Re: Clustering and session persistence across restarts?

2011-11-08 Thread Pid *
On 7 Nov 2011, at 22:23, Al DiVenuti wrote: > Hello, > > I am currently configuring a sandbox development environment with two > clustered Tomcat 6.0.32 instances running on the same Windows XP SP3 > (32-bit) hosts. > > I have a question regarding whether or not the "Manager" > implementations av

problem with loading Bouncy Castle

2011-11-08 Thread Jan Vávra
Hello, I have a problem with loading bouncy castle. My code snippet is: int position = Security.addProvider(new BouncyCastleProvider()); KeyStore store = KeyStore.getInstance("PKCS12", "BC"); In the application log I have message that BouncyCastleProvider is already loaded (position== -1).

Re: problem with loading Bouncy Castle

2011-11-08 Thread Pid
On 08/11/2011 08:47, Jan Vávra wrote: > Hello, > I have a problem with loading bouncy castle. > My code snippet is: > > int position = Security.addProvider(new BouncyCastleProvider()); > KeyStore store = KeyStore.getInstance("PKCS12", "BC"); > > In the application log I have message that Bounc

Re: problem with loading Bouncy Castle

2011-11-08 Thread Marvin Addison
Crypto providers need to be installed into the JRE extension directory (e.g. $JRE_HOME/lib/ext) and an entry must be added to $JRE_HOME/lib/security/java.security to install the provider. For example: security.provider.5=org.bouncycastle.jce.provider.BouncyCastleProvider Note the 5 above; each p

Re: Catalina.policy file for security option

2011-11-08 Thread Petr Hracek
Yes the tomcat should be run as a back-end server (AJP) with apache2-2.2.21. I have add to the catalina.policy following permission: permission javax.management.MBeanServerPermission "createMBeanServer"; permission javax.management.MBeamPermission "com.javamonitor.mbeans.*","*";

Re: Catalina.policy file for security option

2011-11-08 Thread Petr Hracek
When I have set CATALINA_OPTS to: linux:/var/log/tomcat5/base # echo $CATALINA_OPTS -Djava.security.debug=all linux:/var/log/tomcat5/base # in log I see: domain 1 ProtectionDomain CodeSource=CodeSource, url=file:/usr/share/tomcat5/bin/bootstrap.jar, ClassLoader=sun.misc.Launcher$AppClassLoader@8e

mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Alexander Diedler
Hello, Something goes wrong. I have a Apache 2.2.1 with mod_jk and a Tomcat 6.0.32. So if I connect to the website http://www.test.de/ everything is ok, site was displayed. If I try to access http://www.test.de/xyz i get the source code from the site it should be displayed, but it was not rendered

Re: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Alexander Diedler wrote: Hello, Something goes wrong. I have a Apache 2.2.1 with mod_jk and a Tomcat 6.0.32. So if I connect to the website http://www.test.de/ everything is ok, site was displayed. If I try to access http://www.test.de/xyz i get the source code from the site it should be display

AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Alexander Diedler
Hello >That most probably means that the URL mappings for mod_jk are not correct, and that Apache httpd is serving that content directly. >Look at (or show here) the JkMount lines that should be somewhere in your Apache configuration. Was attached in the post: JkMount /* loadbalancer So everythin

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Pid
On 08/11/2011 15:12, Alexander Diedler wrote: > Hello > >> That most probably means that the URL mappings for mod_jk are not correct, > and that Apache httpd is serving that content directly. >> Look at (or show here) the JkMount lines that should be somewhere in your > Apache configuration. > >

Re: o Tomcat alter the page encoding for JSP file created via Netbeans 7.01

2011-11-08 Thread Pid
On 05/11/2011 17:57, Kiran Badi wrote: > Hi All, > I am aware this might be offtopic but being a silent member to this > list, I think this list can give me better suggestion than doing a > google.So posting here. Unfortunately it was on someone else's topic. In future please don't just edit

AW: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Alexander Diedler
Ok, But would be the better way (of life) for this? HTTPD vhost.conf: ServerAdmin xxx@yyy DocumentRoot "D:/www/apps/app1/ROOT" Options Indexes FollowSymLinks AllowOverride None Order allow,deny Allow from all ... Serve

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Hi. Pid wrote: On 08/11/2011 15:12, Alexander Diedler wrote: Hello That most probably means that the URL mappings for mod_jk are not correct, and that Apache httpd is serving that content directly. Look at (or show here) the JkMount lines that should be somewhere in your Apache configurati

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread Pid
On 08/11/2011 15:54, André Warnier wrote: > > But obviously it isn't, so there's something wrong with this JkMount. Jumping ahead, that bit comes next when the OP's sorted their layout out... ;) p -- [key:62590808] signature.asc Description: OpenPGP digital signature

