problem with jsp:include tag...

[Rahul Kumar Jain]

hi,
 
i am having a problem with  
tag. i am trying to include an html page using  .. but i get an error like:
 
[26/Jul/2001:12:34:54] config ( 7990): for 
host x.x.x.x  trying to POST file.html, internal-redirect reports: no way 
to service request for file.html 
[26/Jul/2001:12:34:54] warning ( 7990): 
RequestDispatcher: include call failed
 
i am using iPlanet webserver 4.1 on Solaris 
8.
 
can anyone help regarding the 
problem...
 
thanks and regards,
 
rahul


 
 

Re: question about WEB-INF/lib

[Craig R. McClanahan]

On Wed, 25 Jul 2001 [EMAIL PROTECTED] wrote:

> 
> 
> Craig, this last bit caught my attention...
> 
> Currently our application uses .jar files spread out all over the
> place, will tomcat v4 not work under those conditions?
> 

If you expect those JAR files to be visible to all of your web
applications, then the answer is no ... until you copy those JAR files
into the "lib" directory of your Tomcat 4.0 distribution.

The CLASSPATH variable is ignored by the (standard) Tomcat 4.0 startup
scripts, which very carefully set the CLASSPATH required to run
Tomcat.  You can certainly change these scripts (it's open source, yadda
yadda) but you will quickly venture into unsupported territory, where you
have to solve your own mysteries about how class loaders work :-).

> thanks
> -g
> 

Craig McClanahan

Re: JDBC and MySQL in Linux and MacOSX

[Craig R. McClanahan]

On Tue, 17 Jul 2001, Teiji Sawa wrote:

> 
> #java JDBCTest.java
> java.sql.SQLException: Server configuration denies access to data source

This exception means that the MySQL permissions for the database you are
trying to access to not allow a connection from the host you are running,
with the username and password you specify.  See the MySQL manual for how
to set these permissions (which are *definitely* some of the most obtuse
configuration requirments I have *ever* seen :-).

Craig McClanahan

Re: Oracle JDBC in CLASSPATH for Tomcat 4.0

[Craig R. McClanahan]

On Tue, 17 Jul 2001, Scott Brinker wrote:

>
>   D:\oracle\ora81\jdbc\lib\classes12.zip
> 

Tomcat 4 looks only for JAR files, not ZIP files.

Craig McClanahan

Re: ssi and java heap

[Craig R. McClanahan]

On 17 Jul 2001, Dwaipayan  wrote:

> i have a few queries:
> can SSI be used when i am using tomcat as stand alone container?
> 

Tomcat 4.0 includes support for server-side includes, in files that end in
".shtml".

> i am doing my first project on tomcat starting with creating a project
> dir and copying the directory structure of the examples dir. now when
> running jsp which have beans accessing my local database, i get some
> memory related problems.this is supposedly due to the jsp
> container,servlet container,tomcat http server and oracle db running
> on the same machine(64mb ram,433mhz).how can i increase the JVM memory
> area(heap) for my webapp?
> 

You can pass command line options to the "java" command that actually runs
Tomcat by setting the TOMCAT_OPTS (Tomcat 3.x) or CATALINA_OPTS (Tomcat
4.0) environment variable.  For example, on Linux running Tomcat 4.0, you
might do something like:

  export CATALINA_OPTS="-Xmx128m"
  $CATALINA_HOME/bin/startup.sh

to set the maximum heap size to 128 megabytes.

> kindly suggest.
> i must say so long ,u people hve been of great help!!
> 
>  
> 
> ddr
> 


Craig McClanahan

Re: Simple Tomcat Install on Win98

[Jim Rudnicki]

> I'm having problems installing Tomcat on my Win98Se machine.  Below are
the directions from Jakarta for installing Tomcat.

Go here:

http://www.geocities.com/jdrudnicki/

and get JustGo.

Jim

RE: The 4.0b5 doesn't recognize a servlet class

[Craig R. McClanahan]

On Wed, 18 Jul 2001, Vernon Wu wrote:

> 
> Hi,
> 
>  
> 
> As you suggested, I moved the j2ee.jar from the web-inf\lib to
> common\lib. And then I restarted the Tomcat 4.0b5. Here is what I got:
> 

What classes do you think you need to access from "j2ee.jar" that are not
already available to web applications?

If this is the j2ee.jar file from J2EE 1.3, it already includes a complete
copy of Tomcat 4, so duplicating the classes will cause nothing but grief.

Craig McClanahan

RE: keeping sessions when switching from http to https

[Brigger Patrick]

I access a JSP SessionTest.jsp using http. The jsp contains a link which
looks like:

go to new link

Nothing is added to the encoded url, i.e. no url rewriting takes place.

When I access the same JSP page using https to start with, the rewriting
works fine.

I wonder if it has something to do how the virtual servers (the http and the
https) are set up?

Pat

P.S. To the best of my knowledge, this e-mail should be sent in plain text
format, not html, at least that is what my browser tells me. Please advice
if incorrect.



-Original Message-
From: Li Liang [mailto:[EMAIL PROTECTED]]
Sent: Mittwoch, 25. Juli 2001 20:09
To: [EMAIL PROTECTED]
Subject: RE: keeping sessions when switching from http to https


I guess that's the way Tomcat parses the session info from request. When
it gets the cookie, everything is fine that it can get "jsessionid" from
the cookie and passes it back.

But without cookie, it needs to rewrite the url. I saw somebody said
that "https" and "http" are different schemes that
HttpServletResponse.encodueURL() cannot encode the existing session id
(for "http") into the "https" URL, thus practically prevents the session
passed on to "https".

This IS a problem. Many handheld devices don't support cookie at all. I
am supprised that nobody has declared successfully solving this problem
yet.

Brigger, can you please check when turning off cookie, is the
"jsessionid" correctly encoded into the returned "https" url?

Thanks.
Li

-Original Message-
From: William Kaufman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 11:04 AM
To: '[EMAIL PROTECTED]'
Subject: RE: keeping sessions when switching from http to https


Are you encoding the cross-protocol links (with
HttpServletResponse.encode[Redirect]URL())?

The only reason I ask is that it seems strange that it does OK with
cookies
but not with URL encoding: the code paths are similar, so I'd expect it
to
fail with both or succeed with both.

-- Bill K.

> -Original Message-
> From: Brigger Patrick [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, July 24, 2001 11:05 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: keeping sessions when switching from http to https
>
>
> When I try with cookies enabled, it works both on Netscape and IE 5.
>
> Cookies disabled does not work on either.
>
> Pat
>
> -Original Message-
> From: Mike Spreitzer [mailto:[EMAIL PROTECTED]]
> Sent: Dienstag, 24. Juli 2001 19:13
> To: [EMAIL PROTECTED]
> Subject: Re: keeping sessions when switching from http to https
>
>
> Be careful when you experiment and report on this.  I have
> found that IE 5
> carries cookies from http to https but Netscape 4 does not. 
> I have only
> tested this with cookies, not URL-rewriting.  I'm grumped by
> this problem,
> but it's not critcal for me yet --- for my current site, I
> think I can get
> away with only having sessions on the https side.
>
> Mike
>

Re: project tomcat 4

[Craig R. McClanahan]

On Tue, 17 Jul 2001, Reynir Hübner wrote:

> Does anyone know when the new tomcat 4 will be finished and when a final
> release is scheduled ?
> 

The current plan is to release Tomcat 4.0 final when the underlying
servlet 2.3 and JSP 1.2 specs go final, which is likely within a few
months.  In the mean time, the developers generally consider the Tomcat
4.0 stand-alone code to be completed and of release quality -- the current
focus is on bug fixes and performance improvements.  There is still active
development work going on with the web connector, however.

As of today, for example, there are only two outstanding bug reports
against Tomcat 4.0 stand alone, and both of them are awaiting test cases
that illustrate the problem.  Please help us ensure the quality of Tomcat
4.0 by downloading beta 6, and trying your applications under it.  Report
any bugs you find to:

  http://nagoya.apache.org/bugzilla/


> thanx
> -r
> 

Craig McClanahan

RPC to stop and start instances of Tomcat

[Abhinav Keswani]

Title: RPC to stop and start instances of Tomcat





Gday


I have been trying to stop and start Tomcat with an RPC framework (using perl and 
modules such as Penguin and PlRPC).


Upon running a daemon process that simply listens for requests to stop and start
a tomcat instance, I find that the stopping and starting works fine.


Say then that the daemon was listening on port 2000.


If I kill the daemon, then I find that the last restarted instance of Tomcat has bound
itself to port 2000.  


So - step by step:


[java@myhost bin]$ ps -ef| grep pen
java 19239 19003  0 15:28 pts/0    00:00:00 perl ./penguind
java 19512 19003  0 15:31 pts/0    00:00:00 grep pen


So - my RPC listener has pid 19239.


[java@myhost bin]$ netstat -lp | grep 18118
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
tcp    0  0 *:2000 *:* LISTEN  19239/perl  
tcp    0  0 *:2000 *:* LISTEN  19239/perl  


And it is listening on port 2000.


[java@myhost bin]$ kill 19239
[1]+  Terminated  ./penguind


I kill the daemon.


[java@myhost bin]$ netstat -lp | grep 18118
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
tcp    0  0 *:2000 *:* LISTEN  19440/java  


Then I find that the port is bound up to the tomcat instance that was last restarted.


I have nohupped scripts, backgrounded them as well, used fork && exit to try to dis-associate
the perl code from the tomcat stop|start scripts.  Nothing at all seems to stop there being
a parent|child relationship between the perl listener and tomcat - which seems to me to be
the only way that tomcat will bind to the port that the perl code was listening on.  


What is going on??  This behaviour is displayed when using penguin and when using plrpc.


Any ideas?


thanks,
Abhinav


    __o   Abhinav Keswani
  ~~ ~ _\<,_  Unix Systems Administrator
  (^)/(^) News Interactive
  02 9004 5598

Re: what's wrong here?

[Craig R. McClanahan]

On Tue, 17 Jul 2001, Aditya Anand wrote:

> Hi what is wrong with this code?
> 
> ic = new InitialContext();
> Object myObj = new MyObject();
> ic.rebind("java:comp/env/my_object", myObj);
> // I even tried "java:/comp/env/my_obj"
> ic.close();
> 
> I get a NamingException saying the context is
> readonly.
> I am using Tomcat 4.0 beta5 on NT / JVM 1.3.0_02

You get this error because the default naming context provided by Tomcat 4
is read only.  :-)

This context contains entries accumulated from your web.xml file (things
like  and ), plus objects configured in the
conf/server.xml file.  It is not designed for storage of your own objects.

> 
> any suggestion?
> 
> Adi
> 

Craig McClanahan

Re: How to pass init parameter to a JSP

[Craig R. McClanahan]

On Tue, 17 Jul 2001, Simon Chan wrote:

> Hi,
> 
> How to pass initial parameters to a JSP?  I know how to pass initial
> parameters to a servlet via web.xml file (). However, I
> don't know where to put for JSP.  This is my JSP file
> 
> ...
> <%
> String c = config.getInitParameter("cfg");
> ...
> 
> 
> Thanks in advance
> 
> 
> skc
> 

In order to do this, you will need to declare a servlet definition for
your JSP page (including the init parameter) like this:

  
My Page
/mypage.jsp

  cfg
  The Parameter Value
  

  
My Page
/foo
  

Now, when you access the following url (assuming /myapp is the context
path to your web app):

  http://localhost:8080/myapp/foo

the page "/mypage.jsp" will be loaded, and it will have access to the
servlet initialization parameter you have defined above.  Note that you
could set the url pattern to /mypage.jsp if you wanted to, but it is
crucial to actually have a servlet mapping -- otherwise, your page is
handled by the default JSP servlet (which does not have any
application-specific initialization parameters in its servlet definition).

Craig McClanahan
  

Ignorant Newbie Questions re TOMCAT and NT4

[Thamm, Russell]

Hi,

I have installed jakarta-tomcat-4.0-20010717 onto an NT machine.

1) Web Folders
===

Is there some basic incompatibility between TOMCAT WebDav and Microsoft Web
Folders?
I can open a web folder on http://localhost:8080/webdav and I can create
collections using
the new folder option. But when I try to copy resources (using cut and
paste), I keep getting
an error:

"An error occurred copying some or all of selected files."

This is the output from localhost_access_log.xx.txt:

"HEAD /webdav/test/test.txt HTTP/1.1" 404 243
"PUT /webdav/test/test.txt HTTP/1.1" 201 239
"HEAD /webdav/test/tsts.txt HTTP/1.1" 200 -
"PUT /webdav/test/test.txt HTTP/1.1" 409 255
"PUT /webdav/test/test.txt HTTP/1.1" 409 255

I note that SkunkDav merely performs a single PUT to upload a file into a
WebDav collection.

2) Relational Database


Do I need a relational database to use TOMCAT?

thanks
Russell Thamm

RE: using pre-compiled JSPs

[Craig R. McClanahan]

On Tue, 10 Jul 2001, Randy Layman wrote:

> 
> 
> > -Original Message-
> > From: Greg Trasuk [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, July 10, 2001 3:06 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: using pre-compiled JSPs
> > 
> > 
> > One big disadvantage is that if you have precompiled JSP's, 
> > your web application is no longer portable to different 
> > servers (possibly not even across Tomcat versions, although 
> > I'm not sure).  The reason is that the JSP spec does not 
> > include any guidelines for naming or implementing the 
> > generated servlet, i.e. it's implementation dependent.
> > 
> > On the other hand, you could take the generated servlet, put 
> > it into the WEB-INF/classes directory, and add a url mapping 
> > to the web.xml file, but even there, you would want to check 
> > the generated servlet to make sure it wasn't using 
> > container-dependent code. 
> 
>   I don't believe that this is correct.  If you use JSPC with the
> right arguments it will produce a web.xml file fragment that includes the
> servlet mappings and will produce standard .java files that you will need to
> compile to .class files.
> 
>   The only reason that you would have an incompability is if the other
> container didn't implement the spec correctly (which you would have if you
> moved the JSPs anyways).

Randy is correct that JSPC generates the web.xml fragment necessary to
include in your real /WEB-INF/web.xml file.  However, that is *not*
sufficient to generate an application that is portable across servlet
containers.

If you look at the servlet code that Jasper generates, you will see that
it creates references to Jasper-specific runtime classes.  Therefore,
these generated pages will only run within Tomcat (or within another
servlet container that implements the same version of Jasper).

> 
>   Randy
> 

Craig McClanahan

Re: Help for VHost...

[raghu]

Hi loic,
Can u send me ur test code and the configuration files.



"black holes are,
when GOD is dividing by zero"
- Original Message -
From: Loïc Lefèvre <[EMAIL PROTECTED]>
To: Mailing List Tomcat <[EMAIL PROTECTED]>
Sent: Wednesday, July 25, 2001 9:02 PM
Subject: Help for VHost...


>
>  Hi,
>  After many problems, my servlet run under
>  windows NT / Apache / Tomcat 3.2.3 / mod_jk.
>  This url helped me:
>
>  http://mikal.org/interests/java/tomcat/archive/view?mesg=24718
>
>  Thanks Jeff Kilbride
>
>  Loïc Lefèvre
>
>  note: if one want my servlet test java code + configuration files, email
> me,
>I'll put them here ;)
>

Re: Forbidden error, you are unable to access /examples from this server: please help, very urgent

[raghu]

hey,
can anyone give nme their 
compiled binary of mod_jk.so for apache 1.3.11.  I am running tomcat 
3.2.2
 
 
"black holes are,when GOD is dividing by zero" 

  - Original Message - 
  From: 
  Senthil 
  Kumar Rajamanickam 
  To: [EMAIL PROTECTED] 
  Sent: Wednesday, July 25, 2001 6:11 
  PM
  Subject: RE: Forbidden error, you are 
  unable to access /examples from this server: please help, very urgent
  
  With 
  the info.. I could not think of any specific reasons which might stop you to 
  set this up.. 
   
  just 
  try going through following tasks..
   
  1. ref. to mod_jk how to manual which you have 
  got along with tomcat, and set up your mod_jk with apache ( you have to mount 
  mod_jk in apache like this (hey, are u doing your own mod_jk .dll file from 
  source?if that is the case check your source for any possible error which can 
  be induced in the source??)
   
  "include  
  /jakarta-tomcat-3.2.1/conf/mod_jk.conf-auto"
  ( I 
  would recommend using conf-auto file, so that your tomcat will give all the 
  details)
   
  2.check your apache and tomcat. (just test run your 
  example servlet via  apache) 
  If 
  your example application works fine..
   
