Re: Problems with SSL-enabled Tomcat 5.5

2009-03-13 Thread Bhuvanmp
HI, i im also having the same problem. java.io.IOException: Alias name aliasName does not identify a key entry. But i m not bale to over come it. I m using keytool not opessl. Please suggst me. thanks ,Bhuvan MP bajistaman wrote: So what you did was to create a new private key, CSR and

Re: Apache/mod_jk serves random files from tomcat

2009-03-13 Thread Yuval Perlov
We were not using APR. Since this was a live project I had no choice but switch to regular http proxy which doesn't work as well as AJP (speed/functionality) but is consistent. Alas, as much as I'd like to help with solving this issue, I wasn't able to reproduce in a test environment and

Re: sqljdbc, integrated sql server authentication and multiple webapps

2009-03-13 Thread Stephan Steiner
Not a real answer to your question, but you might want to have a look at the following :..AndréThanks for trying to help. Unfortunately, this isn't a browser application.. it's an XML application that runs on an IP phone so there are no user credentials.It's a corporate directory that everybody

JSESSIONID hijacking

2009-03-13 Thread Pieter Temmerman
Hi list. I've got an issue which I would like to share with you guys. My webapp requires a user to login, which on his turn creates a session for that user. Now, when I browse my webapp the address bar shows the current URL with a JSESSIONID. Let's say:

Re: JSESSIONID hijacking

2009-03-13 Thread zhaoxueqing
jsessionid is the only way to indentity the user logined. if you get it ,you are this user. but? we can check others , for example IP! - Original Message - From: Pieter Temmerman ptemmerman@sadiel.es To: Tomcat Users List users@tomcat.apache.org Sent: Friday, March 13, 2009 5:15

RE: JSESSIONID hijacking

2009-03-13 Thread Peter Crowther
From: Pieter Temmerman [mailto:ptemmerman@sadiel.es] However, as the jsessionid URL rewriting is defined in the servlet specification, I would expect this to be secure. Why, out of interest? Therefor I was wondering whether the hijacking is caused by a misconfiguration of Tomcat, my

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Stephanie Wullbieter
Thanks Mark, I want to avoid modifying the files in $CATALINA_HOME. But it seems that in this case the CLASSPATH has to be modified, to unzip the property file there, because unzipping to the common class loader dirtectory does not work. So I appended

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Stephanie Wullbieter
I mean what did not work was adding common.loader=${catalina.home}/lib,${catalina.home}/lib/*.jar,${catalina.base}/lib,${catalina.base}/lib/*.jar to $CATALINA_BASE/conf/catalina.properties and unzipping the SystemInfo.properties from $CATALINA_HOME/server/lib/catalina.jar to

Re: Problems with LoadBalancing

2009-03-13 Thread Rainer Jung
On 13.03.2009 10:54, Toni Menendez Lopez wrote: Here is the trace with the error, from mod_jk.log with DEBUG mode, but I suspect where is the error... The thing is that I have 2 workers working one for JBOSS (MCDP) and one for TOMCAT(izonetv), and the thing is that in the call I do redirect

RE: JSESSIONID hijacking

2009-03-13 Thread Pieter Temmerman
However, as the jsessionid URL rewriting is defined in the servlet specification, I would expect this to be secure. Why, out of interest? I don't know. It just seemed way to easy to hijack a session, so I supposed it must be secure. It's completely normal. Other frameworks have exactly

RE: JSESSIONID hijacking

2009-03-13 Thread Peter Crowther
From: Pieter Temmerman [mailto:ptemmerman@sadiel.es] I don't know. It just seemed way to easy to hijack a session, so I supposed it must be secure. Large portions of the web architecture are insecure by their original design. This makes security in web-based systems... erm.. a challenge

Re: JSESSIONID hijacking

2009-03-13 Thread Zaki Akhmad
2009/3/13 zhaoxueqing zhaoxueq...@g-data.com.cn: jsessionid is the only way to indentity the user logined. if you get it ,you are this user. but? we can check others , for example IP! But we can *still* do IP spoofing. Any other better recomendation? This issue is one of my concern also. --

Re: JSESSIONID hijacking

2009-03-13 Thread Joseph Millet
Just a word about associating a given session to one IP address, it works alright and sure is a security enhancement - not sure though if there are built-in support for that in tomcat though it can be implemented at application layer. The major drawback of doing so depends of your user's ISP IPs

