CLIENT-CERT authentication with APR connector only for protected resources?
Hi, is there a way to configure the APR connector in a way that it requests a client certificate only if the client accesses a resource that is protected by a security constraint? This works with a Java connector if I specify the option clientAuth=false. The client certificate is not requested from the browser unless I try to access a protected resource. However, with the APR connector, if I set SSLVerifyClient=none for the APR connector, a client certificate is never requested from the browser, and an attempt to access a protected resource returns an error. If I set SSLVerifyClient=optional, I am forced to send my certificate already when the connection is established, even if I only access resources that are not protected by a security constraint. Regards, Matthias - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
CR Viewer
Hi,
I'm upgrading Crystalreportviewer11 to Crystalreportviewer115. I know, I
need this directories: WEB_INF\Lib, WEB-INF\Classes and
Crystalreportviewer115.
Crystalreportviewer115 I take from C:\Program Files\Business
Objects\common\3.5\ Crystalreportsviewer115. There is file CrConfig.xml
(CrystalreportEngine.xml) in Program Files\Common Files\Business
Objects\3.5\java. This file belongs to WEB-INF\Classes. But I don't know the
path to find .jar files (.jar files belong to WEB_INF\Lib).
I deployed my directory WebReports to Tomcat (by Tomcat Manager). The
variables are Context Path= /CRV and Configuration file URL=
file:C:\WebReports\context.xml. The deploying was succesful. Then I set in
Tomcat administration tool the jdbc connection. (Tomcat Server - Service
(Catalina) - Host (localhost) - Context (/CRV) - Resources - Environment
Entries and Environment Entry Actions on the right tab)
I set Name= jdbc/INFO, Type= java.lang.String, Value=
!oracle.jdbc.driver.OracleDriver!jdbc:oracle:thin:{userid}/{
[EMAIL PROTECTED]:{port}:{oracle instance name}. I saved changes and
commited them.I restarted Apache Tomcat service.
I run the report. It always open a new database connection. I check user ID
and password, click OK. But the report isn't running, i can't see this
report in CR Viewer. But I see Database Logon screen again. Where is a
problem?
Please, do you know, where should I search all new .jar files? (for my
WEB-INF/lib directory).
Regards,
Vera
--
View this message in context:
http://www.nabble.com/CR-Viewer-tf4723519.html#a13504841
Sent from the Tomcat - User mailing list archive at Nabble.com.
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: CR Viewer
Hi,
For crystal report support, i suggest you ask business objects. You
probably won't get much response from tomcat list, considering your
question is not related to tomcat.
As for search for .jar files ... Maybe the 'search' tool of windows will
help you?
En l'instant précis du 31.10.2007 09:42, Vera2 s'exprimait en ces termes:
Hi,
I'm upgrading Crystalreportviewer11 to Crystalreportviewer115. I know, I
need this directories: WEB_INF\Lib, WEB-INF\Classes and
Crystalreportviewer115.
Crystalreportviewer115 I take from C:\Program Files\Business
Objects\common\3.5\ Crystalreportsviewer115. There is file CrConfig.xml
(CrystalreportEngine.xml) in Program Files\Common Files\Business
Objects\3.5\java. This file belongs to WEB-INF\Classes. But I don't know the
path to find .jar files (.jar files belong to WEB_INF\Lib).
I deployed my directory WebReports to Tomcat (by Tomcat Manager). The
variables are Context Path= /CRV and Configuration file URL=
file:C:\WebReports\context.xml. The deploying was succesful. Then I set in
Tomcat administration tool the jdbc connection. (Tomcat Server - Service
(Catalina) - Host (localhost) - Context (/CRV) - Resources - Environment
Entries and Environment Entry Actions on the right tab)
I set Name= jdbc/INFO, Type= java.lang.String, Value=
!oracle.jdbc.driver.OracleDriver!jdbc:oracle:thin:{userid}/{
[EMAIL PROTECTED]:{port}:{oracle instance name}. I saved changes and
commited them.I restarted Apache Tomcat service.
I run the report. It always open a new database connection. I check user ID
and password, click OK. But the report isn't running, i can't see this
report in CR Viewer. But I see Database Logon screen again. Where is a
problem?
Please, do you know, where should I search all new .jar files? (for my
WEB-INF/lib directory).
Regards,
Vera
--
http://www.devlog.be (a belgian developer's logs)
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: Setting up multiple instances of Tomcat on one machine
Hello Sangeetha, I have also done the same thing. probably i will be able to help you. i have also created a document on how to do it. maybe if you want i will send it to ur ID. because it is only a test document prepared by me.Hope it helps you. On Oct 31, 2007 3:01 AM, Gabe Wong [EMAIL PROTECTED] wrote: Feel free to try my company's product, NGASI AppServer Manager (www.ngasi.com), which enables you to do just that. Verma, Sangeeta wrote: Hello, Is there a way to setup single installation of Tomcat to deploy multiple applications running on different ports like app1 on 8080, app2 on 8090 etc. This topology has been proposed for having a dev/test environment on a single machine. I want to know if it's feasible and how it can be achieved. Your feedback is highly appreciated. Thanks, Sangeeta - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Regards Gabe Wong NGASI AppServer Manager Application server installation and configuration AUTOMATION for Tomcat, JBoss, and Jetty. http://www.ngasi.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Sunil - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [tomcat]How to decrypt the DIGEST authentication?
