date:20071213

On 13 Dec 2007, at 00:52, Caldarale, Charles R wrote:

From: Michele Mazzucco [mailto:[EMAIL PROTECTED]
Subject: Re: [Axis2] FileNotFoundException (SESSIONS.ser)
during tomcat shutdown

I've tried with a clean tomcat 6.0.13 setup where only axis2 1.3 was
deployed (tomcat 5.5.20 behaves the same) - no web services were
deployed in axis2.

Tomcat provides space for a webapp's use via the context attribute
javax.servlet.context.tempdir; this normally points to the directory
work/Catalina/localhost/[appname], which is the one getting  
deleted.  I
suspect your webapp is taking the value of that attribute, using it  
for
a bit, and then erroneously thinking it should clean up by deleting  
it.

As an experiment, you can configure the name of the webapp's  
tempdir via

the Context attribute workDir; Tomcat creates this directory during
deployment of the webapp, but otherwise doesn't seem to touch it.
Setting the workDir attribute to some other location might solve your
problem, although the real fix is to have your webapp stop deleting
things it didn't create.

Chuck,

it's not my webapp, it's axis2!
Now the problem is that you are telling me that the problem is  
axis2 while the axis2 guys suggest me that it could be a tomcat issue.

Michele

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE  
PROPRIETARY

MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e- 
mail

and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [Axis2] FileNotFoundException (SESSIONS.ser) during tomcat shutdown


Chuck,

BTW I've set workDir in $CATALINA_HOME/conf/server.xml (inside the  
Host section) to point to a temp folder in my home. The folder and  
all subfolders are created, apart from axis2... so the error still  
occurs.

What do you think?

Thanks,
Michele
On 13 Dec 2007, at 11:29, Michele Mazzucco wrote:

As an experiment, you can configure the name of the webapp's  
tempdir via

the Context attribute workDir; Tomcat creates this directory during
deployment of the webapp, but otherwise doesn't seem to touch it.
Setting the workDir attribute to some other location might solve your
problem, although the real fix is to have your webapp stop deleting
things it didn't create.



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: extra field in form-based authentication

2007-12-13 Thread Tim Funk

In form based authentication - you have no access to the processor other 
than your suggestion of overriding authenticate() in FormAuthenticator.


Depending on the purpose of the field you could always perform a kludge 
of setting the 3rd value in a cookie and have a filter check for hte 
cookie to perform any extra work you need. (Somehow - I doubt that will 
work)


-Tim

dirk ooms wrote:

Hello,

I would like to have an extra field in my form-based login page, but I'm 
wondering how I can retrieve the value of that extra field within my 
application (request.getParameter(blabla) does not work).


I searched the web and a suggestion was to override authenticate() in 
FormAuthenticator. But I'm wondering how I tell the container to use my 
version of authenticate()?


Are there other ways? This looks like something obvious, but after searching 
for a couple of hours, I haven't found a clear answer to this issue.




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Range request header (and related headers) behaviour

2007-12-13 Thread Tim Funk


The default servlet knows how to handle ranges.

JSP's and servlets on their own do not understand ranges. (Because 
typically custom code is written and out.println() is called).


The reason the default servlet can handle ranges is because the content 
is static. The size of the resource is known so one can easily do range 
checks appropriately.


JSP's/servlets content is generated on the fly. (Which is the main 
reason you see chunked encoding since we don't know the content length 
until your done serving the content)


That being said, you can make JSP's and servlets handle ranges by using 
a Filter (which I don't of yet) which can buffer the content of the JSP 
and only serve back the partial content as needed.


-Tim


James Abley wrote:

Hi,

I'm starting to see more clients making Range requests (iPhone among them)
and I'm trying to understand how much work I have to do to support the
correct behaviour. I've been investigating Tomcat support for this (although
my application will be deployed in different servlet containers; definitely
Tomcat 5.0.x, 5.5.x and Weblogic 9.x currently) and comparing my
expectations with what I'm seeing.



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Intermittent blank page after log-n

2007-12-13 Thread Steve Mitchell

I'm using a JDBC realm with a site and sometimes when you try to access a
secured resource you get a blank page after logging in.  You have to refresh
the page to get the secured resource to appear. After that everything works
great. I'm using SSL now, but this happened before I was using SSL.
Authentication works normally on Tomcat in DEV.  I'm still trying to fine a
pattern to the problem.  This appears to only happen on the first login.  If
you logout and log back in it work normally.  I assume it is a Tomcat/Mod_JK
configuration issue.   If you have experienced blank pages after log-in I
would like to know what you found.

Here is what I'm using.
Tomcat: 5.5.20.0
OS Name:Ubuntu Feisty Fawn
OS Version: 2.6.20-15-server
JVM Version:1.6.0-b105
Server version: Apache/2.2.3
mod_jk version: tomcat-connectors-1.2.23

I did find one error during start-up in the mod_jk.log:
 [error] init_jk::mod_jk.c (2701): Initializing shm:/etc/apache2/logs/jk-
runtime-status.8194 errno=2. Load balancing workers will not function
properly.
[warn]  jk_map_read_property::jk_map.c (432): The attribute '
worker.loadbalancer.balanced_workers' is deprecated - please check the
documentation for the correct replacement.

Suggestions?
http://www.byteworksinc.com/

Re: extra field in form-based authentication

2007-12-13 Thread Tim Funk


in that case ... wouldn't the User-Agent header do the trick?