RE: JSESSIONID hijacking

2009-03-13 Thread Peter Crowther
From: Zaki Akhmad [mailto:zakiakh...@gmail.com] 2009/3/13 zhaoxueqing zhaoxueq...@g-data.com.cn: jsessionid is the only way to indentity the user logined. if you get it ,you are this user. but? we can check others , for example IP! Difficult, depending on your environment. Some ISPs run

Re: Path problem

2009-03-13 Thread David Smith
popprem wrote: Hi, I'v really stuck with an issue. I have done a web program using struts framework. I have a plugin class there for which i have to pass a configuration file as parameter. That file is in webapps/Myapp/WEB-INF/ directory. So i mentioned relative path as

RE: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Caldarale, Charles R
From: Stephanie Wullbieter [mailto:swu...@gmx.de] Subject: Re: howto clear Tomcat 6.0 ServerInfo.properties ? I would appreciate not to change anything in $CATALINA_HOME, but the CLASSPATH is unset in catalina.sh as You know... That's because setting CLASSPATH for Tomcat is pretty much

RE: Path problem

2009-03-13 Thread Caldarale, Charles R
From: popprem [mailto:popp...@gmail.com] Subject: Path problem David answered the critical part of your question, but I thought I'd take a crack at the rest. That means tomcat defaultly points to bin directory Tomcat doesn't defaultly [sic] point to anything. The current directory of the

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Markus Schönhaber
Caldarale, Charles R: You still haven't explained why you think it's necessary to update ServerInfo.properties at all. If you want to differentiate multiple Tomcat instances, the value of ${catalina.base} would seem to suffice. My guess would be that she wants to hide Tomcat version

RE: Cofiguring tomcat for trial certificate by trusted authorities like verisign not working.

2009-03-13 Thread Caldarale, Charles R
From: Bhuvanesh Pattanashetti [mailto:bhuva...@gmail.com] Subject: Re: Cofiguring tomcat for trial certificate by trusted authorities like verisign not working. - no i m not using keystore. snip I have generated the keystore using keytool. Please reconcile the above two statements.

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Markus Schönhaber
Stephanie Wullbieter: I mean what did not work was adding common.loader=${catalina.home}/lib,${catalina.home}/lib/*.jar,${catalina.base}/lib,${catalina.base}/lib/*.jar to $CATALINA_BASE/conf/catalina.properties and unzipping the SystemInfo.properties from

RE: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Caldarale, Charles R
From: Markus Schönhaber [mailto:tomcat-us...@list-post.mks-mail.de] Subject: Re: howto clear Tomcat 6.0 ServerInfo.properties ? My guess would be that she wants to hide Tomcat version information from Tomcat's error pages. Then setting the server attribute of the Connector element and

Re: [OT] RE: Max Number of users

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/12/2009 11:24 AM, Gregor Schneider wrote: www.tele-underwriting.de Aw, you don't even give major version number for Apache httpd. Netcraft will be so sad :( Generator: 10 fingers and some brain Cute. - -chris -BEGIN PGP

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Stephanie Wullbieter
Thanks Markus, setting common.loader=${catalina.base}/lib,${catalina.base}/lib/*.jar,${catalina.home}/lib,${catalina.home}/lib/*.jar and unzipping to ${catalina.base}/lib did solve it. Greetings, Stephanie Original-Nachricht Datum: Fri, 13 Mar 2009 14:32:20 +0100 Von:

Servlet mapping issue

2009-03-13 Thread Sergio Arrighi
Hello to everyone, I've developed a tree menu which uses a Servlet and AJAX posts. I've exported it as a jar and now I want to include it in another webapp. The problem is that this webapp cannot reach the servlet obviously because it's not mapped in web.xml. Here's my question Is it

Re: sqljdbc, integrated sql server authentication and multiple webapps - only the first app can connect

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephan, On 3/10/2009 5:07 AM, Stephan Steiner wrote: The first application to make a connection to the database succeeds in doing so and it will have access to the DB until I stop it (or stop tomcat). The second app to try and access the database

Re: Fwd: Cookie not being set

2009-03-13 Thread André Warnier
Andromeda Mobile wrote: Thanks guys for your help. By moving the jsp include to the head of the document I was able to get the set cookie working so it was to do with the fact that the cookie needed to be sent before any other output was streamed. Just my didactic streak at play : Think of it

Re: Lazy Virtual Hosting?