zhongliang zhang wrote: But the application allows creating new group,how do I solve this problem? What problem? You need to say what the problem is if we are going to be able to help. web.xml doesn't support the dynamic addition of new groups. Further, the Realm doesn't understand the concept of hierarchical groups. Only the member of group administrators have access to the adminitrative page,and other groups,like groupA,groupB,... the member of which only have rights to login to the common page.so in the web.xml,I configure like the following: security-constraintweb-resource-collection web-resource-nameall/web-resource-name url-pattern/admin/url-pattern/web-resource-collection auth-constraint role-nameAdministrators/role-name /auth-constraint /security-constraint security-constraint web-resource-collection web-resource-nameall/web-resource-name url-pattern/common/url-pattern/web-resource-collection auth-constraint role-name??/role-name/auth-constraint /security-constraint login-config auth-methodDIGEST/auth-method realm-nameJDBCRealm/realm-name /login-config How should I configure the ?? part? and further more,It has a inherency relationship between groups, If Administrators group contains groupA,then the members of groupA have the administrative privilege,too. That means a group's member can be either a group or a user.In the former situation,It does a tree-search to check whether a user belongs to the Administrators group,now,if I use a configuration file,how did I do this check? There is, however, a way around this. It should be OK for small (few thousand groups and users) but it might not scale very well. The SQL below is non-optimal but it should give you the idea. Use role-nameNon-Administrators/role-name for the common area. You'll need to modify your server-side SQL some. Again, I don't have an Oracle instance to test with so I am going from memory / Google. The syntax may not be quite right. This assumes that your groupids are never the same as your userids. CREATE or REPLACE VIEW vAdminGroups AS SELECT groupid FROM grouptable START WITH groupname='Administrators' CONNECT BY PRIOR userid=groupid; CREATE or REPLACE VIEW vAdminUsers AS SELECT u.userid as userid, username, 'Administrators' as groupname FROM usertable u, vAdminGroups g WHERE u.userid = g.userid; CREATE or REPLACE VIEW vNonAdminUsers AS SELECT username, 'NonAdministrators' as groupname FROM usertable WHERE userid NOT IN (SELECT userid from vAdminUsers); CREATE or REPLACE VIEW vUserRole AS SELECT * FROM vAdminUsers UNION SELECT * FROM vNonAdminUsers; Hope this helps. Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Keytool: SSL Certification Issue
-Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Wednesday, 31 October 2007 3:23 AM To: Tomcat Users List Subject: Re: Keytool: SSL Certification Issue [EMAIL PROTECTED] wrote: Hello Mark, -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Tuesday, 30 October 2007 3:35 PM To: Tomcat Users List Subject: Re: Keytool: SSL Certification Issue [EMAIL PROTECTED] wrote: Thanks for your response. I tried configuration you suggested but didn't see any difference in the output. Just to add to the original problem statement, I don't see any issue when using CN=localhost in the Certificate generation. While I see the below mentioned issues when I use CN=hostname. That suggests your hostname isn't configured correctly. What happens when you use http://hostname:8080 rather than http://localhost:8080 to access Tomcat? Does http://hostname:8080 work from another machine? I don't see a issue with the hostname: I am able to access http:hostname URLs. However the issue is with secure https://hostname URLs (certificate CN=hostname), in which case I see blank page due to the previously mentioned issues. However I don't find any issues when accessing secure URLs https://localhost (certificate CN=localhost) OK. If the host name is fine and it works for localhost that suggests a configuration issue. What Tomcat version, what JDK, what OS? For now I am able to live with the self-signed certificate after installing the same. I am holding on addressing the issue seen when external certificates are used. Thanks for your response again Mark!. Renu Kumar - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Keytool: SSL Certification Issue
[EMAIL PROTECTED] wrote: For now I am able to live with the self-signed certificate after installing the same. I am holding on addressing the issue seen when external certificates are used. Thanks for your response again Mark!. If self-signed works and external doesn't, chances are this is trutstore related. Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem installing tomcat 6
Hi , I went for jdk5.0 . but still when i type : java -version it shows that java version 1.4.2_12 Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_12-b03) Java HotSpot(TM) Client VM (build 1.4.2_12-b03, mixed mode) why is it so. i went for jdk1.5.0_13-linux-i586.rpm please help me. On Oct 29, 2007 10:14 PM, Mark Thomas [EMAIL PROTECTED] wrote: sunil chandran wrote: Hi all, I have installed Tomcat 6 . but when i start the tomcat it gives the following error: Exception in thread main java.lang.UnsupportedClassVersionError: org/apache/catalina/startup/Bootstrap (Unsupported major.minor version 49.0) Install JDK 5.0+ Mark - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Sunil - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem installing tomcat 6