-Tim

dirk ooms wrote:
interesting suggestion, but in my case the extra field is not related to the 
username. i would like to have a field where the user indicates on what type 
of device he/she works, so we can offer the appropriate stylesheet.


On Thursday 13 December 2007 13:00, David Delbecq wrote:

Or have the username in a hidden field and have javascript build it from
to fields.

example:
j_username=Domain\\user
j_password=*

Most pragmatic way imho. javascript disabled user could still enter the
\\ manually :)




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: extra field in form-based authentication

2007-12-13 Thread dirk ooms

interesting suggestion, but in my case the extra field is not related to the 
username. i would like to have a field where the user indicates on what type 
of device he/she works, so we can offer the appropriate stylesheet.

On Thursday 13 December 2007 13:00, David Delbecq wrote:
 Or have the username in a hidden field and have javascript build it from
 to fields.

 example:
 j_username=Domain\\user
 j_password=*

 Most pragmatic way imho. javascript disabled user could still enter the
 \\ manually :)

 En l'instant précis du 13/12/07 12:51, Tim Funk s'exprimait en ces termes:
  In form based authentication - you have no access to the processor
  other than your suggestion of overriding authenticate() in
  FormAuthenticator.
 
  Depending on the purpose of the field you could always perform a
  kludge of setting the 3rd value in a cookie and have a filter check
  for hte cookie to perform any extra work you need. (Somehow - I doubt
  that will work)
 
  -Tim
 
  dirk ooms wrote:
  Hello,
 
  I would like to have an extra field in my form-based login page, but
  I'm wondering how I can retrieve the value of that extra field within
  my application (request.getParameter(blabla) does not work).
 
  I searched the web and a suggestion was to override authenticate() in
  FormAuthenticator. But I'm wondering how I tell the container to use
  my version of authenticate()?
 
  Are there other ways? This looks like something obvious, but after
  searching for a couple of hours, I haven't found a clear answer to
  this issue.
 
  -
  To start a new topic, e-mail: users@tomcat.apache.org
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Beginner question: Configure Tomcat for JAAS?

2007-12-13 Thread Abel MacAdam

Hi,

This is a beginner question :-(. I'm trying to get JAAS to work on my Tomcat
(6.0.12) installation. I used code from a Javaworld article (
http://www.javaworld.com/javaworld/jw-09-2002/jw-0913-jaas.html)

Of course I had to configure my Tomcat to work together with JAAS. The
document I used is:
http://tomcat.apache.org/tomcat-6.0-doc/printer/realm-howto.html

According to the Tomcat doc I have to do the following steps before I can
use JAAS to authenticate a user:
1. Develop your code. Place the compiled classes in Tomcat's classpath
2. Setup a login.config file for Java, and tell Tomcat where to find it (set
JAVA_OPTS)
3. Configure the JAASRealm in your server.xml

1 Develop code: I use the following classes:
PassiveCallbackHandler.java
RdbmsCredential.java
RdbmsLoginModule.java
RdbmsPrincipal.java
These classes I put in the package rdbmsjaas.
In the %CATALINA_HOME%/webapps/Javaworld_Jaas/WEB-INF/lib directory I
created the rdbmsjaas.jar file.

The jsp is called jaas.jsp, and is stored in
%CATALINA_HOME%/webapps/Javaworld_Jaas

2. Setup login.config
In %CATALINA_HOME%\conf I saved the file Javaworld_all_that_Jaas.config,
containing:

Example {
   RdbmsLoginModule required
   debug=true
   url=jdbc:mysql://localhost/jaasdb?user=javauserpassword=javadude
   driver=com.mysql.jdbc.Driver;
};

I created an XP Environment Variable JAVA_OPTS with the value -DJAVA_OPTS=-
Djava.security.auth.login.config==C:/Program Files/Apache Software
Foundation/Tomcat 6.0/conf/JavaWorld_All_That_Jaas.config (excluding  and
)
I used the fully qualified address, instead of
$CATALINA_HOME/conf/JavaWorld_All_That_Jaas.config. I think XP balks when it
sees $CATALINA_HOME).

3 Configure JAASRealm in server.xml
In %CATALINA_HOME%\conf\ I changed web.xml. I added the following lines:

  Realm className=org.apache.catalina.realm.JAASRealm
 appName=jaas
 userClassName=rdbmsjaas.RdbmsPrincipal
 debug=99
   /

If I run the jsp from http://localhost:8080/JavaWorld_Jaas/jaas.jsp, I can
enter my username/password, but when I click the Submit button, I get:

Caught Exception: java.lang.SecurityException: Unable to locate a login
configuration



Where did my configuration go wrong?

Abel

Re: extra field in form-based authentication

2007-12-13 Thread dirk ooms

On Thursday 13 December 2007 13:54, Tim Funk wrote:
 in that case ... wouldn't the User-Agent header do the trick?

AFAIK not, the screenwidth is the main thing i want to adapt to and i can have 
Firefox/Linux running on a webtablet with 800px screen, but also on a desktop 
with 1900px.


 -Tim

 dirk ooms wrote:
  interesting suggestion, but in my case the extra field is not related to
  the username. i would like to have a field where the user indicates on
  what type of device he/she works, so we can offer the appropriate
  stylesheet.
 