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Pid wrote: On 08/11/2011 15:54, André Warnier wrote: But obviously it isn't, so there's something wrong with this JkMount. Jumping ahead, that bit comes next when the OP's sorted their layout out... ;) Jumping back, the misdirected DocumentRoot issue should not be an immediate security pro

Re: AW: mod_jk - Browser displays HTML Sourcecode

2011-11-08 Thread André Warnier
Pid wrote: On 08/11/2011 15:54, André Warnier wrote: But obviously it isn't, so there's something wrong with this JkMount. Jumping ahead, that bit comes next when the OP's sorted their layout out... ;) Ok, had a second look at the Tomcat config, and I think you're right. there's some work to

[SECURITY] CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app

2011-11-08 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.21 Description: This issue only affects environments running web applications that ar

Re: Session expiration - browser -Web application

2011-11-08 Thread Léa Massiot
@Terence : Thank you for your answer. Actually, I extracted the Java code from the JSP and put it in a TLD so that the code is cleaner and more manageable. Best regards, -- Léa -- View this message in context: http://old.nabble.com/Session-expiration---browser--Web-application-tp32780678p3280414

Re: making security constraints configureable

2011-11-08 Thread Terence M. Bandoian
On 1:59 PM, André Warnier wrote: Terence M. Bandoian wrote: On 1:59 PM, Konstantin Kolinko wrote: 2011/11/3 Leon Rosenberg: I have a situation where an application is accessable from outside in staging and production environment, but shouldn't be open for public in staging environment. Put

Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Matthew Tyson
Hey Guys, It has been my assumption that Tomcat 7's comet implementation (ie, asyncSupported=true), will automatically use NIO processing. Is that not true? Do I need to set the connector to be org.apache.coyote.http11.Http11NioProtocol explicitly? Thanks, Matt

Re: SSL connect to APR fails - "bad version"

2011-11-08 Thread Kobe
Tomcat is also a servlet container and may be used to host web services. That is the case here. the web service client is hosted in a BEA weblogic server and attempts to connect to the web service over SSL. /Kobe awarnier wrote: > > Kobe wrote: >> I build tcnative and apr from src with exist v

Re: Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Mark Thomas
On 08/11/2011 20:15, Matthew Tyson wrote: > Hey Guys, > > It has been my assumption that Tomcat 7's comet implementation (ie, > asyncSupported=true), will automatically use NIO processing. Comet != Servlet 3.0 async > Is that not true? Yes, that is not true. > Do I need to set the connector t

Re: SSL connect to APR fails - "bad version"

2011-11-08 Thread Kobe
Actually, whether it be webaccess or webservice access, i not follow your confusion. pleas explain why this is wrong. /Kobe Kobe wrote: > > Tomcat is also a servlet container and may be used to host web services. > That is the case here. the web service client is hosted in a BEA weblogic > serv

Re: SSL connect to APR fails - "bad version"

2011-11-08 Thread Kobe
thank for your help. here is more info on my setup: tomcat version 6.0.29. And tomcat is startin clean; no ererors while loading. if I use tls1, I get same error as before ("bad version"). when i test with openssl s_client, I check line 293 of s3_pkt.c. it say --> if ((version>>8)

Re: SSL connect to APR fails - "bad version"

2011-11-08 Thread Kobe
many thanks again for your time and help. Problem is: same openssl version working on another server and successfuly setup SSLv3 connections with same client. So I am thinking, there is misconfigure on this server. i would like to find why this server respond with SSLv2 ClientHello instead of SS

tomcat doesnt want to start

2011-11-08 Thread Christian Röttger
Hello list, i updated my ubuntu server to tomcat 6.0.24. (a kernel update was also included) After a reboot tomcat doesn't want to start. The status is not running and when i want to start it, it always says: /etc/init.d/tomcat6 start * Starting Tomcat servlet engine tomcat6

Re: HTTP Status 404 - /manager/html

2011-11-08 Thread Kaushal Shriyan
On Tue, Nov 8, 2011 at 10:29 AM, Caldarale, Charles R wrote: >> From: Kaushal Shriyan [mailto:kaushalshri...@gmail.com] >> Subject: Re: HTTP Status 404 - /manager/html > >> I did downloaded it from >> http://archive.apache.org/dist/tomcat/tomcat-7/v7.0.19/bin/ > > Good.  For curiosity's sake, why

Re: Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Matthew Tyson
I guess what I'm asking is if I just start using the Servlet 3.0 support for suspending requests out of the box, will it be a thread blocking implementation I'm using? HTTP APR/native is blocking as well, correct? So if I want to use Servlet 3.0 async (eg, a call to request.startAsync), and have

