Re: restrict per user public_html to serve static files only...

2012-06-27 Thread André Warnier
Kim wrote: Hi, Dear all I'm using tomcat 6.0.35 on linux CentOS 5.7 using sun jdk jdk1.5.0_11. I need to enable public_html for my user but for security reason, I would like restrict the functions to serve static files only. Can anyone tell me how to do that ? Actually I can build tomcat from

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi,Andre Thanks for the advice. I do implement a Valve class to capture all the request before forwarding to actual web app. However, I can not know in advance the actual url for the servlet or JSP .. i.e. I can not know from the URI in the Valve class that the resources is static files or

how to configure Tomcat for leveraging browser caching?

2012-06-27 Thread Choudhury
Hi , I ran Google's Page Speed( https://developers.google.com/speed/pagespeed/ ) on our web app to analyze and optimize our web site . One of the many items under Web Performance Best Practices ( https://developers.google.com/speed/docs/best-practices/caching#LeverageBrowserCaching ) as

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Mikolaj Rydzewski
On 27.06.2012 06:58, Kim wrote: I'm using tomcat 6.0.35 on linux CentOS 5.7 using sun jdk jdk1.5.0_11. I need to enable public_html for my user but for security reason, I would like restrict the functions to serve static files only. Can anyone tell me how to do that ? IMO apache httpd suits

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi,Mikolaj Actually I would like to get rid of apache httpd Regards, Kim 2012/6/27 Mikolaj Rydzewski m...@ceti.pl: On 27.06.2012 06:58, Kim wrote: I'm using tomcat 6.0.35 on linux CentOS 5.7 using sun jdk jdk1.5.0_11. I need to enable public_html for my user but for security reason, I would

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread André Warnier
Regarding the style of communications : on this list, it is preferred if posters answer *below* the respective text to which they refer, not on top of the message. It makes it so much easier to follow the flow of the conversation (rather than having to scroll up and down to find the appropriate

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Andre How so ? can you explain ? After all, Tomcat itself has to know if the resource being served is a servlet or jsp page or something else, in order to serve it properly. So how come you cannot do the same ? ans : each user can have his/her own web.xml and can do whatever URL mapping in

Re: using clearReferencesStopTimerThreads value for context

2012-06-27 Thread Mark Thomas
On 27/06/2012 03:04, Supun Malinga wrote: Hi all, Say I have a webapp that don't stop all the timer threads it started upon the webapp undeploy/stop. So tomcat prints an error, The web application [/NewStratosDBAccessServlet] appears to have started a thread named [MySQL Statement

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread André Warnier
Kim wrote: Hi, Andre How so ? can you explain ? After all, Tomcat itself has to know if the resource being served is a servlet or jsp page or something else, in order to serve it properly. So how come you cannot do the same ? ans : each user can have his/her own web.xml and can do whatever URL

Re: using clearReferencesStopTimerThreads value for context

2012-06-27 Thread Supun Malinga
Hi, On Wed, Jun 27, 2012 at 1:42 PM, Mark Thomas ma...@apache.org wrote: On 27/06/2012 03:04, Supun Malinga wrote: Hi all, Say I have a webapp that don't stop all the timer threads it started upon the webapp undeploy/stop. So tomcat prints an error, The web application

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Konstantin Kolinko
2012/6/27 Kim k...@aerodrive.com: Hi, Dear all I'm using tomcat 6.0.35 on linux CentOS 5.7 using sun jdk jdk1.5.0_11. I need to enable public_html for my user but for security reason, I would like restrict the functions to serve static files only. Can anyone tell me how to do that ? Actually

multiple tomcat on same server ajp stops working

2012-06-27 Thread Pierluigi Santin Fintel
I have a situation where i have several tomcats installed on the same server (windows) Each tomcat has its own ports the first listens to 8080 ajp 8009 the second listens to 8081 ajp 8010 I have this problem running 7 tomcats from port 8080 to 8086 work fine but ajp of the first 3

RE: restrict per user public_html to serve static files only...

2012-06-27 Thread Caldarale, Charles R
From: Kim [mailto:k...@aerodrive.com] Subject: Re: restrict per user public_html to serve static files only... Please do not top-post; it's rude and annoying. each user can have his/her own web.xml and can do whatever URL mapping in web.xml to serve his/her servlet ??? You first say users

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Charles Really sorry as I'm new here. ok. here is the ans to your question - You first say users cannot have dynamic content, then state that users can have their own servlets. Both can't be true at the same time. ans : I would like to restrict the per user web application to only serve

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread André Warnier
Kim, when we ask to not top-post, here is what we mean. This is a correctly formatted version of your last message : -- start Hi, Charles Really sorry as I'm new here. 2012/6/27 Caldarale, Charles R chuck.caldar...@unisys.com: From: Kim [mailto:k...@aerodrive.com] Subject: Re: restrict per

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Kolinko Really thanks. Yes, I have hunt down to UserConfig in the source tree on Tomcat and can modify UserConfig.java to skip those user context if there exists a /WEB-INF/web.xml in their public_html directory. And I can also insert a Valve filter to skip those URL with jsp extension ...