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 3/10/2009 9:27 PM, Caldarale, Charles R wrote: From: Gregor Schneider [mailto:rc4...@googlemail.com] Subject: Re: Lazy Virtual Hosting? However, since I'll have to use Authentication (see my other post), thus needing SSL, I guess I

RE: Servlet mapping issue

2009-03-13 Thread Caldarale, Charles R
From: Sergio Arrighi [mailto:sergio.arri...@iminholding.com] Subject: Servlet mapping issue Here's my question Is it possible to add a servlet mapping which points directly to the servlet contained in the .jar file of my tree menu? Well... yes. Servlet mapping is explained in the

Re: [OT] RE: Max Number of users

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 2:59 PM, Christopher Schultz ch...@christopherschultz.net wrote: Generator: 10 fingers and some brain Cute. I do have the copyright on that one, however, I put it under the GPL - ooops - did I say GPL? I mean Apache License 2.0 ;) Regds Gregor -- just

Re: j_security_check SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/10/2009 5:44 PM, Gregor Schneider wrote: Mark, On Tue, Mar 10, 2009 at 8:23 PM, Mark Thomas ma...@apache.org wrote: Ditch FORM auth, use DIGEST. I'm afraid I don't see how to combine DIGEST with a Login-form - and that's a

Re: j_security_check SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 3/10/2009 3:24 PM, Caldarale, Charles R wrote: From: Gregor Schneider [mailto:rc4...@googlemail.com] Subject: j_security_check SSL is there any way to achieve encryption for the Login-process without a valid SSL-cert? Note that if

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Markus Schönhaber
Caldarale, Charles R: From: Markus Schönhaber My guess would be that she wants to hide Tomcat version information from Tomcat's error pages. Then setting the server attribute of the Connector element and providing custom error pages would seem to be a whole lot easier and more robust.

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
From: Ken Bowen [mailto:kbo...@als.com] Subject: Re: Tomcat for Dummies I believe (but do not know -- Chuck, Mark??) that Tomcat essentially creates a (new or recycled) thread in which to run contextDestroyed . Looks like it's actually the thread that processes the request for the Tomcat

Re: Cofiguring tomcat for trial certificate by trusted authorities like verisign not working.

2009-03-13 Thread Bhuvanesh Pattanashetti
Ohh i was sorry for the above two statement. :( I m using the keystore. (Keytool) and i m not using APR. thanks. Bhuvan On Fri, Mar 13, 2009 at 7:00 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Bhuvanesh Pattanashetti [mailto:bhuva...@gmail.com] Subject: Re:

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/11/2009 6:33 AM, André Warnier wrote: And if it asks to undeploy itself, is it not like pulling the carpet from under its own feet? It's more like asking a parent to pull the rug, but, yes, that's basically what you're doing. I mean,

Re: j_security_check SSL

2009-03-13 Thread André Warnier
Hi guys. I'm following this loosely, along with some other threads. There is another one going on right now which also talks about authentication, hijacking JSESSIONID etc.. Gregor, what is not very clear to me, and maybe you want to do a wrapup, is what exactly you are - and are not - trying

tcnative-1.dll

2009-03-13 Thread Markov.Yanko
Hi, all How can I tell for sure that tcnative-1.dll is used by tomcat ? System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll used is 1.1.12 Tomcat is started as a service. File tcnative-1.dll is placed in directory mentioned within -Djava.library.path =... in registry. If

RE: tcnative-1.dll

2009-03-13 Thread Ilya Kazakevich
Check your stdout (or catalina.out), it should have something like org.apache.coyote.http11.Http11AprProtocol init. Http11AprProtocol means you use APR, Http11Protocol -- no. -Original Message- From: markov.ya...@neftochim.bg [mailto:markov.ya...@neftochim.bg] Sent: Friday, March

RE: tcnative-1.dll

2009-03-13 Thread Jorge Medina
Check catalina.out (or whatever file your Tomcat is logging to). I get the following in Unix when not using the APR, you should get a similar message in Windows or a message indicating that the APR was found and loaded. INFO: The APR based Apache Tomcat Native library which allows optimal

Re: Servlet mapping issue

2009-03-13 Thread Sergio Arrighi
Hi! Thanks for the really quick answer. It's probabily something really basic to do, but I'm a newbie and I'm not able to do it: I have an application (lets call it APP1) and it's organized like this: APP1 - WEB-INF +++ lib . myJar.jar (contains the package

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, I think it will help to give you perl analogies to everything. Here goes. On 3/11/2009 6:00 AM, André Warnier wrote: - we have a JVM This is the 'perl' binary. - inside the JVM, we have a Tomcat This is the perl script you're executing.