  On Thursday 13 December 2007 13:00, David Delbecq wrote:
  Or have the username in a hidden field and have javascript build it from
  to fields.
 
  example:
  j_username=Domain\\user
  j_password=*
 
  Most pragmatic way imho. javascript disabled user could still enter the
  \\ manually :)

 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: extra field in form-based authentication

2007-12-13 Thread David Delbecq

Providing a separate form to choose layout would be far easier to do and
maintain.

Login form should contains only login informations (cf J2EE specs). If
you want to play with customization of login form that go beyong what is
allowed  by j2EE security model, just forget container managed
authentification and provide your own one.
En l'instant précis du 13/12/07 14:06, dirk ooms s'exprimait en ces termes:
 On Thursday 13 December 2007 13:54, Tim Funk wrote:
   
 in that case ... wouldn't the User-Agent header do the trick?
 

 AFAIK not, the screenwidth is the main thing i want to adapt to and i can 
 have 
 Firefox/Linux running on a webtablet with 800px screen, but also on a desktop 
 with 1900px.

   
 -Tim

 dirk ooms wrote:
 
 interesting suggestion, but in my case the extra field is not related to
 the username. i would like to have a field where the user indicates on
 what type of device he/she works, so we can offer the appropriate
 stylesheet.

 On Thursday 13 December 2007 13:00, David Delbecq wrote:
   
 Or have the username in a hidden field and have javascript build it from
 to fields.

 example:
 j_username=Domain\\user
 j_password=*

 Most pragmatic way imho. javascript disabled user could still enter the
 \\ manually :)
 
 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 

 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
   


-- 
http://www.devlog.be (a belgian developer's logs)



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Turning off jsessionid

2007-12-13 Thread Peter Stavrinides

Actually this is not so uncommon, an there are many 'good' reasons to do
so, see:

http://randomcoder.com/articles/jsessionid-considered-harmful

Here is an example of a filter that takes care of this:
http://randomcoder.com/repos/public/randomcoder-website/tags/1.0.3/WEB-INF/src/com/randomcoder/security/DisableUrlSessionFilter.java

Best wishes,
Peter

curunir wrote:

Since you were curious why someone would want to disable URL rewriting, I can
tell you why we had to do this.

For our client, it was taken for a given that users would be frequently
copying/pasting URLs in emails and IMs to other users. It's not a necessary
part of our application, but we all know the vast majority of computer users
are basically clueless when it comes to security and simply won't consider
the security implications of their actions. If you enable URL rewriting, it
makes it possible for someone visiting a URL sent to them in an email/IM to
be logged in as the user who was originally passed the URL. Additionally,
the users of the application frequently take screenshots when submitting
bugs and those screenshots would, in many cases, also include the session
id.

In our application, where real money is at stake, this kind of risk is
unacceptable. I'd go as far as to say that URL rewriting is fundamentally
insecure for this reason and should be turned off whenever it's possible
that URLs would be exposed in either of these two manners (provided your
application requires a decent level of security).

Christopher Schultz-2 wrote:

...

I'm not sure why you'd ever want to do this, though. I'd love to hear
your reason for doing it, though.

...

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [Axis2] FileNotFoundException (SESSIONS.ser) during tomcat shutdown

 From: Michele Mazzucco [mailto:[EMAIL PROTECTED] 
 Subject: Re: [Axis2] FileNotFoundException (SESSIONS.ser) 
 during tomcat shutdown

 BTW I've set workDir in $CATALINA_HOME/conf/server.xml (inside the  
 Host section) to point to a temp folder in my home.

Don't change the workDir attribute for the Host - let that one stay as
the default.  The idea is to give the webapp a different work directory
than the one Tomcat uses.  You need to change just the workDir attribute
for the webapp, inside its Context element.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Attempts to install Tomcat 5.5 on a windows machine with Apache 2.0.58

2007-12-13 Thread Ljuba Veselinova

I have been trying to install Tomcat 5.5 on a windows machine where
there is an Apache webserver running. The version of Apache is 2.0.58.
I did  a clean re-installation of Apache, checked the path of system
variables such as CATALINA_HOME, JAVA_HOME and PATH. I have checked
the config files for spelling errors, specifically

for Apache
httpd.conf
workers.properties

for Tomcat
mod_jk.conf

Despite all of this I cannot get Tomcat to work. I have checked the
Apache installation via a full URL (http://ling-map2.win.su.se) and
also via http://localhost. I get the normal response from Apache but
when I check http://localhost:8080, I get a message The connection
was refused when trying to contact localhost:8080.

I have also checked in the Tomcat/logs/mod_jk.log; I am pasting some
of its intial lines below.