  Go 
  ahead and mount a alias directory and try calling jet speed. 
  
  in 
  case you get some error, check them in apache log and tomcat log for error 
  details, (I think that should help you solve the error)
   
  let 
  me know what is the error you are getting...So that I can try to get to the 
  core issue.
   
  Also 
  note, if you are using winNT, check for environment variables setting too for 
  tomcat_home, Apache_home and java_home settings, since in your 
  tomcat configuration files, it picks up directory details calling this 
  environment variables. 
   
  Note, check if your tools.jar file is accessible by 
  your system(it should be in system path)
   
  Hope 
  this helps..
  Cheers
  Senthil Kumar.R
   
  
-Original Message-From: raghu 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, July 25, 
2001 5:27 PMTo: [EMAIL PROTECTED]Subject: 
Re: Forbidden error, you are unable to access /examples from this server: 
please help, veryurgent
i did as u said, but still i 
am getting the same error.  I now doubt if mod_jk.so is working 
properly or not?
No, i am running only tomcat 
with apache, please help
 
 
 
"black holes are,when GOD is dividing by zero" 

  - Original Message - 
  From: 
  Senthil Kumar Rajamanickam 
  To: [EMAIL PROTECTED] 
  
  Sent: Wednesday, July 25, 2001 4:46 
  PM
  Subject: RE: Forbidden error, you are 
  unable to access /examples from this server: please help, veryurgent
  
  try mounting a Alias directory named "jetspeed" 
  and tell apache its location.. yes, as you tell mod_jk should take care of 
  it. But I don't think their would be any harm in having a alias? (I have 
  mounted all the dir with a alias name along with my mod_jk 
  configuration)
   
  one other possibility would be, check if you are 
  running IIS or PWS  with Apache, if that is the case. either stop 
  them or assign them a different port number.
   
  Regards
  Senthil Kumar.R
   
  
-Original Message-From: raghu 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, July 
25, 2001 3:10 PMTo: 
[EMAIL PROTECTED]Subject: Re: Forbidden error, 
you are unable to access /examples from this server: please help, 
veryurgent
Hello,
I have included the 
mod_jk.conf-auto file in my httpd.conf.  Should i mount the 
directories separately?  My feeling is that mod_jk.conf takes care 
of it
 
 
"black holes are,when GOD is dividing by zero" 

  - Original Message - 
  From: 
  Senthil Kumar Rajamanickam 
  To: [EMAIL PROTECTED] 
  
  Sent: Wednesday, July 25, 2001 
  2:19 PM
  Subject: RE: Forbidden error, you 
  are unable to access /examples from this server: please help, 
  veryurgent
  
  Have you checked your Apache httpd.conf file 
  ? have you mounted your directory in your 
  apache?
   
  Regards
  Senthil Kumar.R
   
  
-Original Message-From: raghu [mailto:[EMAIL PROTECTED]]Sent: 
Wednesday, July 25, 2001 12:54 PMTo: 
tomcatSubject: Fw: Forbidden error, you are unable to 
access /examples from this server: please help, 
veryurgent

From: raghu 
To: tomcat 
Sent: Tuesday, July 24, 2001 6:30 PM
Subject: 403: Forbidden error, you are unable to access 
/examples from this server

Hi 
all,
I

Re: Forbidden error, you are unable to access /examples from this server: please help, very urgent

[raghu]

Hello,
  The 2nd point which u 
mentioned did not work, i.e. the when i try to run examples via apache(http://localhost/examples/
i get the same Forbidden 
error.
 
 
 
"black holes are,when GOD is dividing by zero" 

  - Original Message - 
  From: 
  Senthil 
  Kumar Rajamanickam 
  To: [EMAIL PROTECTED] 
  Sent: Wednesday, July 25, 2001 6:11 
  PM
  Subject: RE: Forbidden error, you are 
  unable to access /examples from this server: please help, very urgent
  
  With 
  the info.. I could not think of any specific reasons which might stop you to 
  set this up.. 
   
  just 
  try going through following tasks..
   
  1. ref. to mod_jk how to manual which you have 
  got along with tomcat, and set up your mod_jk with apache ( you have to mount 
  mod_jk in apache like this (hey, are u doing your own mod_jk .dll file from 
  source?if that is the case check your source for any possible error which can 
  be induced in the source??)
   
  "include  
  /jakarta-tomcat-3.2.1/conf/mod_jk.conf-auto"
  ( I 
  would recommend using conf-auto file, so that your tomcat will give all the 
  details)
   
  2.check your apache and tomcat. (just test run your 
  example servlet via  apache) 
  If 
  your example application works fine..
   
  Go 
  ahead and mount a alias directory and try calling jet speed. 
  
  in 
  case you get some error, check them in apache log and tomcat log for error 
  details, (I think that should help you solve the error)
   
  let 
  me know what is the error you are getting...So that I can try to get to the 
  core issue.
   
  Also 
  note, if you are using winNT, check for environment variables setting too for 
  tomcat_home, Apache_home and java_home settings, since in your 
  tomcat configuration files, it picks up directory details calling this 
  environment variables. 
   
  Note, check if your tools.jar file is accessible by 
  your system(it should be in system path)
   
  Hope 
  this helps..
  Cheers
  Senthil Kumar.R
   
  
-Original Message-From: raghu 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, July 25, 
2001 5:27 PMTo: [EMAIL PROTECTED]Subject: 
Re: Forbidden error, you are unable to access /examples from this server: 
please help, veryurgent
i did as u said, but still i 
am getting the same error.  I now doubt if mod_jk.so is working 
properly or not?
No, i am running only tomcat 
with apache, please help
 
 
 
"black holes are,when GOD is dividing by zero" 

  - Original Message - 
  From: 
  Senthil Kumar Rajamanickam 
  To: [EMAIL PROTECTED] 
  
  Sent: Wednesday, July 25, 2001 4:46 
  PM
  Subject: RE: Forbidden error, you are 
  unable to access /examples from this server: please help, veryurgent
  
  try mounting a Alias directory named "jetspeed" 
  and tell apache its location.. yes, as you tell mod_jk should take care of 
  it. But I don't think their would be any harm in having a alias? (I have 
  mounted all the dir with a alias name along with my mod_jk 
  configuration)
   
  one other possibility would be, check if you are 
  running IIS or PWS  with Apache, if that is the case. either stop 
  them or assign them a different port number.
   
  Regards
  Senthil Kumar.R
   
  
-Original Message-From: raghu 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, July 
25, 2001 3:10 PMTo: 
[EMAIL PROTECTED]Subject: Re: Forbidden error, 
you are unable to access /examples from this server: please help, 
veryurgent
Hello,
I have included the 
mod_jk.conf-auto file in my httpd.conf.  Should i mount the 
directories separately?  My feeling is that mod_jk.conf takes care 
of it
 
 
"black holes are,when GOD is dividing by zero" 

  - Original Message - 
  From: 
  Senthil Kumar Rajamanickam 
  To: [EMAIL PROTECTED] 
  
  Sent: Wednesday, July 25, 2001 
  2:19 PM
  Subject: RE: Forbidden error, you 
  are unable to access /examples from this server: please help, 
  veryurgent
  
  Have you checked your Apache httpd.conf file 
  ? have you mounted your directory in your 
  apache?
   
  Regards
  Senthil Kumar.R
   
  
-Original Message-From: raghu [mailto:[EMAIL PROTECTED]]Sent: 
Wednesday, July 25, 2001 12:54 PMTo: 
tomcatSubject: Fw: Forbidden error, you are unable to 
access /examples from this server: please help, 
veryurgent

From: raghu 
To: tomcat 
Sent: Tuesday, July 24, 2001 6:30 PM
Subject: 403: Forbidden error, you are unable to access 
/examples from this server
  

RE: (application library) ClassNotFoundException

[Craig R. McClanahan]

On Mon, 9 Jul 2001, Kevin HaleBoyes wrote:

> > Herein lies your problem.  The classes12.jar(it has to be a jar not
> > a zip), has to be in TOMCAT_HOME/lib, not your webapps lib folder.
> > 
> > Think of it this way.  Where do you configure the JDBCRealm?  In
> > TOMCAT_HOME/conf/server.xml.  The server.xml file is parsed at
> > startup
> > and therefore the Realm is created before the context(s) have been
> > loaded.
> 
> Yes, of course!!!   I had it in my head "... but this is the way I did
> it before" but I had forgotten that I had copied the classes111.jar (for 8i)
> into the server/lib directory.
> 
> So, this leads me to a follow up question.  I know that I've got the jar
> file in the server/lib directory, is there any way to use that from my
> application.  If not then I have to have the exact same jar file in my
> WEB-INF/lib directory to use Oracle JDBC in my application.
> 

JAR files in the $CATALINA_HOME/server/lib directory are visible only to
internal Catalina classes.  Because JDBCRealm lives inside Catalina, this
is necessary in order to use an Oracle database.

If you want to make your JDBC driver visible to web application as well,
make another copy of classes111.jar in the $CATALINA_HOME/lib
directory.  Alternatively, you can include classes111.jar inside the
/WEB-INF/lib directory of each web app that needs it (some drivers won't
work when installed globally -- I haven't tried the Oracle one so I don't
know about it specifically).

> Thanks very much for your help,
> Kevin.
> 
> 

Craig McClanahan

Re: Help with Tomcat 4.0 b5

[Craig R. McClanahan]

This is an old message but an important issue.

The kind of problem mentioned below will occur if you have an old version
of servlet.jar in your Java extensions directory
($JAVA_HOME/jre/lib/ext) or if you've modified the standard Tomcat 4
startup files or overall directory organization.

Craig McClanahan


On Sun, 8 Jul 2001 [EMAIL PROTECTED] wrote:

> Hi there
> i downloaded Tomcat 4.0 b5 and installed it on my PC running win98. it works 
> fine but for some reason it does not run the jsp examples in the local host 
> or any other jsp pages i created, even though it runs the servlets ok. i get 
> the error shown at the end of this mail. But the strange thing is though, 
> even though i get this error, when i view the page source code using netscape 
> it shows the result of the jsp processing, for example when i tried the Date 
> jsp example i got the error message but the page source contained the date 
> resulted from the jsp. i installed the JDK 1.3 and set all the paths 
> required... i had tomcat 3.2.2 which was running perfectly, but i need tomcat 
> 4.0 as it has support for WAP technology which i need for my WAP research 
> project. Can u please help me... i do need it urgently...
> thanx alot
> Tim
> 
> here is the error message:
> ---
> 
> A Servlet Exception Has Occurred
> 
> org.apache.jasper.JasperException: Unable to compile class for 
> JSPC:\Tomcat\bin\..\work\localhost\examples\jsp\dates\date_jsp.java:168: 
> Incompatible type for method. Explicit cast needed to convert 
> java.lang.Throwable to java.lang.Exception.
>if (pageContext != null) pageContext.handlePageException(t);
> ^
> 1 error
> 
> at org.apache.jasper.compiler.Compiler.compile(Compiler.java:277)
> at org.apache.jasper.servlet.JspServlet.loadJSP(JspServlet.java:523)
> at 
> org.apache.jasper.servlet.JspServlet$JspServletWrapper.loadIfNecessary(JspServ
> 
> let.java:175)
>   at 
> org.apache.jasper.servlet.JspServlet$JspServletWrapper.service(JspServlet.java
> 
> :187)
>   at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:379)
> at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:453)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
> at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFi
> 
> lterChain.java:254)
>   at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChai
> 
> n.java:194)
>   at 
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java
> 
> :255)
>   at 
> org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566
> )
>   at 
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
>   at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
>   at 
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java
> 
> :225)
>   at 
> org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566
> )
>   at 
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.j
> 
> ava:472)
>   at 
> org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564
> )
>   at 
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
>   at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
>   at 
> org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2252)
>   at 
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164)
>   at 
> org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566
> )
>   at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:446)
> at 
> org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564
> )
>   at 
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
>   at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
>   at 
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:1
> 
> 63)
>   at 
> org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566
> )
>   at 
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
>   at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
>   at 
> org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:87
> 
> 5)
>   at 
> org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:952)
>   at java.lang.Thread.run(Thread.java:484)
> 

Re: Help w/ Tomcat 4.0b6 and Apache - Update

[Mark Dzmura]

Pier:

SUCCESS!!  But first...

The Java part of the webapp connector does not build for the lack of the
following constant definitions in class org.apache.catalina.connector.warp.Constants:

Constants.TYPE_CBK_DONE
Constants.TYPE_CBK_DATA
Constants.TYPE_CBK_READ

I looked in the C code for corresponding definitions, found them, and added them
to the Java code.  Built and installed the new stuff.  Checked the old example tests,
then went to the app using getParameter() and found them to WORK.  YES!!

Maybe the next thing is to run the JSP test suite...

Thanks for knocking out these fixes so quickly - great job!

Mark



> Mark Dzmura at [EMAIL PROTECTED] wrote:
>
> > Confirmed.  getParameter()'s are giving null pointer exceptions for
> > me as well.
>
> I just closed bug # 2777. Can you please check it works with the latest CVS
> snapshot? THANKYOUU! :) :) :)
>
> Pier

--
Mark Dzmura
Digital Mission LLC

Re: apache+mod_jk+tomcat virtual host sample setting

[Dmitri Colebatch]

Hi,

http://www.mail-archive.com/tomcat-user@jakarta.apache.org/ is a wonderful
place:

search for "httpd.conf server.xml virtual hosts example" and the sixth
result is:

http://www.mail-archive.com/tomcat-user@jakarta.apache.org/msg24768.html

that should give you a start (o:

cheesr
dim

On Thu, 26 Jul 2001, Jerry Qu wrote:

> Hi All,
> 
> is there any one has working sample(s) for setting apache+mod_jk+tomcat virtual host 
>in httpd.conf and server.xml (if needed )
> 
> thanks
> 
> Jerry Qu
> 

apache+mod_jk+tomcat virtual host sample setting

[Jerry Qu]

Hi All,
 
is there any one has working sample(s) for setting 
apache+mod_jk+tomcat virtual host in httpd.conf and server.xml (if needed 
)
 
thanks
 
Jerry Qu

Re: request for suggestions on how to secure a web application....

[Peter Brandt-Erichsen]

Thank you for the advice, most appreciated.

-Original Message-
From: Brigger Patrick <[EMAIL PROTECTED]>
To: '[EMAIL PROTECTED]' <[EMAIL PROTECTED]>
Date: Wednesday, July 25, 2001 2:02 AM
Subject: RE: request for suggestions on how to secure a web application


>One simple solution, but works perfectly:
>
>After the login process, save the login information in an object, for
>instance a customer object.
>
>session.putValue("customer", customer);
>
>In your JSP page, read the customer object:
>
>Customer customer = (Customer) session.getValue("customer");
>
>Then do a check if the object has been initialized:
>
>if (customer == null)
>{
>  redirect to login page.
>}
>else
>
>
>I usually included the return URL when I redirect to the login page so that
>this page knows where to redirect back to.
>
>Cheers,
>
>Pat
>
>-Original Message-
>From: Peter Brandt-Erichsen [mailto:[EMAIL PROTECTED]]
>Sent: Mittwoch, 25. Juli 2001 09:51
>To: [EMAIL PROTECTED]
>Subject: request for suggestions on how to secure a web application
>
>
>This posting is a request for suggestions on how best to
>secure a web application.
>
>First my setup:
>
>NT 4.0
>Apache 1.3.12
>Tomcat 3.2.1 (running behind Apache)
>servlets
>jsp pages
>static html pages
>jdk1.3
>
>
>Web-app directory structure:
>
>webapps/my_context/
>/jsp/jsp_pages
>/web-inf/classes/my_servlets
>/web-inf/classes/beans/my_java_beans
>
>My static html files reside under the apache
>document root.
>
>For servlet access I am using session cookies, as specified in
>the Java Servlet Spec, to authorize users. This works very
>well for my purposes.
>
>My concern is protecting sensitive jsp and static
>html pages.
>
>How do I stop an unauthorized user from accessing a
>jsp or html resource directly?  ie: a back-door attack.
>
>For example, I am protecting my site with a login page,
>but if a user simply sidesteps the login and types
>
>http://my_domain/my_context/jsp/any_jsp_page
>
>into his browser, he will get access to any jsp page
>that resides in the specified context.
>
>I have experimented with some different approaches:
>
>1.  hide the jsp directory directly under the /web-inf
>directory and let Tomcat restrict access.
>
>So I would have:
>
>/web-inf/classes/servlets
>/web-inf/jsp/jsp_pages
>
>Then provide access to jsp pages only through a
>verification servlet, which can verify the user and
>then forward the request to the correct resource.
>
>However, this is causing problems when I utilize a
>RequestDispatcher(path).forward(req, res)  or
>RequestDispatcher(path).include(req, res)
>instruction.
>
>The path needs to start with a "/" and be relative to
>the context root, per the Java Servlet API docs, which makes
>it impossible(?) to provide a correct path, since my
>verification servlet, and hence the execution thread,
>is in /web-inf/classes. When I issue the forward or inlude,
>I need to provide a path that looks something like:
>
>/../jsp/jsp_page
>
>which is correctly making the JVM puke.
>
>
>2. Utilize the apache rewrite module and have apache
>rewrite all requests for http://my_domain/my_context/jsp/*.jsp
>to my verification servlet. The verification servlet can then
>do its thing and forward valid requests to the appropriate
>request.
>
>A hornet's nest of complexity here! and my nose tells
>me this is the wrong path to take.
>
>
>3. Thought a lot about utilizing the Tomcat API.
>
>ie: RequestInterceptor, Virtual Host, Valves etc.
>
>I found rudimentary information about what these
>constructs are, but very little on how to use them.
>
>So, I am kinda stumped :-(
>
>I guess the next step would be to explore Basic or
>Digest Authorization, but I was hoping there would be
>a simpler way, that uses the power of servlets
>
>I would greatly welcome any and all suggestions
>
>Thank you, and keep up the great work.
>The Tomcat effort rocks!
>
>Peter
>
>
>BTW, I anticipate that the Tomcat docs will improve greatly
>in the future, and I was greatly encouraged to see the
>effort being put into making a book, and the template forming
>around v4.0
>
>I would like to suggest a section on real world examples,
>using and programming the Tomcat API and the xml config
>files, like server.xml.
>
>For an example of what I mean, the documentation
>for the Apache mod_rewrite, written by Ralf S. Engelschall,
>has a section on practical solutions.
>
>http://httpd.apache.org/docs/mod/mod_rewrite.html
>
>That's kinda what I mean.
>
>
>
>
>
>
>
>
>
>
>
>

tomcat and IIS

[Yuen, Yushun]

hi,

i have used jsp a lot on unix, now i want to use it on IIS.  wanted to know
what are the performance difference between running tomcat on unix vs. NT.
or i would be great if you can point me to some source to look for answers.

thanks a bunch! tomcat is great!

