SSO

2014-03-23 Thread Brosh, Yossi

Hi to all ,

I am trying to install SSO on Linux machine with Tomcat in order to working 
with Jenkins without the needed to login, any idea ?

Thanks a lot ,
Yos



Re: SSO

2014-03-23 Thread André Warnier

Brosh, Yossi wrote:

Hi to all ,

I am trying to install SSO on Linux machine with Tomcat in order to working 
with Jenkins without the needed to login, any idea ?



http://www.catb.org/esr/faqs/smart-questions.html ?


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Apache Tomcat Version 6.0.39 , config SSO on Linux machine (SUSE 11.3 )

2014-03-23 Thread Brosh, Yossi

Hi to all ,

I am trying to install SSO on Linux machine (SUSE 11.3 )with Apache Tomcat 
Version 6.0.39  in order to working with Jenkins without the needed to login, 
any idea ?

Thanks a lot ,
Yos



Re: [Bug 56301] Websockets not working after 8.0.0-RC10

2014-03-23 Thread Cyril Auburtin
Thanks man you bombed my thread, from which I was already not expecting a
lot of answers, but well anyway..


2014-03-23 3:31 GMT+01:00 Hardik Vaishnav hardikvaish...@gmail.com:

 Here is the example of what I am trying to do.

 JBoss Webserver Private IP : 192.168.10.100
 JBoss Webserver Public IP 172.x.x.x

 Server connected to Jboss: 192.168.10.101  192.168.10.102

 If I am on the Jboss machine I can access 192.168.10.101\abc\test.html
 If I am outside the network its not possible to access URL
 192.168.10.101\abc\test.html

 To solve the problem I have PAC file as a proxy for my browser which
 redirect all request for 192.168.10.101 address to apache httpd proxy
 server which sits inside the (192.168.x.x) network.

 Upto this point everything works OK. Request comes to Apache httpd server
 but it is not able to pass the url as is to 192.168.10.101\abc\test.html
 and return the response back to the client.

 thanks,
 -Hardik





 On Sat, Mar 22, 2014 at 3:15 PM, Cyril Auburtin cyril.aubur...@gmail.com
 wrote:

  Hi, thanks for your reply
 
  please see https://issues.apache.org/bugzilla/attachment.cgi?id=31426with
  the tomcat 8.0.1 (http://search.maven.org/#browse%7C-317025378)
  and https://issues.apache.org/bugzilla/attachment.cgi?id=31427 with
 tomcat
  8.0.0-RC10
 
  There's clearly a reply in the latter case.
 
  the version is the only thing changed between the 2 screenshots, I
  carefully did mvn clean too
  the code is here https://github.com/n11/mongo-cli-java it runs very
 simply
  with tomcat embedded that you may know well
 
 
  2014-03-22 19:20 GMT+01:00 Mark Thomas ma...@apache.org:
 
   On 22/03/2014 16:17, Cyril Auburtin wrote:
Hi, this issue concerns the tomcat-embed server, (likely also the
  normal
tomcat server)
after version 8.0.1, websockets can't be estblished like before.
   
I tried from a simple websocket example (standard java websocket
implemented in tomcat8
http://www.oracle.com/technetwork/articles/java/jsr356-1937161.html)
and noticed it from my project https://github.com/n11/mongo-cli-java
 ,
working untill apache version 8.0.0-RC10 (see pom.xml)
   
It seems there's a breaking change between 8.0.0-RC10 and 8.0.1
   
screenshot:
 https://issues.apache.org/bugzilla/attachment.cgi?id=31423
  
   Which indicates your WebSocket request received a 404 response so this
   isn't a WebSocket problem at all.
  
   Mark
  
  
   -
   To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
   For additional commands, e-mail: users-h...@tomcat.apache.org
  
  
 



Re: help with setting up proxy

2014-03-23 Thread Hassan Schroeder
On Sat, Mar 22, 2014 at 7:32 PM, Hardik Vaishnav
hardikvaish...@gmail.com wrote:

 Upto this point everything works OK. Request comes to Apache httpd server
 but it is not able to pass the url as is to 192.168.10.101\abc\test.html
 and return the response back to the client.

Apparently you missed my point -- this mailing list has nothing to do
with Apache httpd server, only the Apache Tomcat servlet container.

That said, when you *do* find an appropriate venue for your question
you'll be better off including the relevant part of your configuration file(s)
showing the proxy settings you've tried, and a better problem description
than it is not able to ..., e.g. log file entries, browser message, etc.

Good luck!
-- 
Hassan Schroeder  hassan.schroe...@gmail.com
http://about.me/hassanschroeder
twitter: @hassan

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



RE: SSO

2014-03-23 Thread Martin Gainty
When you say Linux I assume you are implementing Red Hat Enterprise Linux SSO


https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/sso-ov.html


Martin 
__ 
Please do not alter or disrupt this email transmission...Thank You

  



 From: yossi.br...@sap.com
 To: users@tomcat.apache.org
 Subject: SSO
 Date: Sun, 23 Mar 2014 07:37:41 +
 
 
 Hi to all ,
 
 I am trying to install SSO on Linux machine with Tomcat in order to working 
 with Jenkins without the needed to login, any idea ?
 