PHP Warning:  PHP Startup: Unable to load dynamic library 'C:\\Program
Files\\php\\ext\\php_cpdf.dll' - The specified procedure could not be
found.\r\n in Unknown on line 0
PHP Warning:  PHP Startup: Unable to load dynamic library 'C:\\Program
Files\\php\\ext\\php_cpdf.dll' - The specified procedure could not be
found.\r\n in Unknown on line 0
[Thu Dec 13 15:07:19 2007] [info]  jk_open_socket::jk_connect.c (433):
connect to 130.237.171.49:8009 failed with errno=61
[Thu Dec 13 15:07:19 2007] [info]
ajp_connect_to_endpoint::jk_ajp_common.c (877): Failed connecting to
tomcat. Tomcat is probably not started or is listening on the wrong
host/port (130.237.171.49:8009). Failed errno = 61
[Thu Dec 13 15:07:19 2007] [info]  ajp_send_request::jk_ajp_common.c
(1227): Error connecting to the Tomcat process.
[Thu Dec 13 15:07:19 2007] [info]  ajp_service::jk_ajp_common.c
(1724): Sending request to tomcat failed,  recoverable operation
attempt=1
[Thu Dec 13 15:07:19 2007] [info]  jk_open_socket::jk_connect.c (433):
connect to 130.237.171.49:8009 failed with errno=61
[Thu Dec 13 15:07:19 2007] [info]
ajp_connect_to_endpoint::jk_ajp_common.c (877): Failed connecting to
tomcat. Tomcat is probably not started or is listening on the wrong
host/port (130.237.171.49:8009). Failed errno = 61
[Thu Dec 13 15:07:19 2007] [info]  ajp_send_request::jk_ajp_common.c
(1227): Error connecting to the Tomcat process.
[Thu Dec 13 15:07:19 2007] [info]  ajp_service::jk_ajp_common.c
(1724): Sending request to tomcat failed,  recoverable operation
attempt=2

I have searched the tomcat archives and also performed general google
searches. Although I do get hits where a similar problem is described,
I haven't found any solution yet. I am sure this has happened before
so a pointer to a file/address where I could find guidance on how to
proceed will be greatly appreciated.

Thank you in advance for your time and help.

Best wishes,
Ljuba

-- 
===
Ljuba Veselinova
Dept of Linguistics  Email: [EMAIL PROTECTED]
Stockholm University  Phone: +46-8-16 2332
106 91 Stockholm  Fax  : +46-8-15 5389
Sweden URL  : http://www.ling.su.se/staff/ljuba/

We learn by going where we want to go.
  Julia Cameron


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: extra field in form-based authentication

2007-12-13 Thread Propes, Barry L

I was thinking you had to use j_username and j_password for the j_securitycheck 
login action
you might could add another variable in those classes called, but at the very 
least it would be adding it in and overriding authenticate I would think.

-Original Message-
From: dirk ooms [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 13, 2007 5:00 AM
To: users@tomcat.apache.org
Subject: extra field in form-based authentication

Hello,

I would like to have an extra field in my form-based login page, but I'm 
wondering how I can retrieve the value of that extra field within my 
application (request.getParameter(blabla) does not work).

I searched the web and a suggestion was to override authenticate() in 
FormAuthenticator. But I'm wondering how I tell the container to use my 
version of authenticate()?

Are there other ways? This looks like something obvious, but after searching 
for a couple of hours, I haven't found a clear answer to this issue.

Thanks in advance for any guidance,
dirk

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: extra field in form-based authentication

2007-12-13 Thread Propes, Barry L

can you not pull in a header value somewhere and determine that?

Seems like you could in either your servlet or JSP pull in the header/user 
agent value and then write the style sheet reference accordingly. Perhaps not?

-Original Message-
From: dirk ooms [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 13, 2007 6:49 AM
To: users@tomcat.apache.org
Cc: David Delbecq
Subject: Re: extra field in form-based authentication

interesting suggestion, but in my case the extra field is not related to the 
username. i would like to have a field where the user indicates on what type 
of device he/she works, so we can offer the appropriate stylesheet.

On Thursday 13 December 2007 13:00, David Delbecq wrote:
 Or have the username in a hidden field and have javascript build it from
 to fields.

 example:
 j_username=Domain\\user
 j_password=*

 Most pragmatic way imho. javascript disabled user could still enter the
 \\ manually :)

 En l'instant précis du 13/12/07 12:51, Tim Funk s'exprimait en ces termes:
  In form based authentication - you have no access to the processor
  other than your suggestion of overriding authenticate() in
  FormAuthenticator.

  Depending on the purpose of the field you could always perform a
  kludge of setting the 3rd value in a cookie and have a filter check
  for hte cookie to perform any extra work you need. (Somehow - I doubt
  that will work)

  -Tim

  dirk ooms wrote:
  Hello,

  I would like to have an extra field in my form-based login page, but
  I'm wondering how I can retrieve the value of that extra field within
  my application (request.getParameter(blabla) does not work).

  I searched the web and a suggestion was to override authenticate() in
  FormAuthenticator. But I'm wondering how I tell the container to use
  my version of authenticate()?

  Are there other ways? This looks like something obvious, but after
  searching for a couple of hours, I haven't found a clear answer to
  this issue.

  -
  To start a new topic, e-mail: users@tomcat.apache.org
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [Axis2] FileNotFoundException (SESSIONS.ser) during tomcat shutdown

On 13 Dec 2007, at 15:33, Caldarale, Charles R wrote:

From: Michele Mazzucco [mailto:[EMAIL PROTECTED]
Subject: Re: [Axis2] FileNotFoundException (SESSIONS.ser)
during tomcat shutdown

BTW I've set workDir in $CATALINA_HOME/conf/server.xml (inside the
Host section) to point to a temp folder in my home.

Don't change the workDir attribute for the Host - let that one  
stay as
the default.  The idea is to give the webapp a different work  
directory
than the one Tomcat uses.  You need to change just the workDir  
attribute

for the webapp, inside its Context element.

