Re: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread Rainer Jung
On 05.10.2011 12:53, chris derham wrote: Alexander, If you are using authorisation header, then you are using SPNGEO. This header encodes the users group membership in the authorisation header. By default tomcat has an 8k maximum header, whilst users belonging to many groups can have an

Re: Problem with Tomcat 6.0.33 Session replication

2011-10-06 Thread Rainer Jung
On 05.10.2011 16:41, Tobias Quosigk wrote: I'm running 2 servers with Tomcat 6.0.33 and session replication. Tomcat session replication only works with Tomcat starting the first time the server (Windows Server 2008 R2 64-bit) boots. When I stop and then start the Tomcat service via Windows

Web hosting suggestions for Tomcat

2011-10-06 Thread Murat Birben
Hi everyone, I want to hear your suggestions about web hosts that provide Tomcat and MySQL. Which one do you prefer to use? Your experiences are more valuable than the sites offers to me. Thank you in advance for your answers. Best, -- Murat BIRBEN

AW: AW: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread Alexander Diedler
Yes, that´s it. We changed the size to 12k and everything works fine. It is a lot tricky, that the default value is not fitting in a default environment. Thanks to all for your help. BR Alex -Ursprüngliche Nachricht- Von: cjder...@gmail.com [mailto:cjder...@gmail.com] Im Auftrag von

RE: Using multiple login pages

2011-10-06 Thread Martin O'Shea
Ok. I think, I think I have it now to my satisfaction although much work remains. Thanks Chris and Charles. -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 06 Oct 2011 01 45 To: Tomcat Users List Subject: Re: Using multiple login pages

Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Alexander Diedler
Hello, I am just planning a Application cluster for Tomcat. We have a big hardware loadbalancer (Cisco) and three virtual servers. We talked about several configurations, but it is not clear for us, how to build a Tomcat cluster, with Failover and Session-Replication, but without Loadbalancing?

Re: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Ronald Klop (Mailing List)
What do you mean by Apache Webserver? Do you mean Apache Tomcat or Apache httpd? And do you want Failover (active-passive) or Loadbalancing (active-active)? Ronald. Op donderdag, 6 oktober 2011 10:36 schreef Alexander Diedler adied...@tecracer.de: Hello, I am just planning a

Re: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread Rainer Jung
On 06.10.2011 10:17, Alexander Diedler wrote: Yes, that´s it. We changed the size to 12k and everything works fine. It is a lot tricky, that the default value is not fitting in a default environment. Thanks to all for your help. I improved logging in this situation a bit for the next release,

AW: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Alexander Diedler
Hello, I mean a frontend Apache httpd and backend Tomcat server. Loadbalancing would be done by a hardware load balancer fronted to the Apache Webserver, so we should not balance the request two times. It should be only a Failovercluster. Best regards Alexander -Ursprüngliche

Re: Using multiple login pages

2011-10-06 Thread Pid
On 05/10/2011 18:51, Martin O'Shea wrote: welcome-file-list welcome-file/jsp/index/newjsp.jsp/welcome-file /welcome-file-list This is incorrect, it should contain a list of welcome-file elements which indicated which files can be used as index files, when found in a directory. It

Re: ISAPI Redicect - Request Entitiy too large

2011-10-06 Thread André Warnier
Rainer Jung wrote: On 06.10.2011 10:17, Alexander Diedler wrote: Yes, that´s it. We changed the size to 12k and everything works fine. It is a lot tricky, that the default value is not fitting in a default environment. Increasing the max_packet_size beyond what is normally needed in most

Detecting a login or logoff event

2011-10-06 Thread Martin O'Shea
I need to be able to intercept a successful authentication of a login / logout request which can then be used to make a series of system updates to record the fact. So, if John Doe has just logged in successfully, an update is made to his session like: session.setAttribute(loggedIntoSession,

Re: AW: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Ronald Klop (Mailing List)
I don't have a crystal ball to look into your setup, but I would remove httpd and set up the LB and Tomcat. Less moving parts, so it is easier to think about. And read this: http://tomcat.apache.org/tomcat-7.0-doc/cluster-howto.html Ronald. Op donderdag, 6 oktober 2011 12:43 schreef

