Re: Should Form Authentication Valve restore request body on a PUT?

read-only. When you make the DefaultServlet read-write you tell the DefaultServlet to accept uploads, and you'll probably end up overwriting your login form with the request entity (oops). -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance - Secure, Accurate

Re: Should Form Authentication Valve restore request body on a PUT?

, October 07, 2011 10:13:00 Christopher Schultz wrote: Since you're just hacking, try setting the request method to GET when you detect a PUT request that requires authentication. -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance - Secure, Accurate, Industrial

Re: Should Form Authentication Valve restore request body on a PUT?

, Charles R wrote: I'm confused. If you turn a PUT into a GET, it would seem that the request will likely be badly mishandled once the login process is complete and the original request is sent on to the target servlet/JSP. Am I missing something? - Chuck -- Nicholas Sushkin, Senior Software

Re: Should Form Authentication Valve restore request body on a PUT?

. Then, once the form is POSTed and authentication is successful, the original request whatever it may have been, should be replayed. Right? On Friday, October 07, 2011 16:07:20 Nicholas Sushkin wrote: Before being forwarded to login page, the request is saved and only then turned into GET, before

Re: Should Form Authentication Valve restore request body on a PUT?

, but it wasn't immediately obvious. forwardToLoginPage is called in all cases, but there is some difference in the way dispatcher processes the forward. Thanks. On Thursday, September 29, 2011 17:04:27 Christopher Schultz wrote: Nicholas, On 9/29/2011 3:37 PM, Nicholas Sushkin wrote: In Tomcat 6

Re: Should Form Authentication Valve restore request body on a PUT?

Sushkin wrote: Ok, traced the 403 to DefaultServlet being readonly, which is somehow relevant during login form forward. -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance - Secure, Accurate, Industrial Strength Aggregation http://www.openfinance.com smime.p7s

Re: Should Form Authentication Valve restore request body on a PUT?

https://issues.apache.org/bugzilla/show_bug.cgi?id=51940 I left all the flags at their default settings. Thanks! On Saturday, October 01, 2011 07:20:21 Mark Thomas wrote: On 30/09/2011 17:09, Nicholas Sushkin wrote: Mark, Chris, thanks for the review. Should filing a bug be my next

Re: Should Form Authentication Valve restore request body on a PUT?

when clients can expect to send data without being challenged a-priori for credentials. Another workaround would just be to use POST. -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance - Secure, Accurate, Industrial Strength Aggregation http

Re: Should Form Authentication Valve restore request body on a PUT?

change. Mark -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance - Secure, Accurate, Industrial Strength Aggregation http://www.openfinance.com smime.p7s Description: S/MIME cryptographic signature

Should Form Authentication Valve restore request body on a PUT?

()) || PUT.equalsIgnoreCase(saved.getMethod()) ) { [1] http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?view=markup#l450 -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance - Secure, Accurate, Industrial

Re: Cleaning up after tomcat jdbc-pool?

I don't think the default pool has any glaring leaks. However, your db may. I have ran into cases when Oracle would run out of PGA memory, which cleared with tomcat restart. It may help to use connection validation feature of tomcat's new pool to close connections that ran out of memory. Don't

Re: Cleaning up after tomcat jdbc-pool?

On Sunday, March 06, 2011 07:45:19 הילה wrote: Hey, i'd glad to get you help with something :] I tried to put org.apache.tomcat.jdbc.pool.DataSourceFactory but after restarting tomcat, i get the error could not load resource factory class why is that? how can I define my application to

Re: Cleaning up after tomcat jdbc-pool?

target name=-pre-dist replace dir=${build.web.dir}/WEB-INF replacefilterfile=${instance.properties}/ replace dir=${build.web.dir}/META-INF replacefilterfile=${instance.properties}/ /target -- Nicholas Sushkin, Senior Software Engineer, Manager

Re: Cleaning up after tomcat jdbc-pool?

Filip -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance Aggregation eXchange http://www.aggex.com smime.p7s Description: S/MIME cryptographic signature

Cleaning up after tomcat jdbc-pool?

