Re: failed FORM authentication redirects to /j_security_check

2010-08-26 Thread Shaun Senecal
as well. On Thu, Aug 26, 2010 at 5:17 PM, Pid p...@pidster.com wrote: On 26/08/2010 02:14, Shaun Senecal wrote: Thanks for the response Chris. You're right.  Jetty does a redirect, so on the client-side the browser sees /login.html?error=true.  Since this isn't happening in Tomcat, I am

Re: failed FORM authentication redirects to /j_security_check

2010-08-25 Thread Shaun Senecal
or not. Not pretty, but it works! Thanks Shaun On Wed, Aug 25, 2010 at 10:17 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Shaun, On 8/23/2010 4:56 AM, Shaun Senecal wrote: I'm using FORM authentication, and everything seems

failed FORM authentication redirects to /j_security_check

2010-08-23 Thread Shaun Senecal
I'm using FORM authentication, and everything seems to be working (logins are accepted, etc), except when there was an error the URL changes in the users browser to point to j_security_check. The contents of the redirect to j_security_check contains login.html, so the user is able to login as

Re: logging user login and logout

2010-05-16 Thread Shaun Senecal
Thanks for all of the suggestions. This should be enough to get me going! On Fri, May 14, 2010 at 6:47 PM, Pid p...@pidster.com wrote: On 14/05/2010 10:34, Terry Horner wrote: -Original Message- From: Shaun Senecal [mailto:ssenecal.w...@gmail.com] Sent: Friday, May 14, 2010 8:46 AM

logging user login and logout

2010-05-14 Thread Shaun Senecal
Is there already an existing way to log user login and logout events? Can it be extended? I need to provide an audit trail, including login activity, in a database. I was thinking I might need to implement an HttpSessionListener which does the logging on session creation/deletion, but then I

Re: logging user login and logout

2010-05-14 Thread Shaun Senecal
a look at the LockOutRealm, but unless I can have multiple realms it might not help me here. Thanks for the tip. I'll give it a try. Shaun On Fri, May 14, 2010 at 4:36 PM, Pid p...@pidster.com wrote: On 14/05/2010 08:22, Shaun Senecal wrote: Is there already an existing way to log user login

Re: JAXBContext leaks memory

2010-05-10 Thread Shaun Senecal
jvisualvm is an excellent tool, and so is MAT (http://www.eclipse.org/mat/downloads.php). If you can figure out which instances are increasing (as Pid indicated) its very easy to check the path of those objects to the garbage collector using one of these tools. From there its usually easy to see

Re: More heap space for jhat

2010-02-23 Thread Shaun Senecal
I recommend you use MAT (http://www.eclipse.org/mat/downloads.php) to analyze your heap dumps. It has the ability to load significantly large heap dumps on machines will limited resources. I have opened 4G heap dumps with MAT using a 2G heap. I'm sure I could have used less, but I didnt need

Re: exclusions from conf/web.xml are not being picked up

2009-12-15 Thread Shaun Senecal
Thanks Chuck. That is in fact what I was doing, so I will move that into the webapps web.xml. Pid, I'm actually not as concerned about the favicon as I am with agentapp, but your suggestion of moving it into the webapp seems to be the key. Thanks. On Wed, Dec 16, 2009 at 12:32 AM,

exclusions from conf/web.xml are not being picked up

2009-12-14 Thread Shaun Senecal
I have a blanket security-constraint defined in my conf/web.xml, followed by a couple more specific security-constraints. However, it appears that the more specific ones are not being picked up. When I break in FormAuthenticator.invoke(), I can see in the constraints variable

RE: j2ee agent session notification breaks agent realm function

2009-12-02 Thread Shaun Senecal
I am actually having the exact same problem. Were you ever able to resolve this? If I change my setup to use polling on a short interval then I am able to logout and subsequently log back in (as long as the user waits long enough for the poll interval). My DA server and my OpenSSO server are

