Applets, Servlets, Security issues

2001-03-17 Thread Caprio, Mike



Hi folks,

I'm hoping someone on the list can point me in the right direction
on a problem I'm having with applet to servlet communication.
Specifically, I'm getting:

java.security.AccessControlException: 
access denied (java.lang.RuntimePermission modifyThreadGroup)

when I send an event to the applet that should start the applet to 
servlet communications.

Another developer has given me several classes, developed in JBuilder, 
that I'm now trying to install into Tomcat.  I've created entries in 
the appropriate conf files for a new web application, and set 
crossContext="true" so that I can get servlet contexts.  I've set 
tomcat.policy to grant all permissions for the appropriate webapp
directory.  I've also changed the java.policy file in the JRE security
directory to grant all permissions to the absolute URL that the webapp
is at.

I'm pretty much at the end of my rope.  Can anyone out there give me
a hand?


Mike Caprio
Software Engineer   Microwave Radio Corporation
[EMAIL PROTECTED]101 Billerica Avenue, Building 6
978-671-5770North Billerica, MA  01862-1256



JDBC Driver

2001-03-17 Thread Tomcat



Hello
Any Idea where I can find a free implementation of 
Type 4 JDBC Driver for MS SQL 7

- Sumith


passing IIS session variable to stand-alone tomcat

2001-03-17 Thread Rajeev Jha

Hi list
we have tomcat 3.2 running as a stand-alone service on win NT4.0 m/c. we are
also running IIS 4.0 on same m/c..  applications (mostly asp pages) running on
IIS use session variables. basically when user logs on to the IIS server for
first time, his login id is subsequently used as session -id. now from one asp
page on IIS server we have to go to jsp pages running on tomcat. how can we
pass the session variable that we are using in asp pages on IIS to jsp pages on
tomcat ?

 on IIS : some asp page using session-id
 and it has link to one HTML page hosted on tomcat
this HTML page is submitted to a jsp page on tomcat
now in this jsp page we want the session-id that was being used in asp page.

would appreciate ur help

--
eagles may soar, but weasels don't get sucked into jet engines
 -- anonymous psycopath on ./
---
Rajeev Jha
Indegene Lifesystems P Ltd.
130, 1st cross , 5th block, kormangla , bang!ore - 95
voice -- +91-80- 55243 14/24

http://www.indegene.com





Applets, Servlets, Security issues

2001-03-17 Thread Caprio, Mike



Hi folks,

I'm hoping someone on the list can point me in the right direction
on a problem I'm having with applet to servlet communication.
Specifically, I'm getting:

java.security.AccessControlException: 
access denied (java.lang.RuntimePermission modifyThreadGroup)

when I send an event to the applet that should start the applet to 
servlet communications.

Another developer has given me several classes, developed in JBuilder, 
that I'm now trying to install into Tomcat.  I've created entries in 
the appropriate conf files for a new web application, and set 
crossContext="true" so that I can get servlet contexts.  I've set 
tomcat.policy to grant all permissions for the appropriate webapp
directory.  I've also changed the java.policy file in the JRE security
directory to grant all permissions to the absolute URL that the webapp
is at.

I'm pretty much at the end of my rope.  Can anyone out there give me
a hand?


Mike Caprio
Software Engineer   Microwave Radio Corporation
[EMAIL PROTECTED]101 Billerica Avenue, Building 6
978-671-5770North Billerica, MA  01862-1256



Applets, Servlets, Security issues

2001-03-17 Thread Caprio, Mike



Hi folks,

I'm hoping someone on the list can point me in the right direction
on a problem I'm having with applet to servlet communication.
Specifically, I'm getting:

java.security.AccessControlException: 
access denied (java.lang.RuntimePermission modifyThreadGroup)

when I send an event to the applet that should start the applet to 
servlet communications.

Another developer has given me several classes, developed in JBuilder, 
that I'm now trying to install into Tomcat.  I've created entries in 
the appropriate conf files for a new web application, and set 
crossContext="true" so that I can get servlet contexts.  I've set 
tomcat.policy to grant all permissions for the appropriate webapp
directory.  I've also changed the java.policy file in the JRE security
directory to grant all permissions to the absolute URL that the webapp
is at.