sunil chandran wrote: Hi , I went for jdk5.0 . but still when i type : java -version it shows that java version 1.4.2_12 Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_12-b03) Java HotSpot(TM) Client VM (build 1.4.2_12-b03, mixed mode) why is it so. i went for jdk1.5.0_13-linux-i586.rpm please help me. First which directory was jdk1.5.0_13 installed under? Assuming /usr/java/jdk1.5.0_13, execute the following command export PATH=/usr/java/jdk1.5.0_13:$PATH However I am assuming you are trying to get /usr/java/jdk1.5.0_13 for Tomcat to run under. So in the Tomcat startup.sh or catalina.sh script add the following (towards the top part of the script) export JAVA_HOME=/usr/java/jdk1.5.0_13 -- Regards Gabe Wong NGASI AppServer Manager Application server installation and configuration AUTOMATION for Tomcat, JBoss, and Jetty. http://www.ngasi.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Problem installing tomcat 6
Hi , I tried your command First which directory was jdk1.5.0_13 installed under? Assuming /usr/java/jdk1.5.0_13, execute the following command export PATH=/usr/java/jdk1.5.0_13:$PATH it is still showing that the java version is 1.4. i think it is something to do with the rpm that i installed . I went for *JDK 5.0 Update 13 The Java SE Development Kit (JDK) includes: * the Java Runtime Environment (JRE) * command-line development tools, such as compilers and debuggers, that are necessary or useful for developing applets and applications* So is it because of this that am having some problem. I read some where that we need to install complete JDK 1.5 . Please help me forward. On Oct 31, 2007 7:21 PM, Gabe Wong [EMAIL PROTECTED] wrote: sunil chandran wrote: Hi , I went for jdk5.0 . but still when i type : java -version it shows that java version 1.4.2_12 Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_12-b03) Java HotSpot(TM) Client VM (build 1.4.2_12-b03, mixed mode) why is it so. i went for jdk1.5.0_13-linux-i586.rpm please help me. First which directory was jdk1.5.0_13 installed under? Assuming /usr/java/jdk1.5.0_13, execute the following command export PATH=/usr/java/jdk1.5.0_13:$PATH However I am assuming you are trying to get /usr/java/jdk1.5.0_13 for Tomcat to run under. So in the Tomcat startup.sh or catalina.sh script add the following (towards the top part of the script) export JAVA_HOME=/usr/java/jdk1.5.0_13 -- Regards Gabe Wong NGASI AppServer Manager Application server installation and configuration AUTOMATION for Tomcat, JBoss, and Jetty. http://www.ngasi.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Sunil
Re: Problem installing tomcat 6
Hi, Thank you it is working properly. On Oct 31, 2007 7:57 PM, Gabe Wong [EMAIL PROTECTED] wrote: sunil chandran wrote: Hi , I tried your command First which directory was jdk1.5.0_13 installed under? Assuming /usr/java/jdk1.5.0_13, execute the following command export PATH=/usr/java/jdk1.5.0_13:$PATH Have you verified the jdk1.5.0_13 directory by doing a ls? Also have you added the JAVA_HOME environment code to the tomcat startup.sh script as recommended in my previous message. With regards to the path setting, a corrected update should look like: export PATH=/usr/java/jdk1.5.0_13/bin:$PATH -- Regards Gabe Wong NGASI AppServer Manager Application server installation and configuration AUTOMATION for Tomcat, JBoss, and Jetty. http://www.ngasi.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Sunil
Re: Problem installing tomcat 6
sunil chandran wrote: Hi , I tried your command First which directory was jdk1.5.0_13 installed under? Assuming /usr/java/jdk1.5.0_13, execute the following command export PATH=/usr/java/jdk1.5.0_13:$PATH Have you verified the jdk1.5.0_13 directory by doing a ls? Also have you added the JAVA_HOME environment code to the tomcat startup.sh script as recommended in my previous message. With regards to the path setting, a corrected update should look like: export PATH=/usr/java/jdk1.5.0_13/bin:$PATH -- Regards Gabe Wong NGASI AppServer Manager Application server installation and configuration AUTOMATION for Tomcat, JBoss, and Jetty. http://www.ngasi.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Admin application in Tomcat 5.5 (dead?)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, For the first time ever, I have the need to use the Tomcat admin application: I have a project whose whole unit testing capability revolves around being able to deploy webapps for testing to a running Tomcat instance using the admin application. My understanding is that the admin app is basically dead. I downloaded the admin app from the TC 5.5 download page and it doesn't run in a TC instance with nothing else in it: java.lang.NoClassDefFoundError: org/apache/commons/modeler/Registry at java.lang.Class.getDeclaredMethods0(Native Method) at java.lang.Class.privateGetDeclaredMethods(Class.java:2395) at java.lang.Class.getMethod0(Class.java:2642) at java.lang.Class.getMethod(Class.java:1579) at org.apache.commons.beanutils.MethodUtils.getMatchingAccessibleMethod(MethodUtils.java:535) at org.apache.commons.beanutils.MethodUtils.invokeMethod(MethodUtils.java:209) at org.apache.commons.digester.CallMethodRule.end(CallMethodRule.java:625) (etc.) The manager application comes with no libraries, so it's no surprise that it can't find some library. Is the admin app really dead? If so, why is it (still) available for download from the TC 5.5 page. If it /is/ dead, does any other product feature the capabilities required for using the Catalina Ant tasks such as install/deploy and undeploy/remove? I know that, say, Lambda Probe can deploy/undeploy, but do I have to re-write all the test targets in order to do that? Thanks, - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKKSp9CaO5/Lv0PARAk7EAJ9dQseEg3ORBHyv9DjeGg6W1kPvygCfe4Jb FI2jbNLVmQ/y5jt3MJNW4iI= =8s4A -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat connections not closing.
