directory. You create another directory structure that becomes CATALINA_BASE. In this directory structure, you would create: temp work conf

Re: JSESSIONID cookie permanent?

2009-08-24 Thread Mitch Claborn
I played a bit with that approach, but couldn't figure out how to get my valve early enough in the chain. Mitch Christopher Schultz wrote: Mitch, On 8/12/2009 7:08 PM, Mitch Claborn wrote: The answer is: yes, there are times when the response is already committed, so the valve is not a

Re: upgrade from 6.0.10 to 6.0.20 and retain conf and webapps.

2009-08-24 Thread David kerber
George Sexton wrote: ... This is also a good solution if you want to have multiple tomcats on one machine. You have one CATALINA_HOME directory and as many CATALINA_BASE directories as you need. Don't you mean the other way around? Multiple CATALINA_HOME directories, one for each TC

mod_jk connector runtime error on OS X Server

2009-08-24 Thread Dennis Christopher
environment: Tomcat 6.0.18 under apache2 on Mac OS X Server 10.5 (Leopard). I am using a mod_jk connector with JBoss. I am having trouble getting context urls of the form website.my.com/ myapplication honoured. (Safari:File not found).I have googled the error message below but can't find

Re: Virtual Hosts and manager application.

2009-08-24 Thread Pid
On 24/08/2009 16:09, Wesley Acheson wrote: Hi, Host name=applications.westest.example.com appbase=/home/servers/applications.westest unpackWARs=true autoDeploy=true xmlValidation=false xmlNamespaceAware=false /Host Assuming that you've

RE: Newbie question

2009-08-24 Thread Malladi, Sasikanth
Malladi, On 8/24/2009 10:36 AM, Malladi, Sasikanth wrote: I'm using Core Servlets by Marty Hall as a guide. Which edition? It may be out of date. I've created a servlet, HelloServlet. Well, it just says hello. Can you post the code? I've compiled it and put the class file into

Re: Virtual Hosts and manager application.

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wes, On 8/24/2009 12:18 PM, Wesley Acheson wrote: Comments below. The one thing that may be unusual about my server.xml (see initial email) is the fact that server.xml is specifying docRoots that are parellel with my tomcat installation not in a

Re: Virtual Hosts and manager application.

2009-08-24 Thread Wesley Acheson
I'm back to work on thursday so I won't be able to try any suggested fixes till then. I'll let you know. Off topic is it wrong to reply to two emails like this in one mail (for threading purposes?) On Mon, Aug 24, 2009 at 9:10 PM, Pid p...@pidster.com wrote: On 24/08/2009 16:09, Wesley

Re: SSL with multiple Tomcat instances

2009-08-24 Thread Crypto Sal
Hi Don, A few questions: 1) Does server.xml reference the appropriate IP and keystore for webui? 2) What's the output of: [ openssl s_client -connect webui.ashland.edu:443 ] from the box, more specifically just the top area that mentions the certificate chain. It should look something like

RE: Problem closing datasource when used as JNDI resource

2009-08-24 Thread Mohammed Bin Mahmood
Hi Chris, You mentioned about the published filter that can close datasource. I wonder if you have any idea about that. Is it provided by tomcat or some other Thanks, Mohammed. -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Monday, August 24,

Re: Tomcat 4 start up as (/sbin/service)

2009-08-24 Thread sunil chandran
Hello ,Thank you for the response. Now can i stop tomcat service and take a backup of tomcat 4 directory. Then install the new tomcat4.1.40 in the same location. That way i need not change the directory location in any files too. right? so once i install tomcat4.1.40 in the same location (where