Re: Detecting a login or logoff event

2011-10-06 Thread Chema
For logout, you can implement a HttpSessionListener . It has got a method: public void sessionDestroyed(HttpSessionEvent se) It's invoked when http session is invalidated. ( session.invalidated() ) So, you have to invalidate http session when user makes logout ( i.e, user clicks a logout button

RE: Detecting a login or logoff event

2011-10-06 Thread Martin O'Shea
Unfortunately I'm not using spring in my application but thanks anyway. -Original Message- From: Chema [mailto:demablo...@gmail.com] Sent: 06 Oct 2011 15 02 To: Tomcat Users List Subject: Re: Detecting a login or logoff event For logout, you can implement a HttpSessionListener . It has

RE: Detecting a login or logoff event

2011-10-06 Thread Caldarale, Charles R
From: Martin O'Shea [mailto:app...@dsl.pipex.com] Subject: Detecting a login or logoff event I need to be able to intercept a successful authentication of a login / logout request which can then be used to make a series of system updates to record the fact. I am thinking about scriptlets

Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
Hi folks, Is there a way to do authentication in Tribes when new members try to join a cluster so that unauthorized nodes cannot join in? Also, when clustering messages are sent back forth, how do we ensure security? Thanks Azeez

RE: Detecting a login or logoff event

2011-10-06 Thread Martin O'Shea
I had thought to use scriptlets. But I've rigged a filter on the server which tests for the mappings of the few protected pages which require logins. It seems to work and update session variables which is what I'm after. My issue is that a session may well have been created prior to login so

AW: Securing Tomcat cluster communication

2011-10-06 Thread Alexander Diedler
Hello, Please search for secret in http://tomcat.apache.org/connectors-doc/reference/workers.html Only requests from members with the same secret word will be acceped. Greetings Alexander -Ursprüngliche Nachricht- Von: Afkham Azeez [mailto:afk...@gmail.com] Gesendet: Donnerstag, 6.

Re: Detecting a login or logoff event

2011-10-06 Thread Chema
2011/10/6 Martin O'Shea app...@dsl.pipex.com Detecting a logoff is easier using the sessionDestroyed method. How do you detect that an user is closing his browser ?

Re: Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
I had a look at the Tribes code. Can somebody please explain how Channel.SEND_OPTIONS_SECURE works? From the JavaDoc: SEND_OPTIONS_SECURE - Message is sent over an encrypted channel How is this encrypted channel setup? How do we define the keys/keystores etc? On Thu, Oct 6, 2011 at 7:47 PM,

Re: Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
Thanks Alexander. That would work for authentication. But how could we achieve confidentiality when it comes to the clustering messages (state replication etc)? On Thu, Oct 6, 2011 at 7:52 PM, Alexander Diedler adied...@tecracer.dewrote: Hello, Please search for secret in

Re: AW: Securing Tomcat cluster communication

2011-10-06 Thread Ronald Klop (Mailing List)
A 'connector' is used between for example Apache httpd and Tomcat. It is not used between Tomcat nodes in a cluster. Ronald. Op donderdag, 6 oktober 2011 16:22 schreef Alexander Diedler adied...@tecracer.de: Hello, Please search for secret in

Re: AW: Securing Tomcat cluster communication

2011-10-06 Thread Afkham Azeez
Correct. What we have between nodes in a cluster is a channel. My questions are related to securing this channel. On Thu, Oct 6, 2011 at 8:17 PM, Ronald Klop (Mailing List) ronald-mailingl...@base.nl wrote: A 'connector' is used between for example Apache httpd and Tomcat. It is not used

How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Lahiru Gunathilake
Hi all, I have a requirement of getting the Tomcat HTTP port during startup of my application. I have the ServletContext object in me during startup, before getting any HttpRequest I need to talk tomcat HTTP port. I write a reflection code to access that even it doesn't work always I don't know

RE: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Caldarale, Charles R
From: Lahiru Gunathilake [mailto:glah...@gmail.com] Subject: How to get Tomcat HTTP port during startup of the server I have a requirement of getting the Tomcat HTTP port during startup of my application. The obvious first question is: why? Also, you must know that Tomcat may be

Re: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Lahiru Gunathilake
Hi Charles, This is my usecase, I want to register my application URL to a repository and there is another remote application who reads that URL somewhere and invoke my application. So during the startup I need to register them before I get any request. Lahiru On Thu, Oct 6, 2011 at 1:38 PM,

