get chunk blowing chunks

2002-05-22 Thread Smith Jason

Hi, I am using Orion as a front end to IIS. 
When accessing a certain page, I get this error. However, I cannot reproduce
this in test, even when I point the Orion dev machine at the prod IIS
server. 
The code is exactly the same in both instances.
My tunnel servlet just connects to IIS with the request params, cookies,
headers and then writes the response to the client. 
I am using jvm 1.3.1_02

java.net.SocketException: Unexpected end of file from server 
at sun.net.www.http.HttpClient.parseHTTPHeader(Unknown Source) 
at sun.net.www.http.HttpClient.parseHTTP(Unknown Source) 
at sun.net.www.http.HttpClient.parseHTTPHeader(Unknown Source) 
at sun.net.www.http.HttpClient.parseHTTP(Unknown Source) 
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown
Source) 
at java.net.HttpURLConnection.getResponseCode(Unknown Source) 

As usual, it worked for a few weeks and then died. Have no idea why.
Any ideas?
/Jason





RE: disappear postings (was Re: Uploading files to Orion webserver with MultipartParser API)

2002-02-28 Thread Smith Jason

Has happened to me too - serveral times.

/Jason

-Original Message-
From: Simon Stewart [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 5:37 PM
To: Orion-Interest
Subject: OT: disappear postings (was Re: Uploading files to Orion
webserver with MultipartParser API)


On Wed, Feb 27, 2002 at 09:17:41AM -, Justin Crosbie wrote:
 P.S. this is my second attempt at posting this, it appears the list does
not
 pick up everything that is posted.

I've noticed this too. Can't remember seeing a comment that this list
is moderated anywhere, but perhaps we should ignore the man behind the
curtain?

Cheers,

Simon

-- 
Anyone who goes to a psychiatrist ought to have his head examined.
-- Sam Goldwyn




RE: What about session-tracking?

2002-02-06 Thread Smith Jason



RU 
losing the session variables when hopping over to HTTPS?

If so, 
you need to set your web app to "shared"...

share=true maybe?

/Jason

  -Original Message-From: José Mª García 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, February 
  06, 2002 1:51 PMTo: Orion-InterestSubject: What about 
  session-tracking?
  Hi,
  
   We have an application and we 
  have problems with the sessions. Sometimes we lost the values of session 
  variables. 
  
   In Orion documentation we look 
  some information about the session tracking. But there are a few 
  information.
  
  Do you have more 
  information about the sessionwith Orion? How does Orion manager the 
  session?
  
   Thanks,
  
  


RE: Scheduler for Orion

2002-02-01 Thread Smith Jason



http://www.mail-archive.com/orion-interest%40orionserver.com/

  -Original Message-From: Milosz Witkowski 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, February 01, 2002 11:55 
  AMTo: Orion-InterestSubject: Scheduler for Orion 
  
  Hi 
  Does anybody knows something about some 
  scheduler for Orion,
  or some other solution for invoking classes 
  every ... sometimes.
  Other application servers like ATG 
  have such Scheduler
  best regards
  
  Milosz
  


RE: automatic invocation of servlet as the root-service

2002-01-31 Thread Smith Jason

Sounds like you should use a filter!

Check out the filter tutorials at orionserver.com.

/Jason

-Original Message-
From: Robert Virkus [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 31, 2002 9:27 PM
To: Orion-Interest
Cc: Orion-Interest
Subject: Re: automatic invocation of servlet as the root-service


Hello Igor  everyone out there,

thanks for your help,
I set the servlet-webdir to  in the orion-web.xml and set the
welcome file in the WEB-INF/web.xml to my desired servlet
(welcome-file-list
   welcome-filecom.scaraboo.servlet.Loadbalancer/welcome-file
/welcome-file-list)
but if I surf to the root (eg. http://127.0.0.1), I just get a 403
Forbidden
Directory browsing not allowed-Message. If I browse
http://127.0.0.1/com.scaraboo.servlet.Loadbalancer instead, my servlet
is invoked as expected...