I'm pretty much at the end of my rope.  Can anyone out there give me
a hand?


Mike Caprio
Software Engineer   Microwave Radio Corporation
[EMAIL PROTECTED]101 Billerica Avenue, Building 6
978-671-5770North Billerica, MA  01862-1256



Problem in Tomcat and RmiServer

2001-03-17 Thread venkatesan


Hi All,
 I have one Rmi-Server which is running
in windows and Rmi-client running in Linux machine. I am sending
Html - requests to Apache web server which is in Linux machine, and then
it forwards the request to Tomcat(Servlet Runner). My Rmi
client is running here and if it is specifice request, it looks for Naming.Lookup(windows
IP), then the request is going to windows machine where it is taking care
of Rmi Server and it is taking data from Sql-Server then it sends to rmi-client

My Problem is that Rmi-Server is automatically
shutdown(i,e if i type java DBServer, it is comming to command prompt)
while second or third time it tryes to access database. So i am getting
the following error

Java.rmi.UnmarshallException : Error Unmarshaling return header: nested
Exception is

Java.net.SocketException : Connection reset by peer:
 -
 -
 NullPointerException..
can anybody tell why Rmi Server is closing
itself after servicing some request..

cheers
venkatesh



Re: Applets, Servlets, Security issues

2001-03-17 Thread William Brogden



"Caprio, Mike" wrote:
 
 Hi folks,
 
 I'm hoping someone on the list can point me in the right direction
 on a problem I'm having with applet to servlet communication.
 Specifically, I'm getting:
 
 java.security.AccessControlException:
 access denied (java.lang.RuntimePermission modifyThreadGroup)
 
 when I send an event to the applet that should start the applet to
 servlet communications.

That is a very specific exception - what are you trying to do
with a Thread when it occurs?


-- 
WBB - [EMAIL PROTECTED]
Java Cert mock exams http://www.lanw.com/java/javacert/
Author of Java Developer's Guide to Servlets and JSP 
ISBN 0-7821-2809-2





Re: ISAPI Redirector Failing on Windows 2000 w/ IIS

2001-03-17 Thread H.F.N. den Boer

Hi, I have a problem getting that famous green pointer.
What do you have in your currentcontrolset; only the full path to the 
isapi_redirect.dll ?
I assume working via registry gives a global redirect in favour of all 
websites on ISS ?

Nico

Eduardo Gamez wrote:

 Hi Scott,
 
 I also had that problem yesterday and it so happened that I had the 
 isapi_redirect.dll loaded in two places: in the registry (FilterDLLs 
 under parameter) and also in the IIS (under ISAPI Filters).  I removed 
 the one under ISAPI filters and kept the one in the registry and it 
 started redirecting for me
 
 Try that - good luck!
 
 Eduardo




JDBCRealm Seems To Work But...

2001-03-17 Thread Bean, Bryon

Hi,

I'm having a problem with the JDBCRealm example in JDBCRealm.howto. It
almost seems to be woking fine but I keep getting the error page instead of
the requested URL. Here is the output from tomcat:

2001-03-17 09:26:46 - ContextManager: JDBCRealm: JDBCRealm.authenticate:
SELECT user_pass FROM users WHERE user_name = ?
2001-03-17 09:26:46 - ContextManager: JDBCRealm: Authentication unsuccessful
for  user null
2001-03-17 09:27:16 - ContextManager: JDBCRealm: Authentication successful
for user bbean
2001-03-17 09:27:16 - ContextManager: JDBCRealm: Auth ok, user=bbean

Does this mean that I've succussfully authenticated and if so how come it
keeps returning the error page? The following is how I have things set up:

server.xml
--
RequestInterceptor className="org.apache.tomcat.request.JDBCRealm"
debug="99"
 driverName="org.gjt.mm.mysql.Driver"
 
connectionURL="jdbc:mysql://localhost/authority?user=test;password=test"
 userTable="users" userNameCol="user_name" userCredCol="user_pass"
 userRoleTable="user_roles" roleNameCol="role_name" /

web.xml
---
security-constraint
  web-resource-collection
 web-resource-nameAdministration Area/web-resource-name
 url-pattern/jsp/admin/protected/*/url-pattern
 http-methodPOST/http-method
 http-methodPUT/http-method
  /web-resource-collection
  auth-constraint
 role-nameadminRole/role-name
  /auth-constraint
/security-constraint
login-config
  auth-methodFORM/auth-method
  realm-nameMTRG Administration Authentication Area/realm-name
  form-login-config
form-login-page/jsp/admin/login/login.jsp/form-login-page
form-error-page/jsp/admin/login/error.jsp/form-error-page
  /form-login-config
/login-config

