[JBoss-user] [Security JAAS/JBoss] - Re: JBoss 3.2.5 Will Not Load Embedded Obj Under JAAS SSL
Many thanks Scott! That did the trick I'm sure other developers will be happy to know this as well, since the issue applies to Flash, PDF, MS Office files, etc etc. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3852093#3852093 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3852093 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [HTTPD, Servlets JSP] - Re: How to add Tomcat Valve to Context?
Many thanks Scott! That did the trick I'm sure other developers will be happy to know this as well, since the issue applies to Flash, PDF, MS Office files, etc etc. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3852094#3852094 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3852094 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: JBoss 3.2.5 Will Not Load Embedded Obj Under JAAS SSL
Ok I've narrowed it down to a Tomcat 5 bug/feature: http://nagoya.apache.org/bugzilla/show_bug.cgi?id=27122 About 1/2 way down the comments: --- Additional Comments From [EMAIL PROTECTED] 2004-02-25 22:07 --- And we have finally found the problem. In an attempt to try and work around some broken client (I can't be bothered to go back and see which one), Tomcat5 started adding adding the don't cache headers even for SSL requests. I'm in a very small minority of disliking this feature, so it is unlikely to change. The work-around is to configure the Authenticator yourself: Context path=/myapp docBase=myapp | Valve className=org.apache.catalina.authenticator.FormAuthenticator | disableProxyCaching=false / | /Context Does anyone know how where I can configure this in a JBoss-3.2.5 environemnt? Ie if I have a EAR file to deploy, myapp.ear with contents: - myapp-ejb.jar - myapp-web.war - application.xml - jboss-app.xml - etc... Also, this webapp is to be the default context, if it makes a different. I've tried adding something to jbossweb-tomcat50.sar\server.xml but I can't figure out the correct syntax. Thanks. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3851931#3851931 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3851931 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [HTTPD, Servlets JSP] - How to add Tomcat Valve to Context?
Hi all I need to add/change a valve setting because of this: http://www.jboss.org/index.html?module=bbop=viewtopict=55212 In JBoss-3.2.5 where would I add the following so my webapp (a war file inside an ear file) would have this valve setting? | Context path=/myapp docBase=myapp | Valve className=org.apache.catalina.authenticator.FormAuthenticator | disableProxyCaching=false / | /Context | Thanks in advance! Details: EAR file with: - Manifest.mf - myapp-ejb.jar - myapp-service.sar - myapp-web.war - application.xml - jboss-app.xml In application.xml, my webapp is configured as the default like this: | application | module | web | web-urimyapp-web.war/web-uri | context-root//context-root | /web | /module | /application | View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3851942#3851942 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3851942 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - JBoss 3.2.5 Will Not Load Embedded Obj Under JAAS SSL IE
Hi I really hope somebody can help me on this one. The objs are Macromedia Flash .swf files, and I have a security-constraint in my web.xml protecting url-pattern/flash/*/url-pattern. Everything was working great in 3.2.3, but as soon as I upgraded to 3.2.5, I ran into a very weird problem: a) If I connect via non-SSL, all browsers (IE6, Mozilla/Netscape/Firefox) works. b) If I connect via SSL, IE6 fails to load any of my Flash files after a proper login. The JAAS protected JSPs unprotected jpg/gif would load but all I get are blank spots where the Flash clips should be. Other browsers have no problems. There are quite a few known IE6/SSL/Flash issues/solutions on Microsoft KB Macromedia Forum but none applied to this scenario. *** If I remove the JAAS security constraint pattern, IE6 then has no problem loading the Flash clips!!! Unfortunately I cannot do this because I need JBoss/Tomcat to maintain the UserPrincipal when my Flash clips hits the WebServices on my server (by design JBoss will return NULL Principal if the resource is not protected), because we are using Struts/EJB role-based security heavily. Nothing else on my dev box has changed except this jump from 3.2.3 to 3.2.5. I know IE6 is probably the culprit here, but I'm hoping there's a workaround or a fix in a newer 3.2.x release. I have tried 3.2.6 RC2 and the problem exists as well. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3851216#3851216 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3851216 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