Re: j_security_check SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 10:38 AM, André Warnier wrote: Unless I am mistaken, I don't think that using HTTPS in order to protect the user-id/password from eavesdropping by some miscreant, you necessarily have to have a Verisign certificate for each

Re: Lazy Virtual Hosting?

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 3:18 PM, Christopher Schultz ch...@christopherschultz.net wrote: Another potential reason for using separate Connectors is to (somewhat) guarantee availability of each of your webapps. If you have an Executor with 100 threads available, a single webapp('s users)

Re: Servlet mapping issue

2009-03-13 Thread Gregor Schneider
What's in your access-log? Rgds Gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 - To

Re: Tomcat 6.x Proxy Authentication

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex, On 3/11/2009 9:03 AM, Alexander Diedler wrote: We have a Tomcat Application, which has to communicate through a Proxy Server with authentication. Should be the authentication done in the Java Class or it is possible to configure Tomcat for

RE: tcnative-1.dll

2009-03-13 Thread Caldarale, Charles R
From: markov.ya...@neftochim.bg [mailto:markov.ya...@neftochim.bg] Subject: tcnative-1.dll If it's not in this directory there is a warning in stdout.log(which is the only one used for logging). (can't find... tcnative-1.dll... ), but when it's placed in the directory, there is no

Re: tcnative-1.dll

2009-03-13 Thread Markus Schönhaber
markov.ya...@neftochim.bg: How can I tell for sure that tcnative-1.dll is used by tomcat ? System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll used is 1.1.12 Tomcat is started as a service. File tcnative-1.dll is placed in directory mentioned within -Djava.library.path

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Tomcat for Dummies You can even restart the manager app Nit picking: probably not. It looks like the manager app does all the work of starting and stopping other webapps, so there doesn't appear to be any threads

Re: Servlet mapping issue

2009-03-13 Thread David Smith
Sergio Arrighi wrote: Hi! Thanks for the really quick answer. It's probabily something really basic to do, but I'm a newbie and I'm not able to do it: I have an application (lets call it APP1) and it's organized like this: APP1 - WEB-INF +++ lib .

Re: j_security_check SSL

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 3:26 PM, Christopher Schultz ch...@christopherschultz.net wrote: Just to be clear, it's the session creation that is sensitive to SSL, not the actual login (authentication step). If your session exists and is visible to non-secure communications before

RE: Servlet mapping issue

2009-03-13 Thread Caldarale, Charles R
From: Sergio Arrighi [mailto:sergio.arri...@iminholding.com] Subject: Re: Servlet mapping issue When I try my application and I click on the button which make an AJAX post request on this servlet the browser returns an error (404 not found) For initial testing, take AJAX out of the

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
Hi. I hadn't had a chance yet to thank the various people here for having the patience and persistence to explain to this dummy what must be rather evident to experts. I do so now, profusely. It was very informative and rather clear. I also gather that some of the details were not necessarily so

Re: Servlet mapping issue

2009-03-13 Thread André Warnier
Sergio Arrighi wrote: [...] Thanks for the info you put here. That was very clear, if even I understand. When I try my application and I click on the button which make an AJAX post request on this servlet the browser returns an error (404 not found) I think what you need to provide

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
Christopher Schultz wrote: Er... does that help? Yes, a lot. It even answers a large part of the question I just posted again. I just don't like your disparaging tone about perl. You know, we perl guys can also do threads, just as we can also do OO stuff. We can also do strict; we can even

Re: j_security_check SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/13/2009 11:42 AM, Gregor Schneider wrote: So would following scenario work? - login using form-based login via https - when successful: HttpSession session = request.getSession(); // guess that shoudln't happen if

RE: Tomcat for Dummies

2009-03-13 Thread Peter Crowther
[I seem to be getting very delayed emails from the list; if this has already been answered, ignore me!] From: André Warnier [mailto:a...@ice-sa.com] suppose there are 3 active servlets (processing requests) at the moment the request to undeploy is issued by one of them. The servlet issuing