Re: o Tomcat alter the page encoding for JSP file created via Netbeans 7.01

2011-11-08 Thread Kiran Badi
Got it Pid.Thanks. On 11/8/2011 8:53 PM, Pid wrote: On 05/11/2011 17:57, Kiran Badi wrote: Hi All, I am aware this might be offtopic but being a silent member to this list, I think this list can give me better suggestion than doing a google.So posting here. Unfortunately it was on someone e

Trouble running TC8 trunk

2011-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, With current trunk HEAD and a fresh: $ ant clean clean-depend download-compile deploy When I attempt to start Tomcat, I get this error (this is 100% of my catalina.out): java.lang.NoClassDefFoundError: org/apache/catalina/startup/SetParentClas

Re: Tomcat 7, Servlet 3.0, and Non-Blocking

2011-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matthew, On 11/8/11 4:43 PM, Matthew Tyson wrote: > So if I want to use Servlet 3.0 async (eg, a call to > request.startAsync), and have it be handled without blocking IO, I > need to use the NIO connector? To repeat Mark's reply: > On Tue, Nov 8, 2

Re: SSL connect to APR fails - "bad version"

2011-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kobe, On 11/8/11 2:01 PM, Kobe wrote: > thank for your help. here is more info on my setup: tomcat version > 6.0.29. And tomcat is startin clean; no ererors while loading. > > if I use tls1, I get same error as before ("bad version"). > > when i tes

Re: Trouble running TC8 trunk

2011-11-08 Thread Mark Eggers
- Original Message - > From: Christopher Schultz > To: Tomcat Users List > Cc: > Sent: Tuesday, November 8, 2011 5:37 PM > Subject: Trouble running TC8 trunk > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > All, > > With current trunk HEAD and a fresh: > > $ ant clean clean-d

Re: Trouble running TC8 trunk

2011-11-08 Thread Konstantin Kolinko
2011/11/9 Christopher Schultz : \> > With current trunk HEAD and a fresh: > > $ ant clean clean-depend download-compile deploy > > When I attempt to start Tomcat, I get this error (this is 100% of my > catalina.out): > > java.lang.NoClassDefFoundError: > org/apache/catalina/startup/SetParentClassLo

RE: tomcat doesnt want to start

2011-11-08 Thread Caldarale, Charles R
> From: Christian Röttger [mailto:chris.roett...@uni-muenster.de] > Subject: tomcat doesnt want to start > i updated my ubuntu server to tomcat 6.0.24. (a kernel update was also > included) After a reboot tomcat doesn't want to start. > Can anyone provide some help how to get it running again?

Re: tomcat doesnt want to start

2011-11-08 Thread Daniel Baktiar
Probably you should instead do this: $ cat /var/log/tomcat6 (I suspect it's the log file, not a tomcat6 folder). --- daniel baktiar On Wed, Nov 9, 2011 at 07:08, Christian Röttger < chris.roett...@uni-muenster.de> wrote: > Hello list, > > i updated my ubuntu server to tomcat 6.0.24. (a kern

Re: SSL connect to APR fails - "bad version"

2011-11-08 Thread Kobe
thank you Chris. I know the server (APR) is sending SSLv2 ClientHello because ssl debugs show it: // from ${CATALINA_HOME}/bin/setenv.sh: export JAVA_OPTS="... -Djavax.net.debug=ssl" //... # sh ${CATALINA_HOME}/bin/startup.sh // from client $ openssl s_client -connect

Re: tomcat doesnt want to start

2011-11-08 Thread Brian Burch
On 09/11/11 15:46, Daniel Baktiar wrote: Probably you should instead do this: $ cat /var/log/tomcat6 (I suspect it's the log file, not a tomcat6 folder). No, it is because of permissions on the /var/log/tomcat6 directory... you cannot cd to that directory as an ordinary user. so these will w

how to connect to datasource

2011-11-08 Thread spike@12
Hi, I have setup my application using with tomcat and it is working fine. But when I have restarted my DB machine, my application is not working. If I have restart my tomcat server then it is working fine. may I know, how to connect to datasource automatically if my DB machine is restarted?? Is

RE: SSL connect to APR fails - "bad version"

2011-11-08 Thread Adamus, Steven J.
Hi Kobe; I can see why it looks like the server is sending the message, but I think there's some reference that's being missed. The SSL debug should show Client messages and Server messages. One thing that's certain, the SSLv2 ClientHello is a client message sent by the client. This mess

Re: how to connect to datasource

2011-11-08 Thread Pid
On 09/11/2011 07:00, spike@12 wrote: > > Hi, > > I have setup my application using with tomcat and it is working fine. But > when I have restarted my DB machine, my application is not working. If I > have restart my tomcat server then it is working fine. > may I know, how to connect to datasourc