Well, yes and no. Yes, the problem has abated, and possibly been eliminated. However, we have no idea what change fixed it. We changed nothing in tomcat, but some changes were made at the network and in the application itself (regularly scheduled updates). None of the changes were intended to fix the problem, but it went away anyway. I don't like it, since I assume the problem could come back at any time. I still think Tomcat should be able to protect itself from this kind of behavior, but I haven't had good luck yet with the suggested parameter tweaks. At this point I'm not continuing to look into it, but just keeping watch over it... -Mike -Original Message- From: Ralph Goers [mailto:[EMAIL PROTECTED] Sent: Saturday, October 27, 2007 10:48 AM To: Tomcat Users List Subject: Re: Tomcat connections not closing. Mike, Have you been able to make any progress with this? I'm very interested in the outcome as we experience the same problem. Ralph Roark, Mike wrote: Filip, Thanks for the help. You were right about the default for disableUploadTimeout. I must have been looking at 5.0 docs before, it looks like the default changed between 5.0 and 5.5. So I have now specified all three settings as you have them, and have had no effect. It seems like the socket remains open for as long as I feel like waiting. I have a perl script that will make a request and then not read the response (just sleeps), and another that will open a socket but not even write a GET line. Same result in both cases. I said that I could see the reads timeout, but now I'm not even seeing that. I would expect if I don't send a GET that the connectionTimeout would definitely apply. -Mike - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Admin application in Tomcat 5.5 (dead?)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I think I may have just made an ass of myself. I never use TC from the installation directory; I always use a CATALINA_BASE with separate configuration. When going that, you never get the manager application, which is what I really need, not the admin one. - -chris Christopher Schultz wrote: All, For the first time ever, I have the need to use the Tomcat admin application: I have a project whose whole unit testing capability revolves around being able to deploy webapps for testing to a running Tomcat instance using the admin application. My understanding is that the admin app is basically dead. I downloaded the admin app from the TC 5.5 download page and it doesn't run in a TC instance with nothing else in it: java.lang.NoClassDefFoundError: org/apache/commons/modeler/Registry at java.lang.Class.getDeclaredMethods0(Native Method) at java.lang.Class.privateGetDeclaredMethods(Class.java:2395) at java.lang.Class.getMethod0(Class.java:2642) at java.lang.Class.getMethod(Class.java:1579) at org.apache.commons.beanutils.MethodUtils.getMatchingAccessibleMethod(MethodUtils.java:535) at org.apache.commons.beanutils.MethodUtils.invokeMethod(MethodUtils.java:209) at org.apache.commons.digester.CallMethodRule.end(CallMethodRule.java:625) (etc.) The manager application comes with no libraries, so it's no surprise that it can't find some library. Is the admin app really dead? If so, why is it (still) available for download from the TC 5.5 page. If it /is/ dead, does any other product feature the capabilities required for using the Catalina Ant tasks such as install/deploy and undeploy/remove? I know that, say, Lambda Probe can deploy/undeploy, but do I have to re-write all the test targets in order to do that? Thanks, -chris - - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKKnJ9CaO5/Lv0PARArS+AKCXjg6NimSGpR8k//HDg3j6foQ/jQCdHLzq agF+eOGYs/91g7YBXzKESQs= =rb3D -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Apache + Tomcat Integration
Hi Filip, I have done with mod_jk2 and I have included the following in httpd.conf NameVirtualHost 192.168.139.202:80 VirtualHost 192.168.139.202:80 ServerAdmin [EMAIL PROTECTED] DocumentRoot /usr/Images Directory /home/oracle/tomcat/webapps/AjaxSample AllowOverride AuthConfig /Directory ServerName warriors ServerAlias 192.168.139.202:80 ErrorLog /home/error.log CustomLog /home/access.log combined Location /AjaxSample JkUriSet worker ajp13:localhost:8009 /Location Location /AjaxSample/* JkUriSet worker ajp13:localhost:8009 /Location /VirtualHost I am getting a tree structure(Index of/ and listing the files) of my document root instead of web appln. -Kranthi Filip Hanik - Dev Lists wrote: ouch, JK2 has been deprecated for almost three years now, use mod_jk, it's being maintained and patches kept up to date or use mod_proxy for http proxying Filip Sierra wrote: Hi All, I am very bew to Linux and I have been given a task to integrate Apache and Tomcat. I got a document and integrated but the output I am getting is [B]It works[/B]. I want to get my home page with my IP. but If I give Ip followed by 7080(full URL) I am able to see the home page. I used jakarta-tomcat-connectors-jk2-2.0.4-src.tar.tar and libtool-1.5.8.tar.tar. jk2.properties: [CODE] channelSocket.port=8009 channelSocket.address=127.0.0.1 channelSocket.maxThreads=300[/CODE] httpd.conf I have added these lines.. [CODE]LoadModule jk2_module libexec/mod_jk2.so Location /AjaxSample JkUriSet worker ajp13:127.0.0.1:8009 /Location Location /AjaxSample/* JkUriSet worker ajp13:127.0.0.1:8009 /Location[/CODE] workers2.properties [CODE][shm] file=/usr/local/apache2/logs/shm.file size=1048576 # socket channel [channel.socket:localhost:8009] port=8009 host=127.0.0.1 # worker for the connector [ajp13:localhost:8009] channel=channel.socket:localhost:8009[/CODE] server.xml [CODE]Host name=192.168.139.202:7080 Context path=/AjaxSample docBase= /home/oracle/apache-tomcat-5.5.20/webapps/AjaxSample debug=0 reloadable=true crossContext=true/ /Host[/CODE] Is there any configuration I missed, please help me out. Regards, Kranthi Kiran - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- View this message in context: http://www.nabble.com/Apache-%2B-Tomcat-Integration-tf4719336.html#a13513148 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat 1.1 - release date