Yushun Yuen
Executive Producer * Modem Media (HK)
(852) 2923 5740 * [EMAIL PROTECTED]

Re: Query

[Dmitri Colebatch]

You can get the source from 

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.2.3/src/

or the binary is included in the servlet.jar in the tomcat/lib directory.

cheesr
dim

On Thu, 26 Jul 2001, Swapan Kumar Chakraborty wrote:

> Can u please help me to know from where do I download the following package
> javax.servlet.jsp.tagext.Tag
> 
> Regards,
> Ravinder Kaur
> 
> ___NOTICE 
> This electronic mail transmission contains confidential information intended
> only for the person(s) named.  Any use, distribution, copying or disclosure
> by any other person is strictly prohibited. If you received this
> transmission in error, please notify the sender by reply e-mail and then
> destroy the message.  Opinions, conclusions, and other information in this
> message that do not relate to the official business of NIIT shall be
> understood to be neither given nor endorsed by NIIT When addressed to NIIT
> clients, any information contained in this e-mail is subject to the terms
> and conditions in the governing client contract.
> 

WELCOME to tomcat-user@jakarta.apache.org (fwd)

[Dmitri Colebatch]

for those of you that are having trouble unsubscribing I have attached my
copy of the initial mail that I received when I subscribed this
address.  I suggest you try sending an email to the list owner.

cheesr
dim

-- Forwarded message --
Date: 16 Jul 2001 00:00:50 -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: WELCOME to [EMAIL PROTECTED]

Hi! This is the ezmlm program. I'm managing the
[EMAIL PROTECTED] mailing list.

I'm working for my owner, who can be reached
at [EMAIL PROTECTED]

Acknowledgment: I have added the address

   [EMAIL PROTECTED]

to the tomcat-user mailing list.

Welcome to [EMAIL PROTECTED]!

Please save this message so that you know the address you are
subscribed under, in case you later want to unsubscribe or change your
subscription address.


--- Administrative commands for the tomcat-user list ---

I can handle administrative requests automatically. Please
do not send them to the list address! Instead, send
your message to the correct command address:

To subscribe to the list, send a message to:
   <[EMAIL PROTECTED]>

To remove your address from the list, send a message to:
   <[EMAIL PROTECTED]>

Send mail to the following for info and FAQ for this list:
   <[EMAIL PROTECTED]>
   <[EMAIL PROTECTED]>

Similar addresses exist for the digest list:
   <[EMAIL PROTECTED]>
   <[EMAIL PROTECTED]>

To get messages 123 through 145 (a maximum of 100 per request), mail:
   <[EMAIL PROTECTED]>

To get an index with subject and author for messages 123-456 , mail:
   <[EMAIL PROTECTED]>

They are always returned as sets of 100, max 2000 per request,
so you'll actually get 100-499.

To receive all messages with the same subject as message 12345,
send an empty message to:
   <[EMAIL PROTECTED]>

The messages do not really need to be empty, but I will ignore
their content. Only the ADDRESS you send to is important.

You can start a subscription for an alternate address,
for example "[EMAIL PROTECTED]", just add a hyphen and your
address (with '=' instead of '@') after the command word:
<[EMAIL PROTECTED]>

To stop subscription for this address, mail:
<[EMAIL PROTECTED]>

In both cases, I'll send a confirmation message to that address. When
you receive it, simply reply to it to complete your subscription.

If despite following these instructions, you do not get the
desired results, please contact my owner at
[EMAIL PROTECTED] Please be patient, my owner is a
lot slower than I am ;-)

--- Enclosed is a copy of the request I received.

Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 68380 invoked from network); 16 Jul 2001 00:00:49 -
Received: from juicer34.bigpond.com (HELO mailin9.bigpond.com) (139.134.6.86)
  by h31.sny.collab.net with SMTP; 16 Jul 2001 00:00:49 -
Received: from dim.coxless.com ([139.134.4.51]) by
  mailin9.bigpond.com (Netscape Messaging Server 4.15) with SMTP
  id GGJHN400.DAZ for
  
<[EMAIL PROTECTED]>;
  Mon, 16 Jul 2001 10:06:40 +1000 
Received: from CPE-144-132-183-224.nsw.bigpond.net.au ([144.132.183.224]) by 
mail7.bigpond.com(MailRouter V2.9g 15/8144328); 16 Jul 2001 10:01:15
Date: Mon, 16 Jul 2001 10:08:21 +1000
From: Dmitri Colebatch <[EMAIL PROTECTED]>
X-Sender: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: confirm subscribe to [EMAIL PROTECTED]
In-Reply-To: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N



On 15 Jul 2001 [EMAIL PROTECTED] wrote:

> Hi! This is the ezmlm program. I'm managing the
> [EMAIL PROTECTED] mailing list.
> 
> I'm working for my owner, who can be reached
> at [EMAIL PROTECTED]
> 
> To confirm that you would like
> 
>[EMAIL PROTECTED]
> 
> added to the tomcat-user mailing list, please send
> an empty reply to this address:
> 
>
>[EMAIL PROTECTED]
> 
> Usually, this happens when you just hit the "reply" button.
> If this does not work, simply copy the address and paste it into
> the "To:" field of a new message.
> 
> This confirmation serves two purposes. First, it verifies that I am able
> to get mail through to you. Second, it protects you in case someone
> forges a subscription request in your name.
> 
> 
> --- Administrative commands for the tomcat-user list ---
> 
> I can handle administrative requests automatically. Please
> do not send them to the list address! Instead, send
> your message to the correct command address:
> 
> To subscribe to the list, send a message to:
><[EMAIL PROTECTED]>
> 
> To remove your address from the list, send a message to:
><[EMAIL PROTECTED]>
> 
> Send mail to the following for info and FAQ for this list:
><[EMAIL PROTECTED]>
><[EMAIL PROTECTED]>
> 
> Similar addresses exist for the digest list:
><[EMAIL PROTECTED]>
><[EMAIL PROTECTED]>
> 
> To get messages 123 through 145 (a maximum of 100 per request), mail:
><[EMAIL PROTECTED]>
> 
> To get an index with subject and author for me

Re: HELP! I have already unsubscribed from this list but still get tons of them

[Kalyan Mitra]

yes same for me,

any soultion is welcome

Kalyan Mitra



Original Message Follows
From: shailendra kanth <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: HELP! I have already unsubscribed from this list but still get 
tons of them
Date: Wed, 25 Jul 2001 20:50:36 -0700 (PDT)

Mr jing,

I am also suffering from same problem.Please inform me
when u got the soln.

Thanks !!
(s.k.kanth)


--- Jing Fan <[EMAIL PROTECTED]> wrote:


_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Re: HELP! I have already unsubscribed from this list but still get tons of them

[Kalyan Mitra]

yes same for me,

any soultion is welcome

Kalyan Mitra



Original Message Follows
From: shailendra kanth <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: HELP! I have already unsubscribed from this list but still get 
tons of them
Date: Wed, 25 Jul 2001 20:50:36 -0700 (PDT)

Mr jing,

I am also suffering from same problem.Please inform me
when u got the soln.

Thanks !!
(s.k.kanth)


--- Jing Fan <[EMAIL PROTECTED]> wrote:
 >
 >
 >
_
 > Get your FREE download of MSN Explorer at
 > http://explorer.msn.com/intl.asp
 >


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/


_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Query

[Swapan Kumar Chakraborty]

Title: Query





Can u please help me to know from where do I download the following package
javax.servlet.jsp.tagext.Tag


Regards,
Ravinder Kaur


___NOTICE 
This electronic mail transmission contains confidential information intended only for the person(s) named.  Any use, distribution, copying or disclosure by any other person is strictly prohibited. If you received this transmission in error, please notify the sender by reply e-mail and then destroy the message.  Opinions, conclusions, and other information in this message that do not relate to the official business of NIIT shall be understood to be neither given nor endorsed by NIIT When addressed to NIIT clients, any information contained in this e-mail is subject to the terms and conditions in the governing client contract.

Re: HELP! I have already unsubscribed from this list but still get tons of them

[shailendra kanth]

Mr jing,

I am also suffering from same problem.Please inform me
when u got the soln.

Thanks !!
(s.k.kanth)


--- Jing Fan <[EMAIL PROTECTED]> wrote:
> 
> 
>
_
> Get your FREE download of MSN Explorer at
> http://explorer.msn.com/intl.asp
> 


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

Re: question about WEB-INF/lib

[grant . quail]

Craig, this last bit caught my attention...

Currently our application uses .jar files spread out all over the place, will
tomcat v4 not work under those conditions?

thanks
-g





"Craig R. McClanahan" <[EMAIL PROTECTED]> on 07/25/2001 04:34:18 PM

Please respond to [EMAIL PROTECTED]

To:   [EMAIL PROTECTED]
cc:

Subject:  Re: question about WEB-INF/lib



PS:  Classpath problems are so prevalent that Tomcat 4's startup scripts
totally ignore the user's CLASSPATH variable.  If you want to share JARs
across multiple webapps, put them in $TOMCAT_HOME/lib -- otherwise, put
them in the /WEB-INF/lib directory of the webapp that needs them.  This
strategy also works in Tomcat 3.2 (as long as you don't have so many JARs
in $TOMCAT_HOME/lib that the environment variable length of your OS is
exceeded).

Re: Help w/ Tomcat 4.0b6 and Apache

[Mark Dzmura]

You must have checked in after the latest snapshot was cut - it's the same
as the earlier, broken one.

Well, if the next one is due 6 hours after the last one, and the clock is California 
time,
then it should be there at about 2115 Cali time, or just after midnight my time.

I can wait till then...

> Mark Dzmura at [EMAIL PROTECTED] wrote:
>
> > Confirmed.  getParameter()'s are giving null pointer exceptions for
> > me as well.
>
> I just closed bug # 2777. Can you please check it works with the latest CVS
> snapshot? THANKYOUU! :) :) :)
>
> Pier

--
Mark Dzmura
Digital Mission LLC

Re: request for suggestions on how to secure a web application....

[Peter Brandt-Erichsen]

Nice, thank you, I will check it out.

-Original Message-
From: Andrew Robson <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Wednesday, July 25, 2001 2:58 PM
Subject: Re: request for suggestions on how to secure a web application


>Hi Peter,
>  Have you looked at Realms? This allows you to specify a set of resources
>(html, jsp, servlets etc) to be protected in your web.xml file. Any
>unauthorised access attempt to these files will automatically throw up
>a login form. Means you don't have to code in protection to each page.
>You can authorise your users against a text file (SimpleRealm) or a
>database (JDBCRealm). There is an example in the examples directory.
>Check out the web.xml file in there and also look for Realm in server.xml
>If you want to use a database look at TOMCAT_HOME/doc/JDBCRealm.howto
>
>If you like the look of Realms I'm afraid you will have to upgrade to 3.2.3
>as earlier versions have a rather large security vulnerability.
>
>andrew
>
>  On Wed,
>25 Jul 2001, you wrote: > I'm not sure whether it'll work for you but you
can
>assert current session on  > each jsp page that you want to protect
(assuming
>you store user login info in  > the session) and throw an exception in case
the
>object is not found in the  > session, then the exception can be caught by
an
>error jsp page.  >
>> hth
>>
>>   - Boris
>>
>>
>> >
>> >This posting is a request for suggestions on how best to
>> >secure a web application.
>> >
>> >First my setup:
>> >
>> >NT 4.0
>> >Apache 1.3.12
>> >Tomcat 3.2.1 (running behind Apache)
>> >servlets
>> >jsp pages
>> >static html pages
>> >jdk1.3
>> >
>> >
>> >Web-app directory structure:
>> >
>> >webapps/my_context/
>> >/jsp/jsp_pages
>> >/web-inf/classes/my_servlets
>> >/web-inf/classes/beans/my_java_beans
>> >
>> >My static html files reside under the apache
>> >document root.
>> >
>> >For servlet access I am using session cookies, as specified in
>> >the Java Servlet Spec, to authorize users. This works very
>> >well for my purposes.
>> >
>> >My concern is protecting sensitive jsp and static
>> >html pages.
>> >
>> >How do I stop an unauthorized user from accessing a
>> >jsp or html resource directly?  ie: a back-door attack.
>> >
>> >For example, I am protecting my site with a login page,
>> >but if a user simply sidesteps the login and types
>> >
>> >http://my_domain/my_context/jsp/any_jsp_page
>> >
>> >into his browser, he will get access to any jsp page
>> >that resides in the specified context.
>> >
>> >I have experimented with some different approaches:
>> >
>> >1.  hide the jsp directory directly under the /web-inf
>> >directory and let Tomcat restrict access.
>> >
>> >So I would have:
>> >
>> >/web-inf/classes/servlets
>> >/web-inf/jsp/jsp_pages
>> >
>> >Then provide access to jsp pages only through a
>> >verification servlet, which can verify the user and
>> >then forward the request to the correct resource.
>> >
>> >However, this is causing problems when I utilize a
>> >RequestDispatcher(path).forward(req, res)  or
>> >RequestDispatcher(path).include(req, res)
>> >instruction.
>> >
>> >The path needs to start with a "/" and be relative to
>> >the context root, per the Java Servlet API docs, which makes
>> >it impossible(?) to provide a correct path, since my
>> >verification servlet, and hence the execution thread,
>> >is in /web-inf/classes. When I issue the forward or inlude,
>> >I need to provide a path that looks something like:
>> >
>> >/../jsp/jsp_page
>> >
>> >which is correctly making the JVM puke.
>> >
>> >
>> >2. Utilize the apache rewrite module and have apache
>> >rewrite all requests for http://my_domain/my_context/jsp/*.jsp
>> >to my verification servlet. The verification servlet can then
>> >do its thing and forward valid requests to the appropriate
>> >request.
>> >
>> >A hornet's nest of complexity here! and my nose tells
>> >me this is the wrong path to take.
>> >
>> >
>> >3. Thought a lot about utilizing the Tomcat API.
>> >
>> >ie: RequestInterceptor, Virtual Host, Valves etc.
>> >
>> >I found rudimentary information about what these
>> >constructs are, but very little on how to use them.
>> >
>> >So, I am kinda stumped :-(
>> >
>> >I guess the next step would be to explore Basic or
>> >Digest Authorization, but I was hoping there would be
>> >a simpler way, that uses the power of servlets
>> >
>> >I would greatly welcome any and all suggestions
>> >
>> >Thank you, and keep up the great work.
>> >The Tomcat effort rocks!
>> >
>> >Peter
>> >
>> >
>> >BTW, I anticipate that the Tomcat docs will improve greatly
>> >in the future, and I was greatly encouraged to see the
>> >effort being put into making a book, and the template forming
>> >around v4.0
>> >
>> >I would like to suggest a section on real world examples,
>> >using and programming the Tomcat API and the xml config
>> >files, like server.xml.
>> >
>> >For an examp

double allocation failure...

