Crosscontext tag and security

2001-10-03 Thread Renato Weiner
Hi all, What are the security concerns of letting 'crossContext=true' in a virtual hosting environment ? I'm using tomcat 3.2.3. Thanks Renato. __ Do You Yahoo!? Listen to your Yahoo! Mail messages from any phone. http://phone.yahoo.com

JAXP 1.1 and Tomcat 3.2.3

2001-08-30 Thread Renato Weiner
Hi all, I'm trying to build Tomcat 3.2.3 with JAXP 1.1 and I have this error: Buildfile: build.xml BUILD FAILED javax.xml.parsers.FactoryConfigurationError: java.lang.ClassNotFoundException: org.apache.crimson.jaxp.SAXParserFactoryImpl at

Re: Killing endless loop servlet - howto ? killing JVM or unload class ?

2001-07-12 Thread Renato Weiner
Hi, Actually I'm testing some time-out features of Tomcat. Users eventually ended up doing endless loops ( like, forgetting to move to nextline in a databaserecord set...). So, what I'm trying to see if there is a patch that could kill the 'offending' threads after a defined time interval. Thanks

Re: Killing endless loop servlet - howto ? killing JVM or unload class ?

2001-07-12 Thread Renato Weiner
Can we register the running thread in the service() method of theServletWrapperobject and then call a thread.interrupt()inthe servlet.destroy method ? So we could stop the thread whereunloading the context. Should this do the work ? Roland Carlsson [EMAIL PROTECTED] wrote: - Original

Killing endless loop servlet - howto ? killing JVM or unload class ?

2001-07-11 Thread Renato Weiner
Hi all, I'm rolling out a successful Tomcat instalation in a shared environment ( it's a great software ! ). But I have a concern. I created a servlet that loops forever ( a very stupid one, by the way). When I executed it, itallocates a Tomcat thread and it just runs forever. If I try to kill it

Re: Problem running 3.2

2001-07-11 Thread Renato Weiner
This is not the ideal, but try this: ln -s /usr/lib/libstdc++-3-libc6.2-2-2.10.0.so /usr/lib/libstdc++-libc6.1-1.so.2 It worked for me. Renato. William Dunning [EMAIL PROTECTED] wrote: I've installed Jakarta Tomcat 3.2.2 and the Sun JDK 1.3.1 on an Intel box running Debian Linux (latest

Tomcat admin resources

2001-07-10 Thread Renato Weiner
Hi all, I'm looking for some admin resources for Tomcat 3.2.2 in a multi-hosted environment. Are there administration samples, besides the admin.war package that comes with the tar.gz ? Is it possible to list the servlets that are currently loaded per context, see how much memory they are taking

Tomcat 3.2.2 and Error page 404

2001-07-04 Thread Renato Weiner
Hi all, I know this has been discussed, but I can't find an ultimate answer on this topic. I'm running Tomcat 3.2.2, I have latest the StaticInterceptor.java from CVS. If I configure my web.xml with a dynamic 404 error ( let's sat 404.jsp) that doesn't exist, I got an endless loop: 2001-07-04

Killing endless loop servlet - howto ? killing JVM or unload class ?

2001-07-02 Thread Renato Weiner
Hi all, I'm rolling out a successful Tomcat instalation in a shared environment ( it's a great software ! ). But I have a concern. I created a servlet that loops forever ( a very stupid one, by the way). When I executed it, itallocates a Tomcat thread and it just runs forever. If I try to kill

RE: Killing endless loop servlet - howto ? killing JVM or unload class ?

2001-07-02 Thread Renato Weiner
for PoolTcpConnector ? Anyone ? Thanks !-Original Message-From: Renato Weiner [mailto:[EMAIL PROTECTED]]Sent: Monday, July 02, 2001 6:03 AMTo: [EMAIL PROTECTED]Subject: Killing endless loop servlet - howto ? killing JVM or unload class?Hi all, I'm rolling out a successful Tomcat instalation in a shared

Virtual Hosting and security

2001-05-24 Thread Renato Weiner
Hi all, I know this is a quite common subject but I didn't find any ultimate answer. In a shared hosting environment, how can I prevent clientX to read files from clientY ? - java.policy doesn't cover this. If I use grant codeBase 'file:/...' or 'http://', it doesn't work. - can I override

Virtual Hosting and security

2001-05-17 Thread Renato Weiner
Hi all, I know this is a quite common subject but I didn't find any ultimate answer. In a shared hosting environment, how can I prevent clientX to read files from clientY ? - java.policy doesn't cover this. If I use grant codeBase 'file:/...' or 'http://', it doesn't work. - can I override

Overriding SecurityManager

2001-05-16 Thread Renato Weiner
This is what I'm trying to do. I already wrote a very simple class that overrides the default SecurityManager. Here is a piece of the code: public void checkRead(String fileName) {if (!fileName.equals("") fileName.endsWith(".txt")) {throw new SecurityException("Fail to read: " +