As you know I'd like to have my serlvet invoked each time I enter the
root of the server (like in http://127.0.0.1).

any further ideas?

thanks a lot!
   - Robert




Friday, February 01, 2002, 12:09:41 AM, you wrote:


IC Hello, Robert .

IC I sent to you the same message throw orion-interest e-mail(just reply on
your message), but I am not sure you received it or not.
IC Try next:
 
IC Go to \orion\application-deployments\YourApplication... directory
created
ICYourSubApplication...
IC folder with
IC  orion-web.xml where
we
IC can init

IC servlet-webdir=/NameWebDir/
IC Default is /servlet/ 
IC You also can use: servlet-webdir=

IC I hope it's help.

IC Igor.

IC Hello everybody!
IC
IC I hope someone can give me a hint for my problem:
IC I want to try to use a servlet as the root of my web-application, so I
IC want the servlet/com.company.mystuff.MyServlet  - servlet called, when
IC I do not specify any file in my http-request.
IC
IC So I want to map my servlet to the root of the web-application; if I
IC call www.mycompany.com I want to get to my servlet, rather than
IC receiving default.jsp or index.html (or a directory-browsing not
IC allowed - message).
IC
IC Thanks in advance for your help!!!
  
-- 
Robert Virkus
scaraboo GmbH
mobile Entertainment
Georg-Wulf-Str.4-6
28199 Bremen
Germany
phone  +49 - (0)421 - 59 67 549
fax+49 - (0)421 - 59 67 567
mobile +49 - (0)171 - 35 31 635
[EMAIL PROTECTED]
www.scaraboo.de
wap.scaraboo.de


Aus Rechts- und Sicherheitsgruenden ist die in dieser E-Mail gegebene
Information nicht rechtsverbindlich. Eine rechtsverbindliche Bestaetigung
reichen wir Ihnen gerne auf Anforderung in schriftlicher Form nach. Beachten
Sie bitte, dass jede Form der unautorisierten Nutzung, Veroeffentlichung,
Vervielfaeltigung oder Weitergabe des Inhalts dieser E-Mail nicht gestattet
ist. Diese Nachricht ist ausschliesslich fuer den bezeichneten Adressaten
oder dessen Vertreter bestimmt. Sollten Sie nicht der vorgesehene Adressat
dieser E-Mail oder dessen Vertreter sein, so bitten wir Sie, sich mit dem
Absender der E-Mail in Verbindung zu setzen.

For legal and security reasons the information provided in this e-mail is
not legally binding. Upon request we would be pleased to provide you with a
legally binding confirmation in written form. Any form of unauthorised use,
publication, reproduction, copying or disclosure of the content of this
e-mail is not permitted. This message is exclusively for the person
addressed or their representative. If you are not the intended recipient of
this message and its contents, please notify the sender immediately.





RE: big text in string as object over the network:

2001-06-21 Thread Smith Jason

Is there some sort of connection time out stuff on the Oracle server?

Is there something on the Oracle server that kills connections after X
seconds?

Can you save another binary object of the same size as your String to the
BLOB field?

There is an inactivity timeout variable in the Orion datasources. Probably
won't help you, but what happens if you change that from the default of 30
to something bigger?

Good luck!

Jason

-Original Message-
From: Tobias Streckel [mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 21, 2001 3:13 PM
To: Orion-Interest
Subject: Re: big text in string as object over the network:


It dosn't work with a StringBuffer object.

I will get the same error message, I think it was a connection problem - but
I don't know what to do?

Anyone a idea?

-Ursprüngliche Nachricht-
Von: Jens Stutte [EMAIL PROTECTED]
An: Orion-Interest [EMAIL PROTECTED]
Datum: Donnerstag, 21. Juni 2001 14:36
Betreff: AW: big text in string as object over the network:


This may be related to an old Java problem, that strings over 65535
characters or so could not be serialized. I don't know, by when if ever it
was fixed by Sun, but try using StringBuffer instead. If this works, you
found the problem...

