Re: org.apache.jasper.JasperException: The absolute uri: http://java.sun.com/jsp/jstl/core cannot be resolved in either web.xml or the jar files deployed with this application

2009-03-13 Thread Gmail User
Thanks, David. I must have cut a corner something or was trying too many things at the same time. I had some tomcat5 and tomcat6 .rpm installation left over. So I cleaned those up and then started over with a clean binary distro of Tomcat 6.0.18 .gz. It works now (I had new faith to try again, si

Re: org.apache.jasper.JasperException: The absolute uri: http://java.sun.com/jsp/jstl/core cannot be resolved in either web.xml or the jar files deployed with this application

2009-03-13 Thread David Smith
A couple more suggestions ... 1. Make sure your web.xml file uses the servlet version 2.4 or later schema (supported in tomcat 5.0 and later) 2. Make sure your jstl.jar and standard.jar are from version 1.1 of the standard and jstl taglibs Post the real, earliest log files related to your request

Re: org.apache.jasper.JasperException: The absolute uri: http://java.sun.com/jsp/jstl/core cannot be resolved in either web.xml or the jar files deployed with this application

2009-03-13 Thread David Smith
I'm guessing there's another error regarding a problem with header.jsp. You didn't include the exception in your subject in the details below so it's anyone's guess. I can say that from at least tomcat 5.5 onwards, you don't need to add anything to web.xml to use the tag libs in standard.jar and

Re: Code/Design Mapping in Tomcat

2009-03-13 Thread Michael Vitousek
Thanks a lot; I'll add that one in. From the javadocs, it looks like there should be a dependency from the Service layer to the Server as well as vice versa, so I'll include that as well. I don't have a lot of direct experience working with Tomcat, so I'm most concerned that there could be impo

RE: tomcat database connection pool

2009-03-13 Thread Martin Gainty
http://publib.boulder.ibm.com/infocenter/wasinfo/v6r0/index.jsp?topic=/com.ibm.websphere.express.doc/info/exp/ae/udat_conpoolset.html keep your reap time low keep unused_timeout low keep aged_timeout low keep Connection Timeout low feel free to assign Maximum Connections from default 10.. but n

org.apache.jasper.JasperException: The absolute uri: http://java.sun.com/jsp/jstl/core cannot be resolved in either web.xml or the jar files deployed with this application

2009-03-13 Thread Gmail User
OK, perhaps someone can help me figure this one out before I go bald. I am, yet again, attempting to upgrade my existing app from Tomcat 5.5.15 to Tomcat 6.0.18. Everything worked alright under Tomcat 5.5.15, however for Tomcat 6, I had to make sure that appBase != docBase. Still, I cannot resolve

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Carlos Botto
Ron, I already did what you suggest. I created errors on purpose on that file and got a different error. What it's interesting is that I created some errors below the line 18 and it changed the error message and error line. This the computer where I develop and I run bundled Tomcat for debuggin

Re: Path problem

2009-03-13 Thread David Smith
To demystify things: 1. ServletContext.getResourceAsStream("/path/inside/webapp.blah") returns an object that supports the java.io.InputStream stream interface. After you get the stream, you can treat it like any other input stream in the java world. 2. The path is rooted in the *webapp*, not th

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Ron McNulty
Hi Carlos If your Tomcat is starting OK from its normal /bin/startup.sh or /bin/startup.bat script, then there is nothing wrong with your web.xml file. So that suggests Netbeans is not using that web.xml, or is doing something really strange (Setting CATALINA_HOME wrongly?). I would try putt

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Carlos Botto
Ron, I did it. Also I deleted the line and typed it again. Thanks Carlos Ron McNulty wrote: Hi Carlos The error is coming from Digester, whose job in life is simply to parse XML files and read them into objects. Have you opened web.xml with a hex editor and checked for non-ascii charact

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Ron McNulty
Hi Carlos The error is coming from Digester, whose job in life is simply to parse XML files and read them into objects. Have you opened web.xml with a hex editor and checked for non-ascii characters? Regards Ron - Original Message - From: "Carlos Botto" To: "Tomcat Users List" S

