Re: RE: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread l...@bsoft.com.cn
good question.lol l...@bsoft.com.cn From: Kim Ming Yap Date: 2015-05-19 06:23 To: Tomcat Users List Subject: RE: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve I think Tomcat should provide interfaces for different scenarios .. that's my

Re: how to block the duplicated requests?

2015-05-19 Thread David kerber
On 5/19/2015 1:03 AM, javalishixml wrote: Thanks a lot for your information. This solution is based on tomcat level. If I always handle this issue at java level, I'm afraid it has performance issue. Because this web site afford a very big concurrency access. Taking a consideration on its

Re:Re: how to block the duplicated requests?

2015-05-19 Thread javalishixml
I doubt you're going to be able to do this in httpd, unless you have a very simple, straight forward way of identifying the robots. Yes. I just want to have a way to block the duplicated requests at httpd level. After all, my website has to face the the big concurrency issue. At

Re: how to block the duplicated requests?

2015-05-19 Thread David kerber
On 5/19/2015 7:53 AM, javalishixml wrote: I doubt you're going to be able to do this in httpd, unless you have a very simple, straight forward way of identifying the robots. Yes. I just want to have a way to block the duplicated requests at httpd level. After all, my website has to face

Re:Re: how to block the duplicated requests?

2015-05-19 Thread javalishixml
Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our page may contains several keep-alive connections. But the attack connection only focus on connection. Based on these 2 items, we think the

what are directories created

2015-05-19 Thread Dave H
I have lucee (coldfusion) and tomcat7 setup on a windows server 2008r2. I have a wildcard DNS pointing to the server so any subdomain will forward to main site. for example bob.mydomain.com will forward to mydomain.com via the wildcard DNS entry. My question is when I go to the site in this

Re:Re: how to block the duplicated requests?

2015-05-19 Thread prabhu
Hi On Tuesday 19/05/2015 at 20:10, javalishixml wrote: Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our page may contains several keep-alive connections. But the attack connection only

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Sanaullah
so where did you specify your Apr lib path for tomcat? you can set the Apr lib path in setenv.sh in tomcat bin folder JAVA_OPTS=$JAVA_OPTS -Djavax.net.debug=all CATALINA_OPTS=-Djava.library.path=/usr/lib/x86_64-linux-gnu/apr/lib you should verify the path and restart the tomcat again also may be

RE: Problem with APR library - Tomcat 7

2015-05-19 Thread Dejan Stamenov
I have wrote in the message before, I have specified it at: /usr/lib/x86_64-linux-gnu. In this folder, I can see libapr-1.so, libapr-1.so.0.5.1. and libarputil-1.so.0.5.3 too. About the Tomcat /bin folder, it doesn't exist on my Tomcat path: /etc/tomcat7. Should I create it, including the file

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dejan, On 5/19/15 9:31 AM, Dejan Stamenov wrote: First, I have downloaded the APR library from here: http://apache.sunsite.ualberta.ca/apr/apr-1.5.2.tar.gz . Following this tutorial:

Re: how to block the duplicated requests?

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 5/19/15 8:09 AM, javalishixml wrote: Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our page may contains

Re: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ming Yap, (Please let me know if I'm using your given name properly... you haven't identified yourself in the body of your messages, so I only have your email address for identification purposes. I wouldn't want to be calling you by the wrong

RE: Problem with APR library - Tomcat 7

2015-05-19 Thread Dejan Stamenov
Hello Chris, First, I have downloaded the APR library from here: http://apache.sunsite.ualberta.ca/apr/apr-1.5.2.tar.gz . Following this tutorial: http://www.techsww.com/tutorials/libraries/apr/installation/installing_apache_portable_runtime_library_on_ubuntu_linux.php , I have installed

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dejan, On 5/19/15 9:45 AM, Dejan Stamenov wrote: I have wrote in the message before, I have specified it at: /usr/lib/x86_64-linux-gnu. In this folder, I can see libapr-1.so, libapr-1.so.0.5.1. and libarputil-1.so.0.5.3 too. How about

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dejan, On 5/18/15 4:15 PM, Dejan Stamenov wrote: I am sure I need the APR connector as I need to specify my server certificate, my private key and also a chain of other certificates that signed my server certificate. I haven't found any other

Re: how to block the duplicated requests?

2015-05-19 Thread David kerber
On 5/19/2015 8:09 AM, javalishixml wrote: Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our page may contains several keep-alive connections. But the attack connection only focus on

RE: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread Kim Ming Yap
You said .. Actually, the better analogy is that there is an application that can tell you whether or not 1+1=2, and you're asking it to explain why the numbers they entered don't total up to 2 when a user account is disabled after exceeded limits retry .. i couldn't display account

Re: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread David kerber
On 5/19/2015 10:26 AM, Kim Ming Yap wrote: Sorry .. you can call me Kim. Yes. I know Mark suggested a custom authenticator .. but how would it help me? The basic thing which i need is simple. In the login module, i need access to session, request objects .. How can having a custom

Re: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread Mark Thomas
On 19/05/2015 15:51, David kerber wrote: On 5/19/2015 10:46 AM, Kim Ming Yap wrote: You said .. Actually, the better analogy is that there is an application that can tell you whether or not 1+1=2, and you're asking it to explain why the numbers they entered don't total up to 2 when a