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 12:04 PM, André Warnier wrote: As a consequence, Tomcat no longer accepts new requests for that webapp, and starts the process of stopping it and undeploying it. If the webapp defined a ServletContextListener, this thing 's

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 3/13/2009 11:34 AM, Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Tomcat for Dummies You can even restart the manager app Nit picking: probably not. It looks like the

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 12:05 PM, André Warnier wrote: I just don't like your disparaging tone about perl. Oh, sorry. I wasn't trying to be negative. Actually, I quite like Perl. I'm always the one who gets beat up (verbally) at geek parties when

Re: Apache/mod_jk serves random files from tomcat

2009-03-13 Thread SQ
Hi Rainer, Thanks for the reply. Answers to your questions below, Rainer Jung-3 wrote: Jus to make sure, we are talking about the same kind of observation: could you please describe independently, how the observed problem looks like in your case? In development, the developers are

Re: Tomcat for Dummies

2009-03-13 Thread Ken Bowen
Interestingthanks Chuck Ken On Mar 13, 2009, at 10:33 AM, Caldarale, Charles R wrote: From: Ken Bowen [mailto:kbo...@als.com] Subject: Re: Tomcat for Dummies I believe (but do not know -- Chuck, Mark??) that Tomcat essentially creates a (new or recycled) thread in which to run

Re: Problems with LoadBalancing

2009-03-13 Thread Rainer Jung
On 13.03.2009 14:08, Toni Menendez Lopez wrote: The behaviour is the one that I explained in the first mail, that when I stop one of the servers, I ahve very huge delays to respond to the requests of the session that were managed by this server. OK. After reading documentation I think that

Re: Apache/mod_jk serves random files from tomcat

2009-03-13 Thread Rainer Jung
On 13.03.2009 17:50, SQ wrote: Rainer Jung-3 wrote: Just to make sure, we are talking about the same kind of observation: could you please describe independently, how the observed problem looks like in your case? In development, the developers are getting other people pages. So user1

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
From: Peter Crowther [mailto:peter.crowt...@melandra.com] Subject: RE: Tomcat for Dummies Or does one have to implement in each servlet some kind of callback routine that the ContextDestroy can call ? That works too. Not really. From the API spec for contextDestroyed(): All servlets

Re: Apache/mod_jk serves random files from tomcat

2009-03-13 Thread Rainer Jung
On 13.03.2009 18:14, Rainer Jung wrote: Not sure the answer to that. Both were installed by other people, who either don't recall their orgins, or are no longer employed here. I'm working on building the 1.2.27 from source right now. We're x86, not sparc, by the way. OK. For Solaris x86 we

Re: [OT] Tomcat for Dummies

2009-03-13 Thread André Warnier
Christopher Schultz wrote: Oh, sorry. As you certainly surmised, I wasn't being serious, and was in fact fishing for some reaction. Perl is a write-only language (meaning that nobody can ever read a perl script after the fact). I like that one. Let me offer another one, popular in perl

Re: Too many threads

2009-03-13 Thread Alexey Vlasov
On Wed, Mar 11, 2009 at 06:25:08PM -0400, Christopher Schultz wrote: But i've got one question left, can I set idle timeout for the thread TP-Processor, after which they will die? I think you have to use an Executor for that. See http://tomcat.apache.org/tomcat-6.0-doc/config/executor.html

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
Caldarale, Charles R wrote: From: Peter Crowther [mailto:peter.crowt...@melandra.com] Subject: RE: Tomcat for Dummies Or does one have to implement in each servlet some kind of callback routine that the ContextDestroy can call ? That works too. Not really. From the API spec for

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
André Warnier wrote: Caldarale, Charles R wrote: From: Peter Crowther [mailto:peter.crowt...@melandra.com] Subject: RE: Tomcat for Dummies Or does one have to implement in each servlet some kind of callback routine that the ContextDestroy can call ? That works too. Not really. From the

Re: j_security_check SSL

2009-03-13 Thread Gregor Schneider
Hi André, first: Please forgive me my late answer also to your PM, however, I was really busy here so that I didn't find any time to answer in an appropriate (aka detailed) manner. So here we go: Customers When talking about customers, I'm actually talking about our staff from

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Tomcat for Dummies Now, do I understand this wrong You do understand it wrong. the running servlets A servlet doesn't run; threads run, executing code in servlets. are not being notified in any way that the application is