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Carlos Botto
Hi Ron, There are no * in the code, those in the email were put on purpose to underline the 18th. line. Thanks Carlos Ron McNulty wrote: Hi Carlos This line looks odd? Why are there asterisks around it? *org.apache.jasper.servlet.JspServlet* Regards Ron - Original Message -

Re: tomcat database connection pool

2009-03-13 Thread Filip Hanik - Dev Lists
don't forget the best mail archive browser that I have encountered *http://tinyurl.com/blhhks* Real URL: http://tomcat.markmail.org/search/?q=How%20to%20close%20open%20connections%20after%20application%20stop#query:How%20to%20close%20open%20connections%20after%20application%20stop%20list%3Aorg.a

Re: Problem starting Tomcat in Netbeans

2009-03-13 Thread Ron McNulty
Hi Carlos This line looks odd? Why are there asterisks around it? *org.apache.jasper.servlet.JspServlet* Regards Ron - Original Message - From: "Carlos Botto" To: "Tomcat Users List" Sent: Saturday, March 14, 2009 11:43 AM Subject: Problem starting Tomcat in Netbeans Sorry for

Problem starting Tomcat in Netbeans

2009-03-13 Thread Carlos Botto
Sorry for bothering the list with the same problem again, but this problem has became a nightmare at this point. Bundled Tomcat 5.5.17 on Netbeans is not starting and I'm getting the following error: *SEVERE: Parse error in default web.xml java.lang.NullPointerException* at org.apache.t

Extending JNDI

2009-03-13 Thread Ron McNulty
Hello I am running Apache Jetspeed Portal server (which sits on top of Tomcat) as a development platform. We then deploy portlets to Websphere portal server for production. One area of incompatibility that I would like to fix is JNDI branches. Tomcat provides the standard java:comp/env/ branch

RE: Code/Design Mapping in Tomcat

2009-03-13 Thread Caldarale, Charles R
> From: Michael Vitousek [mailto:mvito...@willamette.edu] > Subject: Code/Design Mapping in Tomcat > > if there are any gross violations or omissions here please > let me know where I should look. You left out the Service layer; it should go between Server and Engine. Connectors belong to a S

RE: tomcat database connection pool

2009-03-13 Thread Caldarale, Charles R
> From: Carol Cheung [mailto:cache...@consumercontact.com] > Subject: tomcat database connection pool > > In tomcat 5.5, the database connection pool associated with > my application does not seem to "shutdown" when I undeploy > the application. You don't say if the DBCP is managed by the cont

Code/Design Mapping in Tomcat

2009-03-13 Thread Michael Vitousek
Greetings, First of all, this isn't a question about how to use Tomcat, but rather a research question about its architecture, so if this should be going to a different mailing list, please let me know. From working over the documentation available online and in the Tomcat javadocs, I've

RE: Path problem

2009-03-13 Thread Caldarale, Charles R
> From: David.Meldrum [mailto:david.meld...@verizon.net] > Subject: Re: Path problem > > For example, how do I get a reference to the > "/webapps/MyWebApp/WEB-INF/foo.properties" file? Gregor already told you here: http://marc.info/?l=tomcat-user&m=123697177925016&w=2 > ServletContext.getResso

Re: tomcat database connection pool

2009-03-13 Thread Edoardo Panfili
Il 13-03-2009 22:37, Carol Cheung ha scritto: Hi, In tomcat 5.5, the database connection pool associated with my application does not seem to "shutdown" when I undeploy the application. All the "postgres" processes are still in existence. (ps -ef | grep postgres) Can anyone provide some insight

tomcat database connection pool

2009-03-13 Thread Carol Cheung
Hi, In tomcat 5.5, the database connection pool associated with my application does not seem to "shutdown" when I undeploy the application. All the "postgres" processes are still in existence. (ps -ef | grep postgres) Can anyone provide some insight as to why clean up of the connection pool is no

Re: j_security_check & SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/13/2009 1:58 PM, Gregor Schneider wrote: > So will I then be able to access the HttpSession-object created when > inside HTTPS (login-page) when I'm querying it from within a JSP > served via plain HTTP? No, the session will be created i