Ok... but I haven't been working directly with servlet for a long  
time. Where do I find the Context element related to axis2 (which  
is a servlet)? Should it be inside $CATALINA_HOME/webapps/axis2/WEB- 
INF/web.xml? If so, there's no Context element in such file.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE  
PROPRIETARY

MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e- 
mail

and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: DCOM problem in Tomcat 6 on Windows

2007-12-13 Thread Karsten Silz

Hello!

 Karsten,
 
 You didn't mention if you were running Tomcat as a service. 
 I'll assume you are.

Yes.

[snip]

 Just for grins, have you tried using the identical DLL to run 
 this console program?

Yes - they are in different directories but are otherwise identical (size,
data, SHA-1 checksum).  The DLL doesn't get registered, only loaded.

 Usually when folks have problems and weird issues running 
 Tomcat on Windows like this is because they are using Tomcat 
 as a Windows Service and aren't sensitive to the differences 
 in privilege for their console user (usually Karsten or 
 whatever) and the Tomcat service user (Tomcat? System... 
 not sure what the default is).
 
 You might want to look into the permissions of the effective 
 user that Tomcat uses when running as a service.

Thanks for the hint - I checked this.  The Windows service ran as Local
System which I guess is an admin account.  I changed it to my own admin
user account but that didn't help.  I have a third Java program, run as a
Windows service, with that same (default, I guess) Local System account,
which can use the DLL and the DCOM communication within it just fine.  Next
I used the ZIPped version of Tomcat, set it all up and started it explicitly
from a command line with admin rights, but that gave me the same results.
Unfortunately, since we use some JSP 2.1 features, I can't try this with
Tomcat 5.x.

I tried this both on XP and Vista, and the results were the same.

Does anybody else have an idea why DCOM fails under Tomcat 6?
 
 - -chris

Karsten


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [Axis2] FileNotFoundException (SESSIONS.ser) during tomcat shutdown

 From: Michele Mazzucco [mailto:[EMAIL PROTECTED] 
 Subject: Re: [Axis2] FileNotFoundException (SESSIONS.ser) 
 during tomcat shutdown

 Where do I find the Context element related to axis2 (which  
 is a servlet)?

First you said axis2 is a webapp, now you say it's a servlet; I suspect
the former is correct.  A webapp can utilize many servlets, which I
think is the case here.

 Should it be inside $CATALINA_HOME/webapps/axis2/WEB-INF/web.xml?

No, the contents of that file are defined by the servlet spec (JSR-154),
whereas the Context element is specific to Tomcat.  It can be in
webapps/axis2/META-INF/context.xml or in
conf/Catalina/localhost/axis2.xml; the latter overrides the former if
it's in both places.  (It can also be in server.xml, but that location
should not be used for recent versions of Tomcat.)  It may not exist at
all, in which case you'll need to create it in one of the above
locations, with just the workDir attribute.

The relevant doc is here:
http://tomcat.apache.org/tomcat-6.0-doc/config/context.html

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Attempts to install Tomcat 5.5 on a windows machine with Apache 2.0.58

2007-12-13 Thread Alan Chaney


I've got tomcat going behind apache several times. My general view is
get them both working independently and then hook them up. From your
original mail I'm skeptical that you actually have got
tomcat started properly.


[Thu Dec 13 15:07:19 2007] [info]  ajp_send_request::jk_ajp_common.c
(1227): Error connecting to the Tomcat process.
[Thu Dec 13 15:07:19 2007] [info]  ajp_service::jk_ajp_common.c
(1724): Sending request to tomcat failed,  recoverable operation
attempt=1
[Thu Dec 13 15:07:19 2007] [info]  jk_open_socket::jk_connect.c (433):
connect to 130.237.171.49:8009 failed with errno=61
[Thu Dec 13 15:07:19 2007] [info]
ajp_connect_to_endpoint::jk_ajp_common.c (877): Failed connecting to
tomcat. Tomcat is probably not started or is listening on the wrong
host/port (130.237.171.49:8009). Failed errno = 61
[Thu Dec 13 15:07:19 2007] [info]  ajp_send_request::jk_ajp_common.c
(1227): Error connecting to the Tomcat process.
[Thu Dec 13 15:07:19 2007] [info]  ajp_service::jk_ajp_common.c
(1724): Sending request to tomcat failed,  recoverable operation
attempt=2

I have searched the tomcat archives and also performed general google
searches. Although I do get hits where a similar problem is described,
I haven't found any solution yet. I am sure this has happened before
so a pointer to a file/address where I could find guidance on how to
proceed will be greatly appreciated.

 


Questions

1. What ports are bound to apache? - only 80 I should hope. Make sure
that 8009 and 8080 aren't bound by apache otherwise tomcat can't work.
2. If you stop apache does tomcat start?


localhost:8080 is the HTTP connection to tomcat. I assume you are trying
localhost:8080
to see if tomcat is available. The mod_jk connector will use port 8009
for the AJP connection.
It is possible to run tomcat behind apache with 8080 disabled but I
assume that is not what you're intention.