[Fernando Laux]

Hello, what does the next error mean?

*** panic: double allocation failure
SIGABRT 6 (*) abort process
stackpointer=309abfc8


How could it be avoided?

Tomcat 3.2.2 is running as standalone server in an IBM RS/6000 with AIX 4.3.3; the 
Tomcat server is under a very heavy load [only servlets are running].

Any help is appreciated.

Thanks,
Fer.

RE: Help!! Apache won't redirect to tomcat

[Dmitri Colebatch]

something else that may be worth checking... are apache and tomcat running
on the same box?  the default workers.properties assumes they are, so if
you're using that and tomcat is on a different box apache will be trying
to connect to localhost when it should be looking for the box that tomcat
is on...  just a thought.

cheesr
dim

On Thu, 26 Jul 2001, John Bazeley wrote:

> Yep, that'll teach me to read the email thoroughly!
> 
> Whatever happens, it's trying to connect to something that
> isn't there.
> 
> Backing up, then, is your ajp12 handler running?
> 
> Did tomcat mention in its startup:
> 
> 2001-07-25 09:34:43 - PoolTcpConnector: Starting Ajp12ConnectionHandler on
> 8007
> 
> or similar?
> 
> If it did, I'm out of ideas. If not, server.xml should have
> 
> 
> value="org.apache.tomcat.service.connector.Ajp12ConnectionHandler"/>
> 
> 
> 
> or similar.
> 
> To add Ajp13 support, copy those lines and change the 12 to 13 and
> 8007 to 8009 in the copied set.
> 
> Cheers,
> --
> John
> 
> 
> > -Original Message-
> > From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, 26 July 2001 09:07
> > To: '[EMAIL PROTECTED]'
> > Subject: RE: Help!! Apache won't redirect to tomcat
> >
> >
> > I checked if tomcat was startred by bringing up one of the examples.  It
> > worked...
> > Can you send me the format for the server.xml... I got the one I
> > have out of
> > the how to...
> > but mine I thought were using the ajp12
> >
> >
> > -Original Message-
> > From: John Bazeley [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, July 25, 2001 1:52 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: Help!! Apache won't redirect to tomcat
> >
> >
> > you're on Solaris, right?
> >
> > 146 is 'connection refused'.
> >
> > Your ajp13 handler isn't running. Either:
> >
> > tomcat isn't started
> > ajp13 handler is not activated in server.xml.
> >
> > --
> > John
> >
> > > -Original Message-
> > > From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> > > Sent: Thursday, 26 July 2001 06:55
> > > To: [EMAIL PROTECTED]
> > > Subject: Help!! Apache won't redirect to tomcat
> > >
> > >
> > > Someone please Help.
> > >
> > > I have copied the auto conf genereated by tomcat and included that in
> > > my httpd.conf file  with the following line
> > >
> > > Include
> > > /opt/pokemon/bin/col_bin/tomcat/tomcat35_322/conf/tomcat-mod_jk-ap
> > > ache.conf
> > >
> > > I added lines to tomcat-mod_jk-apache.conf to hopefully recognize my url
> > > JkMount /buy/* ajp12
> > > JkMount /olympics/*  ajp12
> > > JkMount /sloc2002/* ajp12
> > > JkMount /maintenance/* ajp12
> > > JkMount /xml/* ajp12
> > >
> > > but it doesn't seem to recognize the url
> > >
> > > I am getting
> > > [jk_connect.c (143)]: jk_open_socket, connect() failed errno = 146
> > > [jk_ajp12_worker.c (152)]: In jk_endpoint_t::service, Error sd = -1
> > >
> > > in my mod_jk.log and no errors in my apache http_error.log
> > >
> > > I started tomcat first.
> > >
> > >
> > > Can Anyone offer some help?
> > >
> > > Thanks
> > > Mike
> > >
> >
> 
> 

Re: question about WEB-INF/lib

[Craig R. McClanahan]

The other side of the coin is that I know for a fact that web apps using
JAR files in /WEB-INF/lib can run under Tomcat 3.2 (example:  download
Struts, deploy the struts-example.war application, restart Tomcat, and run
it).  So it's *not* as simple as saying "Tomcat does not know how to load
application classes from /WEB-INF/classes or /WEB-INF/lib/*.jar files".

You will also find that Tomcat can indeed load applications from
/WEB-INF/classes for at least some users -- otherwise, none of the
"/examples" servlets or jsp pages shipped with Tomcat would work at all.

Your webapp sounds like it is set up correctly ... now let's look at your
environment.  I'm going to start with the assumption that you have *not*
tried to manually manipulate your CLASSPATH to put the webapp's
/WEB-INF/classes directory (or any JAR files under
/WEB-INF/lib) specifically on it.

The most critical issue (and the one that will definitely cause
ClassNotFoundException errors) is to have a copy of one of the same
application classes (or the JDBC driver classes in your case) *also*
visible through the CLASSPATH (since you're using Tomcat 3.2 this
matters), in $TOMCAT_HOME/lib, or in your Java extensions directory
($JAVA_HOME/jre/lib/ext).

The reason this causes you grief is that, because of the way Java class
loading works in Tomcat 3.2, the "shared" version of the class will be
loaded.  And, this "shared" copy (because it was loaded from a classloader
that is the parent of the webapp class loader) cannot itself load classes
from the webapp classloader (in class loading terms, delegation can go
*up* the classloader hierarchy but not *down*).

If this is not the cause of the problem, the only way to resolve it is to
create a minimal webapp that illustrates the problem, and post it along
with a bug report.  However, my experience has been that CLASSPATH issues
are by far the most common cause of ClassNotFoundException problems that
Tomcat users run into.

Craig McClanahan

PS:  Classpath problems are so prevalent that Tomcat 4's startup scripts
totally ignore the user's CLASSPATH variable.  If you want to share JARs
across multiple webapps, put them in $TOMCAT_HOME/lib -- otherwise, put
them in the /WEB-INF/lib directory of the webapp that needs them.  This
strategy also works in Tomcat 3.2 (as long as you don't have so many JARs
in $TOMCAT_HOME/lib that the environment variable length of your OS is
exceeded).



On 25 Jul 2001, Joseph D Toussaint wrote:

> I'm pretty certain that my war file is set up correctly.  In my
> WEB-INF/lib directoy I have jdbc jar file that tomcat can't find and the
> tomcat user manual for deploying tomcat applications says 
> 
> 
> WEB-INF/lib/ - This directory contains JAR files that contain Java
> class files (and associated resources) required for your
> application, such as third party class libraries or JDBC drivers.
> 
> 
> 
> My servlets are in the WEB-INF/classes directory and the same document
> says
> 
> 
> WEB-INF/classes/ - This directory contains any Java class files (and
> associated resources) required for your application, including both
> servlet and non-servlet classes, that are not combined into JAR
> files.
> 
> 
> 
> Aside from that I have read the Servlet 2.3 spec on this topic and it
> says this about the WEB-INF/lib
> 
> 
> The /WEB-INF/lib/*.jar area for Java ARchive files. These files
> contain servlets, beans, and other utility classes useful to the web
> application. The web application class loader can load class from
> any of these archive files.
> 
> Here is what it says about the WEB-INF/classes directory
> 
> The /WEB-INF/classes/* directory for servlet and utility classes.
> The classes in this directory are available to the application class
> loader.
> 
> 
> Now to re-cap I have a jdbc jar file in WEB-INF/lib and I'm trying to
> access it from a servlet in WEB-INF/classes
> 
> After looking at the spec again it says the container "can load
> classes from any of these archive files".  I suppose this could mean
> that it is optional for the container to load the classes found in
> this directory, in which case tomcat is adhearing to the spec and it
> is not required to load all the classes it finds there.
> 
> 
> 
> If you see something that I'm mis-interpting please let me know.
> 
> thanks
> 
> joe
> 
> 
> 
> 
> 
> On 25 Jul 2001 11:39:11 -0700, Craig R. McClanahan wrote:
> > 
> > 
> > On Wed, 25 Jul 2001 [EMAIL PROTECTED] wrote:
> > 
> > > 
> > > This is my workaround as well, but it is not a very good solution. I often
> > > have multiple webapps running that need different versions of the same jar
> > > file. This becomes a real pain.
> > > Thanks,
> > > Dave
> > > 
> > 
> > If you have to modify the CLASSPATH to make classes inside JAR file in a
> > /WEB-INF/lib directory available, your webapps are set up incorrectly.  
> > In fact, doing this will make a lot of other things (like automati

Multiple Instances of Tomcat

[Abhijat Thakur]

Hi,

I have multiple instances of Tomcat running on my server and i have
configured apache to work with tomcat. What i am not able to figure out is
which tomcat file needs modification so that different contexts can be
directed to different instances. In server.xml file for different instances
i do mention the different contexts related with the different instances.

According to Documentation i have to do something like this in
(Apache-Tomcat Configuration with per Context JVM)

# Mounting the first context.
ApJServMount /xyz ajpv12://xyz.corp.com:8007/xyz

# Mounting the second context.
ApJServMount /abc ajpv12://abc.corp.com:8007/abc


i am not sure which file needs this modification. At present which ever
instance i load in the end all the requests get directed to that instance.

Any help is highly appreciated.

Thanks a lot

Regards

Abhijat Thakur

Réf. : JkMount instruction

[java]

"ApJServMount /something ajpv12://localhost:9500/something"

With JkMount :

in mod_jk :

JkMount /something/* ajp13


in workers.properties :

worker.ajp13.port=9500
worker.ajp13.host=localhost
worker.ajp13.type=ajp13

virtual hosting conf question

[Jerry QU]

Hi All,
 
We are using Tomact3.2.3 and Apache1.3.20 with 
mod_jk.so.
 
it works fine when use Directory:
 
    Alias /loc "/home/.../path"
 
    
        Options Indexes 
FollowSymLinks
    
    JkMount /loc/servlet/* ajp12
    JkMount /loc/*.jsp ajp12
 
But when trying virtual hosting:
    
NameVirutalHost ip
    
    
        ServerName www.domain.com
        DocumentRoot 
"/home/.../path"
        JkMount /servlet/* 
ajp12
        JkMount /*.jsp 
ajp12
    
        Options Includes Indexes 
FollowSymlinks
        AllowOverride AuthConfig 
FileInfo Indexes Limit Options
        Order allow, 
deny
        Allow from 
all
    
 
    
 
WE are geting 404 error for all .jsp files and looks 
like the apache to tomcat redirect not works
 
anything missing?
 
 
TIA
 
Jerry
 
 
 
    
 

Réf. : RE: Dynamically Generate PDF

[java]

We are using  http://www.lowagie.com/iText/ and it work great !






> I've tried to do this with jsp (without succes), but with a
> servlet it can be done quite easy:
>Use tex->dvi->ps->pdf (where tex is a TeX document, (LaTeX))
>(maybe it can be done even easier...)
> If someone knows how i could do this with jsp, (read tex with
> taglibs) i'm eager to know it)
>

This is a restrictive option.  It's much better to use one of the
many XML/XSL based packages and generate from there.  In this way
you can extend the document definitions as needed which with TeX/LaTeX
is possible but not the preferable solution in my book.

Commercial
--
PageLayout - http://www.sitraka.com

Open Source
---
iText - http://www.lowagie.com/iText/
FOP - http://www.xml.apache.org

Other
-
General Info/Links - http://www.planetpdf.com/mainpage.asp?WebPageID=450

Re: Help w/ Tomcat 4.0b6 and Apache

[Pier P. Fumagalli]

Mark Dzmura at [EMAIL PROTECTED] wrote:

> Confirmed.  getParameter()'s are giving null pointer exceptions for
> me as well.

I just closed bug # 2777. Can you please check it works with the latest CVS
snapshot? THANKYOUU! :) :) :)

Pier

HTML form crashes Tomcat

[Lana M. Soller]

Please help!

We are running tomcat_3.2.2 on a Sun Unix platform.  The problem that I
am seeing is when I use a simple HTML form to access the servlet, and
that HTML form is empty (no fields are filled in - except I do have a
hidden field on the form with data) and the form is submitted, I get a
message that "The document contained no data, try again later" and it
crashes tomcat.  The error message in the log states the following:
FATAL: line 2: The markup in the document following the root element
must be well-formed.

Is this error referring to the HTML page or to the servlet code???  I
cannot quite figure this one out but need to before we can even think of

going production. :-)

Any help is appreciated!

Thanks!

Lana

--
--/-National Center for Atmospheric Research---
Lana M. Stillwell-Soller   Phone:  303-497-1244
Software Engineer/Group Head   Fax:303-497-1804
Infrastructure Applications Group  Mobile: 303-882-0213
--/-PO Box 3000, Boulder, CO  80305-3000---

Re: How to increase debug reporting?

[Boris Niyazov]

in server.xml modify Logger elements. To specify log file use path attribute:




this will redirect tomcat msgs to file $TOMCAT_HOME/logs/tomcat.log.

Also in "Context" element you can specify different debug levels for your 
paticular webapp using debug=number. Somebody already posted the levels on the 
mailing list:

Level 0
   Errors and states that cause a significant change in program flow.  
   => Anything that causes a Discon+Retry or a "giveup" message.

Level 1
   Important or inaccessible state information.
   => Connection start, Idle disconnection.

Level 2
   Rare things that cause a minor program flow adjustment.
   => No REST, No PASV, etc.

Level 3
   Errors and useful messages that are slightly too verbose or common
   for 0-2 or don't quite fit in the classifications.
   => Login banner

Level 4
   All remote responses or major results. (Trace results)
   => All "999 Xyzzy" responses received.

Level 5
   All remote commands or major tasks. (Trace jobs)
   => All commands sent to server.

Level 6
   General information that will not be too verbose but is normally a
   little less important. (Trace state)

Level 7
   Similar to level 3 but verbose or not as useful.

Level 8
   Very verbose information that'll probably be useful sometime.

Level 9
   Anything and everything else, debugs that probably won't be useful
   ever again.(unclassified)
   
 
hth

  - Boris



>
>
>
>I know there are 3 "main" logs that I can set "verbositylevel="debug"" to
>squeeze more info from tomcat...
>
>What else can i do?  I see "debug="0"" all over the XML configuration files but
>I don't know which ones i should change, or where the info would go, or even
>what values to use.
>
>On a related topic, I cannot redirect stdout and stderr to files... all the
>directions seem to have disapeared... can someone point me in the right
>direction?
>
>(p.s. i'm running tc3.2.3 on solaris 2.6)
>
>

Re: Tomcat and IIS 5

[John Baker]

Actually, the design of the website and the related docs is very poor. And
when I last visited there were empty pages, bits missing, and stuff tha
didnt want to display on Mozilla (any version). I think that was the 'server
administration' section.


John


On Thu, Jul 26, 2001 at 07:53:44AM +1000, Dmitri Colebatch wrote:
> yes there is, its all of two clicks away from the home page of
> tomcat.  could _everyone_ posting messages that perhaps could be answered
> without taking other people's time up make an effort to answer the
> question themselves before posting on the list.  by all means if you cant
> find it, post - but as someone who answers questions, I can tell you I
> feel a _lot_ more compelled to answer questions where it is clear the
> person asking has made a reasonable effort to answer the question
> themselves.
> 
> http://jakarta.apache.org/tomcat/tomcat-3.2-doc/tomcat-iis-howto.html
> 
> cheesr
> dim
> 
> 
> On Wed, 25 Jul 2001, Luiz Olavo Bonino wrote:
> 
> > Is there any document that shows how to install Tomcat on a Windows 2000 and IIS 5 
>environment?
> > 
> > Thanks,
> > 
> > Luiz Olavo
> > 
> 

-- 
John Baker, BSc CS.   
Java developer, Linux lover.
I don't wanna rock, DJ.

RE: Help!! Apache won't redirect to tomcat

[Nance, Michael]

Thanks I will check those things out.  Appreciate your time!

-Original Message-
From: John Bazeley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 2:48 PM
To: [EMAIL PROTECTED]
Subject: RE: Help!! Apache won't redirect to tomcat


Yep, that'll teach me to read the email thoroughly!

Whatever happens, it's trying to connect to something that
isn't there.

Backing up, then, is your ajp12 handler running?

Did tomcat mention in its startup:

2001-07-25 09:34:43 - PoolTcpConnector: Starting Ajp12ConnectionHandler on
8007

or similar?

If it did, I'm out of ideas. If not, server.xml should have






or similar.