Re: Problems with LoadBalancing

2009-03-13 Thread Toni Menendez Lopez
OK, now is all clear for me So it is better not to use sticky_session_force=True, OK, is my actual configuration so Now is the question : If I don´t have this sticky_session_force=True , what happen with the requests of a session of a server which for any reason have switched off. I mean,

Re: Testando entrada no grupo

2009-03-13 Thread Bruno Vilardo
Hey Siomara, Welcome to the forum Seja bem vinda Cheers, Bruno On Fri, Mar 13, 2009 at 3:36 PM, wrote: > Olá pessoal, > > Estou tentando entrar no grupo. Alguém pode por favor responder para eu ver > se consegui. > > Obrigada > > Siomara >

Re: [OT] Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 1:25 PM, André Warnier wrote: > But for instance the following kind of snippet, while undoubtedly > looking simple and elegant to any confirmed Java servlet programmer, in > the eyes of this beholder is not any better : > > this

Re: Testando entrada no grupo

2009-03-13 Thread silvio.ce...@unigranrio.edu.br
Boa tarde, Sim, você agora é membro da Tomcat Users List Yes, now you are member of Tomcat Users List Att, Silvio Cesar L. dos Santos DTI - Divisão de Tecnologia da Informação/Analista de Redes Pleno UNIGRANRIO - Universidade do Grande Rio +55 21 2672-7720 silvio.ce...@unigranrio.edu.br http:

Re: JSESSIONID hijacking

2009-03-13 Thread H. Hall
Pieter Temmerman wrote: Hi list. I've got an issue which I would like to share with you guys. My webapp requires a user to login, which on his turn creates a session for that user. Now, when I browse my webapp the address bar shows the current URL with a JSESSIONID. Let's say: http://testweb/t

Testando entrada no grupo

2009-03-13 Thread siomara
Olá pessoal, Estou tentando entrar no grupo. Alguém pode por favor responder para eu ver se consegui. Obrigada Siomara

Re: Path problem

2009-03-13 Thread David.Meldrum
OK, I agree about writing, but what about reading? I guess I didn't realize there was a method called getResourcesStream(), on ServletContext, so that clears up some confusion. Yet when I read the javadoc on ServletContext.getRessourceAsStream() see: http://java.sun.com/j2ee/sdk_1.3/techdocs/

Re: Path problem

2009-03-13 Thread Gregor Schneider
...and please forgive me all my typos Rgds Gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 -

Re: Path problem

2009-03-13 Thread Gregor Schneider
Or the war-file doesn't get unpacked, but the app is started from within the war, and the ressource is inside the war. And please note the difference: It's not Class.getRessourceAsStream(), but ServletContext.getRessourceAsStream(); So in your example: ServletContext sctx = event.getServletCont

Re: Path problem

2009-03-13 Thread André Warnier
Caldarale, Charles R wrote: [...] It's generally a bad idea to ever *write* into the webapp deployment space. You have no guarantee that the space is writable, nor that the container will provide any write access. You're much better off writing to files outside of Tomcat's directory structu

RE: Path problem

2009-03-13 Thread Caldarale, Charles R
> From: David.Meldrum [mailto:david.meld...@verizon.net] > Subject: Re: Path problem > > actually in my case I am trying to read/write from a > ContextListenr It's generally a bad idea to ever *write* into the webapp deployment space. You have no guarantee that the space is writable, nor that

Re: Path problem

2009-03-13 Thread David.Meldrum
I still have questions about the path to a file. {This is within a servlet... actually in my case I am trying to read/write from a ContextListenr} I understand that just opening a FIle will be relative to where Tomcat was started. Is there a simple java method (and on what class) that will g

Re: Tomcat for Dummies

2009-03-13 Thread David kerber
Edward Bicker wrote: This is a Fantastic request for Info. I am relieved to know there are some folks that can still frame a question in such a way to be a pleasure to read. Thanks, Ed Obviously the answerers agree; look at how much more detailed and useful the responses are!! Some of thi