Ljuba Veselinova wrote:

I have been trying to install Tomcat 5.5 on a windows machine where
there is an Apache webserver running. The version of Apache is 2.0.58.
I did  a clean re-installation of Apache, checked the path of system
variables such as CATALINA_HOME, JAVA_HOME and PATH. I have checked

Despite all of this I cannot get Tomcat to work. I have checked the
Apache installation via a full URL (http://ling-map2.win.su.se) and
also via http://localhost. I gethe config files for spelling errors, 

specifically


for Apache
httpd.conf
workers.properties

for Tomcat
mod_jk.conf

t the normal response from Apache but
when I check http://localhost:8080, I get a message The connection
was refused when trying to contact localhost:8080.

 

Sounds like tomcat hasn't started.


I have also checked in the Tomcat/logs/mod_jk.log; I am pasting some
of its intial lines below.

 

Have you checked the tomcat logs to see that it has started properly?
Look for catalina.out in your tomcat logs directory.



PHP Warning:  PHP Startup: Unable to load dynamic library 'C:\\Program
Files\\php\\ext\\php_cpdf.dll' - The specified procedure could not be
found.\r\n in Unknown on line 0
PHP Warning:  PHP Startup: Unable to load dynamic library 'C:\\Program
Files\\php\\ext\\php_cpdf.dll' - The specified procedure could not be
found.\r\n in Unknown on line 0
 

Why are you getting php warnings in the mod_jk log? Looks like your
logging isn't set up correctly.



[Thu Dec 13 15:07:19 2007] [info]  jk_open_socket::jk_connect.c (433):
connect to 130.237.171.49:8009 failed with errno=61
[Thu Dec 13 15:07:19 2007] [info]
ajp_connect_to_endpoint::jk_ajp_common.c (877): Failed connecting to
tomcat. Tomcat is probably not started or is listening on the wrong
host/port (130.237.171.49:8009). Failed errno = 61
 

This seems the critical line - tomcat is probably not started or is
listening on the wrong host/prot
Is tomcat listening on localhost? It looks like you are trying to talk
to the defined IP above (130...) and not localhost

Hope that helps

Alan





Thank you in advance for your time and help.

Best wishes,
Ljuba

 




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [Axis2] FileNotFoundException (SESSIONS.ser) during tomcat shutdown

On 13 Dec 2007, at 16:35, Caldarale, Charles R wrote:

From: Michele Mazzucco [mailto:[EMAIL PROTECTED]
Subject: Re: [Axis2] FileNotFoundException (SESSIONS.ser)
during tomcat shutdown

Where do I find the Context element related to axis2 (which
is a servlet)?

First you said axis2 is a webapp, now you say it's a servlet; I  
suspect

the former is correct.  A webapp can utilize many servlets, which I
think is the case here.

OK. Axis2 is a web app which includes a SOAP engine (which is a  
servlet) and an admin page (which is another servlet)

Should it be inside $CATALINA_HOME/webapps/axis2/WEB-INF/web.xml?

No, the contents of that file are defined by the servlet spec  
(JSR-154),

whereas the Context element is specific to Tomcat.  It can be in
webapps/axis2/META-INF/context.xml or in
conf/Catalina/localhost/axis2.xml; the latter overrides the former if
it's in both places.  (It can also be in server.xml, but that location
should not be used for recent versions of Tomcat.)  It may not  
exist at

all, in which case you'll need to create it in one of the above
locations, with just the workDir attribute.

The relevant doc is here:
http://tomcat.apache.org/tomcat-6.0-doc/config/context.html

Done. The folder is created at tomcat startup but when I stop tomcat  
it still complains because it doesn't find the file SESSIONS.ser  
(i.e. the same error occurs).
The only workaround is to disable session persistence ($CATALINA/conf/ 
context.xml).

Michele

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE  
PROPRIETARY

MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e- 
mail

and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Servlets loading issue

2007-12-13 Thread Shekhar . Dhotre

This is what I have ,Do I need to modify it to point to test classes 
/servelets ?

[EMAIL PROTECTED] /usr/local/apache-tomcat-5.5.25/conf]: head context.xml
?xml version=1.0 encoding=UTF-8?
!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the License); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

  http://www.apache.org/licenses/LICENSE-2.0
[EMAIL PROTECTED] /usr/local/apache-tomcat-5.5.25/conf]:




Christopher Schultz [EMAIL PROTECTED] 
12/12/2007 05:13 PM
Please respond to
Tomcat Users List users@tomcat.apache.org


To
Tomcat Users List users@tomcat.apache.org
cc

Subject
Re: Servlets  loading issue






-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Shekhar,

[EMAIL PROTECTED] wrote:
 [EMAIL PROTECTED] /usr/local/apache-tomcat-5.5.25/conf]: oslevel -r
 5300-07

How about:

(in /usr/local/apache-tomcat-5.5.25/conf)
$ head context.xml

Can we get a copy of the stack trace, too?

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHYF0X9CaO5/Lv0PARAn2aAJ4neOKDeGZv3qugkjvlyBjJeZXzHACgwgLP
YkAP3l/+78S44UvkPtGGvT8=
=HRDy
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

User roles

2007-12-13 Thread Shaw, Mike

Our Security group wants for me to change the Tomcat 5 default password.
I believe that this setting is within the tomcat-users.xml file.  I know
that the role called tomcat needs to be in there to have the service
operate correctly.

Could you please provide instructions for changing the default password
to something else and how it affects the service=3F  I assume that the
service would need to be restarted following adjustments to the XML
=66ile.  Thank you.