Hmm. I must have been given some bad information. I found a link on the Tomcat web site that says the first release ever was 3.0. I better get someone to look again. Nick _ From: Vigorito, Nicholas E. Sent: Wednesday, October 31, 2007 1:14 PM To: 'Tomcat Users List' Subject: Tomcat 1.1 - release date This may sound corny but I am just wondering. It looks like I am going to be supporting a web app that is installed under Tomcat 1.1 Does anyone know what the release date of the Tomcat 1.1 was or the most recent release date of Tomcat 1.1.x. Thanks! Nick
Re: Tomcat 1.1 - release date
I'm sorry for being unhelpful but I must say, Ouch. On 10/31/07, Vigorito, Nicholas E. [EMAIL PROTECTED] wrote: This may sound corny but I am just wondering. It looks like I am going to be supporting a web app that is installed under Tomcat 1.1 Does anyone know what the release date of the Tomcat 1.1 was or the most recent release date of Tomcat 1.1.x. Thanks! Nick - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat 1.1 - release date
Vigorito, Nicholas E. wrote: This may sound corny but I am just wondering. It looks like I am going to be supporting a web app that is installed under Tomcat 1.1 Does anyone know what the release date of the Tomcat 1.1 was or the most recent release date of Tomcat 1.1.x. Thanks! Nick Just say NO! D - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat 1.1 - release date
Date sent: Wed, 31 Oct 2007 13:17:17 -0400 From: Vigorito, Nicholas E. [EMAIL PROTECTED] Subject:RE: Tomcat 1.1 - release date To: Tomcat Users List users@tomcat.apache.org Send reply to: Tomcat Users List users@tomcat.apache.org Hmm. I must have been given some bad information. I found a link on the Tomcat web site that says the first release ever was 3.0. I better get someone to look again. Maybe they meant java 1.1. Nick _ From: Vigorito, Nicholas E. Sent: Wednesday, October 31, 2007 1:14 PM To: 'Tomcat Users List' Subject:Tomcat 1.1 - release date This may sound corny but I am just wondering. It looks like I am going to be supporting a web app that is installed under Tomcat 1.1 Does anyone know what the release date of the Tomcat 1.1 was or the most recent release date of Tomcat 1.1.x. Thanks! Nick - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Tomcat 1.1 - release date
Hmm java 1.1 does not exist anymore they are up to 1.6.0_03. I would really check with the App people this is highly unusual. -Tony --- Steve Ochani [EMAIL PROTECTED] wrote: Date sent:Wed, 31 Oct 2007 13:17:17 -0400 From: Vigorito, Nicholas E. [EMAIL PROTECTED] Subject: RE: Tomcat 1.1 - release date To: Tomcat Users List users@tomcat.apache.org Send reply to:Tomcat Users List users@tomcat.apache.org Hmm. I must have been given some bad information. I found a link on the Tomcat web site that says the first release ever was 3.0. I better get someone to look again. Maybe they meant java 1.1. Nick _ From: Vigorito, Nicholas E. Sent: Wednesday, October 31, 2007 1:14 PM To: 'Tomcat Users List' Subject: Tomcat 1.1 - release date This may sound corny but I am just wondering. It looks like I am going to be supporting a web app that is installed under Tomcat 1.1 Does anyone know what the release date of the Tomcat 1.1 was or the most recent release date of Tomcat 1.1.x. Thanks! Nick - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Tomcat 1.1 - release date
--- HARBOR: http://coolharbor.100free.com/index.htm Now Tomcat is also a cool pojo application server --- - Original Message - From: Vigorito, Nicholas E. [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Wednesday, October 31, 2007 7:13 PM Subject: Tomcat 1.1 - release date --- I think you mean Tomcat 3 running on JDK 1.1 Only reason I can think of is that was when Microsoft was still Java friendly. Probably something like the internal servlets call COM objects and do other horrible things. I dont know when/if Tomcat ever worked with MS Java, but I imagine its something crazy like this. I would guess the same time MS released Java... when was that 97/98 Probably because its Java with schizophrenia ;) Best of luck to you... --- This may sound corny but I am just wondering. It looks like I am going to be supporting a web app that is installed under Tomcat 1.1 Does anyone know what the release date of the Tomcat 1.1 was or the most recent release date of Tomcat 1.1.x. Thanks! Nick - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
CLASSPATH, .jar files, packages, and so forth
I have an application that consists of 150 classes, organized in several different packages. In the past I have installed the application in .../webapps/appl/directories where the directory tree corresponds to the package layout, and this has worked fine. I am trying to change this to using .jar files for a couple of reasons. I took one package and created a jar file like this: cd webapps/appl/ jar cvf schedule.jar applet/schedule/*.class mv schedule.jar WEB-INF/lib rm applet/schedule/*.class I modified setupclasspath.sh to read WEB-INF/lib and add all .jar files to the CLASSPATH before starting tomcat. Now when I try to access one of the classes that I put into schedule.jar it throws a NoClassDefFoundError. If I run a test program with CLASSPATH pointing to the webapps/appl directory and WEB-INF/lib/schedule.jar it works fine. In tomcat it doesn't find the class. I would suspect that there an issue with the way I build the jar file, but I can't figure out why it works outside of tomcat but not inside. What I would really like is a cookbook document telling me how to distribute an application in jar files to the web. I have Googled many combinations of words and can't find one. If anybody has one of those I would really appreciate it. I thing I am missing a step here, possibly making the manifest, but I just don't know what that missing step is. Thanks for the help. Ivan Mann
RE: CLASSPATH, .jar files, packages, and so forth
From: Mann, Ivan H [mailto:[EMAIL PROTECTED] Subject: CLASSPATH, .jar files, packages, and so forth In the past I have installed the application in .../webapps/appl/directories where the directory tree corresponds to the package layout, and this has worked fine. Have you read the Servlet spec? Classes are supposed to be under appname/WEB-INF/classes, or, when packaged in jars, appname/WEB-INF/lib. I modified setupclasspath.sh to read WEB-INF/lib and add all .jar files to the CLASSPATH before starting tomcat. A fatal error. CLASSPATH should never, never be used with Tomcat. Along with the Servlet spec, you should also read about Tomcat's classloader hierarchy: http://tomcat.apache.org/tomcat-6.0-doc/class-loader-howto.html - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Unrecoverable error 200, request failed