Re: Tomcat for Dummies

2009-03-13 Thread Edward Bicker
This is a Fantastic request for Info. I am relieved to know there are some folks that can still frame a question in such a way to be a pleasure to read. Thanks, Ed -Original Message- >From: André Warnier >Sent: Mar 13, 2009 12:04 PM >To: Tomcat Users List >Subject: Re: Tomcat for Dumm

Re: j_security_check & SSL

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 5:14 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Gregor, > > On 3/13/2009 11:42 AM, Gregor Schneider wrote: >> So would following scenario work? >> >> - login using form-based login via https >> >> - when successful: >>    Ht

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
> From: André Warnier [mailto:a...@ice-sa.com] > Subject: Re: Tomcat for Dummies > > Now, do I understand this wrong You do understand it wrong. > the running servlets A servlet doesn't "run"; threads run, executing code in servlets. > are not being notified in any way that the application

Re: j_security_check & SSL

2009-03-13 Thread Gregor Schneider
Hi André, first: Please forgive me my late answer also to your PM, however, I was really busy here so that I didn't find any time to answer in an appropriate (aka detailed) manner. So here we go: Customers When talking about customers, I'm actually talking about our staff from t

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
André Warnier wrote: Caldarale, Charles R wrote: From: Peter Crowther [mailto:peter.crowt...@melandra.com] Subject: RE: Tomcat for Dummies Or does one have to implement in each servlet some kind of callback routine that the ContextDestroy can call ? That works too. Not really. From the AP

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
Caldarale, Charles R wrote: From: Peter Crowther [mailto:peter.crowt...@melandra.com] Subject: RE: Tomcat for Dummies Or does one have to implement in each servlet some kind of callback routine that the ContextDestroy can call ? That works too. Not really. From the API spec for contextDest

Re: Too many threads

2009-03-13 Thread Alexey Vlasov
On Wed, Mar 11, 2009 at 06:25:08PM -0400, Christopher Schultz wrote: >> But i've got one question left, can I set idle timeout for >> the thread TP-Processor, after which they will die? > > I think you have to use an for that. See > http://tomcat.apache.org/tomcat-6.0-doc/config/executor.html for

Re: [OT] Tomcat for Dummies

2009-03-13 Thread André Warnier
Christopher Schultz wrote: > Oh, sorry. As you certainly surmised, I wasn't being serious, and was in fact fishing for some reaction. Perl is a "write-only" language (meaning that nobody can ever read a perl script after the fact). I like that one. Let me offer another one, popular in perl g

Re: Apache/mod_jk serves random files from tomcat

2009-03-13 Thread Rainer Jung
On 13.03.2009 18:14, Rainer Jung wrote: Not sure the answer to that. Both were installed by other people, who either don't recall their orgins, or are no longer employed here. I'm working on building the 1.2.27 from source right now. We're x86, not sparc, by the way. OK. For Solaris x86 we neve

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
> From: Peter Crowther [mailto:peter.crowt...@melandra.com] > Subject: RE: Tomcat for Dummies > > > Or does one have to implement in each servlet some > > kind of callback routine that the ContextDestroy can call ? > > That works too. Not really. From the API spec for contextDestroyed(): "All

Re: Apache/mod_jk serves random files from tomcat

2009-03-13 Thread Rainer Jung
On 13.03.2009 17:50, SQ wrote: Rainer Jung-3 wrote: Just to make sure, we are talking about the same kind of observation: could you please describe independently, how the observed problem looks like in your case? In development, the developers are getting other people pages. So user1 request

Re: Problems with LoadBalancing

2009-03-13 Thread Rainer Jung
On 13.03.2009 14:08, Toni Menendez Lopez wrote: The behaviour is the one that I explained in the first mail, that when I stop one of the servers, I ahve very huge delays to respond to the requests of the session that were managed by this server. OK. After reading documentation I think that pr

Re: Tomcat for Dummies

2009-03-13 Thread Ken Bowen
Interestingthanks Chuck Ken On Mar 13, 2009, at 10:33 AM, Caldarale, Charles R wrote: From: Ken Bowen [mailto:kbo...@als.com] Subject: Re: Tomcat for Dummies I believe (but do not know -- Chuck, Mark??) that Tomcat essentially creates a (new or recycled) thread in which to run contex