MySql tables [authority]


mysql select * from users;
+---+---+
| user_name | user_pass |
+---+---+
| test  | test  |
| tomcat| tomcat|
| bbean | password  | 
| sbeck | password  |
+---+---+

mysql select * from user_roles;
+---++
| user_name | role_name  |
+---++
| bbean | adminRole  |
| sbeck | userRole   |
| test  | tomcatRole |
| tomcat| tomcatRole |
+---++

mysql select * from roles;
++
| role_name  |
++
| adminRole  |
| tomcatRole |
| userRole   |
++

Many thanks to you in advance!

Bryon Bean
[EMAIL PROTECTED]



Java Shutdown?? - Help

2001-03-17 Thread Mick Sullivan

Hi all
Everytime I load a certain JSP page in my application I get a Java alert box 
saying:
"This program has performed an illegal operation and will be shutdown.   If 
the problem persists, contact the vendor"
There is a 'details' button with loads of Machine code in it.
When I press the 'close' button the Tomcat window shuts down :-(
I just want to know if this a known bug in Tomcat or has it something to do 
with my code,
Thanks in advance, Mick
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




TC4.0 can't run multiple apps

2001-03-17 Thread David Wall

When I have Apache configured to use virtual hosts, and one virtual host
uses an app called 'pub' and the other virtual host uses an app called
'ssd', how do I configure catalina to run them both?

In the server.xml file, can I just use to Engine sections in Service, with
each Engine pointing to a different defaultHost and appBase, or do I need to
define two separate Services using different port numbers?  I couldn't
really get either to work for me.

Thanks,
David




re: Client authentication with Tomcat + SSL

2001-03-17 Thread R.W. Shore

Version: Tomcat 4.0b1
OS: Win2000 SP1

This is a follow-up to a message posted by Jeff Lansing on 13-Feb-2001. His
problem, like mine, is the following. If Tomcat is configured to require
client authentication ono an SSL socket, Microsoft's IE (5.5 SP1 running
with 128-bit encryption) presents the browser-side user with an empty
which-certificate-to-send dialog box. That is, IE is declining to send any
client certs to Tomcat. This is not (at least in my case) a Tomcat
configuration problem, since a normal (no client auth) SSL connection to the
same Tomcat works just fine. I have some info to add to Jeff's message:

o I turned on the JSSE debugging via
set CATALINA_OPTS=-Djavax.net.debug=all
With debugging turned on, I can verify that Tomcat is in fact sending a list
of CAs from the cacert repository that includes the signer of the cert
loaded in the browser. In fact, the same CA signed both the Tomcat cert and
the user cert. The CA is an internal Templar Corp CA running Microsoft's
certificate authority stuff on a Win2000 server. Visual inspection seems to
imply that the problem isn't in Tomcat (but read on...). If anybody really,
really wants to double-check me, I'll be happy to send the session.txt file
by return mail -- it's almost 200k long, though.

o The browser does create a proper dialog box if the server is Microsoft's
IIS configured to ask for client authentication. The IIS certificate was
generated by the same CA as Tomcat's and is structurally the same (same
extensions etc).

o Netscape 6.0 will deliver a client cert if asked by Tomcat. The Netscape
cert in question is identical to the one loaded into IE -- to get a cert
into Netscape, I had to export the public/private keys from IE and load 'em
into Netscape. I ran Tomcat with JSSE debugging turned on and verified that
the user certificate was in fact being delivered to Tomcat.

I'm at a loss to figure out what's going on. It's starting to smell like a
config problem in IE, but I can't figure out what it could be -- and anyway,
a config problem in IE doesn't explain why IE happily delivers the client
cert to IIS. Anybody have any clues??