Hi Rainer, now I got it what you mean about the steady state. Thx Ingo Rainer Jung schrieb: Hi Ingo, Ingo Düppe wrote: Am I'm right, that with the following setting a reply_timeout is detected when the tomcat doesn't reply within 10 seconds and it will be set into error if more than 15 timeouts in a minutes are detected? worker.plexus.reply_timeout=1 Yes. The timeout gets reset every time mod_jk waits for the next package. So it's not an overall response time timeout, but it limits the longest pause allowed between reposnse packets. Usually it will fire, between the point in time the request was forwarded to Tomcat and the first request packet arrives. Most apps don't have huge delays after that point. See also http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html for a description of all possible timeouts. worker.plexus.max_reply_timeouts=30 In case you assume a steady rate of long running requests, yes: 15 per minute. In case there were no long running requests for a long time, our intrnal counter will be zero and we will allo up to 30 long running requests before triggering the error status. The counter gets divided by 2 every minute, so that older events count less the longer they are away. A worker that worked fast for a long time can use all of the 30 events, if it already had 30 (or 29) timeouts in the minute before, only 15 are free the next minute. Regards, Rainer - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Access Valve
Hi, I am trying to set up the access valve so that we can analyze our traffic using the softwares that are out there. I noticed that when I turn on the access valve, it logs requests for every little item on the page, all the images etc. Is there a way I can have tomcat log only one line for every session? Or is there a way to exclude requests made for images and certain other types of files? Thanks, -Rizwan Merchant. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Access Valve
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rizwan, Rizwan Merchant wrote: Hi, I am trying to set up the access valve so that we can analyze our traffic using the softwares that are out there. I noticed that when I turn on the access valve, it logs requests for every little item on the page, all the images etc. Is there a way I can have tomcat log only one line for every session? One line for every session? Or one line for the first request processed by a keepalive connection? Or is there a way to exclude requests made for images and certain other types of files? It looks like the only way to do either of these things is to use the condition attribute of the valve. Check out the docs for that attribute -- it might give you some ideas. http://tomcat.apache.org/tomcat-5.5-doc/config/valve.html - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKPV+9CaO5/Lv0PARAg9UAKC6jZzhQ4+Mqj7ZiE4ln8RaQC9CYACggx1B RMYXs+J0ZSoFYXdGKxZkU9A= =xCzU -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Running out HttpConnections
I am using Tomcat to run web test. The way it works is if you click on a link on the Tomcat server it post XML to another web server to make sure that web server is running. The problem I am having is Tomcat seems to only allow so many concurrent HttpsConnections. I tried bumping it up using the http.maxConnections systtem variable but that did not have any affect. How can I set the number of concurrent outgoing http connections? -- View this message in context: http://www.nabble.com/Running-out-HttpConnections-tf4728206.html#a13519528 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Access Valve
Thanks Chris, Does that mean that I need to set the value of an attribute in my code, and check that value in the valve? That seems intrusive as I have to set up my code to handle this. Let me step back a little. Can you tell me..what if I leave it the way it is and let it log everything. Would this slow down the application since it will be doing a LOT of writing to the access log file? Or am I worrying too much about this? My main reason to log less is so that tomcat is not bogged down because of how much it is writing to the access log.. Thanks, -Riz. Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rizwan, Rizwan Merchant wrote: Hi, I am trying to set up the access valve so that we can analyze our traffic using the softwares that are out there. I noticed that when I turn on the access valve, it logs requests for every little item on the page, all the images etc. Is there a way I can have tomcat log only one line for every session? One line for every session? Or one line for the first request processed by a keepalive connection? Or is there a way to exclude requests made for images and certain other types of files? It looks like the only way to do either of these things is to use the condition attribute of the valve. Check out the docs for that attribute -- it might give you some ideas. http://tomcat.apache.org/tomcat-5.5-doc/config/valve.html - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKPV+9CaO5/Lv0PARAg9UAKC6jZzhQ4+Mqj7ZiE4ln8RaQC9CYACggx1B RMYXs+J0ZSoFYXdGKxZkU9A= =xCzU -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Access Valve
No, Chris was talking about the configuration of the AccessLogValve. Read the documentation link he gave. Alternatively, maybe you can just grep the log file for certain lines that tell you what you need to know, for example GET /index.jsp. -- Len On 10/31/07, Rizwan Merchant [EMAIL PROTECTED] wrote: Thanks Chris, Does that mean that I need to set the value of an attribute in my code, and check that value in the valve? That seems intrusive as I have to set up my code to handle this. Let me step back a little. Can you tell me..what if I leave it the way it is and let it log everything. Would this slow down the application since it will be doing a LOT of writing to the access log file? Or am I worrying too much about this? My main reason to log less is so that tomcat is not bogged down because of how much it is writing to the access log.. Thanks, -Riz. Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rizwan, Rizwan Merchant wrote: Hi, I am trying to set up the access valve so that we can analyze our traffic using the softwares that are out there. I noticed that when I turn on the access valve, it logs requests for every little item on the page, all the images etc. Is there a way I can have tomcat log only one line for every session? One line for every session? Or one line for the first request processed by a keepalive connection? Or is there a way to exclude requests made for images and certain other types of files? It looks like the only way to do either of these things is to use the condition attribute of the valve. Check out the docs for that attribute -- it might give you some ideas. http://tomcat.apache.org/tomcat-5.5-doc/config/valve.html - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKPV+9CaO5/Lv0PARAg9UAKC6jZzhQ4+Mqj7ZiE4ln8RaQC9CYACggx1B RMYXs+J0ZSoFYXdGKxZkU9A= =xCzU -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