Re: multiple tomcat on same server ajp stops working

2012-06-27 Thread Konstantin Kolinko
2012/6/27 Pierluigi Santin Fintel p.san...@fintelengineering.it: I have a situation where i have several tomcats installed on the same server (windows) Each tomcat has its own ports the first listens to 8080 ajp 8009 the second listens to 8081 ajp 8010 I have this problem running 7 tomcats

Re: restrict per user public_html to serve static files only...

2012-06-27 Thread Kim
Hi, Warnier 2012/6/27 André Warnier a...@ice-sa.com: Kim, when we ask to not top-post, here is what we mean. This is a correctly formatted version of your last message : -- start Hi, Charles Really sorry as I'm new here. 2012/6/27 Caldarale, Charles R chuck.caldar...@unisys.com:

R: multiple tomcat on same server ajp stops working

2012-06-27 Thread Pierluigi Santin Fintel
THAT'S THE ANSWER!the shutdown port of the 4th tomcat was colliding with the ajp port of the 1st tomcat and so on. Changed the ajp port to avoid this solved the problem. There was nothing in the logs . Thanks again Kostantin -Messaggio originale- Da: Konstantin Kolinko

Re: Tomcat DBCP Connection pool issue

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kiran, On 6/26/12 7:24 PM, Kiran Badi wrote: Resource name=jdbc/mysitedb auth=Container type=javax.sql.DataSource maxActive=100 maxIdle=30 maxWait=1 100 active db connections sounds like a lot. Do you really need to support 100 simultaneous

Re: how to configure Tomcat for leveraging browser caching?

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Subhrajyoti, On 6/27/12 3:16 AM, choudh...@labware.com wrote: Hi , I ran Google's Page Speed( https://developers.google.com/speed/pagespeed/ ) on our web app to analyze and optimize our web site . One of the many items under Web Performance

Re: using clearReferencesStopTimerThreads value for context

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 6/27/12 4:12 AM, Mark Thomas wrote: Getting rid of that message is simple. Fix the bug in the web application. +1 FWIW, Oracle/MySQL says that this bug has been fixed in Connector/J 5.1.11 (http://bugs.mysql.com/bug.php?id=36565). If you

Re: Failed allocating AJP message buffer

2012-06-27 Thread Pierre Ayotte
Hi everyone, Just to let you know that installing the latest release of mod_jk resolved our issue with http crashing with errors Failed allocating AJP message buffer in mod_jk.log. So we pass from 1.2.35 to 1.2.37. Regards, 2012/6/22 Pierre Ayotte pi.r.ayo...@gmail.com Hello Christopher,

Re: Failed allocating AJP message buffer

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pierre, On 6/27/12 11:36 AM, Pierre Ayotte wrote: Just to let you know that installing the latest release of mod_jk resolved our issue with http crashing with errors Failed allocating AJP message buffer in mod_jk.log. So we pass from 1.2.35 to

Re: High CPU usage in Tomcat 7

2012-06-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, On 6/20/12 12:27 PM, James Lampert wrote: We just had a report of extremely high CPU usage from the Tomcat job on one of our customer installations. A WRKACTJOB screen shot from before we forcibly shut Tomcat down and restarted it shows:

How to initiate session id change from application code?

2012-06-27 Thread Pavel Arnošt
Hi, can I force Tomcat to change session id from my application code? I know that in Tomcat7 there is a changeSessionIdOnAuthentication attribute that can be used with container managed security, but how can I protect my application from session fixation attacks if I don't use container managed

RE: How to initiate session id change from application code?

2012-06-27 Thread Martin Gainty
Good Evening Pavel Implementing a SSL Connector on Tomcat will prevent Session Fixation attack http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.htmlEz az üzenet bizalmas. Ha nem ön az akinek szánva volt, akkor kérjük, hogy jelentse azt nekünk vissza. Semmiféle továbbítása vagy másolatának

Re: Wish to use an independent class module in Tomcat

2012-06-27 Thread Terence M. Bandoian
On 1:59 PM, Cotton, Joseph B wrote: My question may be covered by the Tomcat documentation and I am just confused by all the new terminology. I have spent hours in reading and still I am looking to an answer. We wish to have a class running on Tomcat that contains system wide info and

Re: Wish to use an independent class module in Tomcat

2012-06-27 Thread Terence M. Bandoian
On 1:59 PM, Cotton, Joseph B wrote: My question may be covered by the Tomcat documentation and I am just confused by all the new terminology. I have spent hours in reading and still I am looking to an answer. We wish to have a class running on Tomcat that contains system wide info and