Re: Detecting a login or logoff event

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/6/2011 9:29 AM, Martin O'Shea wrote: I need to be able to intercept a successful authentication of a login / logout request which can then be used to make a series of system updates to record the fact. So, if John Doe has just

Re: Securing Tomcat cluster communication

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Azeez, On 10/6/2011 10:17 AM, Afkham Azeez wrote: Is there a way to do authentication in Tribes when new members try to join a cluster so that unauthorized nodes cannot join in? Also, when clustering messages are sent back forth, how do we ensure

Re: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lahiru, On 10/6/2011 2:21 PM, Lahiru Gunathilake wrote: This is my usecase, I want to register my application URL to a repository and there is another remote application who reads that URL somewhere and invoke my application. So during the startup

Re: AW: Preferred configuration with Hardware Loadbalancer

2011-10-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alexander, On 10/6/2011 6:43 AM, Alexander Diedler wrote: I mean a frontend Apache httpd and backend Tomcat server. Loadbalancing would be done by a hardware load balancer fronted to the Apache Webserver, so we should not balance the request two

Re: How to get Tomcat HTTP port during startup of the server

2011-10-06 Thread Lahiru Gunathilake
HI Christopher, That is what I have already done ! I thought its not nice users to put the same configuration in to another properties file ! Somehow currently I have a solution but I am trying to find a better solution. I appreciate your responses ! Tomcat user list seems awesome ! Lahiru On

JSP page that will not update

2011-10-06 Thread Stephen Caine
List users, I recently updated to Tomcat 5.5.34 from 5.5.7. Keeping all the configuration files the same, I now notice that a jsp page that opens cached data whereas before the page always loaded updated data. The call to the page is via a javascript using window.open. Some questions… 1.

Re: Should Form Authentication Valve restore request body on a PUT?

2011-10-06 Thread Nicholas Sushkin
I found out that in Tomcat 6.0 trunk, if user is not authentication and app is configured for FORM authentication, POST and GET requests return 200 and the login form, but PUT returns 403 and error page. What might explain the difference in handling PUT? I tried to run in debugger, but it

two questions about the session timeout in tomcat

2011-10-06 Thread Bill Wang
Hi Tomcat Guru, Recently one of Tomcat application has performance issue, which get slow respond with high sessions. One team member recommend me to adjust the session timeout from 60 minutes to 30 minutes. I will do that, but before change it, I'd like to understand how the performance

Re: JSP page that will not update

2011-10-06 Thread Konstantin Kolinko
2011/10/7 Stephen Caine step...@commongrnd.com: List users, I recently updated to Tomcat 5.5.34 from 5.5.7.  Keeping all the configuration files the same, I now notice that a jsp page that opens cached data whereas before the page always loaded updated data.  The call to the page is via a

Log4j per context admin managable configs?

2011-10-06 Thread Ilya Kazakevich
Hello, My app uses log4j. I have several apps running in my tomcat 6 in different contexts. I want to log them to different files but filenames (as well as levels and even appenders) should be configurable by admin. Something like this:

Re: Log4j per context admin managable configs?

2011-10-06 Thread Rainer Jung
On 07.10.2011 03:12, Ilya Kazakevich wrote: Hello, My app uses log4j. I have several apps running in my tomcat 6 in different contexts. I want to log them to different files but filenames (as well as levels and even appenders) should be configurable by admin. Something like this:

Re: Should Form Authentication Valve restore request body on a PUT?

2011-10-06 Thread Nicholas Sushkin
I now reconfigured DefaultServlet in conf/web.xml with readonly=false. Now, an unauthenticated PUT (with or without a body) returns 204 No Content instead of the login form. Seems like a bug. Should I add this behavior to Bug #51940 or a new bug? On Thursday, October 06, 2011 16:35:16 Nicholas

Re: JSP page that will not update

2011-10-06 Thread Stephen Caine
Konstantin, Thank you for your reply. I will try to be more specific. The function I have on the page is a simple call to the OS (Mac) for the current date and time. The first time the page is called, the current date and time is shown. However, if the window is closed and the page is

Re: JSP page that will not update

2011-10-06 Thread Konstantin Kolinko
2011/10/7 Stephen Caine step...@commongrnd.com: I have set meta tags for no cache, no pragma, etc., all to no avail. What do you mean? meta tags inside HTML document are useless for this. You have to set HTTP headers. What is most interesting is that all of this worked in Tomcat 5.5.7, but