If there a security hardened / production ready binary distribution?

2015-07-23 Thread Jim Sellers
Hi all. Sorry if this has already been answered, but I couldn't find it. I'm looking at using tomcat in a docker container and I was wondering why there isn't a binary distribution that has most / all of the steps already done from the security how to?

restriction/limit of keystorePass in server.xml for TC7

2015-07-23 Thread Tommy Pham
Hi everyone, I know this maybe more of Java than Tomcat but in case it's coded somewhere... Anyway, is there a limit to number of characters (30 - 50) and limit to certain characters, symbols included, for the keystorePass? I only thing I can find for keystorePass limit tomcat 7 are how to setup

Re: Tomcat, REMOTE_USER, getRemoteUser()

2015-07-23 Thread John Baker
Sorry, I was reading the latest Tomcat 8.0.24 source to verify how it worked (it hasn't changed in some time it seems). The flag to which you refer is for AJP only, hence the inconsistency (as AJP becomes less common and reverse proxying HTTP becomes the norm). On Thu, Jul 23, 2015, at 08:05 PM,

TOMCAT 7 , Native CORS FILTER and Spring Security

2015-07-23 Thread Maatari Daniel Okouya
Hi,  I am using TOMCAT 7, and I have enable the CORS FILTER as per the explanation on the official website:  https://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter I use the actual configuration:  filter filter-nameCorsFilter/filter-name

Fw: TOMCAT 7 , Native CORS FILTER and Spring Security

2015-07-23 Thread Maatari Daniel Okouya
--  Maatari Daniel Okouya Sent with Airmail On July 23, 2015 at 10:49:19 AM, Maatari Daniel Okouya (okouy...@yahoo.fr) wrote: Hi,  I am using TOMCAT 7, and I have enable the CORS FILTER as per the explanation on the official website: 

Re: If there a security hardened / production ready binary distribution?

2015-07-23 Thread Mark Thomas
On 23 July 2015 15:07:01 CEST, Jim Sellers jim.sell...@gmail.com wrote: Hi all. Sorry if this has already been answered, but I couldn't find it. I'm looking at using tomcat in a docker container and I was wondering why there isn't a binary distribution that has most / all of the steps already

Re: If there a security hardened / production ready binary distribution?

2015-07-23 Thread Jim Sellers
On Thu, Jul 23, 2015 at 10:50 AM, Mark Thomas ma...@apache.org wrote: On 23 July 2015 15:07:01 CEST, Jim Sellers jim.sell...@gmail.com wrote: Hi all. Sorry if this has already been answered, but I couldn't find it. I'm looking at using tomcat in a docker container and I was wondering why

Re: Tomcat-7.0.61 and SFlow_Valve.jar issue

2015-07-23 Thread Sergey
I see that in SFlow_Valve Source code it’s already “long”: long bytes_read = (request.getCoyoteRequest()).getBytesRead(); Then what’s wrong and how can I fix this issue? Thanks! Sergey On Jul 23, 2015, at 11:52 AM, Violeta Georgieva miles...@gmail.com wrote: Hi, 2015-07-23 21:36

Re: Tomcat, REMOTE_USER, getRemoteUser()

2015-07-23 Thread Violeta Georgieva
Hi, 2015-07-23 21:54 GMT+03:00 John Baker jba...@dryfish.org.uk: Hello, I note the HTTP connector does the following when Request.getRemoteUser() is called: public String getRemoteUser() { if (userPrincipal == null) { return null; } return

Re: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-23 Thread Konstantin Kolinko
2015-07-23 11:32 GMT+03:00 Rahul Kumar Singh rahul.si...@nectechnologies.in: Dear Christopher, On further debugging, I found out the difference is seen between 6.0.32 (same behavior as in 6.0.28 reported earlier) and 6.0.33 (same as in 7.0.54 reported earlier ) I could not figure out which