Regards,

Jens Stutte

 -Ursprüngliche Nachricht-
 Von: Tobias Streckel [mailto:[EMAIL PROTECTED]]
 Gesendet am: Donnerstag, 21. Juni 2001 13:07
 An: Orion-Interest
 Betreff: big text in string as object over the network:

 Hello,

 if I want to save a String(he is in a object which will save
 in a Oracle DB
 as a BLOB) I get by huge texts a Error:

 com.evermind.server.rmi.RMIConnectionException
 com.evermind.server.rmi.OrionRemoteException: Disconnected:
 Disconnected

 Have anyone a answer why it doesn't work?

 Thanks

 Tobi









RE: Orion at port 80 with IIS

2001-06-13 Thread Smith Jason



You 
could do a port translation at your firewall so that your.orionserver.com is on 
port 80 for the users, but really runs on port 8090 on your 
machine.

/Jason

  -Original Message-From: Karin Keur 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, June 13, 2001 9:26 
  AMTo: Orion-InterestSubject: Orion at port 80 with 
  IIS
  Hi 
  All,
  
  I 
  have Orion running on an Windows NT system with MSSQL and IIS 4.0 installed. 
  Orion is running on port 8090; IIS on port 80. I found out that a lot of users 
  can't access 8090 via their firewall. Is it possible to configure Orion so 
  that it works via the IIS, or the other way around? 
  
  The 
  IIS is serving another site build with Magic 8.3, which uses the IIS to 
  connect. The Orion server is running the Enformia EIP 4.0 
  solution.
  
  thanks!
  
  Peter Langela
  


Force Logon after X minutes

2001-06-13 Thread Smith Jason

I am custom user-authentication.

The user and groups are in a database and I am using BASIC authentication.

How can I allow users to logoff w/o them closing their browser?

How can I force them to logon again after x minutes?

Thxs,

Jason






RE: Creating keystore file from an OpenSSL created cert

2001-05-31 Thread Smith Jason

Try reading in the certificate into a byte array and then see if you can
convert it the X509 spec. 

KeyFactory kf = KeyFactory.getInstance(RSA);
X509EncodedKeySpec x509spec = new X509EncodedKeySpec(ByteArray);
PublicKey pk = kf.generatePublic(x509spec);

Maybe you can then write pk to file and try to import again.

If all you need is a self signed certificate, then you can create that with
the java key tool...

/Jason

-Original Message-
From: Peter Peltonen [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 31, 2001 4:01 PM
To: Orion-Interest
Subject: Creating keystore file from an OpenSSL created cert



I have created and self-signed an X.509 cert with OpenSSL

--snip--
root# openssl genrsa -des3 -out mysite.key 1024

root# openssl req -new -key server.key -out mysite.csr

root# /usr/local/bin/sign.sh mysite.csr

root# # openssl verify -CAfile /etc/ssl/certs/ca.crt mysite.crt 
/etc/ssl/certs/fivesync.crt: OK
--snip--


I then tried to create the keystore file:

--snip--
orion]$ keytool -keystore keystore -keyalg RSA -import -trustcacerts -file
\
mysite.crt 
Enter keystore password: TestPass
keytool error: java.lang.Exception: Input not an X.509 certificate
--snip--

The keytool is from Sun's jdk-1.3.1-fcs package. I've tried it in both Linux
and Win2k with the same result.

What to do?

t: Peter




RE: SSL Question: Possibly Offtopic

2001-05-22 Thread Smith Jason

You might be able to use a SSL terminator. 

In this case, a seperate machine acts as a proxy to your sites and handles
SSL for you. The ssl load is handled by the proxy machine and your web
servers are somewhat protected. 

This is commonly used when you want to use SSL, and you still want your
Intrusion Detection System (IDS) to be able to read the traffic. SSL between
the client and terminator, clear text between the terminator - IDS - web
server.

You MIGHT be able to use the tunnel servlet and ssl to do this. 