 Thanks a lot ,
 Yos
 
  

RE: help with setting up proxy

2014-03-23 Thread Martin Gainty
  


 From: hardikvaish...@gmail.com
 Date: Sat, 22 Mar 2014 22:32:11 -0400
 Subject: Re: help with setting up proxy
 To: users@tomcat.apache.org
 
 Here is the example of what I am trying to do.
 
 JBoss Webserver Private IP : 192.168.10.100
 JBoss Webserver Public IP 172.x.x.x
 
 Server connected to Jboss: 192.168.10.101  192.168.10.102
 
 If I am on the Jboss machine I can access 192.168.10.101\abc\test.html
 If I am outside the network its not possible to access URL
 192.168.10.101\abc\test.html
 
 To solve the problem I have PAC file as a proxy for my browser which
 redirect all request for 192.168.10.101 address to apache httpd proxy
 server which sits inside the (192.168.x.x) network.
 
 Upto this point everything works OK. Request comes to Apache httpd server
 but it is not able to pass the url as is to 192.168.10.101\abc\test.html
 and return the response back to the client.

MG192.168.10.101 is only known to the machines obtaining their IP from that 
DHCP router 
MGThe router dynamically assigns 192.168.x.x to that machine at that point in 
time
MGNo machine outside that routers network would ever know about those dynamic 
IPs
MGThis is a Network issue... please contact your Net Admin

 thanks,
 -Hardik
 
 
 On Sat, Mar 22, 2014 at 2:04 PM, Hardik Vaishnav
 hardikvaish...@gmail.comwrote:
 
  Sorry my bad. I am talking about Apache httpd server.
 
 
  On Mar 22, 2014 12:29 PM, Hassan Schroeder hassan.schroe...@gmail.com
  wrote:
 
  On Sat, Mar 22, 2014 at 9:18 AM, Hardik Vaishnav
  hardikvaish...@gmail.com wrote:
 
   I am trying to configure Apache Tomcat as a proxy server.
 
   I hope I am not confusing everybody.
 
  I think perhaps you are confusing yourself. Tomcat has no intrinsic
  proxy server capability to configure. Are you thinking of the Apache
  httpd server?
 
  --
  Hassan Schroeder  hassan.schroe...@gmail.com
  http://about.me/hassanschroeder
  twitter: @hassan
 
  -
  To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
  For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
  

RE: Effects of turning off sendFile in the NIO connector

2014-03-23 Thread Martin Gainty


  


 Date: Sat, 22 Mar 2014 14:24:01 -0400
 Subject: Effects of turning off sendFile in the NIO connector
 From: tomcat.ran...@gmail.com
 To: users@tomcat.apache.org
 
 What effect would setting useSendfile=false have on a web application using
 the NIO connector? I'm asking because I may want to use gzip compression in
 the connector. The docs state:
 
 *There is a tradeoff between using compression (saving your bandwidth) and
 using the sendfile feature (saving your CPU cycles). If the connector
 supports the sendfile feature, e.g. the NIO connector, using sendfile will
 take precedence over compression. The symptoms will be that static files
 greater that 48 Kb will be sent uncompressed.*
 
 It's trivial that adding compression uses CPU cycles, but does that imply
 that turning sendFile off even without enabling compression would increase
 CPU cycles? It's worth mentioning that the site serves a large (8mg) SWF
 file. I believe that was one of the pluses of NIO/sendFile, that it was
 good with sending large files under heavy traffic?

MGwhen you enable sendfile support with request attr  
org.apache.tomcat.sendfile.support = true
MGYou will need to set these 3 header attributes

org.apache.tomcat.sendfile.filename: Canonical filename of the file which will 
be sent as a String 
org.apache.tomcat.sendfile.start: Start offset as a Long 
org.apache.tomcat.sendfile.end: End offset as a Long 
MGhtitps://tomcat.apache.org/tomcat-6.0-doc/aio.html 

MGCompression:
MGset compression=on @ Connector
MGhttps://tomcat.apache.org/tomcat-7.0-doc/config/http.html

MGI did not read that TC cannot use sendfile with any compressed Stream?
MGcan you show us the URL?
MGThanks

 We also only really need compression on XML data, the site has minimal
 HTML, SWF's don't really benefit from gzip and some binary data we send
 back and forth is already compressed. I could manually implement
 compression on XML at the application level and within the SWF, if turning
 off sendFile will have negative consequences.
 