Tomcat-7.0.61 and SFlow_Valve.jar issue

2015-07-23 Thread Sergey
We updated Tomcat from 7.0.10 to 7.0.61. In previous version we collected Tomcat metrics using Sflow_Valve.jar module. Now it looks like Coyote Connector can't call Request.getBytesRead() method. Here is the Catalina log error: org.apache.coyote.http11.AbstractHttp11Processor process SEVERE:

Re: confirm subscribe to users@tomcat.apache.org

2015-07-23 Thread John Baker
On Thu, Jul 23, 2015, at 07:46 PM, users-h...@tomcat.apache.org wrote: Hi! This is the ezmlm program. I'm managing the users@tomcat.apache.org mailing list. I'm working for my owner, who can be reached at users-ow...@tomcat.apache.org. To confirm that you would like

Re: Tomcat-7.0.61 and SFlow_Valve.jar issue

2015-07-23 Thread Violeta Georgieva
Hi, 2015-07-23 21:36 GMT+03:00 Sergey svin...@apple.com: We updated Tomcat from 7.0.10 to 7.0.61. In previous version we collected Tomcat metrics using Sflow_Valve.jar module. Now it looks like Coyote Connector can't call Request.getBytesRead() method. Here is the Catalina log error:

Tomcat, REMOTE_USER, getRemoteUser()

2015-07-23 Thread John Baker
Hello, I note the HTTP connector does the following when Request.getRemoteUser() is called: public String getRemoteUser() { if (userPrincipal == null) { return null; } return userPrincipal.getName(); } I understand what it's trying to do but it's not

RE: iis isapi redirect problem

2015-07-23 Thread Konstantin Preißer
Hi, -Original Message- From: Andrew Geery [mailto:andrew.ge...@gmail.com] Sent: Saturday, July 18, 2015 3:16 PM To: users@tomcat.apache.org Subject: iis isapi redirect problem I have successfully gotten Tomcat 8 to work with IIS 8.5 using these directions:

Re: Tomcat initialize SelectorContext twice when lookup for JNDI defined in web application (META-INF/context.xml)

2015-07-23 Thread Niranjan Karunanandham
Hi all On Tue, Jul 21, 2015 at 7:27 PM, Niranjan Karunanandham niranjan.k...@gmail.com wrote: Hi Tomcat Team, On Tue, Jul 21, 2015 at 4:21 PM, Konstantin Kolinko knst.koli...@gmail.com wrote: 2015-07-21 8:35 GMT+03:00 Niranjan Karunanandham niranjan.k...@gmail.com : [sending to users

RE: Tomcat 7 (7.0.54) java.lang.ClassFormatError: Truncated class file

2015-07-23 Thread Rahul Kumar Singh
Dear Konstantin, Sorry for the inconvenience caused due to the below!! We will take care this in future post. -Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Thursday, July 23, 2015 2:09 PM To: Tomcat Users List Subject: Re: Tomcat 7 (7.0.54)

RE: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-23 Thread Rahul Kumar Singh
Dear Christopher, On further debugging, I found out the difference is seen between 6.0.32 (same behavior as in 6.0.28 reported earlier) and 6.0.33 (same as in 7.0.54 reported earlier ) I could not figure out which change ( as mentioned in link

Re: Tomcat 7 (7.0.54) java.lang.ClassFormatError: Truncated class file

2015-07-23 Thread Konstantin Kolinko
2015-07-23 8:49 GMT+03:00 Rahul Kumar Singh rahul.si...@nectechnologies.in: Dear Christopher, The solution is fine, but first thing we need to identify the root cause. If it is the problem of loading a JSP-based class file. Why it is happened in production environment? Any solid reason ?

RE: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-23 Thread Rahul Kumar Singh
Dear Konstantin, On further debugging, I found out the difference is seen between 6.0.32 (same behavior as in 6.0.28 reported earlier) and 6.0.33 (same as in 7.0.54 reported earlier ) I could not figure out which change ( as mentioned in link