R.W. Shore
Templar Corporation
Alexandria VA




Re: Adding log4j classes to a standalone tomcat server

2001-03-17 Thread Craig R. McClanahan



On Fri, 16 Mar 2001, Jeff Finley wrote:

 How do you add classes that Catalina will recognize in a Tomcat 4.01 beta standalone 
configuration.  Catalina overrides the system classpath and I'm not seeing anywhere 
in any of the server .xml files to add a dir for additional classes.  Thx.br 
clear=allhrGet your FREE download of MSN Explorer at a 
href="http://explorer.msn.com"http://explorer.msn.com/abr/p
 

If you want the classes visible to all webapps, put them in a JAR file
under $TOMCAT_HOME/lib.  For a single web app, put them in either
WEB-INF/classes (unpacked) or WEB-INF/lib (in a JAR file) of your webapp.

Craig McClanahan





TC4.0 catalina classloader exception

2001-03-17 Thread David Wall

I am getting the following exception running Tomcat 4.0b1:

RemoteException occurred in server thread; nested exception is:
java.rmi.UnmarshalException: error unmarshalling arguments; nested
exception is:
java.lang.ClassNotFoundException: access denied to class loader
java.rmi.ServerException: RemoteException occurred in server thread; nested
exception is:
java.rmi.UnmarshalException: error unmarshalling arguments; nested
exception is:
java.lang.ClassNotFoundException: access denied to class loader
java.rmi.UnmarshalException: error unmarshalling arguments; nested exception
is:
java.lang.ClassNotFoundException: access denied to class loader
java.lang.ClassNotFoundException: java.security.AccessControlException:
access denied (java.io.FilePermission
/usr/local/apache1.3.19/WebPub/pub/WEB-INF/classes/- read)
no stack trace available


I'm not sure what is going wrong.  I am starting catalina with the
"-security" option which I need since I'm using RMI.  I even made the
catalina.policy file contain only:

grant {
permission java.security.AllPermission;
};

So there really should be no security exception.  Anybody know why this
exception is being thrown?

Thanks,
David




Re: JDBC Driver

2001-03-17 Thread Jeff Finley
Hehehehe, it's not MS it's M$..heheheh   - Original Message - From:Tomcat Sent:Saturday, March 17, 2001 3:45 AM To:TomcatUsers Subject:JDBC Driver Hello Any Idea where I can find a free implementation of Type 4 JDBC Driver for MS SQL 7  - Sumith Get your FREE download of MSN Explorer at http://explorer.msn.com


Link jdkhome and NetBeans

2001-03-17 Thread Steve Aras

 I'm using NetBeans Java IDE and TomCat. NetBeans was working correctly unitl I, on
 the advice of an experienced TomCat developer, installed the Java JDK in a directory
 and link to it, setting JAVA_HOME equal to the link.  Now I know the link is good,
 because everything concerning java (compilation, running) works.

 There is a switch in the run executable of NetBeans that allows you to set the
 jdkhome directory.  If I use that switch, NetBeans works fine.

 What would cause NetBeans to fail to start when only looking at the link?




Re: JDBC Driver

2001-03-17 Thread Rob Tanner

Try FreeTDS (www.freetds.org, I think).  I've used their straight TDS 
driver with excellent results.  They also have a Type 4 JDBC driver as 
well.  I havn't had occasion to use it, but if it performs as well as 
the straight TDS driver, I'm sure you'll be pleased.

-- Rob

--On Saturday, March 17, 2001 03:56:07 PM +0530 Tomcat 
[EMAIL PROTECTED] wrote:

 Hello
 Any Idea where I can find a free implementation of Type 4 JDBC Driver
 for MS SQL 7

 - Sumith




   _ _ _ _   __ _ _ _ _
  /\_\_\_\_\/\_\ /\_\_\_\_\_\
 /\/_/_/_/_/   /\/_/ \/_/_/_/_/_/  QUIDQUID LATINE DICTUM SIT,
/\/_/__\/_/ __/\/_//\/_/  PROFUNDUM VIDITUR
   /\/_/_/_/_/ /\_\  /\/_//\/_/
  /\/_/ \/_/  /\/_/_/\/_//\/_/ (Whatever is said in Latin
  \/_/  \/_/  \/_/_/_/_/ \/_/  appears profound)

  Rob Tanner
  McMinnville, Oregon
  [EMAIL PROTECTED]




RE: A strange question

2001-03-17 Thread Tim Sullivan









Its very
standard for people to have sunfreeware.coms gcc and cc. Its all up to whatever program you are
building to choose between cc and gcc.