To add Ajp13 support, copy those lines and change the 12 to 13 and
8007 to 8009 in the copied set.

Cheers,
--
John


> -Original Message-
> From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 26 July 2001 09:07
> To: '[EMAIL PROTECTED]'
> Subject: RE: Help!! Apache won't redirect to tomcat
>
>
> I checked if tomcat was startred by bringing up one of the examples.  It
> worked...
> Can you send me the format for the server.xml... I got the one I
> have out of
> the how to...
> but mine I thought were using the ajp12
>
>
> -Original Message-
> From: John Bazeley [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, July 25, 2001 1:52 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Help!! Apache won't redirect to tomcat
>
>
> you're on Solaris, right?
>
> 146 is 'connection refused'.
>
> Your ajp13 handler isn't running. Either:
>
> tomcat isn't started
> ajp13 handler is not activated in server.xml.
>
> --
> John
>
> > -Original Message-
> > From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, 26 July 2001 06:55
> > To: [EMAIL PROTECTED]
> > Subject: Help!! Apache won't redirect to tomcat
> >
> >
> > Someone please Help.
> >
> > I have copied the auto conf genereated by tomcat and included that in
> > my httpd.conf file  with the following line
> >
> > Include
> > /opt/pokemon/bin/col_bin/tomcat/tomcat35_322/conf/tomcat-mod_jk-ap
> > ache.conf
> >
> > I added lines to tomcat-mod_jk-apache.conf to hopefully recognize my url
> > JkMount /buy/* ajp12
> > JkMount /olympics/*  ajp12
> > JkMount /sloc2002/* ajp12
> > JkMount /maintenance/* ajp12
> > JkMount /xml/* ajp12
> >
> > but it doesn't seem to recognize the url
> >
> > I am getting
> > [jk_connect.c (143)]: jk_open_socket, connect() failed errno = 146
> > [jk_ajp12_worker.c (152)]: In jk_endpoint_t::service, Error sd = -1
> >
> > in my mod_jk.log and no errors in my apache http_error.log
> >
> > I started tomcat first.
> >
> >
> > Can Anyone offer some help?
> >
> > Thanks
> > Mike
> >
>

RE: Help!! Apache won't redirect to tomcat

[John Bazeley]

Yep, that'll teach me to read the email thoroughly!

Whatever happens, it's trying to connect to something that
isn't there.

Backing up, then, is your ajp12 handler running?

Did tomcat mention in its startup:

2001-07-25 09:34:43 - PoolTcpConnector: Starting Ajp12ConnectionHandler on
8007

or similar?

If it did, I'm out of ideas. If not, server.xml should have






or similar.

To add Ajp13 support, copy those lines and change the 12 to 13 and
8007 to 8009 in the copied set.

Cheers,
--
John


> -Original Message-
> From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 26 July 2001 09:07
> To: '[EMAIL PROTECTED]'
> Subject: RE: Help!! Apache won't redirect to tomcat
>
>
> I checked if tomcat was startred by bringing up one of the examples.  It
> worked...
> Can you send me the format for the server.xml... I got the one I
> have out of
> the how to...
> but mine I thought were using the ajp12
>
>
> -Original Message-
> From: John Bazeley [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, July 25, 2001 1:52 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Help!! Apache won't redirect to tomcat
>
>
> you're on Solaris, right?
>
> 146 is 'connection refused'.
>
> Your ajp13 handler isn't running. Either:
>
> tomcat isn't started
> ajp13 handler is not activated in server.xml.
>
> --
> John
>
> > -Original Message-
> > From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, 26 July 2001 06:55
> > To: [EMAIL PROTECTED]
> > Subject: Help!! Apache won't redirect to tomcat
> >
> >
> > Someone please Help.
> >
> > I have copied the auto conf genereated by tomcat and included that in
> > my httpd.conf file  with the following line
> >
> > Include
> > /opt/pokemon/bin/col_bin/tomcat/tomcat35_322/conf/tomcat-mod_jk-ap
> > ache.conf
> >
> > I added lines to tomcat-mod_jk-apache.conf to hopefully recognize my url
> > JkMount /buy/* ajp12
> > JkMount /olympics/*  ajp12
> > JkMount /sloc2002/* ajp12
> > JkMount /maintenance/* ajp12
> > JkMount /xml/* ajp12
> >
> > but it doesn't seem to recognize the url
> >
> > I am getting
> > [jk_connect.c (143)]: jk_open_socket, connect() failed errno = 146
> > [jk_ajp12_worker.c (152)]: In jk_endpoint_t::service, Error sd = -1
> >
> > in my mod_jk.log and no errors in my apache http_error.log
> >
> > I started tomcat first.
> >
> >
> > Can Anyone offer some help?
> >
> > Thanks
> > Mike
> >
>

Re: Tomcat and IIS 5

[Dmitri Colebatch]

yes there is, its all of two clicks away from the home page of
tomcat.  could _everyone_ posting messages that perhaps could be answered
without taking other people's time up make an effort to answer the
question themselves before posting on the list.  by all means if you cant
find it, post - but as someone who answers questions, I can tell you I
feel a _lot_ more compelled to answer questions where it is clear the
person asking has made a reasonable effort to answer the question
themselves.

http://jakarta.apache.org/tomcat/tomcat-3.2-doc/tomcat-iis-howto.html

cheesr
dim


On Wed, 25 Jul 2001, Luiz Olavo Bonino wrote:

> Is there any document that shows how to install Tomcat on a Windows 2000 and IIS 5 
>environment?
> 
> Thanks,
> 
> Luiz Olavo
> 

Problem getting Netscape to forward requests to Tomcat.

[Hector Rios]

Title: Problem getting Netscape to forward requests to Tomcat.







Hello,


I've been trying to configure Netscape Enterprise Server 3.6 and Tomcat 3.2.3 to work together but with no luck.


I went through and followed the steps outlined in the document Tomcat Netscape HowTo and everything appears

to work ok. The server starts and ok and the settings show that it is indeed using nsapi_redirect.dll but when I try to 

access http://localhost:80/examples I get the an error saying that it could be founds in the netscape "docs" folder. 


The server does not appear to be redirecting the requests at all. One thing to note is that I removed all the entries concerning

ajp13 configuration from the workers.properties file.Until I did that the server would not start.


Is there anythin I'm not doing right. I'm sure it's something stupid but I would appreciate any help that anyone could offer.

Thank you in advance

Hector


-- below you'll find my obj.conf file and workers.properties file.


 <>     <> 



 workers.properties
 obj.conf

RE: Help!! Apache won't redirect to tomcat

[Nance, Michael]

I checked if tomcat was startred by bringing up one of the examples.  It
worked...
Can you send me the format for the server.xml... I got the one I have out of
the how to...
but mine I thought were using the ajp12


-Original Message-
From: John Bazeley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 1:52 PM
To: [EMAIL PROTECTED]
Subject: RE: Help!! Apache won't redirect to tomcat


you're on Solaris, right?

146 is 'connection refused'.

Your ajp13 handler isn't running. Either:

tomcat isn't started
ajp13 handler is not activated in server.xml.

--
John

> -Original Message-
> From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 26 July 2001 06:55
> To: [EMAIL PROTECTED]
> Subject: Help!! Apache won't redirect to tomcat
> 
> 
> Someone please Help.
> 
> I have copied the auto conf genereated by tomcat and included that in 
> my httpd.conf file  with the following line
> 
> Include
> /opt/pokemon/bin/col_bin/tomcat/tomcat35_322/conf/tomcat-mod_jk-ap
> ache.conf
> 
> I added lines to tomcat-mod_jk-apache.conf to hopefully recognize my url
> JkMount /buy/* ajp12
> JkMount /olympics/*  ajp12
> JkMount /sloc2002/* ajp12
> JkMount /maintenance/* ajp12
> JkMount /xml/* ajp12
> 
> but it doesn't seem to recognize the url
> 
> I am getting 
> [jk_connect.c (143)]: jk_open_socket, connect() failed errno = 146
> [jk_ajp12_worker.c (152)]: In jk_endpoint_t::service, Error sd = -1
> 
> in my mod_jk.log and no errors in my apache http_error.log
> 
> I started tomcat first.
> 
> 
> Can Anyone offer some help?
> 
> Thanks
> Mike
> 

Re: question about WEB-INF/lib

[Joseph D Toussaint]

I'm pretty certain that my war file is set up correctly.  In my
WEB-INF/lib directoy I have jdbc jar file that tomcat can't find and the
tomcat user manual for deploying tomcat applications says 


WEB-INF/lib/ - This directory contains JAR files that contain Java
class files (and associated resources) required for your
application, such as third party class libraries or JDBC drivers.



My servlets are in the WEB-INF/classes directory and the same document
says


WEB-INF/classes/ - This directory contains any Java class files (and
associated resources) required for your application, including both
servlet and non-servlet classes, that are not combined into JAR
files.



Aside from that I have read the Servlet 2.3 spec on this topic and it
says this about the WEB-INF/lib


The /WEB-INF/lib/*.jar area for Java ARchive files. These files
contain servlets, beans, and other utility classes useful to the web
application. The web application class loader can load class from
any of these archive files.

Here is what it says about the WEB-INF/classes directory

The /WEB-INF/classes/* directory for servlet and utility classes.
The classes in this directory are available to the application class
loader.


Now to re-cap I have a jdbc jar file in WEB-INF/lib and I'm trying to
access it from a servlet in WEB-INF/classes

After looking at the spec again it says the container "can load
classes from any of these archive files".  I suppose this could mean
that it is optional for the container to load the classes found in
this directory, in which case tomcat is adhearing to the spec and it
is not required to load all the classes it finds there.



If you see something that I'm mis-interpting please let me know.

thanks

joe





On 25 Jul 2001 11:39:11 -0700, Craig R. McClanahan wrote:
> 
> 
> On Wed, 25 Jul 2001 [EMAIL PROTECTED] wrote:
> 
> > 
> > This is my workaround as well, but it is not a very good solution. I often
> > have multiple webapps running that need different versions of the same jar
> > file. This becomes a real pain.
> > Thanks,
> > Dave
> > 
> 
> If you have to modify the CLASSPATH to make classes inside JAR file in a
> /WEB-INF/lib directory available, your webapps are set up incorrectly.  
> In fact, doing this will make a lot of other things (like automatic
> reloading on updated classes) fail miserably.
> 
> One good source of information about how to organize your web applications
> is the "Application Developer's Guide" that is shipped with Tomcat (both
> 3.2 and 4.0).  Additionally, you should consider the Servlet Specification
> (version 2.2 or 2.3, depending on which Tomcat you're running) to be
> ***required reading***, because that's where the requirements for web
> applications are actually defined.  You can get the spec from:
> 
>   http://java.sun.com/products/servlet/download.html
> 
> Craig McClanahan
> 



-- 
##
# Joseph Toussaint   #
# Caribou Lake Software  #
# http://www.cariboulake.com #
# [EMAIL PROTECTED]   #
# 952-837-98029  #
##

RE: Multiple Instances of Tomcat

[Abhijat Thakur]

You were right the http connector was open in the second instance and was
trying to access the same port as the one in the first instance. Now it
works just fine.

Thanks a lot. Appreciate all the help.

Regards

Abhijat Thakur

-Original Message-
From: Jason Koeninger [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 1:43 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: Multiple Instances of Tomcat


Those sound like they would be used for ajp12 or 13 port
numbers.  Are you sure the http connector isn't still enabled
on both server.xml files for port 8080?  I'd be happy to glance
at the two files if you like.

Best Regards,

Jason Koeninger
J&J Computer Consulting
http://www.jjcc.com

On Wed, 25 Jul 2001 13:52:21 -0700, Abhijat Thakur wrote:

>Hi,
>
>i am actually using different ports. 8007(server1.xml) and
>8009(server2.xml). but i still get the error message.
>
>thanks
>
>
>-Original Message-
>From: Jason Koeninger [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, July 25, 2001 1:37 PM
>To: [EMAIL PROTECTED]
>Subject: Re: Multiple Instances of Tomcat
>
>
>The http, ajp12, and/or ajp13 services can't bind to the same port on
>the same IP address.  You need to modify server.xml to put things
>on different ports or different IP addresses.
>
>Best Regards,
>
>Jason Koeninger
>J&J Computer Consulting
>http://www.jjcc.com
>
>On Wed, 25 Jul 2001 13:46:29 -0700, Abhijat Thakur wrote:
>
>>
>>Hi,
>>
>>I am trying to run multiple instances of Tomcat. The documentation tells
me
>>that i have to have two server.xml files and have to start Tomca with
>>bin/startup.sh -f /conf/server1.xml and bin/startup.sh -f
>/conf/server2.xml.
>>Depending on the tomcat instance to which a servlet in a particular
>>application has to be directed the context for that application has to be
>>defined in that particular server.xml file.
>>
>>Now when i start my tomcat and try and start my second instnace of tomcat
i
>>get an error. However the port on which i am starting the second tomcat
>>instance is free.
>>
>>FATAL:java.net.BindException: Address already in use
>>java.net.BindException: Address already in use
>>at java.net.PlainSocketImpl.socketBind(Native Method)
>>at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:405)
>>at java.net.ServerSocket.(ServerSocket.java:170)
>>at java.net.ServerSocket.(ServerSocket.java:121)
>>at
>>org.apache.tomcat.net.DefaultServerSocketFactory.createSocket(DefaultServe
r
>S
>>ocketFactory.java:97)
>>at
>>org.apache.tomcat.service.PoolTcpEndpoint.startEndpoint(PoolTcpEndpoint.ja
v
>a
>>:239)
>>at
>>org.apache.tomcat.service.PoolTcpConnector.start(PoolTcpConnector.java:188
)
>>at
>>org.apache.tomcat.core.ContextManager.start(ContextManager.java:527)
>>at org.apache.tomcat.startup.Tomcat.execute(Tomcat.java:202)
>>at org.apache.tomcat.startup.Tomcat.main(Tomcat.java:235)
>>
>>
>>Any advice is highly appreciated.
>>
>>Abhijat Thakur
>>
>
>
>

RE: JDBCRealm... simple question

[Michael Wentzel]

> Is it normal that I get a "JDBCRealm:The database connection 
> is null or was
> found to be closed. Trying to re-open it."  message
> every time I send a post or a get request???
> 
> Everything works fine but I'm worrying about performance 
> degradation since
> the connection seems to be reopen for every call.

The source for JDBCRealm should be in 
TOMCAT_HOME/src/org/apache/tomcat/request/.
You can modify it to your hearts content.  This is definitely
something that could be managed in a pool or something along
those lines.

---
Michael Wentzel
Software Developer
Software As We Think - http://www.aswethink.com

Re: Multiple Instances of Tomcat

[Pier P. Fumagalli]

Abhijat Thakur at [EMAIL PROTECTED] wrote:

> Hi,
> 
> i am actually using different ports. 8007(server1.xml) and
> 8009(server2.xml). but i still get the error message.

I believe it's the "control" port of the tomcat server, the one used to
shutdown the VM.

Pier

RE: Help!! Apache won't redirect to tomcat

[John Bazeley]

you're on Solaris, right?

146 is 'connection refused'.

Your ajp13 handler isn't running. Either:

tomcat isn't started
ajp13 handler is not activated in server.xml.

--
John

> -Original Message-
> From: Nance, Michael [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 26 July 2001 06:55
> To: [EMAIL PROTECTED]
> Subject: Help!! Apache won't redirect to tomcat
> 
> 
> Someone please Help.
> 
> I have copied the auto conf genereated by tomcat and included that in 
> my httpd.conf file  with the following line
> 
> Include
> /opt/pokemon/bin/col_bin/tomcat/tomcat35_322/conf/tomcat-mod_jk-ap
> ache.conf
> 
> I added lines to tomcat-mod_jk-apache.conf to hopefully recognize my url
> JkMount /buy/* ajp12
> JkMount /olympics/*  ajp12
> JkMount /sloc2002/* ajp12
> JkMount /maintenance/* ajp12
> JkMount /xml/* ajp12
> 
> but it doesn't seem to recognize the url
> 
> I am getting 
> [jk_connect.c (143)]: jk_open_socket, connect() failed errno = 146
> [jk_ajp12_worker.c (152)]: In jk_endpoint_t::service, Error sd = -1
> 
> in my mod_jk.log and no errors in my apache http_error.log
> 
> I started tomcat first.
> 
> 
> Can Anyone offer some help?
> 
> Thanks
> Mike
> 

RE: Multiple Instances of Tomcat

[Jason Koeninger]

Those sound like they would be used for ajp12 or 13 port 
numbers.  Are you sure the http connector isn't still enabled 
on both server.xml files for port 8080?  I'd be happy to glance 
at the two files if you like.