Re: j_security_check SSL

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 5:14 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/13/2009 11:42 AM, Gregor Schneider wrote: So would following scenario work? - login using form-based login via https - when

Re: Tomcat for Dummies

2009-03-13 Thread Edward Bicker
This is a Fantastic request for Info. I am relieved to know there are some folks that can still frame a question in such a way to be a pleasure to read. Thanks, Ed -Original Message- From: André Warnier a...@ice-sa.com Sent: Mar 13, 2009 12:04 PM To: Tomcat Users List

Re: Tomcat for Dummies

2009-03-13 Thread David kerber
Edward Bicker wrote: This is a Fantastic request for Info. I am relieved to know there are some folks that can still frame a question in such a way to be a pleasure to read. Thanks, Ed Obviously the answerers agree; look at how much more detailed and useful the responses are!! Some of

Re: Path problem

2009-03-13 Thread David.Meldrum
I still have questions about the path to a file. {This is within a servlet... actually in my case I am trying to read/write from a ContextListenr} I understand that just opening a FIle will be relative to where Tomcat was started. Is there a simple java method (and on what class) that will

RE: Path problem

2009-03-13 Thread Caldarale, Charles R
From: David.Meldrum [mailto:david.meld...@verizon.net] Subject: Re: Path problem actually in my case I am trying to read/write from a ContextListenr It's generally a bad idea to ever *write* into the webapp deployment space. You have no guarantee that the space is writable, nor that the

Re: Path problem

2009-03-13 Thread André Warnier
Caldarale, Charles R wrote: [...] It's generally a bad idea to ever *write* into the webapp deployment space. You have no guarantee that the space is writable, nor that the container will provide any write access. You're much better off writing to files outside of Tomcat's directory

Re: Path problem

2009-03-13 Thread Gregor Schneider
Or the war-file doesn't get unpacked, but the app is started from within the war, and the ressource is inside the war. And please note the difference: It's not Class.getRessourceAsStream(), but ServletContext.getRessourceAsStream(); So in your example: ServletContext sctx =

Re: Path problem

2009-03-13 Thread Gregor Schneider
...and please forgive me all my typos Rgds Gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371

Re: Path problem

2009-03-13 Thread David.Meldrum
OK, I agree about writing, but what about reading? I guess I didn't realize there was a method called getResourcesStream(), on ServletContext, so that clears up some confusion. Yet when I read the javadoc on ServletContext.getRessourceAsStream() see:

Testando entrada no grupo

2009-03-13 Thread siomara
Olá pessoal, Estou tentando entrar no grupo. Alguém pode por favor responder para eu ver se consegui. Obrigada Siomara

Re: JSESSIONID hijacking

2009-03-13 Thread H. Hall
Pieter Temmerman wrote: Hi list. I've got an issue which I would like to share with you guys. My webapp requires a user to login, which on his turn creates a session for that user. Now, when I browse my webapp the address bar shows the current URL with a JSESSIONID. Let's say:

Re: Testando entrada no grupo

2009-03-13 Thread silvio.ce...@unigranrio.edu.br
Boa tarde, Sim, você agora é membro da Tomcat Users List users@tomcat.apache.org Yes, now you are member of Tomcat Users List users@tomcat.apache.org Att, Silvio Cesar L. dos Santos DTI - Divisão de Tecnologia da Informação/Analista de Redes Pleno UNIGRANRIO - Universidade do Grande Rio +55 21

Re: [OT] Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 1:25 PM, André Warnier wrote: But for instance the following kind of snippet, while undoubtedly looking simple and elegant to any confirmed Java servlet programmer, in the eyes of this beholder is not any better :

Re: Testando entrada no grupo

2009-03-13 Thread Bruno Vilardo
Hey Siomara, Welcome to the forum Seja bem vinda Cheers, Bruno On Fri, Mar 13, 2009 at 3:36 PM, siom...@portosdobrasil.gov.br wrote: Olá pessoal, Estou tentando entrar no grupo. Alguém pode por favor responder para eu ver se consegui. Obrigada Siomara

Re: Problems with LoadBalancing

2009-03-13 Thread Toni Menendez Lopez
OK, now is all clear for me So it is better not to use sticky_session_force=True, OK, is my actual configuration so Now is the question : If I don´t have this sticky_session_force=True , what happen with the requests of a session of a server which for any reason have switched off. I mean,