Re: Apache/mod_jk serves random files from tomcat

2009-03-13 Thread SQ
Hi Rainer, Thanks for the reply. Answers to your questions below, Rainer Jung-3 wrote: > > Jus to make sure, we are talking about the same kind of observation: > could you please describe independently, how the observed problem looks > like in your case? > In development, the developers ar

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 12:05 PM, André Warnier wrote: > I just don't like your disparaging tone about perl. Oh, sorry. I wasn't trying to be negative. Actually, I quite like Perl. I'm always the one who gets beat up (verbally) at geek parties when peopl

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 3/13/2009 11:34 AM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: Tomcat for Dummies >> >> You can even restart the manager app > > Nit picking: probably not. It looks like t

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 12:04 PM, André Warnier wrote: > As a consequence, Tomcat no longer accepts new requests for that > webapp, and starts the process of stopping it and undeploying it. If > the webapp defined a ServletContextListener, this "thing" '

RE: Tomcat for Dummies

2009-03-13 Thread Peter Crowther
[I seem to be getting very delayed emails from the list; if this has already been answered, ignore me!] > From: André Warnier [mailto:a...@ice-sa.com] > suppose there are 3 active > servlets (processing requests) at the moment the request to > undeploy is > issued by one of them. The servlet iss

Re: j_security_check & SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/13/2009 11:42 AM, Gregor Schneider wrote: > So would following scenario work? > > - login using form-based login via https > > - when successful: >HttpSession session = request.getSession(); >// guess that shoudln't happen >

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
Christopher Schultz wrote: Er... does that help? Yes, a lot. It even answers a large part of the question I just posted again. I just don't like your disparaging tone about perl. You know, we perl guys can also "do threads", just as we can also "do OO stuff". We can also "do strict"; we can e

Re: Servlet mapping issue

2009-03-13 Thread André Warnier
Sergio Arrighi wrote: [...] Thanks for the info you put here. That was very clear, if even I understand. When I try my application and I click on the button which make an AJAX post request on this servlet the browser returns an error (404 not found) I think what you need to provide here,

Re: Tomcat for Dummies

2009-03-13 Thread André Warnier
Hi. I hadn't had a chance yet to thank the various people here for having the patience and persistence to explain to this dummy what must be rather evident to experts. I do so now, profusely. It was very informative and rather clear. I also gather that some of the details were not necessarily so

RE: Servlet mapping issue

2009-03-13 Thread Caldarale, Charles R
> From: Sergio Arrighi [mailto:sergio.arri...@iminholding.com] > Subject: Re: Servlet mapping issue > > When I try my application and I click on the button which > make an AJAX post request on this servlet the browser returns > an error (404 not found) For initial testing, take AJAX out of the

Re: j_security_check & SSL

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 3:26 PM, Christopher Schultz wrote: > > Just to be clear, it's the session creation that is sensitive to SSL, > not the actual login (authentication step). If your session exists and > is visible to non-secure communications before authentication, then it > will als

Re: Servlet mapping issue

2009-03-13 Thread David Smith
Sergio Arrighi wrote: > Hi! > Thanks for the really quick answer. > It's probabily something really basic to do, but I'm a newbie and I'm > not able to do it: > I have an application (lets call it APP1) and it's organized like this: > > APP1 > - WEB-INF > +++ lib >

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Tomcat for Dummies > > You can even restart the manager app Nit picking: probably not. It looks like the manager app does all the work of starting and stopping other webapps, so there doesn't appear to be any thre

Re: tcnative-1.dll

2009-03-13 Thread Markus Schönhaber
markov.ya...@neftochim.bg: > How can I tell for sure that tcnative-1.dll is used by tomcat ? > System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll used > is 1.1.12 > Tomcat is started as a service. > File tcnative-1.dll is placed in directory mentioned within > -Djava.library

RE: tcnative-1.dll

2009-03-13 Thread Caldarale, Charles R
> From: markov.ya...@neftochim.bg [mailto:markov.ya...@neftochim.bg] > Subject: tcnative-1.dll > > If it's not in this directory there is a warning in > stdout.log(which is the only one used for logging). > (can't find... tcnative-1.dll... ), but when it's placed > in the directory, there