Best Regards,

Jason Koeninger
J&J Computer Consulting
http://www.jjcc.com

On Wed, 25 Jul 2001 13:52:21 -0700, Abhijat Thakur wrote:

>Hi,
>
>i am actually using different ports. 8007(server1.xml) and
>8009(server2.xml). but i still get the error message.
>
>thanks
>
>
>-Original Message-
>From: Jason Koeninger [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, July 25, 2001 1:37 PM
>To: [EMAIL PROTECTED]
>Subject: Re: Multiple Instances of Tomcat
>
>
>The http, ajp12, and/or ajp13 services can't bind to the same port on
>the same IP address.  You need to modify server.xml to put things
>on different ports or different IP addresses.
>
>Best Regards,
>
>Jason Koeninger
>J&J Computer Consulting
>http://www.jjcc.com
>
>On Wed, 25 Jul 2001 13:46:29 -0700, Abhijat Thakur wrote:
>
>>
>>Hi,
>>
>>I am trying to run multiple instances of Tomcat. The documentation tells me
>>that i have to have two server.xml files and have to start Tomca with
>>bin/startup.sh -f /conf/server1.xml and bin/startup.sh -f
>/conf/server2.xml.
>>Depending on the tomcat instance to which a servlet in a particular
>>application has to be directed the context for that application has to be
>>defined in that particular server.xml file.
>>
>>Now when i start my tomcat and try and start my second instnace of tomcat i
>>get an error. However the port on which i am starting the second tomcat
>>instance is free.
>>
>>FATAL:java.net.BindException: Address already in use
>>java.net.BindException: Address already in use
>>at java.net.PlainSocketImpl.socketBind(Native Method)
>>at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:405)
>>at java.net.ServerSocket.(ServerSocket.java:170)
>>at java.net.ServerSocket.(ServerSocket.java:121)
>>at
>>org.apache.tomcat.net.DefaultServerSocketFactory.createSocket(DefaultServer
>S
>>ocketFactory.java:97)
>>at
>>org.apache.tomcat.service.PoolTcpEndpoint.startEndpoint(PoolTcpEndpoint.jav
>a
>>:239)
>>at
>>org.apache.tomcat.service.PoolTcpConnector.start(PoolTcpConnector.java:188)
>>at
>>org.apache.tomcat.core.ContextManager.start(ContextManager.java:527)
>>at org.apache.tomcat.startup.Tomcat.execute(Tomcat.java:202)
>>at org.apache.tomcat.startup.Tomcat.main(Tomcat.java:235)
>>
>>
>>Any advice is highly appreciated.
>>
>>Abhijat Thakur
>>
>
>
>

RE: Multiple Instances of Tomcat

[Abhijat Thakur]

Hi,

i am actually using different ports. 8007(server1.xml) and
8009(server2.xml). but i still get the error message.

thanks


-Original Message-
From: Jason Koeninger [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 1:37 PM
To: [EMAIL PROTECTED]
Subject: Re: Multiple Instances of Tomcat


The http, ajp12, and/or ajp13 services can't bind to the same port on
the same IP address.  You need to modify server.xml to put things
on different ports or different IP addresses.

Best Regards,

Jason Koeninger
J&J Computer Consulting
http://www.jjcc.com

On Wed, 25 Jul 2001 13:46:29 -0700, Abhijat Thakur wrote:

>
>Hi,
>
>I am trying to run multiple instances of Tomcat. The documentation tells me
>that i have to have two server.xml files and have to start Tomca with
>bin/startup.sh -f /conf/server1.xml and bin/startup.sh -f
/conf/server2.xml.
>Depending on the tomcat instance to which a servlet in a particular
>application has to be directed the context for that application has to be
>defined in that particular server.xml file.
>
>Now when i start my tomcat and try and start my second instnace of tomcat i
>get an error. However the port on which i am starting the second tomcat
>instance is free.
>
>FATAL:java.net.BindException: Address already in use
>java.net.BindException: Address already in use
>at java.net.PlainSocketImpl.socketBind(Native Method)
>at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:405)
>at java.net.ServerSocket.(ServerSocket.java:170)
>at java.net.ServerSocket.(ServerSocket.java:121)
>at
>org.apache.tomcat.net.DefaultServerSocketFactory.createSocket(DefaultServer
S
>ocketFactory.java:97)
>at
>org.apache.tomcat.service.PoolTcpEndpoint.startEndpoint(PoolTcpEndpoint.jav
a
>:239)
>at
>org.apache.tomcat.service.PoolTcpConnector.start(PoolTcpConnector.java:188)
>at
>org.apache.tomcat.core.ContextManager.start(ContextManager.java:527)
>at org.apache.tomcat.startup.Tomcat.execute(Tomcat.java:202)
>at org.apache.tomcat.startup.Tomcat.main(Tomcat.java:235)
>
>
>Any advice is highly appreciated.
>
>Abhijat Thakur
>

Re: Multiple Instances of Tomcat

[Jason Koeninger]

The http, ajp12, and/or ajp13 services can't bind to the same port on 
the same IP address.  You need to modify server.xml to put things 
on different ports or different IP addresses.

Best Regards,

Jason Koeninger
J&J Computer Consulting
http://www.jjcc.com

On Wed, 25 Jul 2001 13:46:29 -0700, Abhijat Thakur wrote:

>
>Hi,
>
>I am trying to run multiple instances of Tomcat. The documentation tells me
>that i have to have two server.xml files and have to start Tomca with
>bin/startup.sh -f /conf/server1.xml and bin/startup.sh -f /conf/server2.xml.
>Depending on the tomcat instance to which a servlet in a particular
>application has to be directed the context for that application has to be
>defined in that particular server.xml file.
>
>Now when i start my tomcat and try and start my second instnace of tomcat i
>get an error. However the port on which i am starting the second tomcat
>instance is free.
>
>FATAL:java.net.BindException: Address already in use
>java.net.BindException: Address already in use
>at java.net.PlainSocketImpl.socketBind(Native Method)
>at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:405)
>at java.net.ServerSocket.(ServerSocket.java:170)
>at java.net.ServerSocket.(ServerSocket.java:121)
>at
>org.apache.tomcat.net.DefaultServerSocketFactory.createSocket(DefaultServerS
>ocketFactory.java:97)
>at
>org.apache.tomcat.service.PoolTcpEndpoint.startEndpoint(PoolTcpEndpoint.java
>:239)
>at
>org.apache.tomcat.service.PoolTcpConnector.start(PoolTcpConnector.java:188)
>at
>org.apache.tomcat.core.ContextManager.start(ContextManager.java:527)
>at org.apache.tomcat.startup.Tomcat.execute(Tomcat.java:202)
>at org.apache.tomcat.startup.Tomcat.main(Tomcat.java:235)
>
>
>Any advice is highly appreciated.
>
>Abhijat Thakur
>

RE: Apxs

[John Bazeley]

Look at the error messages:

> /opt/apache/bin/apxs[66]: require: not found
> /opt/apache/bin/apxs[67]: use:   not found
> /opt/apache/bin/apxs[68]: package: not found
> /opt/apache/bin/apxs[69]: Syntax error at line 74: '(' is not expected.

Looks to me like the shell is trying to interpret apxs.

is your

#!/usr/bin/perl

line intact at the top of apxs?

Does H-pukes support the #! feature? Or is it something that needs to 
be activated? If no support, try replacing apxs with 'perl apxs' in 
the makefile.

Is perl in /usr/bin?

Cheers,
--
John

> -Original Message-
> From: Aaron Cooper [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 26 July 2001 06:40
> To: [EMAIL PROTECTED]
> Subject: RE: Apxs
> 
> 
> hi Michael,
> 
>I did change that the the proper directory, but it's still not 
> finding the packages :(
> 
> >>> "Nance, Michael" <[EMAIL PROTECTED]> 07/25/01 03:38pm >>>
> I found that the apxs command has a "hard coded" path.  If the  apache
> directory is different you may have to update it.
> edit the apxs and make sure it is correct.
> 
> -Original Message-
> From: Aaron Cooper [mailto:[EMAIL PROTECTED]] 
> Sent: Wednesday, July 25, 2001 10:28 AM
> To: [EMAIL PROTECTED] 
> Subject: Apxs
> 
> 
> hi folks
> 
>I am trying to configure tomcat3.3b1 with apache.  however, whenever I
> run the build-hpux.sh script, it produces the following error messages
> relating to the apxs script:
> 
> /opt/apache/bin/apxs[66]: require: not found
> /opt/apache/bin/apxs[67]: use:   not found
> /opt/apache/bin/apxs[68]: package: not found
> /opt/apache/bin/apxs[69]: Syntax error at line 74: '(' is not expected.
> 
> I have not modified apxs at all.  Has anyone else encountered these
> difficulties? i've searched my directory structure for the packages, and
> they are not found.
> 
> Aaron
> 
> 
> 
> 

Multiple Instances of Tomcat

[Abhijat Thakur]

Hi,

I am trying to run multiple instances of Tomcat. The documentation tells me
that i have to have two server.xml files and have to start Tomca with
bin/startup.sh -f /conf/server1.xml and bin/startup.sh -f /conf/server2.xml.
Depending on the tomcat instance to which a servlet in a particular
application has to be directed the context for that application has to be
defined in that particular server.xml file.

Now when i start my tomcat and try and start my second instnace of tomcat i
get an error. However the port on which i am starting the second tomcat
instance is free.

FATAL:java.net.BindException: Address already in use
java.net.BindException: Address already in use
at java.net.PlainSocketImpl.socketBind(Native Method)
at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:405)
at java.net.ServerSocket.(ServerSocket.java:170)
at java.net.ServerSocket.(ServerSocket.java:121)
at
org.apache.tomcat.net.DefaultServerSocketFactory.createSocket(DefaultServerS
ocketFactory.java:97)
at
org.apache.tomcat.service.PoolTcpEndpoint.startEndpoint(PoolTcpEndpoint.java
:239)
at
org.apache.tomcat.service.PoolTcpConnector.start(PoolTcpConnector.java:188)
at
org.apache.tomcat.core.ContextManager.start(ContextManager.java:527)
at org.apache.tomcat.startup.Tomcat.execute(Tomcat.java:202)
at org.apache.tomcat.startup.Tomcat.main(Tomcat.java:235)


Any advice is highly appreciated.

Abhijat Thakur

RE: mod_jk on Solaris 2.6 : undefined symbols

[John Bazeley]

As a matter of interest, why no -G?

> my $CFG_LD_SHLIB  = q(ld);
> my $CFG_LDFLAGS_SHLIB = q();  # I don't use -G
> my $CFG_LIBS_SHLIB= q();

JDBCRealm... simple question

[Stephane Drouin]

Hi,

Is it normal that I get a "JDBCRealm:The database connection is null or was
found to be closed. Trying to re-open it."  message
every time I send a post or a get request???

Everything works fine but I'm worrying about performance degradation since
the connection seems to be reopen for every call.

Thanks

Re: 401

[fthomas . baltzley]

You must define /jakarta as a virtual directory to the full path of
isapi_redirect.dll.


   
 
To: [EMAIL PROTECTED]
 
 cc:   
 
07/25/2001   Subject: 401  
 
01:55 PM   
 
Please 
 
respond to 
 
tomcat-user
 
   
 
   
 



Hello
I have Tomcat 3.2 installed like service and redirect
module /jakarta/isapi_redirect.dll in IIS Filters.
After Invoking the URL
"http://localhost/examples/jsp/index.html"; in my
browser I faced with following line in IIS log file:
GET /jakarta/isapi_redirect.dll 401.
I didnt find anything like that In your
troubleshootter.
Please, tell me, what I did wrong or what shall i
do???
Thanks
Oleg Kusij.



__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

Re: data cross pollination, sync issue?

[Fernando_Salazar]

Assuming you don't have any servlet-globals being shared between threads,
and that you otherwise have your
session stuff correct, the thing I would look at is proxy servers.  These
will cache pages based on URI alone
 -- ie, not taking cookies into account -- and so user 2 will get the page
sent to user 1.  If you are running a public
internet site, many users connect via ISPs that have "transparent proxies"
that the users are not aware of.

The fix is to include the various no-cache HTTP header directives and
 tags.  Examples:

 response.setHeader( "Cache-Control", "no-cache" );
 response.setHeader( "Pragma", "no-cache" );

 
 
 

- Fernando




All,
   Sorry for the cross post.  our environment is Apache 1.3.14/
Tomcat 3.2,
using servlets and JSP pages hitting an Oracle db, on Solaris 2.7.  here is
the problem in a nutshell, and yes I have been through the news groups and
tried all the fixes I have seen, browsers one will get browser two's data
and vice versa.  The more load the more frequent the problem.  The code
jockeys have no idea and are blaming the environment.  HELP!

Thank you all in advance for your time,
John

Re: question about WEB-INF/lib

[Dmitri Colebatch]

linux, jdk1.3 from sun, tomcat 3.2.1.  Although I'm pretty sure in the
past I've run this on windows boxes ok... I'll be seeing a mate of mine
who runs windows tomorrow so will check with him then...

cheesr
dim

On 24 Jul 2001, Joseph D Toussaint wrote:

> Out of curiosity what are you runing tomcat on unix or nt?  Maybe there
> is a diffrence between startup.bat and startup.sh???
> 
> 
> joe
> 
> On 25 Jul 2001 08:05:31 +1000, Dmitri Colebatch wrote:
> > I can verify it does work.  I dont have any suggestions though - sorry.
> > 
> > cheesr
> > dim
> > 
> > On Tue, 24 Jul 2001 [EMAIL PROTECTED] wrote:
> > 
> > > 
> > > I see this problem, too. I'm using Tomcat 3.2.x. It appears to me to be a
> > > bug.
> > > I've seen others with this problem on this mailing list. Can anyone verify
> > > that this actually does work?
> > > (Just trying to add some weight to your claim and get it fixed if it is a
> > > bug. :o)
> > > 
> > > Thanks,
> > > Dave
> > > 
> > > 
> > > 
> > > 
> > > 
> > > Joseph D Toussaint <[EMAIL PROTECTED]> on 07/24/2001 11:55:44 AM
> > > 
> > > Please respond to [EMAIL PROTECTED]
> > > 
> > > To:   [EMAIL PROTECTED]
> > > cc:
> > > 
> > > Subject:  question about WEB-INF/lib
> > > 
> > > 
> > > It's my understanding that any jar files in the WEB-INF/lib directory
> > > should be found by the container when the app is deployed - however I
> > > havea  jdbc driver in that directory and I'm getting a class not found
> > > exception.
> > > 
> > > 
> > > When ever I have set up tomcat before I've always edited the tomcat.sh
> > > script so search all the WEB-INF/lib directories for every web
> > > application - however this time I'd like to do it right.
> > > 
> > > 
> > > Thanks!
> > > 
> > > 
> > > joe
> > > 
> > > 
> > > --
> > > ##
> > > # Joseph Toussaint   #
> > > # Caribou Lake Software  #
> > > # http://www.cariboulake.com #
> > > # [EMAIL PROTECTED]   #
> > > # 952-837-98029  #
> > > ##
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > 
> 
> 
> 
> -- 
> ##
> # Joseph Toussaint   #
> # Caribou Lake Software  #
> # http://www.cariboulake.com #
> # [EMAIL PROTECTED]   #
> # 952-837-98029  #
> ##
> 
> 

question about apache and ldap

[Joseph D Toussaint]

Ok here is what I'd like to do and what I have done and I'm wondering if
it's possible.

I want tomcat to use apache for all the static content, and I want
apache to authenticate via a ldap server.  I also want the username and
groups (roles) from ldap to be avaliable on the request object so I can
use isUserInRole, etc.

I currently have Apache with mod_auth_ldap and it authenicates via a
ldap server.  I have tomcat hooked up to apache using mod_jk, and I have
a security constraint in my web.xml - where the auth-type is BASIC.

When I go to one of my servlets It pulls up the apache login window -
but if the user is not in the tomcat-users.xml it also pulls up the
tomcat login window. 

In a moment of despiration I commented out the
org.apache.tomcat.request.SimpleRealm RequestInterceptor, hoping this
would force tomcat to authenticate with apache.  After doing this I no
longer get the tomcat login window - but I get a 500 error from apache
(no stacktrace, just the vanilla server error page).