Re: j2ee agent session notification breaks agent realm function

2009-12-02 Thread Shaun Senecal
Sorry. Wrong mailing list. On Wed, Dec 2, 2009 at 5:00 PM, Shaun Senecal ssenecal.w...@gmail.com wrote: I am actually having the exact same problem.  Were you ever able to resolve this?  If I change my setup to use polling on a short interval then I am able to logout and subsequently log back

Re: Apache Server failover and session replication

2009-09-03 Thread Shaun Senecal
) 8. TomcatB receives a request, for a new session (S2) 9. TomcatA The session S2 expires due to inactivity. section describes the steps.7-9 steps confusing. Does tomcat 6 even support such scenario? --Sumedh On Thu, Sep 3, 2009 at 6:29 AM, Shaun Senecal ssenecal.w

Re: Apache Server failover and session replication

2009-09-02 Thread Shaun Senecal
We had a similar problem with Tomcat 6 using clustering. It turns out that the SSO information is only propagated while all instances are running. If Instance-A fails, several users then log in to Instance-B, then Instance-A comes back up, all of the SSO information for the users that logged in

Re: Apache Server failover and session replication

2009-09-02 Thread Shaun Senecal
After re-reading your initial post, the problems might not be as related as I thought since at no point did replication stop for me. On Thu, Sep 3, 2009 at 9:56 AM, Shaun Senecal ssenecal.w...@gmail.comwrote: We had a similar problem with Tomcat 6 using clustering. It turns out that the SSO

Tomcat 6.0.18+ with Comet behind an F5 Big-IP

2009-07-30 Thread Shaun Senecal
Has anyone tried to do this? My concern is that performance would suffer over using Apache and the APR Connector. If anyone has any suggestions for deployment/configuration, I would love to hear them! Shaun

Re: NullPointerExceptions on startup with NIO connector

2008-12-23 Thread Shaun Senecal
Thats odd... I am still getting the NPE on startup. Is it included in the binaries downloaded or do I need to rebuild myself for this patch to take effect? On Wed, Dec 24, 2008 at 11:01 AM, Filip Hanik - Dev Lists devli...@hanik.com wrote: already there

Re: NullPointerExceptions on startup with NIO connector

2008-12-23 Thread Shaun Senecal
devli...@hanik.com wrote: its in the source control repository, and that means it will be included in the next release 6.0.19 Filip Shaun Senecal wrote: Thats odd... I am still getting the NPE on startup. Is it included in the binaries downloaded or do I need to rebuild myself for this patch

Re: useSendFile=true skips compression

2008-10-05 Thread Shaun Senecal
browser (sorry lynx, no support). On Sat, Oct 4, 2008 at 11:43 AM, Bill Barker [EMAIL PROTECTED] wrote: Shaun Senecal [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Could someone explain to me why the NIO Connector will ignore the compression settings for large files if useSendFile

useSendFile=true skips compression

2008-10-02 Thread Shaun Senecal
Could someone explain to me why the NIO Connector will ignore the compression settings for large files if useSendFile is enabled (it is by default)? It seems to me that if compression is enabled you would specifically want to use it when sendFile is enabled, but that might just be because I don't

Re: mod_ajp and Load-Balancing Issue

2008-09-21 Thread Shaun Senecal
Are you using the ClusterSingleSignOn Valve? If you are, this sounds like the behaviour I was seeing, and have since resolved. The problem I had (well, part of the problem) was that the SSO information was not being replicated across the cluster when tomcat instances were brought back up. This

Re: mod_ajp and Load-Balancing Issue

2008-09-21 Thread Shaun Senecal
Oops. My orignal post is here ( http://www.nabble.com/Clustered-SSO-improperly-invalidated-upon-web-application-shutdown-to19447895.html#a19447895). It might descirbe the problem better to see if this is the same issue you are facing. On Mon, Sep 22, 2008 at 9:45 AM, Shaun Senecal [EMAIL

Clustered SSO improperly invalidated upon web application shutdown

2008-09-11 Thread Shaun Senecal
I have been working with a Tomcat clustering solution that involves sticky sessions and Clustered Single Sign On. Everything seems to work, in that the session information is being replicated as expected, however, the problem is that when an instance is shutdown (either for failover, maintenance,