server.xml, contexts and guilt
Hi, It's a long time I want to ask a question but I was always afraid to ask. Very often I see that some of you strongly discourage using the server.xml for context elements, in favour of storing them in separate xml within subdirectories of the conf directory. Unfortunately I need to put contexts in the server.xml file, for a couple of reasons, so I hope this will not become a deprecated feature (otherwise I will be in trouble). The reasons for my choice are the following: 1- As stated in the docs, the main reason why you shouldn't use the server.xml file is because you can't activate the new settings without restarting Tomcat. Well, as I use Windows I have no alternatives as I experience file locking issues - and there are other problems with antiResourceLocking I won't mention (unless asked). But - since I have no problems with Tomcat restarts - I have no reason why not to put contexts in the server.xml file, according to official documentation. 2 - I need to keep control on what is placed in the webapps directory by developers, on dev/test/prod machines. I need to decide the context path myself, so I had no other choice than disable autoDeploy. 3 - The same applies to the deployOnStartup setting - that by the way has a misleading name. It should be named autoDeployOnStartup, as it does not distinguish between what wars or directories it finds by chance in the webapps directory and what is placed on purpose under /conf/catilina/etc. By putting contexts into the server.xml file I can actually decide what to deploy as opposed to blindly deploy whatever is found in the webapps directory. Contexts under /conf/catilina/etc. don't deploy without deployOnStartup while contexts into server.xml do. There is no other way of allowing the behaviour I need without using the server.xml file for contexts. Is there an alternative or can I keep using server.xml for contexts? Thank you in advance, b. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Access Valve
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rizwan, Rizwan Merchant wrote: Does that mean that I need to set the value of an attribute in my code, and check that value in the valve? That seems intrusive as I have to set up my code to handle this. Well, you could install a simple filter to add this attribute: you don't have to modify your application's code. Let me step back a little. Can you tell me..what if I leave it the way it is and let it log everything. Would this slow down the application since it will be doing a LOT of writing to the access log file? Or am I worrying too much about this? That depends. Are you observing a performance problem? My main reason to log less is so that tomcat is not bogged down because of how much it is writing to the access log.. As long as you're not suffering from premature optimization, turning down the access filter will speed things up. Then again, logging is fast when compared to something like database access. If you have a relatively heavy application, logging isn't likely to be a big performance problem. - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKRCl9CaO5/Lv0PARAvrmAJsEDH33EfUhc1z/LIbTWX0E3lNPqACffeZn ta/y7D1oionLW9PfZnBQ6MQ= =u6dl -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Admin application in Tomcat 5.5 (dead?)
Even though this is the wrong question, I'll answer it anyway (below). Christopher Schultz [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, For the first time ever, I have the need to use the Tomcat admin application: I have a project whose whole unit testing capability revolves around being able to deploy webapps for testing to a running Tomcat instance using the admin application. My understanding is that the admin app is basically dead. For 5.5, it is likely that the admin app will continue to get basic maintainace. But, yes, at the moment there isn't any one with an interest in putting a lot of work into it (the previous developer that worked on it is now working on GlassFish I believe). I downloaded the admin app from the TC 5.5 download page and it doesn't run in a TC instance with nothing else in it: The admin download assumes that CATALINA_HOME == CATALINA_BASE. As a result, it copies the admin.xml file to the wrong place. The admin webapp needs this so that it can run privileged, and see the Tomcat internal classes (including Registry). java.lang.NoClassDefFoundError: org/apache/commons/modeler/Registry at java.lang.Class.getDeclaredMethods0(Native Method) at java.lang.Class.privateGetDeclaredMethods(Class.java:2395) at java.lang.Class.getMethod0(Class.java:2642) at java.lang.Class.getMethod(Class.java:1579) at org.apache.commons.beanutils.MethodUtils.getMatchingAccessibleMethod(MethodUtils.java:535) at org.apache.commons.beanutils.MethodUtils.invokeMethod(MethodUtils.java:209) at org.apache.commons.digester.CallMethodRule.end(CallMethodRule.java:625) (etc.) The manager application comes with no libraries, so it's no surprise that it can't find some library. Is the admin app really dead? If so, why is it (still) available for download from the TC 5.5 page. If it /is/ dead, does any other product feature the capabilities required for using the Catalina Ant tasks such as install/deploy and undeploy/remove? I know that, say, Lambda Probe can deploy/undeploy, but do I have to re-write all the test targets in order to do that? Thanks, - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKKSp9CaO5/Lv0PARAk7EAJ9dQseEg3ORBHyv9DjeGg6W1kPvygCfe4Jb FI2jbNLVmQ/y5jt3MJNW4iI= =8s4A -END PGP SIGNATURE- - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [tomcat]How to decrypt the DIGEST authentication?