/Jason

-Original Message-
From: John McGowan [mailto:[EMAIL PROTECTED]]
Sent: Monday, May 21, 2001 3:57 PM
To: Orion-Interest
Subject: SSL Question: Possibly Offtopic


Is it possible to set up two different sites using Orion with only 1 IP
address, and set up SSL for each of them.  I didn't have any problems
setting up the two non-secure virtual hosts, but when I tried to setup
up SSL virtual hosts, I couldn't get the server to send the right
Certificates.

Is this even possible?

Is there some SSL limitation that only allows 1 Certificate per IP
address?

/John




RE: Standar Template

2001-05-11 Thread Smith Jason

Maybe you could use a filter?

Check out the filter tutorial at http://www.orionserver.com/

/Jason

-Original Message-
From: Dave Ford [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 10, 2001 9:17 PM
To: Orion-Interest
Cc: Dan Tharp
Subject: Standar Template


I want to create a web app in which every page on the site has a standard
header along the top and a standard menu along the left edge (a pretty
standard thing).

I came up with 2 ways of doing this:

1. Use a table tag and jsp:include tags on EVERY page:

table
  tr
tdjsp:include page=standardHeader.jsp//td
  /tr
  tr
td colspan=2
table
  tr
td valign=topjsp:include page=/menu.jsp //td
td valign=top
 THIS IS WHERE THE PAGE-SPECIFIC CONTENT (i.e. the body)*
/td
  /tr
/table
/td
  /tr
/table

2. Invert the above solution to create one master template (or controller)
and have the content page name passed in as a parameter. Here would be the
master template-controller page:

table
  tr
tdjsp:include page=standardHeader.jsp//td
  /tr
  tr
td colspan=2
table
  tr
td valign=topjsp:include page=/menu.jsp //td
td valign=top
 jsp:include page=%=request.getParameter(contentPage)% /*
/td
  /tr
/table
/td
  /tr
/table

The key difference between these two architectures are best understood by
looking at the 2 lines with the * at the end. Also, in option 2, there is
only one copy of the above code. In option 1, there is one copy per content
page

Q1: Does anyone have any preference between options 1 and 2?
Q2: Is there a better way of achieving this result?
Q3: Do either have any negetive drawback I need to consider? (I will be
converting an entire site)

By the way, I'm currently achieving this effect VERY easily using good old
client-side html frames. But due to popular demand, framse must go.

Dave Ford
Smart Soft - The Java Training Company
http://www.smart-soft.com






RE: Hardware load balancer

2001-03-26 Thread Smith Jason

Not sure if this helps but

With web servers like IIS, people generally store the session info in a
database when using a 3rd party hardware load balancer. 

/Jason

-Original Message-
From: calvin matthews [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 26, 2001 3:42 PM
To: Orion-Interest
Subject: Hardware load balancer


Hi,

How can you replace the loadbalancer application with a hardware load
balancer, such that all servers are accessing the same application and the
session integrity is maintained?

Has any one done it?

Thanks,

Calvin





Extending Orion with JCE 1.2.1

2001-02-27 Thread Smith Jason

Has anybody tried to use Java Cryptography Extension (JCE) 1.2.1 with Orion?
I am able to use the JCE libraries by placing all of the JCE jars in one
directory, setting the jars in my classpath and dynamically registering the
provider like this: java.security.Security.addProvider(new
com.sun.crypto.provider.SunJCE());.

Take a look at the class file further down - I can run that from the command
prompt with no probs. However, I would like to be able to submit the
arguments via Orion/jsp. The point of this exercise is to encrypt / decrypt
server side files based on a password. 

I have tried copying all of the JCE jar files to the orion/lib folder. It
seems like Orion is picking up the jar files ok. However, I can't get it to
work right. 

Also, I tried setting the class path using the -cp argument when starting
Orion, but the result was that Orion did not pick up the JCE jar files at
all. 

Sometimes I get this error. 