RE: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread Kim Ming Yap
Sorry .. you can call me Kim. Yes. I know Mark suggested a custom authenticator .. but how would it help me? The basic thing which i need is simple. In the login module, i need access to session, request objects .. How can having a custom authenticator help me? What i need is a simple API in

Re: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread David kerber
On 5/19/2015 10:46 AM, Kim Ming Yap wrote: You said .. Actually, the better analogy is that there is an application that can tell you whether or not 1+1=2, and you're asking it to explain why the numbers they entered don't total up to 2 when a user account is disabled after exceeded limits

RE: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve

2015-05-19 Thread Kim Ming Yap
ok. i see the light .. Thanks a zillion!  Date: Tue, 19 May 2015 15:56:47 +0100 From: ma...@apache.org To: users@tomcat.apache.org Subject: Re: Tomcat valve JAAS : form error page displayed first before response reaches back to Tomcat valve On 19/05/2015 15:51, David kerber wrote: On

Re: how to block the duplicated requests?

2015-05-19 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 5/19/15 8:09 AM, javalishixml wrote: Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our

RE: Problem with APR library - Tomcat 7

2015-05-19 Thread Dejan Stamenov
Maybe I have messed up really bad, so I can't solve it now. I will start over with this, can you tell me if this are the steps I need to do for it to work: install libapr1-devinstall tcnativeWill I need to make that specific .sh file in the Tomcat /bin directory after I have done these 2 steps?

RE: Problem with APR library - Tomcat 7

2015-05-19 Thread Dejan Stamenov
Hello Mark, I have installed the native library from the links you provided, but still I got the same error: http://prntscr.com/76ycyo How does it come after installing the native library, still can't find the APR library? Date: Mon, 18 May 2015 11:07:29 +0100 From: ma...@apache.org To:

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Sanaullah
I think in ubuntu/Debian, you can create the file in /usr/share/tomcat7/bin/setenv.sh but still you have to explore, as i am not using the deb package for tomcat installation On Tue, May 19, 2015 at 6:58 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED

RE: Problem with APR library - Tomcat 7

2015-05-19 Thread Dejan Stamenov
The output of the ls's below is No such file or directory on all of them. It is strange, cause I made make make install after the ./configuration was done. Also, I have just installed the libapr1 package, should I do the tcnative configuration and install again? Date: Tue, 19 May 2015

Nginx as a proxy...

2015-05-19 Thread Bjørn T Johansen
I have a small problem using nginx as a reverse proxy in front of Tomcat 8.. The problem is that sometimes the context url is set to the local ip address of the tomcat server instead of the hostname used to access the nginx server. And I know this can be solved by using proxyname and proxypost

Re: how to block the duplicated requests?

2015-05-19 Thread Andr?? Warnier
David kerber wrote: On 5/19/2015 8:09 AM, javalishixml wrote: Just understood you. Really appreciate for your feedback. How do we judge it's a robot? item1: we find the request IP is always the same one. item2: our page may contains several keep-alive connections. But the attack connection

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dejan, On 5/19/15 10:06 AM, Dejan Stamenov wrote: The output of the ls's below is No such file or directory on all of them. It is strange, cause I made make make install after the ./configuration was done. What was the output of make make

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dejan, On 5/19/15 11:58 AM, Dejan Stamenov wrote: Maybe I have messed up really bad, so I can't solve it now. I will start over with this, can you tell me if this are the steps I need to do for it to work: install libapr1-devinstall

RE: Problem with APR library - Tomcat 7

2015-05-19 Thread Dejan Stamenov
Hey Chris, Can you please explain me these two lines you have wrote: $ openssl pkcs12 -export -in ${HOSTNAME}.crt \ -inkey ${HOSTNAME}.key \ -certfile CA-intermediate.crt -out ${HOSTNAME}.p12 -chain $

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dejan, On 5/19/15 2:17 PM, Dejan Stamenov wrote: Can you please explain me these two lines you have wrote: $ openssl pkcs12 -export -in ${HOSTNAME}.crt \ -inkey ${HOSTNAME}.key \ -certfile CA-intermediate.crt -out ${HOSTNAME}.p12 -chain

Setting Access Logs in Tomcat

2015-05-19 Thread Jins Raju Abraham
Where do we define the files to be retained in apache. Thanks Jins - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Problem with APR library - Tomcat 7

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dejan, On 5/19/15 2:08 PM, Christopher Schultz wrote: Dejan, On 5/19/15 11:58 AM, Dejan Stamenov wrote: Maybe I have messed up really bad, so I can't solve it now. I will start over with this, can you tell me if this are the steps I need to

Re: Setting Access Logs in Tomcat

2015-05-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jins, On 5/19/15 3:04 PM, Jins Raju Abraham wrote: Where do we define the files to be retained in apache. Sorry... what? What files? Retained where? Apache what? - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v2 Comment: GPGTools -

RE: Problem with APR library - Tomcat 7

2015-05-19 Thread Dejan Stamenov
Thank you Chris for both the replies. By tomorrow I will reply what I have done. Need the night to look deeper into things and see where I am making mistakes and if I can solve my issue with your replies. :) -Original Message- From: Christopher Schultz

RE: Setting Access Logs in Tomcat

2015-05-19 Thread Caldarale, Charles R
From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: Setting Access Logs in Tomcat On 5/19/15 3:04 PM, Jins Raju Abraham wrote: Where do we define the files to be retained in apache. Sorry... what? What files? Retained where? Apache what? The OP should