Thanks a lot.I think I got another way to solve the group hierarchical problem,but I am not sure about it. maybe you can help me to confirm it:I wrote the SQL as followed:create or replace view groupview asselect usertable.username, decode(usertable.locked,0,'Authorizers','UnAuthorizers') as groupnamefrom usertablewhere in the usertable there is a field named locked that indicates whether the user is locked. so now I can allow everyone in the database to login to the system if the user is Authorizers,and I judge the user's role.The reason I do so is because there are existed API for doing all these and there are more than thousand users in the database,though the userid and groupid never be the same.Now I got another problem,the password stored in the database is encrypted,which is a common way,but the encrypting method is not using some sql script but SHA.So,How can I parse the clear-text that I input to SHA password and then compare with that stored in the database? Is there a way that I can capture the clear-text password and using SHA to encode it then compare it with the password stored in the database? thanks in advance! Date: Wed, 31 Oct 2007 10:51:42 + From: [EMAIL PROTECTED] To: users@tomcat.apache.org Subject: Re: [tomcat]How to decrypt the DIGEST authentication? zhongliang zhang wrote: But the application allows creating new group,how do I solve this problem? What problem? You need to say what the problem is if we are going to be able to help. web.xml doesn't support the dynamic addition of new groups. Further, the Realm doesn't understand the concept of hierarchical groups. Only the member of group administrators have access to the adminitrative page,and other groups,like groupA,groupB,... the member of which only have rights to login to the common page.so in the web.xml,I configure like the following: security-constraint web-resource-collection web-resource-nameall/web-resource-name url-pattern/admin/url-pattern /web-resource-collection auth-constraint role-nameAdministrators/role-name /auth-constraint /security-constraint s ecurity-constraint web-resource-collection web-resource-nameall/web-resource-name url-pattern/common/url-pattern /web-resource-collection auth-constraint role-name??/role-name /auth-constraint /security-constraint login-config auth-methodDIGEST/auth-method realm-nameJDBCRealm/realm-name /login-configHow should I configure the ?? part? and further more,It has a inherency relationship between groups, If Administrators group contains groupA,then the members of groupA have the administrative privilege,too. That means a group's member can be either a group or a user.In the former situation,It does a tree-search to check whether a user belongs to the Administrators group,now,if I use a configuration file,how did I do this check? There is, however, a way around this. It should be OK for small (few thousand groups and users) but it might not scale very well. The SQL below is non-optimal but it should give you the i dea. Use role-nameNon-Administrators/role-name for the common area. You'll need to modify your server-side SQL some. Again, I don't have an Oracle instance to test with so I am going from memory / Google. The syntax may not be quite right. This assumes that your groupids are never the same as your userids. CREATE or REPLACE VIEW vAdminGroups AS SELECT groupid FROM grouptable START WITH groupname='Administrators' CONNECT BY PRIOR userid=groupid; CREATE or REPLACE VIEW vAdminUsers AS SELECT u.userid as userid, username, 'Administrators' as groupname FROM usertable u, vAdminGroups g WHERE u.userid = g.userid; CREATE or REPLACE VIEW vNonAdminUsers AS SELECT username, 'NonAdministrators' as groupname FROM usertable WHERE userid NOT IN (SELECT userid from vAdminUsers); CREATE or REPLACE VIEW vUserRole AS SELECT * FROM vAdminUsers UNION SELECT * FROM vNonAdminUsers; Hope this helps. Mark -- --- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! http://spaces.live.com/spacesapi.aspx?wx_action=createwx_url=/friends.aspxmkt=en-us
Re: CLASSPATH, .jar files, packages, and so forth
--- HARBOR: http://coolharbor.100free.com/index.htm Now Tomcat is also a cool pojo application server --- - Original Message - From: Mann, Ivan H [EMAIL PROTECTED] To: users@tomcat.apache.org Sent: Wednesday, October 31, 2007 10:25 PM Subject: CLASSPATH, .jar files, packages, and so forth Hi, I actually dont know where to start ;) No... is probably a good place. Why not try this, take the layout from a working web app with the packages manually installed... jar cvf webappname.WAR Then to deploy, drop it into Tomcat. There are so many differnet classloaders involved in what you doing that its just wrong... WEB-INF/lib/ MUST NOT be in the Java classpath. Yes it will work when you run from an external test program, but it will screw TC up nicely... never do that. You seem to be using applets... those classes or Jars, are not in any class path... they in the web site and end up in the browsers classpath. Makes no sense to put those in a class path in the server side... Why fight the way its meant to be packaged why not just try get it into a war? Good luck... I have an application that consists of 150 classes, organized in several different packages. In the past I have installed the application in .../webapps/appl/directories where the directory tree corresponds to the package layout, and this has worked fine. I am trying to change this to using .jar files for a couple of reasons. I took one package and created a jar file like this: cd webapps/appl/ jar cvf schedule.jar applet/schedule/*.class mv schedule.jar WEB-INF/lib rm applet/schedule/*.class I modified setupclasspath.sh to read WEB-INF/lib and add all .jar files to the CLASSPATH before starting tomcat. Now when I try to access one of the classes that I put into schedule.jar it throws a NoClassDefFoundError. If I run a test program with CLASSPATH pointing to the webapps/appl directory and WEB-INF/lib/schedule.jar it works fine. In tomcat it doesn't find the class. I would suspect that there an issue with the way I build the jar file, but I can't figure out why it works outside of tomcat but not inside. What I would really like is a cookbook document telling me how to distribute an application in jar files to the web. I have Googled many combinations of words and can't find one. If anybody has one of those I would really appreciate it. I thing I am missing a step here, possibly making the manifest, but I just don't know what that missing step is. Thanks for the help. Ivan Mann - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Page Expire
Hi I'm a newbie to tomcat and I would like to increase the time duration that a page expires if it remains idle. Currently in my web application if a user remains idle for 20 minutes and tries to use the application again a default page is shown to the user stating that the page expired. How can I increase the time duration in which a page should expire after remaining idle. Thanks -- View this message in context: http://www.nabble.com/Page-Expire-tf4729501.html#a13523664 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