Michael Shaw
Programmer
Select Medical Corporation
[EMAIL PROTECTED]


Note:  The information contained in this message may be
privileged and confidential and protected from
disclosure.  If the reader of this message is not the
intended recipient, or an employee or agent responsible
for delivering this message to the intended recipient, you
are hereby notified that any dissemination, distribution
or copying of this communication is strictly prohibited.
If you have received this communication in error, please
notify us immediately by replying to the message and
deleting it from your computer.  Thank you.

RE: [Axis2] FileNotFoundException (SESSIONS.ser) during tomcat shutdown

 From: Michele Mazzucco [mailto:[EMAIL PROTECTED] 
 Subject: Re: [Axis2] FileNotFoundException (SESSIONS.ser) 
 during tomcat shutdown

 The folder is created at tomcat startup but when I stop tomcat  
 it still complains because it doesn't find the file SESSIONS.ser  
 (i.e. the same error occurs).

You're right; I thought I had checked that Tomcat would still use the
Host workDir for SESSIONS.ser, but further testing shows that's not
true.

Something else to try is configuring a nested Manager element inside
the axis2 Context, and specifying the pathname attribute as an
absolute path to where SESSIONS.ser should be stored, while having some
alternate location for the axis2 Context workDir attribute.  The
pathname attribute should include the file name (SESSIONS.ser), and
every component of the path must already exist prior to Tomcat shutdown.
In your situation, you could try the pathname value:
/home/nmm42/devel/tomcat/apache-tomcat-6.0.13/work/Catalina/localhost/ax
is2/SESSIONS.ser

However, you really should search the webapp source code for references
to javax.servlet.context.tempdir, and fix the code that's removing that
directory.  Deletion of the workDir affects not only session
persistence, but also trashes class files generated from JSPs.

 The only workaround is to disable session persistence 
 ($CATALINA/conf/context.xml).

That affects all webapps; you should really apply workarounds only to
the Context element for the webapp that's causing trouble, until you
get it fixed.

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: User roles

 From: Shaw, Mike [mailto:[EMAIL PROTECTED] 
 Subject: User roles

 Our Security group wants for me to change the Tomcat 5 
 default password.

There's no such thing as a password for Tomcat itself.  Various webapps
deployed under Tomcat may have security constraints requiring certain
roles, but the default tomcat-users.xml contains no passwords.  The
manager and admin apps do require roles and authentication, of course.

 I know that the role called tomcat needs to be in there
 to have the service operate correctly.

Not true; running Tomcat as a service has nothing to do with what's in
the tomcat-users.xml file.

If you're serious about security, you'll discard the default toy Realm
and use a real one.  Read up on it here:
http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html

 - Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: ISAPI JK2 ran better than JK, how can that be?

2007-12-13 Thread tim.fulcher

Hmm, I'm running Tomcat 4.1.18 which didn't even support the %D logging 
directive :-/
 
But now I have a load balancer in place, with one worker. A status is shown 
below after about 6hrs of traffic.
As you can see the client errors make up about 6% of all incident traffic, 
though they dwarf server errors.
 
Type Sticky Sessions Force Sticky Sessions   Retries LB 
Method   Locking Recover Wait Time   Max Reply Timeouts 
lb   TrueFalse   2   Request Optimistic  60  0  

Good DegradedBad/Stopped BusyMax BusyNext 
Maintenance   
10   0   18  60  37/99  

Balancer Members

 NameTypeHostAddrAct State   D   F   M  
 V   Acc Err CE  RE  Wr  Rd  BusyMax Route  
 RR  Cd  Rs 
worker41 ajp13   localhost:8009  127.0.0.1:8009  ACT OK 
 0   1   1   140 42245   97  25560   24M 1.4G   
 18  60  worker410/0
 
It certainly gives me a better picture of what's going on, but I'm no further 
towards what is stopping everything working on a daily basis.
 
But then just as I'm writing this my site falls over - I get the Service 
Temporarily Unavailable consistently on my pages. I grabbed a snapshot of the 
status worker - 
 
Type Sticky Sessions Force Sticky Sessions   Retries LB 
Method   Locking Recover Wait Time   Max Reply Timeouts 
lb   TrueFalse   2   Request Optimistic  60  0  

Good DegradedBad/Stopped BusyMax BusyNext 
Maintenance   
10   0   100 115 21/83  

Balancer Members

 NameTypeHostAddrAct State   D   F   M  
 V   Acc Err CE  RE  Wr  Rd  BusyMax Route  
 RR  Cd  Rs 
worker41 ajp13   localhost:8009  127.0.0.1:8009  ACT 
ERR/FRC 0   1   1   132 43181   691 25970   
24M 1.4G100 115 worker410/0
 
Clearly there seemed to be some catastrophic occurrence that made the Error 
count rocket and the worker state change. I'm unfamliar with the load balancer 
- will a state of ERR/FRC be rectified somehow? For now I just restarted IIS  
Tomcat which appears to be the only method of recovery at present
 
cheers
 
 
Tim



From: Rainer Jung [mailto:[EMAIL PROTECTED]
Sent: Mon 10/12/2007 15:39
To: Tomcat Users List
Cc: Ludwig,GJA,Graeme,DGE R
Subject: Re: ISAPI JK2 ran better than JK, how can that be?