Re: Tomcat 6.x Proxy Authentication

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex, On 3/11/2009 9:03 AM, Alexander Diedler wrote: > We have a Tomcat Application, which has to communicate through a Proxy > Server with authentication. Should be the authentication done in the Java > Class or it is possible to configure Tomcat for

Re: Servlet mapping issue

2009-03-13 Thread Gregor Schneider
What's in your access-log? Rgds Gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 - To unsubscribe

Re: Lazy Virtual Hosting?

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 3:18 PM, Christopher Schultz wrote: > Another potential reason for using separate s is to > (somewhat) guarantee availability of each of your webapps. If you have > an with 100 threads available, a single webapp('s users) can > consume all the threads and (temporar

Re: j_security_check & SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/13/2009 10:38 AM, André Warnier wrote: > Unless I am mistaken, I don't think that using HTTPS in order to protect > the user-id/password from eavesdropping by some miscreant, you > necessarily have to have a Verisign certificate for each s

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, I think it will help to give you perl analogies to everything. Here goes. On 3/11/2009 6:00 AM, André Warnier wrote: > - we have a JVM This is the 'perl' binary. > - "inside" the JVM, we have a Tomcat This is the perl script you're executin

Re: Servlet mapping issue

2009-03-13 Thread Sergio Arrighi
Hi! Thanks for the really quick answer. It's probabily something really basic to do, but I'm a newbie and I'm not able to do it: I have an application (lets call it APP1) and it's organized like this: APP1 - WEB-INF +++ lib . myJar.jar (contains the package

RE: tcnative-1.dll

2009-03-13 Thread Jorge Medina
Check catalina.out (or whatever file your Tomcat is logging to). I get the following in Unix when not using the APR, you should get a similar message in Windows or a message indicating that the APR was found and loaded. INFO: The APR based Apache Tomcat Native library which allows optimal perfor

RE: tcnative-1.dll

2009-03-13 Thread Ilya Kazakevich
Check your stdout (or catalina.out), it should have something like org.apache.coyote.http11.Http11AprProtocol init. Http11AprProtocol means you use APR, Http11Protocol -- no. -Original Message- From: markov.ya...@neftochim.bg [mailto:markov.ya...@neftochim.bg] Sent: Friday, March

tcnative-1.dll

2009-03-13 Thread Markov.Yanko
Hi, all How can I tell for sure that tcnative-1.dll is used by tomcat ? System is Windows 2003 SP2, Tomcat 5.5.20, JDK 1.5.0_11, tcnative-1.dll used is 1.1.12 Tomcat is started as a service. File tcnative-1.dll is placed in directory mentioned within -Djava.library.path =... in registry. If it'

Re: j_security_check & SSL

2009-03-13 Thread André Warnier
Hi guys. I'm following this loosely, along with some other threads. There is another one going on right now which also talks about authentication, hijacking JSESSIONID etc.. Gregor, what is not very clear to me, and maybe you want to do a wrapup, is what exactly you are - and are not - trying

Re: Tomcat for Dummies

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 3/11/2009 6:33 AM, André Warnier wrote: > And if it asks to undeploy itself, is it not like pulling the carpet > from under its own feet? It's more like asking a parent to pull the rug, but, yes, that's basically what you're doing. > I mea

Re: Cofiguring tomcat for trial certificate by trusted authorities like verisign not working.