At this point I'm stuck.  My backup plan is to use FORM authentication
and write a servlet to talk to ldap.  However I'd prefer to get it to
work as mentioned above.


thanks!

joe


-- 
##
# Joseph Toussaint   #
# Caribou Lake Software  #
# http://www.cariboulake.com #
# [EMAIL PROTECTED]   #
# 952-837-98029  #
##

RE: File Not Found Error

[Michael Wentzel]

> I am not sure how you have defined your servlets.
> 
> For a servlet called MyServlet, a URL like the following is 
> recommended:
> http://localhost:8080/examples/servlet/MyServlet
> 
> "servlet" needs to be lowercase.
> 
> Gautam
> 
> -Original Message-
> From: Jeffrey Worst [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, July 25, 2001 11:59 AM
> To: [EMAIL PROTECTED]
> Subject: File Not Found Error
> 
> I keep getting an HTTP 404 file not found error when I try to 
> run a servlet.
> My servlet class file is at C:\tomcat\Servlet\Ex197.class.  
> Hopefully the
> html code below will show what I'm doing wrong:

One word, documentation.  The Tomcat docs are fairly straight
forward in this regard.  In addition you can look at the examples
that come with Tomcat.  While this is an arena for helping each
other with problems it is(or at least should be) expected that
you have read the docs, played with it some, read the archives,
and repeated the above steps.  It sounds to me like you don't
have your server.xml, web.xml and classfiles setup correctly.

I suggest you start from the bottom and work your way up:
Does tomcat run correctly(root context)?
Do JSP's run correctly?
Then start with a servlet...



---
Michael Wentzel
Software Developer
Software As We Think - http://www.aswethink.com

RE: Simple Tomcat Install on Win98

[Martin Welch]

Blimey, one I can answer, I think!
 
Yes. 
You can set these up in your autoexec.bat with something 
like:
 
set 
TOMCAT_HOME=c:\jakarta-tomcat-3.2.1
set 
JAVAHOME=c:\jdk1.3.1
set 
PATH=c:\jdk1.3.1\bin
 
However, I'm not at home so I don't have my Win98 box in front of me but 
I think you need to provide the 8.3 DOS names here so it will become something 
like:
 

set 
TOMCAT_HOME=c:\jakarta~1
 
To be sure of the file names do a dir in a 
dos box.
 
HTH
 
Martin
 -Original Message-From: Jeffrey Worst 
[mailto:[EMAIL PROTECTED]]Sent: 25 July 2001 12:31To: 
[EMAIL PROTECTED]Subject: Simple Tomcat Install on 
Win98

  I'm having problems installing Tomcat on my Win98Se 
  machine.  Below are the directions from Jakarta for installing 
  Tomcat.  I've commented what I don't 
  understand. Thanks, Jeff 
  W.-How Do I Install the 
  Binary Version of Tomcat?Very simple. You should: Download 
  the zip/tar.gz/whatever file from http://jakarta.apache.org/downloads/binindex.html.I’ve done this and everything went 
  fine. Unpack the file into some directory (say foo). 
  This should create a new subdirectory named "jakarta-tomcat-3.2.1". If it's 
  not where you want it, move this directory to the desired 
  location.///Did this and it went fine also./ 
   Change directory to "jakarta-tomcat-3.2.1" and set a 
  new environment variable (TOMCAT_HOME) to point to the root directory of your 
  Tomcat hierarchy.This I don’t understand.  Are they 
  talking about doing this in autoexec.bat or in the tomcat.bat 
  file? On Win32 you should type: "set 
  TOMCAT_HOME=foo\jakarta-tomcat-3.2.1" Again, are they talking 
  about within autoexec.bat or someplace 
  else?  Set the environment variable JAVA_HOME 
  to point to the root directory of your JDK hierarchy...Where 
  is the “environment variable” JAVA HOME located?  
  then add the Java interpreter to your PATH environment 
  variable.How does one do 
  this?  

RE: File Not Found Error

[Gautam Sinha]

Jeff,

I am not sure how you have defined your servlets.

For a servlet called MyServlet, a URL like the following is recommended:
http://localhost:8080/examples/servlet/MyServlet

"servlet" needs to be lowercase.

Gautam

-Original Message-
From: Jeffrey Worst [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 11:59 AM
To: [EMAIL PROTECTED]
Subject: File Not Found Error

I keep getting an HTTP 404 file not found error when I try to run a servlet.
My servlet class file is at C:\tomcat\Servlet\Ex197.class.  Hopefully the
html code below will show what I'm doing wrong:

Thanks,

Jeff


   
  Ex 19.7
   

   
  http://localhost:8080/tomcat/Servlet/Ex197";>
 What is your favorite pet?
 Dog
 Cat
 Bird
 Snake
 None
 
 
  
   

anyone know a way around having to use IIS redirect for caching static files when using tomcat 3.2.3 ?

[Stephen Dittmer]

I have found that using tomcat 3.2.3 requires use of this IIS redirect in
order to get around a problem in tomcat where it 
send the incorrect HTTP response for files not modified. This causes files
already in Browser cache to always get reloaded when they don't need to.
I am wondering if anyone knows a way around this problem without having to
use IIS redirect.  

Stephen

RE: Apxs

[Nance, Michael]

This is the command I used to build ...you will have to replace the Solaris
with unix and change the path of apache but give it a shot...note I heard
order IS important

opt/pokemon/lib/server/apache/1.3.12+ssl_0.95-solaris2.70/bin/apxs -o
mod_jk.so -DSOLARIS -I../jk -I/usr/java/include -I/usr/java/include/solaris
-lposix4 -c *.c ../jk/*.c

-Original Message-
From: Aaron Cooper [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 11:40 AM
To: [EMAIL PROTECTED]
Subject: RE: Apxs


hi Michael,

   I did change that the the proper directory, but it's still not finding
the packages :(

>>> "Nance, Michael" <[EMAIL PROTECTED]> 07/25/01 03:38pm >>>
I found that the apxs command has a "hard coded" path.  If the  apache
directory is different you may have to update it.
edit the apxs and make sure it is correct.

-Original Message-
From: Aaron Cooper [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 25, 2001 10:28 AM
To: [EMAIL PROTECTED] 
Subject: Apxs


hi folks

   I am trying to configure tomcat3.3b1 with apache.  however, whenever I
run the build-hpux.sh script, it produces the following error messages
relating to the apxs script:

/opt/apache/bin/apxs[66]: require: not found
/opt/apache/bin/apxs[67]: use:   not found
/opt/apache/bin/apxs[68]: package: not found
/opt/apache/bin/apxs[69]: Syntax error at line 74: '(' is not expected.

I have not modified apxs at all.  Has anyone else encountered these
difficulties? i've searched my directory structure for the packages, and
they are not found.

Aaron

Help!! Apache won't redirect to tomcat

[Nance, Michael]

Someone please Help.

I have copied the auto conf genereated by tomcat and included that in 
my httpd.conf file  with the following line

Include
/opt/pokemon/bin/col_bin/tomcat/tomcat35_322/conf/tomcat-mod_jk-apache.conf

I added lines to tomcat-mod_jk-apache.conf to hopefully recognize my url
JkMount /buy/* ajp12
JkMount /olympics/*  ajp12
JkMount /sloc2002/* ajp12
JkMount /maintenance/* ajp12
JkMount /xml/* ajp12

but it doesn't seem to recognize the url

I am getting 
[jk_connect.c (143)]: jk_open_socket, connect() failed errno = 146
[jk_ajp12_worker.c (152)]: In jk_endpoint_t::service, Error sd = -1

in my mod_jk.log and no errors in my apache http_error.log

I started tomcat first.


Can Anyone offer some help?

Thanks
Mike

File Not Found Error

[Jeffrey Worst]

I keep getting an HTTP 404 file not found error when I try to run a servlet.
My servlet class file is at C:\tomcat\Servlet\Ex197.class.  Hopefully the
html code below will show what I'm doing wrong:

Thanks,

Jeff


   
  Ex 19.7
   

   
  http://localhost:8080/tomcat/Servlet/Ex197";>
 What is your favorite pet?
 Dog
 Cat
 Bird
 Snake
 None
 
 
  
   

Re: authentification for differents groups FORM or BASIC

[Craig R. McClanahan]

On Wed, 25 Jul 2001, zze-messager FTM balr002 wrote:

> Hello, 
> 
> 
> I have to do protect the accesses to my application in fuction of groups of
> users.
> For exemple, the group1 can access to the application if the url likes this
> : 
> /sc?AI=A*
> /sc?AI=M*
> /sc?AI=D
> 
> And the group2 can access with a url likes : /sc?AI=V*
> 
> How to do that with a FORM or a BASIC authentification ?
> 

See the servlet spec for more details (URL in a previous response), but
you're not going to be able to use container managed security to
differentiate URLs that have different query strings.  They have to be
different URL patterns (same kind of patterns as used for servlet
mappings).

> Delphine
> 

Craig

Re: Apxs

[Pier P. Fumagalli]

Aaron Cooper at [EMAIL PROTECTED] wrote:

> hi Michael,
> 
>  I did change that the the proper directory, but it's still not finding the
> packages :(

What does "perl -v" says?

Pier

Re: digest , form and basic authentification

[Craig R. McClanahan]

On Wed, 25 Jul 2001, zze-messager FTM balr002 wrote:

> Is anyone can give me an exemple of a a digest authentification? a
> form ? a basic ? Is is possible to decalre two groups of users with
> differents authorizations ?
> 

The standard Tomcat "/examples" webapp includes a URL that is protected by
form-based authentication.  Try the following URL:

  http://localhost:8080/examples/jsp/security/protected/index.jsp

Other notes of interest:

* Tomcat 3.2 does not support DIGEST authentication, although 4.0 does.

* The login method used is declared on a per-webapp basis, using
  the  element in the "/WEB-INF/web.xml" file.  You will
  also need to add appropriate security constraints to define what
  URLs are protected.  See the servlet spec for more information:

http://java.sun.com/products/servlet/download.html

* How Tomcat actually looks up users and roles is something you can
  configure in the server.xml file (in a manner that is Tomcat version
  dependent).  By default, Tomcat loads an XML file at starutp time
  from (conf/tomcat-users.xml), but this is just a proof of concept --
  real applications would use the JDBCRealm feature in order to tell
  Tomcat to load users and roles from a database.  (Under Tomcat 4, you
  can also use JNDIRealm to access a directory server).


> Delphine  
> 

Craig McClanahan

Re: Apxs

[Pier P. Fumagalli]

Nance, Michael at [EMAIL PROTECTED] wrote:

> I found that the apxs command has a "hard coded" path.  If the  apache
> directory is different you may have to update it.
> edit the apxs and make sure it is correct.

Actually APXS is generated in the build process with Apache, so the paths
should be correct. I never tried to "relocate" an Apache installation after
it has been compiled.

Pier

RE: Apxs

[Aaron Cooper]

hi Michael,

   I did change that the the proper directory, but it's still not finding the packages 
:(

>>> "Nance, Michael" <[EMAIL PROTECTED]> 07/25/01 03:38pm >>>
I found that the apxs command has a "hard coded" path.  If the  apache
directory is different you may have to update it.
edit the apxs and make sure it is correct.

-Original Message-
From: Aaron Cooper [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 25, 2001 10:28 AM
To: [EMAIL PROTECTED] 
Subject: Apxs


hi folks

   I am trying to configure tomcat3.3b1 with apache.  however, whenever I
run the build-hpux.sh script, it produces the following error messages
relating to the apxs script:

/opt/apache/bin/apxs[66]: require: not found
/opt/apache/bin/apxs[67]: use:   not found
/opt/apache/bin/apxs[68]: package: not found
/opt/apache/bin/apxs[69]: Syntax error at line 74: '(' is not expected.

I have not modified apxs at all.  Has anyone else encountered these
difficulties? i've searched my directory structure for the packages, and
they are not found.

Aaron

Re: question about WEB-INF/lib

[Craig R. McClanahan]

On Wed, 25 Jul 2001 [EMAIL PROTECTED] wrote:

> 
> This is my workaround as well, but it is not a very good solution. I often
> have multiple webapps running that need different versions of the same jar
> file. This becomes a real pain.
> Thanks,
> Dave
> 

If you have to modify the CLASSPATH to make classes inside JAR file in a
/WEB-INF/lib directory available, your webapps are set up incorrectly.  
In fact, doing this will make a lot of other things (like automatic
reloading on updated classes) fail miserably.

One good source of information about how to organize your web applications
is the "Application Developer's Guide" that is shipped with Tomcat (both
3.2 and 4.0).  Additionally, you should consider the Servlet Specification
(version 2.2 or 2.3, depending on which Tomcat you're running) to be
***required reading***, because that's where the requirements for web
applications are actually defined.  You can get the spec from:

  http://java.sun.com/products/servlet/download.html

Craig McClanahan

RE: Apxs

[Nance, Michael]

I found that the apxs command has a "hard coded" path.  If the  apache
directory is different you may have to update it.
edit the apxs and make sure it is correct.

-Original Message-
From: Aaron Cooper [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 10:28 AM
To: [EMAIL PROTECTED]
Subject: Apxs


hi folks

   I am trying to configure tomcat3.3b1 with apache.  however, whenever I
run the build-hpux.sh script, it produces the following error messages
relating to the apxs script:

/opt/apache/bin/apxs[66]: require: not found
/opt/apache/bin/apxs[67]: use:   not found
/opt/apache/bin/apxs[68]: package: not found
/opt/apache/bin/apxs[69]: Syntax error at line 74: '(' is not expected.

I have not modified apxs at all.  Has anyone else encountered these
difficulties? i've searched my directory structure for the packages, and
they are not found.

Aaron

RE: Custom HTTP status code

[Craig R. McClanahan]

On Wed, 25 Jul 2001, Vladimir Grishchenko wrote:

> 
> 
> extract 
> 
> org/apache/tomcat/core/LocalStrings.properties
> 
> (or org/apache/tomcat/service/LocalStrings.properties ??
>   don't remember exactly which one did it for me..)
> 
> from webserver.jar, add/edit status codes  you want, put it
> back and restart Tomcat. You should be running fine now.
> This should work on 3.2.2, not sure about T4.
> 
> --V.
> 

A similar technique will work in Tomcat 4 to avoid the exceptions on
unknown status codes.

However, I would strongly urge Germano to *not* arbitrarily extend the
HTTP protocol in this way.  It's obvious that the client application
making these requests is aware of the special meaning of these status
codes, so it could be modified to acquire whatever additional info it
needs from HTTP headers, or cookies, or something else that is already
supported by standard HTTP.

Making yourself dependent on a hand-modified version of a single servlet
container is just asking for maintenance headaches down the road.  And the
whole thing collapses when you need to insert something like a standard
HTTP proxy server between the client and the server, or switch to a
different container that absolutely refuses to deal with your modified
status codes, or ...

Craig McClanahan

> 
> 
> 
> ---
> Hi!
> 
> I'm developing an application not targeted to the web, but still I need to
> use the HTTP as the protocol. I've chosen to specify five new status code,
> to report some kind of errors I may generate and that aren't covered by
> existing ones. These codes are 601, 602, 603, 605, 606. The problem is that
> using JRun it just ignored the error code, and reported the page normally;
> tomcat, on the other hand, throws an exception everytime my application
> reports one such code. This degrades performances very much...
> 
> Is there a way to specify these new codes as valid? And, in case, to bind a
> string to them as a description, just as for the other ones? I saw there are
> some LocalString.properties files, but I can't get them to work; and I think
> they're just for localization...
> 
> Many thanks,
> 
> Germano Rizzo
> 
> 
> ***
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. Any unauthorized review, use, disclosure or distribution
> is prohibited. If you are not the intended recipient, please contact
> the sender by reply e-mail and destroy all copies of the original
> message.
> ***
> 

Re: expression tag in JSP standar

[Craig R. McClanahan]

On Wed, 25 Jul 2001, Jim Cheesman wrote:

> At 12:05 AM 25/07/01, you wrote:
> >Given that Tomcat is the reference implementation I would assume its
> >implementation is the correct one.
> 
> 
> And assuming, of course, that the behaviour is defined... In the spec for 
> JSP1.1 the only thing it says is that the expression is "coerced" into a 
> String. What the container does with a null String is up to it. (This may 
> mean that any of the types of behaviour you've seen is/are correct.)
> 

Jim's analysis is correct.  And the JSP 1.2 spec (now in Proposed Final
Draft 3 state) says exactly the same thing.

If you feel that the spec *should* say something about this, the best
avenue is to address your suggestion to the appropriate feedback address
<[EMAIL PROTECTED]> for consideration by the expert group.

By the way, the corresponding address for the servlet spec is
<[EMAIL PROTECTED]>.

Craig McClanahan

Re: request for suggestions on how to secure a web application....