Hi Tim,

[EMAIL PROTECTED] wrote:
 Hi  Rainer,

 Thanks for the response. To cover a few points you made -

 - Yes, I had a hunch long running requests are a problem; because of
 our appliction design, some pages invoked for the first time take a
 while (we can't cache them all!).  Is there an easy way to correlate
 (apart from timestamp) the errors in the isapi and the requests made
 to IIS ?  I mean can I get isapi log to show the URL being processed?

I'm afraid the answer most liekely is no. You can file an enhancement
request in our bugzilla. That way the feature might materialize one day.

For Apache httpd, correlation between error an log message is a little
better. Even though we don't include the URL, we include the PID and
thread ID, and both can be logged in the httpd access log. So having
time, process id and thread id, usually makes it possible to correlate
successful, although it is still some work and not perfect.

  - I've now got the %D option in place on Tomcat to figure out from
 tomorrow which are the heavy pages - Yes, thread dumps on JDK 1.3 
 TC4.1.x are tricky - I'm looking at the Tomcat JavaWrapper approach
 as a way forward. The version of the 3rd party product we have in
 place is only supported on jdk1.3  (this is a pretty ancient set up!)
  - I agree that my incident traffic load is not huge, and should be
 supportable by the environment in place. - I'll try a load balancer
 worker to see if that tells me more info

At least it does tell you the number of errors a worker had, and also
the number of client errors. That way you can check quickly, if there
are more errors than client errors, and by pollling the values, you can
find out how often and during which times things are happening. Only
counters though, no per incodent information.

The page can be configured to return machine readable content. Have al
look at:

http://tomcat.apache.org/connectors-doc/reference/status.html

 If possible I'll have some more information in a day or so from
 this...


 cheers


 Tim

Regards,

Rainer





-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]

Re: AccessControlException in Coyote Http11Processor (Tomcat 6.0.14). Bug in Coyote ?

2007-12-13 Thread Mark Thomas

Delian Krustev wrote:
 On Tue, 11 Dec 2007 22:35:20 + Mark Thomas wrote:
 Are you happy to mod the code and build a patched version yourself or do
 you want some help? I can build a binary with the patch for you to test if
 you wish.
 
 I've not built Tomcat from source before, so I'll take advantage of the help 
 you're offering. Thank you.

Snapshot build of trunk available from:
http://people.apache.org/~markt/dev/

This is the current 6.0.x trunk with the security manager optimisation
reverted for the org.apache.coyote.* packages.

*HEALTH WARNING*
This is a snapshot for testing of this issue only. It is not a formal release.

Happy testing!

Mark



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Multiple problems with Tomcat and Struts

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Uma,

Uma Kalluru wrote:
 But I am still wondering, if there was connection timeout and the 
 first user gets an error. Why should the whole application go down?

It shouldn't (go down).

 I mean no other user can use the application after the error. Any
 idea on this?

Try setting the validation query for your connection pool and see if
that helps.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHYa+B9CaO5/Lv0PARAmtWAJ9uS2jUZxg9U1B/LSSEg5yW4q9OGACfeLpt
jXAQ8Gqii6f/fqga6pWZLyg=
=gyZk
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Servlets loading issue

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Shekhar,

[EMAIL PROTECTED] wrote:
 Christopher Schultz wrote:
 How about:
 
 (in /usr/local/apache-tomcat-5.5.25/conf)
 $ head context.xml

 [EMAIL PROTECTED] /usr/local/apache-tomcat-5.5.25/conf]: head context.xml
 ?xml version=1.0 encoding=UTF-8?
 !--
   Licensed to the Apache Software Foundation (ASF) under one or more
   contributor license agreements.  See the NOTICE file distributed with
   this work for additional information regarding copyright ownership.
   The ASF licenses this file to You under the Apache License, Version 2.0
   (the License); you may not use this file except in compliance with
   the License.  You may obtain a copy of the License at
 
   http://www.apache.org/licenses/LICENSE-2.0

Okay, that was worthless. I guess I really wanted you to provide the
Context element from your TOMCAT_HOME/conf/context.xml file.

 This is what I have ,Do I need to modify it to point to test classes
 /servelets ?

No. You should not modify your server-wide context.xml file to point to
any servlets. That's what your webapp's deployment descriptor (web.xml)
is for.

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHYbAy9CaO5/Lv0PARArZYAKCTER7Hwas3/fjbmdewytTDRiwXCACfU32a
5tbrYMoSEWZQpal0Zsrp1cA=
=+mfj
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: extra field in form-based authentication

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

David,

David Delbecq wrote:
 Login form should contains only login informations (cf J2EE specs).

I agree that login forms should only contain login information, but I
question the J2EE spec's interpretation of what should be considered
login information. Username + password is often not enough, and the
servlet spec makes it completely non-portable to do anything differently.

 If you want to play with customization of login form that go beyond
 what is allowed  by j2EE security model, just forget container
 managed [authentication and authorization] and provide your own one.

One such option is to use securityfilter
(http://securityfilter.sourceforge.net), which allows you to (IMO) more
easily write your own authentication module, including direct access to
the HttpServletRequest object where you can set up some configuration
information.

- -chris

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHYbIo9CaO5/Lv0PARAlj6AKCl2P0o7ei+ObLEj8vPMgSXeE//zgCfUrZp
/VzjSHBhvfKCHkXGJrYBv8g=
=FLAD
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Intermittent blank page after log-n