500 Internal Server Error
java.lang.ExceptionInInitializerError: java.lang.SecurityException: Cannot
set up certs for trusted CAs
at javax.crypto.b.clinit([DashoPro-V1.2-120198])
at javax.crypto.SecretKeyFactory.getInstance([DashoPro-V1.2-120198])
at test.jce.Password.doEncrypt(Password.java:47)
at test.jce.Password.main(Password.java:29)
at /jsp/Encrypt.jsp._jspService(/jsp/Encrypt.jsp.java:39) (JSP page
line 11)
at com.orionserver.http.OrionHttpJspPage.service(JAX)
at com.evermind.server.http.HttpApplication.xj(JAX)
at com.evermind.server.http.JSPServlet.service(JAX)
at com.evermind.server.http.d3.sw(JAX)
at com.evermind.server.http.d3.su(JAX)
at com.evermind.server.http.ef.s1(JAX)
at com.evermind.server.http.ef.do(JAX)
at com.evermind.util.f.run(JAX)

Other times I get this error. 

500 Internal Server Error
java.lang.NoClassDefFoundError
at javax.crypto.SecretKeyFactory.getInstance([DashoPro-V1.2-120198])
at test.jce.Password.doEncrypt(Password.java:47)
at test.jce.Password.main(Password.java:29)
at /jsp/Encrypt.jsp._jspService(/jsp/Encrypt.jsp.java:39) (JSP page
line 11)
at com.orionserver.http.OrionHttpJspPage.service(JAX)
at com.evermind.server.http.HttpApplication.xj(JAX)
at com.evermind.server.http.JSPServlet.service(JAX)
at com.evermind.server.http.d3.sw(JAX)
at com.evermind.server.http.d3.su(JAX)
at com.evermind.server.http.ef.s1(JAX)
at com.evermind.server.http.ef.do(JAX)
at com.evermind.util.f.run(JAX)

I am pretty much clueless on this one...

Help!

Here is all the code. 

Thanks,

Jason
--JSP--
%@ page language="java" import="java.util.*,test.jce.*"%
%
try{
if(request.getParameter("txtCommand") != null)
{
test.jce.Password password = new test.jce.Password();
String[] args = {request.getParameter("txtCommand"),
request.getParameter("txtPassword"),
request.getParameter("txtFileIn"),
request.getParameter("txtFileOut")};
password.main(args);
}
}catch(Exception e)
{
System.out.println("Error: " + e);

}


%
html
headtitleJSP Page/title/head
body
center
form action="Encrypt.jsp" method="post"
table
trtd
Command:/tdtdinput type="text" name=txtCommand/td
trtd
Password:/tdtdinput type="text" name=txtPassword/td/tr
trtd
FileOut:/tdtdinput type="text" name=txtFileOut/td/tr
trtd
FileIn:/tdtdinput type="text" name=txtFileIn/td/tr
trtd
input type=submit value=submit/td/tr
/form
/center
/body
/html
END JSP

Password Class
/*
 * Password.java
 *
 * Created on February 26, 2001, 10:56 AM
 */

package test.jce;
import javax.crypto.spec.*;
import javax.crypto.*;
import java.io.*;
import javax.crypto.CipherOutputStream;

/**
 *
 * @author  jasm
 * @version
 */
public class Password extends Object {

/** Creates new Password */
public Password() {
}

/**
 * @param args the command line arguments
 */
public static void main (String args[]) throws Exception{
if(args[0].equalsIgnoreCase("encrypt"))
doEncrypt(args[1],args[2],args[3]);
if(args[0].equalsIgnoreCase("decrypt"))
doDecrypt(args[1],args[2],args[3]);
if(args.length == 0)
{System.out.println("usage: decrypt password inputFile
outputFile");
System.out.println("OR");
System.out.println("usage: encrypt password inputFile
outputFile");
}
}
public static void doEncrypt(String password,String inputFile, String
outputFile) throws Exception
{
java.security.Security.addProvider(new
com.sun.crypto.provider.SunJCE());
byte[] salt = {(byte)0xc9, (byte)0x36, (byte)0x78, (byte)0x99,
(byte)0x52,(byte)0x3e,(byte)0xea, (byte)0xf2};
PBEParameterSpec paramSpec = new PBEParameterSpec(salt,20);