[/…] appears to have started a thread named [[Pool-Cleaner]:Tomcat Connection Pool[19-2018147830]] but has failed to stop it. This is very likely to create a memory leak. Thanks. ps. Also, thanks for offering to open a Bugzilla enhancement request for setting password via JMX. -- Nicholas Sushkin

Can datasource password be changed in jdbc-pool?

of being able to set the password is, but I think it's safe, since the JMX connection can be authenticated and secured. Thanks -- Nicholas Sushkin, Senior Software Engineer, Manager of IT Operations Open Finance Aggregation eXchange http://www.aggex.com smime.p7s Description: S/MIME cryptographic

Re: enforcing SSL only for external clients

(not tested) rule condition type=scheme operator=equal^http$/condition condition type=remote-addr operator=notequal127.0.0.1/condition from/(.*)/from to type=permanent-redirect last=truehttps://%{server-name}/$1/to /rule Configure -- Nicholas Sushkin, Senior

Re: users Digest 22 Nov 2010 20:46:42 -0000 Issue 10094

should've ignored all his posts! ;) -- Nicholas Sushkin smime.p7s Description: S/MIME cryptographic signature

Re: [OT] Tomcat on Linux

On Wednesday, September 15, 2010 17:20:58 Christopher Schultz wrote: We've had servers (dev/demo/production) that don't require reboots for years: usually just for a rare kernel upgrade. NB: Tomcat stays up as long as the machine does, too :) You don't redeploy applications? -- Nicholas

Re: Tomcat 5 SSL keytool error: java.lang.Exception: Public key in reply and keystore don't match

-based-webs ervers-such-as-tomcat-using-keytool/ Miguel -- Nicholas Sushkin, Senior Software Engineer http://www.aggex.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Re: JNDI DataSource Leaks

{ DriverManager.deregisterDriver(driver); servletContext.log(Deregistered driver: + driver); } catch (SQLException ex) { servletContext.log(Unable to deregister driver: + driver, ex); } } -- Nicholas Sushkin

Fwd: Re: [OT] Comodo as a CA

with Comodo? Specifically, has anyone | run across any customers whose browsers do not trust Comodo as a CA? | -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Re: Using JDB on tomcat

to a running instance [...] -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Re: [OT] RE: IE causes an ORA-00936 error, but not Firefox?

-- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Re: j_security_check redirect after login

does not know where to redirect you. -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Re: How to write a custom realm?

/tomcat/ Although I don't claim that my code is worthy of emulating ;) On Wednesday 10 October 2007, quanxin zhu wrote: Hi, Everyone, Where could I find the document of how to write a custom realm? Many Thanks! zhu -- Nicholas Sushkin, Senior Software Engineer http

Re: Distributed web services: Tomcat or Jboss?

or the Jboss product line. Any idea? Do you need EJBs? If you do, then you'll need JBoss. If you don't need EJBs, I would recommend not using a full EJB server. -chris -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com

Re: frustrated trying to pass parameters into jsp to create jnlp

-- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Re: Off scope question - What this Mailing List running on?

On Sunday 22 April 2007 07:59, Johnny Kewl wrote: This mailing list is a magic technology, just wondering if anyone knows what its running on. Is it Tomcat and James? thx Headers show: Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm http://www.ezmlm.org/ -- Nicholas Sushkin, Senior

Re: How to hide Tomcat serverversion information?

information (tomcat/5.0.25, coyote/1.1)? -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Fwd: Re: Make Tomcat run slow

entire company depends on it :) Besides, I have no idea how to renice a process on a modern iSeries so that it runs unimaginably slow... Greetings, Lucas --- -- Nicholas Sushkin, Senior Software Engineer Open Finance, Chelsea Piers Pier 62 Suite

Re: Authenticating a drop-in web-app

. Is it possible to either configure the WAR deployment to add the jar to the $CATALINA_HOME/server/endorsed directory without user/admin intervention? Regards, --Russ -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s

Re: Session Problems Apache httpd - tomcat

Out/a -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http://www.wealthinformationexchange.com smime.p7s Description: S/MIME cryptographic signature

Re: Browsing Tomcat from an MC4j console (jmx)

to invoke it The URL is formed like this: service:jmx:rmi://localhost/jndi/rmi://localhost:port/protocoleconnec tor_name_of_tomcat_instance Which port, protocole and name_of_tomcat_instance do I have to choose ? -- Nicholas Sushkin, Senior Software Engineer http://www.openfinance.com http

Re: Can JMX proxy invoke operations on Mbeans?