Re: j_security_check SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/13/2009 1:58 PM, Gregor Schneider wrote: So will I then be able to access the HttpSession-object created when inside HTTPS (login-page) when I'm querying it from within a JSP served via plain HTTP? No, the session will be created in

tomcat database connection pool

2009-03-13 Thread Carol Cheung
Hi, In tomcat 5.5, the database connection pool associated with my application does not seem to shutdown when I undeploy the application. All the postgres processes are still in existence. (ps -ef | grep postgres) Can anyone provide some insight as to why clean up of the connection pool is not

Re: tomcat database connection pool

2009-03-13 Thread Edoardo Panfili
Il 13-03-2009 22:37, Carol Cheung ha scritto: Hi, In tomcat 5.5, the database connection pool associated with my application does not seem to shutdown when I undeploy the application. All the postgres processes are still in existence. (ps -ef | grep postgres) Can anyone provide some insight as

RE: Path problem

2009-03-13 Thread Caldarale, Charles R
From: David.Meldrum [mailto:david.meld...@verizon.net] Subject: Re: Path problem For example, how do I get a reference to the /webapps/MyWebApp/WEB-INF/foo.properties file? Gregor already told you here: http://marc.info/?l=tomcat-userm=123697177925016w=2

Code/Design Mapping in Tomcat

2009-03-13 Thread Michael Vitousek
Greetings, First of all, this isn't a question about how to use Tomcat, but rather a research question about its architecture, so if this should be going to a different mailing list, please let me know. From working over the documentation available online and in the Tomcat javadocs,

RE: tomcat database connection pool

2009-03-13 Thread Caldarale, Charles R
From: Carol Cheung [mailto:cache...@consumercontact.com] Subject: tomcat database connection pool In tomcat 5.5, the database connection pool associated with my application does not seem to shutdown when I undeploy the application. You don't say if the DBCP is managed by the container

RE: Code/Design Mapping in Tomcat

2009-03-13 Thread Caldarale, Charles R
From: Michael Vitousek [mailto:mvito...@willamette.edu] Subject: Code/Design Mapping in Tomcat if there are any gross violations or omissions here please let me know where I should look. You left out the Service layer; it should go between Server and Engine. Connectors belong to a

Extending JNDI

2009-03-13 Thread Ron McNulty
Hello I am running Apache Jetspeed Portal server (which sits on top of Tomcat) as a development platform. We then deploy portlets to Websphere portal server for production. One area of incompatibility that I would like to fix is JNDI branches. Tomcat provides the standard java:comp/env/

Problem starting Tomcat in Netbeans

2009-03-13 Thread Carlos Botto
Sorry for bothering the list with the same problem again, but this problem has became a nightmare at this point. Bundled Tomcat 5.5.17 on Netbeans is not starting and I'm getting the following error: *SEVERE: Parse error in default web.xml java.lang.NullPointerException* at

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Ron McNulty
Hi Carlos This line looks odd? Why are there asterisks around it? *servlet-classorg.apache.jasper.servlet.JspServlet/servlet-class* Regards Ron - Original Message - From: Carlos Botto carl...@qualitau.com To: Tomcat Users List users@tomcat.apache.org Sent: Saturday, March 14,

Re: tomcat database connection pool

2009-03-13 Thread Filip Hanik - Dev Lists
don't forget the best mail archive browser that I have encountered *http://tinyurl.com/blhhks* Real URL:

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Carlos Botto
Hi Ron, There are no * in the code, those in the email were put on purpose to underline the 18th. line. Thanks Carlos Ron McNulty wrote: Hi Carlos This line looks odd? Why are there asterisks around it? *servlet-classorg.apache.jasper.servlet.JspServlet/servlet-class* Regards Ron

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Ron McNulty
Hi Carlos The error is coming from Digester, whose job in life is simply to parse XML files and read them into objects. Have you opened web.xml with a hex editor and checked for non-ascii characters? Regards Ron - Original Message - From: Carlos Botto carl...@qualitau.com To:

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Carlos Botto
Ron, I did it. Also I deleted the line and typed it again. Thanks Carlos Ron McNulty wrote: Hi Carlos The error is coming from Digester, whose job in life is simply to parse XML files and read them into objects. Have you opened web.xml with a hex editor and checked for non-ascii

  1   2   >