 Tomcat 7.0.42
 RHEL6
 ~4T outbound traffic/day
 
 Best,
 John
  

Re: Effects of turning off sendFile in the NIO connector

2014-03-23 Thread John Smith


 MGwhen you enable sendfile support with request attr
  org.apache.tomcat.sendfile.support = true
 MGYou will need to set these 3 header attributes

 org.apache.tomcat.sendfile.filename: Canonical filename of the file which
 will be sent as a String
 org.apache.tomcat.sendfile.start: Start offset as a Long
 org.apache.tomcat.sendfile.end: End offset as a Long
 MGhtitps://tomcat.apache.org/tomcat-6.0-doc/aio.html

 MGCompression:
 MGset compression=on @ Connector
 MGhttps://tomcat.apache.org/tomcat-7.0-doc/config/http.html

 MGI did not read that TC cannot use sendfile with any compressed Stream?
 MGcan you show us the URL?
 MGThanks

  We also only really need compression on XML data, the site has minimal
  HTML, SWF's don't really benefit from gzip and some binary data we send
  back and forth is already compressed. I could manually implement
  compression on XML at the application level and within the SWF, if
 turning
  off sendFile will have negative consequences.
 
  Tomcat 7.0.42
  RHEL6
  ~4T outbound traffic/day
 
  Best,
  John



Your first link refers to using sendFile for asynchronous writes from a
servlet. Any servlet can instruct Tomcat to perform a sendfile call by
setting the appropriate request attributes. Your answer is not accurate. I
don't need to do anything explicitly with the headers. You should look at
the documentation regarding the HTTP NIO Connector - which you already have
as the second link in your reply. It discusses sendFile and compression,
and how you cannot use both the NIO connector and compression if sendFile
is on (on is the default).


Re: Effects of turning off sendFile in the NIO connector

2014-03-23 Thread Mark Thomas
On 23/03/2014 19:37, John Smith wrote:

 We also only really need compression on XML data, the site has minimal
 HTML, SWF's don't really benefit from gzip and some binary data we send
 back and forth is already compressed. I could manually implement
 compression on XML at the application level and within the SWF, if
 turning
 off sendFile will have negative consequences.

 Tomcat 7.0.42
 RHEL6
 ~4T outbound traffic/day

 Best,
 John

John

The consequences for disabling sendFile are extremely hard to quantify
as there are so many variables. I would normally expect there to be more
CPU load but how much more? No idea. It might be impossible to detect,
it might leaver your CPUs pegged at 100%.

The only way you will know for sure for your application is to test it
with your application.

Mark

P.S. As you've probably figured out having been Martined, the best
location for any response from Martin Gainty is /dev/null. I keep
debating dropping him from the list as he causes far more harm than
good. A topic for a separate thread I think.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: SSO

2014-03-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Brosh,

On 3/23/14, 3:37 AM, Brosh, Yossi wrote:
 I am trying to install SSO on Linux machine with Tomcat in order
 to working with Jenkins without the needed to login, any idea ?

Lots of ideas. What have you tried so far?

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=YRZA
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Apache Tomcat Version 6.0.39 , config SSO on Linux machine (SUSE 11.3 )

2014-03-23 Thread André Warnier

Brosh, Yossi wrote:

Hi to all ,

I am trying to install SSO on Linux machine (SUSE 11.3 )with Apache Tomcat 
Version 6.0.39  in order to working with Jenkins without the needed to login, 
any idea ?


Yos,

Better. At least now you are giving some versions..  There is hope.
But still :

http://lmgtfy.com/?q=jenkins+sso

I am not trying to brush you off or to be snappy.
But people here are volunteers who try to help others, using their own 
freely-given time.
So the least you could do is be somewhat specific about what you want to do, in what 
environment, what you have already searched and found and looked at, what part of the 
relevant tomcat on-line documentation (such as : 
http://tomcat.apache.org/tomcat-6.0-doc/config/host.html#Single%20Sign%20On) have you read 
and do you not understand, and why for example none of the links provided by the simple 
search above fits your needs.

We're not really here to do your homework, as in any ideas ?.
As Chris already mentioned, we have many, and we could collectively probably write a book 
or two about Tomcat SSO (but not about Jenkins, which has its own users support list).

So what precisely do you want to know ?



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Effects of turning off sendFile in the NIO connector

2014-03-23 Thread John Smith

 John

 The consequences for disabling sendFile are extremely hard to quantify
 as there are so many variables. I would normally expect there to be more
 CPU load but how much more? No idea. It might be impossible to detect,
 it might leaver your CPUs pegged at 100%.

 The only way you will know for sure for your application is to test it
 with your application.

 Mark

 P.S. As you've probably figured out having been Martined, the best
 location for any response from Martin Gainty is /dev/null. I keep
 debating dropping him from the list as he causes far more harm than
 good. A topic for a separate thread I think.



Mark,

Thanks for the answer. As suggested, I'll test it and see what
happens...kind of figured I'd have to do that :)

Appreciate the heads-up on MG. I was wondering why the answer seemed
off.

Best,
Alec