Yoav, Any plans to integrate the patch? I just noticed there is a bug and a patch to implement operations in JMXProxy. The bug is http://issues.apache.org/bugzilla/show_bug.cgi?id=38216 Thank you. On Wednesday 21 March 2007 13:14, Nicholas Sushkin wrote: Hi, Can I invoke mbean

Re: Monitoring JVM using JMX + manager's jmxproxy

% 3DCode%20Cache%2C* -- Nicholas Sushkin, Senior Software Engineer Open Finance smime.p7s Description: S/MIME cryptographic signature

Re: Monitoring JVM using JMX + manager's jmxproxy

On Thursday 22 March 2007 16:57, you wrote: I am working on some plugins and templates for Nagios and Cacti to monitor JVM on our tomcat servers It looks like MX4J project has a JMX over HTTP and HTTPS connector. http://mx4j.sourceforge.net/docs/ch05.html -- Nicholas Sushkin, Senior Software

Can JMX proxy invoke operations on Mbeans?

Hi, Can I invoke mbean operations using JMX Proxy? I am reading Using JMX Proxy Servlet Section of http://tomcat.apache.org/tomcat-5.5-doc/manager-howto.html, but it only mentions reading and setting mbean attributes. Thank you -- Nicholas Sushkin, Senior Software Engineer Open Finance

Re: JNDIRealm over SSL to OpenLDAP

) at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175) ... -- Nicholas Sushkin, Senior Software Engineer Open Finance, Chelsea Piers Pier 62 Suite 316, New York NY 10011 Tel +1 646 723 2790 Fax +1 646 723 2789 [EMAIL PROTECTED] smime.p7s Description: S/MIME cryptographic signature

Re: ampersand (amp;) handling in jspx - any workaround?

, Christopher Schultz wrote: If you put amp; into an XML file, it gets treated as a single ''. If you want 'amp;', you gotta say 'amp;amp;'. shrug -- Nicholas Sushkin, Senior Software Engineer Open Finance - To start a new

Re: Memory leaks on webapp redeploy

you redeploy, Tomcat will reload your classes and as the result, create another set of instances of your singletons. See the description of the problem and some workarounds in http://wiki.apache.org/tomcat/OutOfMemory -- Nicholas Sushkin, Senior Software Engineer Open Finance, Chelsea Piers

Re: can not install a web application to a remote tomcat web server by Ant

${deploy.instance} tomcat at ${deploy.host}: ${deploy.port}/${deploy.path}/ undeploy url=${deploy.url} username=${deploy.username} password=${deploy.password} path=${deploy.path}/ /target -- Nicholas Sushkin, Senior Software Engineer Open Finance

Re: Programmatic Security

-constraint /security-constraint Sorry if I am repeating something you already know. -- Nicholas Sushkin - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e

Re: in tomca 5 .0.* my security constraint is not working why

-pattern, or restrict all jsps using url-pattern*.jsp/url-pattern web-resources-collection web-resources-nameprotected/web-resources-name url-pattern/protected/*.jsp/url-pattern /web-resources-collection -- Nicholas Sushkin, Senior Software Engineer

Re: MyPrincipal cannot be resolved to a type

MyPrincipal cannot be resolve to a type when trying the following: ((MyPrincipal)request.getUserPrincipal()).getDisplayName(); Yuri, Josso implemented their own Principal that has additional properties. You may want to poke around http://www.josso.org/developer-howto.html -- Nicholas

Re: Displaying Photos stored in Oracle in HTML generated by servlet

/ -- Nicholas Sushkin, Senior Software Engineer Open Finance - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

deployer does not support multi-level context path (was RE: Major bug in deployer!!)

the response by apache developer Remy Maucherat [EMAIL PROTECTED], since none of the discussions on the user mailing list were answered conclusively. Hopefully a note can be added to the deployer reference manual. -- Nicholas Sushkin, Senior Software Engineer Open Finance, Chelsea Piers Pier 62 Suite