-Original
Message-
From: Martin Mauri
[mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 15, 2001
11:49 AM
To: [EMAIL PROTECTED]
Subject: A strange question



Does
anybody know what could happen if I install the gcc compiler from www.sunfreeware.com and I've still have
the built-in cc compiler installed? May gcc affect the cc behaivour? 

I'm
writing this because I have to compile the mod_jk module and I want the gcc
compiler...



thanks!



Martin








Connection Pooling Help needed

2001-03-17 Thread RameshBabu R Muthuvel


Hi

I am using Apache 1.3.12, Tomcat 3.2.1, mySQL 3.23 on Windows NT 4.0

I am trying to include connection pooling in my JSP pages using PoolMan.
Inspite of carrying out all the elaborate installation procedure, yet i
could not establish a connection.

I get the following error:

java.lang.NullPointerException
a non-SQL exception occured when requesting a connection:
java.lang.NullPointerException

java.lang.RunTimeException : ERROR: SQLManager: couldn't create connection
pool.


Can anyone help me to fix this problem. Is there any other means of
achieving connection pooling. Please reply immediately.

Thanking in advance

Ramesh babu R.M.
[EMAIL PROTECTED]





_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.


_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




AJP reconnects after restart

2001-03-17 Thread David Wall

Will the upcoming 3.3 (3.2.2?) mod_jk/AJP connectors auto-reconnect whenever
there's an error sending to tomcat?  This would be particularly useful when
restarting tomcat to not have to knock down the web server too.

David




RE: AJP reconnects after restart

2001-03-17 Thread GOMEZ Henri

Patch will be commited in a few days.
But it will be only for TC 3.3 mod_jk 

-Original Message-
From: David Wall [mailto:[EMAIL PROTECTED]]
Sent: Sunday, March 18, 2001 12:46 AM
To: [EMAIL PROTECTED]
Subject: AJP reconnects after restart


Will the upcoming 3.3 (3.2.2?) mod_jk/AJP connectors 
auto-reconnect whenever
there's an error sending to tomcat?  This would be 
particularly useful when
restarting tomcat to not have to knock down the web server too.

David




How to get apache to send all jsp's everywhere to tomcat?

2001-03-17 Thread David Fetter

Kind people,

I'm losing hair even faster than I usually do.  To process all .perl
files everywhere with mod_perl, I just say

Files *.perl
 SetHandler perl-script
 PerlHandler Apache::Registry
 Options ExecCGI
/Files

in my httpd.conf.

What is the equivalent thing for sending .jsp files to tomcat, and
where do I put it?

Big TIA for any help other than "read the manual," which I have been
doing extensively. :)

Cheers,
D
-- 
  David Fetter888 O'Farrell Street Apt E1205
   [EMAIL PROTECTED]   San Francisco, CA 94109-9046
http://fetter.org/~shackle phone: +1 415 567 2690 fax: +1 415 567 2340

It is necessary for a prince, who wishes to maintain himself, to learn
how not to be good, and to use this knowledge and not use it, according
to the necessities of the case.
   Niccolo Machiavelli
   The Prince, 1513



Re: Java Shutdown?? - Help

2001-03-17 Thread William Brogden



Mick Sullivan wrote:
 
 Hi all
 Everytime I load a certain JSP page in my application I get a Java alert box
 saying:
 "This program has performed an illegal operation and will be shutdown.   If
 the problem persists, contact the vendor"
 There is a 'details' button with loads of Machine code in it.
 When I press the 'close' button the Tomcat window shuts down :-(
 I just want to know if this a known bug in Tomcat or has it something to do
 with my code,
 Thanks in advance, Mick

Straight Java code can't perform an illegal operation -possibilities
are:
1) your code calls a native method that has a bug
2) your JVM has been damaged




tomcat 4.0b1 and SSL

2001-03-17 Thread Mark W . Webb

I am trying to get SSL working with tomcat.  I have been unsuccessful in 
getting tomcat 3.2.1 to work with SSL, I can get apache to use SSL, and I can 
get tomcat 3.2.1 to work with servlets and JSP(See posting from earlier 
today).  My question is, is tomcat4 going to be any easier or better to work 
with SSL?  I really want this to work and have been trying for the past 3 
days almost nonstop to get this project going.  I am looking at the tarball 
and do not see any SSL information or docs imilar to tomcat 3.2.1 in it.  So 
if anyone could help out, it would be greatly appreciated.