2009-03-13 Thread Bhuvanesh Pattanashetti
Ohh i was sorry for the above two statement. :( I m using the keystore. (Keytool) and i m not using APR. thanks. Bhuvan On Fri, Mar 13, 2009 at 7:00 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Bhuvanesh Pattanashetti [mailto:bhuva...@gmail.com] > > Subject: Re: Cofi

RE: Tomcat for Dummies

2009-03-13 Thread Caldarale, Charles R
> From: Ken Bowen [mailto:kbo...@als.com] > Subject: Re: Tomcat for Dummies > I believe (but do not know -- Chuck, Mark??) that Tomcat essentially > creates a (new or recycled) thread in which to run contextDestroyed . Looks like it's actually the thread that processes the request for the Tom

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Markus Schönhaber
Caldarale, Charles R: >> From: Markus Schönhaber >> My guess would be that she wants to hide Tomcat version >> information from Tomcat's error pages. > > Then setting the server attribute of the element and providing > custom error pages would seem to be a whole lot easier and more robust. Of

Re: j_security_check & SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 3/10/2009 3:24 PM, Caldarale, Charles R wrote: >> From: Gregor Schneider [mailto:rc4...@googlemail.com] >> Subject: j_security_check & SSL >> >> is there any way to achieve encryption for the >> Login-process without a valid SSL-cert? > >

Re: j_security_check & SSL

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/10/2009 5:44 PM, Gregor Schneider wrote: > Mark, > > On Tue, Mar 10, 2009 at 8:23 PM, Mark Thomas wrote: >> >> Ditch FORM auth, use DIGEST. >> > I'm afraid I don't see how to combine DIGEST with a Login-form - and > that's a customer re

Re: [OT] RE: Max Number of users

2009-03-13 Thread Gregor Schneider
Chris, On Fri, Mar 13, 2009 at 2:59 PM, Christopher Schultz wrote: > > Generator: 10 fingers and some brain > > Cute. > I do have the copyright on that one, however, I put it under the GPL - ooops - did I say GPL? I mean Apache License 2.0 ;) Regds Gregor -- just because your paranoid, doesn'

RE: Servlet mapping issue

2009-03-13 Thread Caldarale, Charles R
> From: Sergio Arrighi [mailto:sergio.arri...@iminholding.com] > Subject: Servlet mapping issue > > Here's my question Is it possible to add a servlet mapping > which points directly to the servlet contained in the .jar file > of my tree menu? Well... yes. Servlet mapping is explained in t

Re: Lazy Virtual Hosting?

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 3/10/2009 9:27 PM, Caldarale, Charles R wrote: >> From: Gregor Schneider [mailto:rc4...@googlemail.com] >> Subject: Re: Lazy Virtual Hosting? >> >> However, since I'll have to use Authentication (see my other post), >> thus needing SSL, I g

Re: Fwd: Cookie not being set

2009-03-13 Thread André Warnier
Andromeda Mobile wrote: Thanks guys for your help. By moving the jsp include to the head of the document I was able to get the set cookie working so it was to do with the fact that the cookie needed to be sent before any other output was streamed. Just my didactic streak at play : Think of it

Re: sqljdbc, integrated sql server authentication and multiple webapps - only the first app can connect

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephan, On 3/10/2009 5:07 AM, Stephan Steiner wrote: > The first application to make a connection to the database succeeds in doing > so and it will have access to the DB until I stop it (or stop tomcat). The > second app to try and access the databa

Servlet mapping issue

2009-03-13 Thread Sergio Arrighi
Hello to everyone, I've developed a tree menu which uses a Servlet and AJAX posts. I've exported it as a jar and now I want to include it in another webapp. The problem is that this webapp cannot reach the servlet obviously because it's not mapped in web.xml. Here's my question Is it possi

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Stephanie Wullbieter
Thanks Markus, setting common.loader=${catalina.base}/lib,${catalina.base}/lib/*.jar,${catalina.home}/lib,${catalina.home}/lib/*.jar and unzipping to ${catalina.base}/lib did solve it. Greetings, Stephanie Original-Nachricht > Datum: Fri, 13 Mar 2009 14:32:20 +0100 > Von: "

Re: [OT] RE: Max Number of users

2009-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 3/12/2009 11:24 AM, Gregor Schneider wrote: > www.tele-underwriting.de Aw, you don't even give major version number for Apache httpd. Netcraft will be so sad :( Generator: 10 fingers and some brain Cute. - -chris -BEGIN PGP SIGNATUR

RE: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Caldarale, Charles R
> From: Markus Schönhaber [mailto:tomcat-us...@list-post.mks-mail.de] > Subject: Re: howto clear Tomcat 6.0 ServerInfo.properties ? > > My guess would be that she wants to hide Tomcat version > information from Tomcat's error pages. Then setting the server attribute of the element and providin

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Markus Schönhaber
Stephanie Wullbieter: > I mean what did not work was adding > > common.loader=${catalina.home}/lib,${catalina.home}/lib/*.jar,${catalina.base}/lib,${catalina.base}/lib/*.jar > > to $CATALINA_BASE/conf/catalina.properties > > and unzipping the SystemInfo.properties from > $CATALINA_HOME/server/

RE: Cofiguring tomcat for trial certificate by trusted authorities like verisign not working.

