Re: To Support at Tomcat, Got an issue Finding Maths.

2018-10-12 Thread Ian Burton
Expressing my problem, with JSP plugins think java.lang.math.(import) is neither working or available. I've looked at different approaches &, Program scripted best displayed. On 10 Oct 2018 15:18, "Christopher Schultz" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Ian, > > On 1

Tomcat/manager/ disable redirect from HTTPS to HTTP

2018-10-12 Thread Hans Schou
Hi I have a Tomcat 8.5 with Java 1.8 on Windows with Nginx reverse proxy. When I access https://joe:p4zzw...@example.org/manager/ the request goes to Nginx, which proxy_pass it to http://srv321.local:8080/ Authentication appears right away but the first response from Tomcat is Location: http:/

Re: Tomcat/manager/ disable redirect from HTTPS to HTTP

2018-10-12 Thread Mark Thomas
On 12/10/18 12:18, Hans Schou wrote: > Hi > > I have a Tomcat 8.5 with Java 1.8 on Windows with Nginx reverse proxy. > > When I access https://joe:p4zzw...@example.org/manager/ the request goes to > Nginx, which proxy_pass it to http://srv321.local:8080/ > > Authentication appears right away but

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Hello, Using Tomcat 8.0.22 on Linux CentOS 6.10: Trying to setup Tomcat to authenticate users that use Basic Auth. I could (possibly) enter these users into the tomcat-users.xml file but we are dealing with 1000 potential users. Wh

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread tomcat
Hi. On 12.10.2018 16:38, Tony Esposito wrote: Hello, Using Tomcat 8.0.22 on Linux CentOS 6.10: Trying to setup Tomcat to authenticate users that use Basic Auth. I could (possibly) enter these users into the tomcat-users.xml file but we are de

Re: Request for a technical review

2018-10-12 Thread Mallory Mooney
I definitely appreciate everyone's willingness to help out! Here is the link to the GDoc: https://docs.google.com/document/d/1fudlXj055nnPd-1lUoAXIS2ge8qNI56_jgUhHgKczFE/edit?usp=sharing Requesting access will still be needed, but I can grant that ASAP. I want to make sure I can attribute comment

Re: To Support at Tomcat, Got an issue Finding Maths.

2018-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ian, On 10/12/18 06:15, Ian Burton wrote: > On 10 Oct 2018 15:18, "Christopher Schultz" > wrote: On 10/10/18 06:19, Ian Burton > wrote: I have spent many hours searching for a organised way to ask for a Public void setter(doubl

Re: Request for a technical review

2018-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mallory, On 10/12/18 13:23, Mallory Mooney wrote: > I definitely appreciate everyone's willingness to help out! > > Here is the link to the GDoc: > https://docs.google.com/document/d/1fudlXj055nnPd-1lUoAXIS2ge8qNI56_jg UhHgKczFE/edit?usp=sharing >

Re: Request for a technical review

2018-10-12 Thread Igal Sapir
On 10/12/2018 11:23 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mallory, On 10/12/18 13:23, Mallory Mooney wrote: I definitely appreciate everyone's willingness to help out! Here is the link to the GDoc: https://docs.google.com/document/d/1fudlXj055nnPd-1lUo

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Thank you André for this feedback. If I may, I wish to approach this from another angle. (The user community is larger than at first anticipated). If the header received has a certain password (which is static for all users requesting access), then bypass Basic Auth and let the user connect.

Trust Cert File Location

2018-10-12 Thread Steven Feinstein
Hi, I am using Tomcat 8.0.32 running on Windows 2012 R2 as a Service. My application is running under https port 8443 Part of my application opens an HttpsURLConnection back to the same app A cert was created for each server and the keystore file updated with the information. On my dev server,

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 10/12/18 14:45, Tony Esposito wrote: > Thank you André for this feedback. > > If I may, I wish to approach this from another angle. (The user > community is larger than at first anticipated). Since you are switching away from tomcat-use

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Concerning tomcat-user.xml versus database: The number of users has increased by an order of 2 magnitudes AND we don't know ahead of time who those users will be. The user count is an estimate of the number of companies (known) multiplied by the number of users at each company (unknown - we kno

Re: Trust Cert File Location

2018-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Steven, On 10/12/18 14:47, Steven Feinstein wrote: > Hi, > > I am using Tomcat 8.0.32 running on Windows 2012 R2 as a Service. > > My application is running under https port 8443 Part of my > application opens an HttpsURLConnection back to the sa

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 10/12/18 15:41, Tony Esposito wrote: > Concerning tomcat-user.xml versus database: The number of users has > increased by an order of 2 magnitudes AND we don't know ahead of > time who those users will be. The user count is an estimate of t

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Hello Christopher, Some very good feedback here. Thank you. The web server in question doesn't need to authenticate any users at all. But, as a part of the SSO handoff, the web server in question is being passed Basic Auth in the header. Any further authentication (e.g. the examination of the

Re: Trust Cert File Location

2018-10-12 Thread Steven Feinstein
Thanks Chris > It's worth stopping here to note that > Tomcat's keystore and truststore > configuration only effect the connections > coming into Tomcat.over > whatever > is being configured with those stores. I thought that may be the case, but needed someone to confirm. I assumed I would h

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 10/12/18 16:24, Tony Esposito wrote: > Some very good feedback here. Thank you. > > The web server in question doesn't need to authenticate any users > at all. But, as a part of the SSO handoff, the web server in > question is being pass

Re: Request for a technical review

2018-10-12 Thread Mallory Mooney
Igal, it will be available publicly once published! I don't have an official publish date yet but can share that when it becomes more concrete. And no PRs yet, Chris! It's still in the less cool GDoc stage of the review process. :) On Fri, Oct 12, 2018 at 1:36 PM Igal Sapir wrote: > On 10/12/20

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Hi Christopher, The 'web server in question' is the Tomcat web server that I am trying to get to ignore Basic Auth. Installed 'out of the box - as is', this Tomcat web server instance throws the error WARNING [http-nio-8088-exec-25] org.apache.catalina.realm.LockOutRealm

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Addendum: The user "myuser" attempts to authenticate once, fails, and on the second attempt the WARNING is thrown (i.e. user locked) which is to be expected. I want the user "myuser" not to authenticate at all by having the Tomcat instance 'ignore/bypass' the Basic Auth (that is received in the

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread tomcat
On 13.10.2018 00:04, Tony Esposito wrote: Addendum: The user "myuser" attempts to authenticate once, fails, and on the second attempt the WARNING is thrown (i.e. user locked) which is to be expected. I want the user "myuser" not to authenticate at all by having the Tomcat instance 'ignore/bypas

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
But you still want your application to see this Basic Auth header, because it needs to check the "standard password" in it, right ? (Otherwise, describe precisely what you want). If there is a way to disable Basic Auth (i.e. not compel the user to authenticate yet again) without triggering on th