RMI with the IIS/Tomcat behind a firewall

2001-03-17 Thread Sascha Richter

Hello,

I have an IIS webserver working with tomcat behind a firewall and we 
want to use RMI objects on our server. Because of the firewall we can 
not conntact to port 1099 directly. It seems to exists only two 
solution, the CGI script called java-rmi.cgi, which is available in the 
unix distribution of the jdk and a servlet called rmiservlethandler. I 
don't know how to adapted the CGI script to use it with the IIS webserver.
So a context /rmiservlethandler is created on our server and it works.
But the problem is, that RMI clients call /cgi-bin/java-rmi.cgi by 
default to tunnel a firewall. The readme says, that all calls for 
/cgi-bin/java-rmi.cgi should be redirected to the servlet.
A redirect within the IIS fails, because the redirects doesn't work in a 
transparent manner, but by sending the client a redirect command (30X 
Error), requesting  the client to reload the new url. This method seems 
not to work for RMI clients.
Another method is, to map /cgi-bin/java-rmi.cgi to the ajp12 worker and 
to create a new context cgi-bin under tomcat and to rename the 
servletname rmiservlethandler in java-rmi.cgi. If the url 
/cgi-bin/servlet/java-rmi.cgi is called, it works, but if the url 
/cgi-bin/java-rmi.cgi is called, the servlet is naturally not found.
I need to call /cgi-bin/java-rmi.cgi and not 
/cgi-bin/servlet/java-rmi.cgi to tunnel our firewall.
Is there a way to map a request without having the "/servlet" path 
included ?
Exists other methods to tunnel a firewall ?

Thanks
Sascha




RE: Using Apache/Tomcat in high-traffic site

2001-03-17 Thread Tim Sullivan


Hello Gavin,

I am considering doing the same thing on almost the same hardware (e4500 +
e1).  

Did you end up finding any performance examples or otherwise for this?  If
so, could you forward it my way?

Thanks in advance,

-Tim

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]

Sent:   Wednesday, March 14, 2001 12:55 PM
To: [EMAIL PROTECTED]
Subject:Using Apache/Tomcat in high-traffic site




Hi,

I am looking to use Apache and Tomcat in my company's production web site.
Before I can convince management that this is a good idea I need some
information so I am confident.  If anyone can help I'll be very grateful.


First of all I'll give you a picture of the overall architecture that I want
to
create:

1)  For fault-tolerance and scaleability we want to have several instances
of
Apache running over a number of machines.  These will be load balanced by a
pair
of Cisco Local Director boxes, because we already own a couple of them.
From a
brief look through the operating manual on Cisco's web site I get the
impression
that Local Director cannot support "sticky" load-balancing.  Please correct
me
if I'm wrong.

2)  We will run several instances of Tomcat (version 3.2.1 most likely) on
our
back-end servers.  These are a couple of Sun E1s with 32 processors
each.
These are partitioned up into domains, so that we end up with 12 processors
on
each machine dedicated to running Tomcat.  Each domain has 2GB of RAM.
There
are other domains dedicated to databases, etc...

3)  Each instance of Apache will be using mod_jk in a "sticky" load-balanced
configuration.  Every instance of Apache (and so mod_jk) will have workers
defined for every instance of Tomcat on both E1s.  In other words, a
Tomcat
instance may receive a request from any instance of Apache.


The things I need to know :)

1)  Each request to our site will be assigned seemingly at random to one of
the
Apache instances by the Cisco boxes.  Can the "sticky" part of mod_jk cope
with
this?  i.e.  Will mod_jk pass the request to the correct Tomcat instance
even
though it does not share context information with the other Apache
instances?