2009-03-13 Thread Caldarale, Charles R
> From: Bhuvanesh Pattanashetti [mailto:bhuva...@gmail.com] > Subject: Re: Cofiguring tomcat for trial certificate by > trusted authorities like verisign not working. > > - no i m not using keystore. > I have generated the keystore using keytool. Please reconcile the above two statements. A

Re: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Markus Schönhaber
Caldarale, Charles R: > You still haven't explained why you think it's necessary to update > ServerInfo.properties at all. If you want to differentiate multiple > Tomcat instances, the value of ${catalina.base} would seem to > suffice. My guess would be that she wants to hide Tomcat version info

RE: Path problem

2009-03-13 Thread Caldarale, Charles R
> From: popprem [mailto:popp...@gmail.com] > Subject: Path problem David answered the critical part of your question, but I thought I'd take a crack at the rest. > That means tomcat defaultly points to bin directory "Tomcat" doesn't defaultly [sic] point to anything. The current directory of

RE: howto clear Tomcat 6.0 ServerInfo.properties ?

2009-03-13 Thread Caldarale, Charles R
> From: Stephanie Wullbieter [mailto:swu...@gmx.de] > Subject: Re: howto clear Tomcat 6.0 ServerInfo.properties ? > > I would appreciate not to change anything in $CATALINA_HOME, > but the CLASSPATH is unset in catalina.sh as You know... That's because setting CLASSPATH for Tomcat is pretty muc

Re: Path problem

2009-03-13 Thread David Smith
popprem wrote: > > Hi, > > I'v really stuck with an issue. I have done a web program using struts > framework. I have a plugin class there for which i have to pass a > configuration file as parameter. That file is in webapps/Myapp/WEB-INF/ > directory. So i mentioned relative path as > ../webap

RE: JSESSIONID hijacking

2009-03-13 Thread Peter Crowther
> From: Zaki Akhmad [mailto:zakiakh...@gmail.com] > 2009/3/13 zhaoxueqing : > > > jsessionid is the only way to indentity the user logined. > > if you get it ,you are this user. > > but? we can check others , for example IP! Difficult, depending on your environment. Some ISPs run large proxy clus

Re: JSESSIONID hijacking

2009-03-13 Thread Joseph Millet
Just a word about associating a given session to one IP address, it works alright and sure is a security enhancement - not sure though if there are built-in support for that in tomcat though it can be implemented at application layer. The major drawback of doing so depends of your user's ISP IPs ma

Re: JSESSIONID hijacking

2009-03-13 Thread Zaki Akhmad
2009/3/13 zhaoxueqing : > jsessionid is the only way to indentity the user logined. > if you get it ,you are this user. > but? we can check others , for example IP! But we can *still* do IP spoofing. Any other better recomendation? This issue is one of my concern also. -- Zaki Akhmad -

RE: JSESSIONID hijacking

2009-03-13 Thread Peter Crowther
> From: Pieter Temmerman [mailto:ptemmerman@sadiel.es] > I don't know. It just seemed way to easy to hijack a session, so I > supposed it must be secure. Large portions of the web architecture are insecure by their original design. This makes security in web-based systems... erm.. "a challen

RE: JSESSIONID hijacking

2009-03-13 Thread Pieter Temmerman
> > However, as the jsessionid URL rewriting is defined in the servlet > > specification, I would expect this to be secure. > > Why, out of interest? I don't know. It just seemed way to easy to hijack a session, so I supposed it must be secure. > It's completely normal. Other frameworks have ex

  1   2   >