2)  What is the best way of running Tomcat on the large E1s?  Should I
have
just a few very large processes (say 2 x 800MB max heap) for Tomcat or
should I
run many smaller processes (say 16 x 100MB max heap)?  Has anyone got any
experience with making Tomcat (or any Java based server) scale to machines
of
this size and power?  I want to get good performance, but I don't want to
compromise stability.

3)  Has anyone used Tomcat in a mission critical environment?  I use it in
development all the time and I'm very happy with it, but I'd like to get
some
impression of how it holds up.

4)  Are there any security considerations with this configuration?  We have
firewalls, intrusion detection kit, etc... for which we have a dedicated
maintenance team.  I'm really only interested in the software here.  Has
anyone
used the new Java 2 security features with Tomcat?


Thank you very much indeed!

Cheerio, Woody.






_

Internet communications are not secure. This message is confidential to the 
addressee. Any copying or distribution of it by anyone without the
addressee's 
consent may be unlawful. If you are not the intended addressee, please
inform 
us immediately and then delete this message.

Virginmoney Limited is regulated by the Personal Investment Authority for 
investment business only. Virginmoney Limited is registered with the
Mortgage 
Code Compliance Board and is a member of the General Insurance Standards 
Council.

Virginmoney Limited's registered office: Discovery House, Whiting Road, 
Norwich, NR4 6EJ. Registered in England no. 3427512.
_

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]



Tomcat 3_3-M2 URL Session Rewriting?

2001-03-17 Thread Thomas Riemer

I'm trying to get 3.3 M2 URL Session rewriting to work.

My server.xml includes:

   SessionId cookiesFirst="false" noCookies="false" /

My web.xml includes:

login-config
 auth-methodFORM/auth-method
 realm-nameSOMEREALM/realm-name
 form-login-config
   form-login-page/login.jsp/form-login-page
   form-error-page/login.jsp/form-error-page
  /form-login-config
 /login-config

My login form looks like:

FORM name='loginForm' method="POST" action='%=
response.encodeURL("j_security_check")%'
input TYPE="text" NAME="j_username" SIZE=20 MAXLENGTH=40 tabindex=1
INPUT TYPE="password" NAME="j_password" SIZE=20 tabindex=2
/FORM


Here is the behavior I'm seeing:
1) with cookies turned on for my browser, I get a "Basic" Auth popup
request for authentication.
  I don't really understand why I am getting this, since I've
specifically indicated FORM as my auth-method

2) When I turn on cookies on my browser, and change SessionID on
server.xml to:
 SessionId cookiesFirst="true" noCookies="false" /

  I get a form page and authentication works fine.

I'm wondering if anyone has URL Session rewriting with auth FORM
working?
If so, is there any experiences you can offer to help me out with
getting URL session rewriting to work.

-Tom





Navigation errors

2001-03-17 Thread Michael Stanley

Everything seems to be working fine.  I can build peer and simple apps.
However when I go to view the servlet
http://localhost:8080/newapp/servlet/newapp

I see the Index screen and the layout works but the navigations give me
these errors:

Error processing navigation template:/DefaultTop.vm

All the files are in the right place and the template path is set
correctly.  Why wouldn't these load?  The velocity log file doesn't tell
me anything about it either.

Please help.  I keep hitting Wall after wall.

Mike Stanley




problem with JSP displaying broken image link

2001-03-17 Thread jdh



I have been having trouble displaying images 
from my JSP(s). It seems like all my images that exist on http://www.geocities.com come up 
as broken image links. Is there a bug in the JSP 
server? I can display those images as plain .html file but not in my 
JSP.

Thanks.


Re: Excel to XML

2001-03-17 Thread skolski

Hello,

the easiest way could be to use the .csv Format in Excel instead of .xsl.
Then Excel stores the files in a very easy to handle format (cells
seperated by commas). Then jou can read this file in your Java program as a
text file and generate your xml file.

Sascha Kolski





Tomcat SSL context or directory

2001-03-17 Thread Tu-Thach



I got Tomcat and SSL working great. However, I am 
wondering if it is possible to use SSL in a specific directory only. As it 
is right now, the whole site can be SSL, but what if I only want certain 
directory or context? Without using Apache as well. Any 
thoughts?

Thanks,
Tu-Thach