[Andrew Robson]

Hi Peter,
  Have you looked at Realms? This allows you to specify a set of resources
(html, jsp, servlets etc) to be protected in your web.xml file. Any
unauthorised access attempt to these files will automatically throw up 
a login form. Means you don't have to code in protection to each page.
You can authorise your users against a text file (SimpleRealm) or a
database (JDBCRealm). There is an example in the examples directory.
Check out the web.xml file in there and also look for Realm in server.xml
If you want to use a database look at TOMCAT_HOME/doc/JDBCRealm.howto

If you like the look of Realms I'm afraid you will have to upgrade to 3.2.3 
as earlier versions have a rather large security vulnerability.

andrew

  On Wed,
25 Jul 2001, you wrote: > I'm not sure whether it'll work for you but you can
assert current session on  > each jsp page that you want to protect  (assuming
you store user login info in  > the session) and throw an exception in case the
object is not found in the  > session, then the exception can be caught by an
error jsp page.  > 
> hth
> 
>   - Boris
> 
> 
> >
> >This posting is a request for suggestions on how best to 
> >secure a web application.
> >
> >First my setup:
> >
> >NT 4.0
> >Apache 1.3.12
> >Tomcat 3.2.1 (running behind Apache)
> >servlets 
> >jsp pages
> >static html pages
> >jdk1.3
> >
> >
> >Web-app directory structure:
> >
> >webapps/my_context/
> >/jsp/jsp_pages
> >/web-inf/classes/my_servlets
> >/web-inf/classes/beans/my_java_beans
> >
> >My static html files reside under the apache 
> >document root.
> >
> >For servlet access I am using session cookies, as specified in
> >the Java Servlet Spec, to authorize users. This works very 
> >well for my purposes.
> >
> >My concern is protecting sensitive jsp and static
> >html pages.
> >
> >How do I stop an unauthorized user from accessing a 
> >jsp or html resource directly?  ie: a back-door attack.  
> >
> >For example, I am protecting my site with a login page, 
> >but if a user simply sidesteps the login and types
> >
> >http://my_domain/my_context/jsp/any_jsp_page
> >
> >into his browser, he will get access to any jsp page 
> >that resides in the specified context. 
> >
> >I have experimented with some different approaches:
> >
> >1.  hide the jsp directory directly under the /web-inf 
> >directory and let Tomcat restrict access.
> >
> >So I would have:
> >
> >/web-inf/classes/servlets
> >/web-inf/jsp/jsp_pages
> >
> >Then provide access to jsp pages only through a 
> >verification servlet, which can verify the user and
> >then forward the request to the correct resource. 
> >
> >However, this is causing problems when I utilize a 
> >RequestDispatcher(path).forward(req, res)  or 
> >RequestDispatcher(path).include(req, res) 
> >instruction.
> >
> >The path needs to start with a "/" and be relative to 
> >the context root, per the Java Servlet API docs, which makes 
> >it impossible(?) to provide a correct path, since my 
> >verification servlet, and hence the execution thread, 
> >is in /web-inf/classes. When I issue the forward or inlude, 
> >I need to provide a path that looks something like:
> >
> >/../jsp/jsp_page 
> >
> >which is correctly making the JVM puke.
> >
> >
> >2. Utilize the apache rewrite module and have apache
> >rewrite all requests for http://my_domain/my_context/jsp/*.jsp
> >to my verification servlet. The verification servlet can then
> >do its thing and forward valid requests to the appropriate 
> >request. 
> >
> >A hornet's nest of complexity here! and my nose tells
> >me this is the wrong path to take.
> >
> >
> >3. Thought a lot about utilizing the Tomcat API.
> >
> >ie: RequestInterceptor, Virtual Host, Valves etc.
> >
> >I found rudimentary information about what these
> >constructs are, but very little on how to use them.
> >
> >So, I am kinda stumped :-(
> >
> >I guess the next step would be to explore Basic or
> >Digest Authorization, but I was hoping there would be
> >a simpler way, that uses the power of servlets
> >
> >I would greatly welcome any and all suggestions
> >
> >Thank you, and keep up the great work.
> >The Tomcat effort rocks!
> >
> >Peter
> >
> >
> >BTW, I anticipate that the Tomcat docs will improve greatly 
> >in the future, and I was greatly encouraged to see the 
> >effort being put into making a book, and the template forming
> >around v4.0
> >
> >I would like to suggest a section on real world examples, 
> >using and programming the Tomcat API and the xml config 
> >files, like server.xml. 
> >
> >For an example of what I mean, the documentation 
> >for the Apache mod_rewrite, written by Ralf S. Engelschall, 
> >has a section on practical solutions. 
> >
> >http://httpd.apache.org/docs/mod/mod_rewrite.html
> >
> >That's kinda what I mean.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
-- 

RE: keeping sessions when switching from http to https

[Li Liang]

I guess that's the way Tomcat parses the session info from request. When
it gets the cookie, everything is fine that it can get "jsessionid" from
the cookie and passes it back. 

But without cookie, it needs to rewrite the url. I saw somebody said
that "https" and "http" are different schemes that
HttpServletResponse.encodueURL() cannot encode the existing session id
(for "http") into the "https" URL, thus practically prevents the session
passed on to "https".

This IS a problem. Many handheld devices don't support cookie at all. I
am supprised that nobody has declared successfully solving this problem
yet.

Brigger, can you please check when turning off cookie, is the
"jsessionid" correctly encoded into the returned "https" url?

Thanks.
Li

-Original Message-
From: William Kaufman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 11:04 AM
To: '[EMAIL PROTECTED]'
Subject: RE: keeping sessions when switching from http to https


Are you encoding the cross-protocol links (with
HttpServletResponse.encode[Redirect]URL())?

The only reason I ask is that it seems strange that it does OK with
cookies
but not with URL encoding: the code paths are similar, so I'd expect it
to
fail with both or succeed with both.

-- Bill K. 

> -Original Message-
> From: Brigger Patrick [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, July 24, 2001 11:05 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: keeping sessions when switching from http to https
> 
> 
> When I try with cookies enabled, it works both on Netscape and IE 5.
> 
> Cookies disabled does not work on either.
> 
> Pat
> 
> -Original Message-
> From: Mike Spreitzer [mailto:[EMAIL PROTECTED]]
> Sent: Dienstag, 24. Juli 2001 19:13
> To: [EMAIL PROTECTED]
> Subject: Re: keeping sessions when switching from http to https
> 
> 
> Be careful when you experiment and report on this.  I have 
> found that IE 5 
> carries cookies from http to https but Netscape 4 does not.  
> I have only 
> tested this with cookies, not URL-rewriting.  I'm grumped by 
> this problem, 
> but it's not critcal for me yet --- for my current site, I 
> think I can get 
> away with only having sessions on the https side.
> 
> Mike
> 

Re: request for suggestions on how to secure a web application....

[Boris Niyazov]

I'm not sure whether it'll work for you but you can assert current session on 
each jsp page that you want to protect  (assuming you store user login info in 
the session) and throw an exception in case the object is not found in the 
session, then the exception can be caught by an error jsp page. 

hth

  - Boris


>
>This posting is a request for suggestions on how best to 
>secure a web application.
>
>First my setup:
>
>NT 4.0
>Apache 1.3.12
>Tomcat 3.2.1 (running behind Apache)
>servlets 
>jsp pages
>static html pages
>jdk1.3
>
>
>Web-app directory structure:
>
>webapps/my_context/
>/jsp/jsp_pages
>/web-inf/classes/my_servlets
>/web-inf/classes/beans/my_java_beans
>
>My static html files reside under the apache 
>document root.
>
>For servlet access I am using session cookies, as specified in
>the Java Servlet Spec, to authorize users. This works very 
>well for my purposes.
>
>My concern is protecting sensitive jsp and static
>html pages.
>
>How do I stop an unauthorized user from accessing a 
>jsp or html resource directly?  ie: a back-door attack.  
>
>For example, I am protecting my site with a login page, 
>but if a user simply sidesteps the login and types
>
>http://my_domain/my_context/jsp/any_jsp_page
>
>into his browser, he will get access to any jsp page 
>that resides in the specified context. 
>
>I have experimented with some different approaches:
>
>1.  hide the jsp directory directly under the /web-inf 
>directory and let Tomcat restrict access.
>
>So I would have:
>
>/web-inf/classes/servlets
>/web-inf/jsp/jsp_pages
>
>Then provide access to jsp pages only through a 
>verification servlet, which can verify the user and
>then forward the request to the correct resource. 
>
>However, this is causing problems when I utilize a 
>RequestDispatcher(path).forward(req, res)  or 
>RequestDispatcher(path).include(req, res) 
>instruction.
>
>The path needs to start with a "/" and be relative to 
>the context root, per the Java Servlet API docs, which makes 
>it impossible(?) to provide a correct path, since my 
>verification servlet, and hence the execution thread, 
>is in /web-inf/classes. When I issue the forward or inlude, 
>I need to provide a path that looks something like:
>
>/../jsp/jsp_page 
>
>which is correctly making the JVM puke.
>
>
>2. Utilize the apache rewrite module and have apache
>rewrite all requests for http://my_domain/my_context/jsp/*.jsp
>to my verification servlet. The verification servlet can then
>do its thing and forward valid requests to the appropriate 
>request. 
>
>A hornet's nest of complexity here! and my nose tells
>me this is the wrong path to take.
>
>
>3. Thought a lot about utilizing the Tomcat API.
>
>ie: RequestInterceptor, Virtual Host, Valves etc.
>
>I found rudimentary information about what these
>constructs are, but very little on how to use them.
>
>So, I am kinda stumped :-(
>
>I guess the next step would be to explore Basic or
>Digest Authorization, but I was hoping there would be
>a simpler way, that uses the power of servlets
>
>I would greatly welcome any and all suggestions
>
>Thank you, and keep up the great work.
>The Tomcat effort rocks!
>
>Peter
>
>
>BTW, I anticipate that the Tomcat docs will improve greatly 
>in the future, and I was greatly encouraged to see the 
>effort being put into making a book, and the template forming
>around v4.0
>
>I would like to suggest a section on real world examples, 
>using and programming the Tomcat API and the xml config 
>files, like server.xml. 
>
>For an example of what I mean, the documentation 
>for the Apache mod_rewrite, written by Ralf S. Engelschall, 
>has a section on practical solutions. 
>
>http://httpd.apache.org/docs/mod/mod_rewrite.html
>
>That's kinda what I mean.
>
>
>
>
>
>
>
>
>
>
>
>

401

[okusiy]

Hello
I have Tomcat 3.2 installed like service and redirect
module /jakarta/isapi_redirect.dll in IIS Filters.
After Invoking the URL
"http://localhost/examples/jsp/index.html"; in my
browser I faced with following line in IIS log file:
GET /jakarta/isapi_redirect.dll 401.
I didnt find anything like that In your
troubleshootter.
Please, tell me, what I did wrong or what shall i
do???
Thanks
Oleg Kusij.



__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

Re: Help w/ Tomcat 4.0b6 and Apache

[Pier P. Fumagalli]

Mark Dzmura at [EMAIL PROTECTED] wrote:

> Confirmed.  getParameter()'s are giving null pointer exceptions for
> me as well.

You can kinda expect it from code that is in Alpha :)

Pier

Re: AW: Dynamically Generate PDF

[Boris Niyazov]

You may also want to look at http://www.thentech.com for PDFdriver for Java. 
Worked for us.

  - Boris

 

>
>As usually there are many way to catch the rabbit:
>
>XSL:
>http://xml.apache.org/cocoon2/index.html
>http://xml.apache.org/fop/index.html
>
>
>Instead of XSL you might use one of these:
>http://www.retep.org.uk/pdf/
>http://www.etymon.com/pj/
>http://www.pdflib.com/
>
>
>> -Ursprüngliche Nachricht-
>> Von: Kaneda K [mailto:[EMAIL PROTECTED]]
>> Gesendet: Mittwoch, 25. Juli 2001 09:48
>> An: [EMAIL PROTECTED]
>> Betreff: Dynamically Generate PDF
>> 
>> 
>>Hello everyone,
>> 
>>I wonder if anyone there has once generate PDF File from a 
>> servlet or JSP.
>>   And could give me some tips.
>> 
>> 
>> 

How to increase debug reporting?

[grant . quail]

I know there are 3 "main" logs that I can set "verbositylevel="debug"" to
squeeze more info from tomcat...

What else can i do?  I see "debug="0"" all over the XML configuration files but
I don't know which ones i should change, or where the info would go, or even
what values to use.

On a related topic, I cannot redirect stdout and stderr to files... all the
directions seem to have disapeared... can someone point me in the right
direction?

(p.s. i'm running tc3.2.3 on solaris 2.6)

RE: newbie (or a dummy?)

[grant . quail]

FWIW, my tomcat.log would never be updated unless the file already existed
before starting tomcat... so maybe you can try creating a 0-length file of that
name.





{then when I try to put the error trace to a file for the sake of my hand->
(tomcat run >err.txt), the output is there up until the errors, then it says
error report can be found in/logs/tomcat.log ... but its
not there!}

Re: Help w/ Tomcat 4.0b6 and Apache

[Mark Dzmura]

Confirmed.  getParameter()'s are giving null pointer exceptions for
me as well.

Mark

"Pier P. Fumagalli" wrote:

> Mark Dzmura <[EMAIL PROTECTED]> wrote:
> >
> > Folks:
> >
> > I have received but a single response to my multiple posts regarding Tomcat 4
> > Beta 6 and Apache, but, alas, it, was not helpful. Given the otherwise high
> > level of activity on this list, I must again ask this question:
>
> Sorry... I just subscribed :(
>
> > "Is anybody on this list successfully using Tomcat 4 with Apache??"
>
> Well, the WebApp module just went thru its first public release :)
> I don't expect it to work out-of-the-box :)
>
> > As an example, the "snoop" JSP provides reasonable values when executed from
> > port 8080 but reports mostly null's and -1's, when executed from port 80.
>
> My bad... The C part is fixed.. I'm fixing the Java part, and it should be
> working by tonight.
>
> > I have also rebuilt mod_webapp with --enable-debug and see NO DIFFERENCE
> > WHATSOEVER in the log contents.
>
> That's weird...
>
> > Any ideas at all would be appreciated.  If I don't get any responses I will
> > have to conclude that nobody is actually using Tomcat 4.  However, I find it
> > difficult to justify that conclusion for a distribution in its 6th Beta!!
>
> It's the 6th beta of Tomcat, but the first one for the WebApp connector...
> And as I hear of more bugs, I'll fix them... Thank you very much for your
> feedback, and for posting the bug on BugZilla...
>
> (BTW, if you're trying out mod_webapp, and find some bugs, please use
> BugZilla , as I get notified right away)
>
> Pier

--
Mark Dzmura
Digital Mission LLC

Apxs

[Aaron Cooper]

hi folks

   I am trying to configure tomcat3.3b1 with apache.  however, whenever I run the 
build-hpux.sh script, it produces the following error messages relating to the apxs 
script:

/opt/apache/bin/apxs[66]: require: not found
/opt/apache/bin/apxs[67]: use:   not found
/opt/apache/bin/apxs[68]: package: not found
/opt/apache/bin/apxs[69]: Syntax error at line 74: '(' is not expected.

I have not modified apxs at all.  Has anyone else encountered these difficulties? i've 
searched my directory structure for the packages, and they are not found.

Aaron

Re: Help w/ Tomcat 4.0b6 and Apache

[Pier P. Fumagalli]

Mark Dzmura at [EMAIL PROTECTED] wrote:

> Pier et al:
> 
> Yes... and ... YES!!
> 
> I downloaded the newest jakarta-tomcat-connectors, built, installed, and
> ran, and my two big problems have disappeared!  THANK YOU!
> 
> I am now cautiously beginning to test our application to see that everything
> else works.
> 
> Thanks again for the excellent fix!

Nope, it will not... Check out bug 2777. I'll have a fix for that by
tonight.

Pier

Re: Simple (I think) Running Tomcat Question

[Jeffrey Worst]

Very true.  Let me go back and think this thing through some more so I can
post a more thoughtful question.

Thanks,

Jeff W.
- Original Message -
From: "Matt Read" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 25, 2001 12:37 PM
Subject: Re: Simple (I think) Running Tomcat Question


> Hello World is a servlet, not an applet - a world of difference.
>
> Exactly how are you trying to run it?
>
> Matt.
>
> - Original Message -
> From: "Jeffrey Worst" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: 25 July 2001 16:54
> Subject: Simple (I think) Running Tomcat Question
>
>
> > I believe I now have Tomcat running successfully. But...
> >
> > After starting Tomcat I get the following screen:
> > 01-07-25 11:37:26 - ContextManager: Adding context Ctx(  )
> > 01-07-25 11:37:26 - ContextManager: Adding context Ctx( /test )
> > 01-07-25 11:37:29 - PoolTcpConnector: Starting HttpConnectionHandler on
> 8080
> > 01-07-25 11:37:29 - PoolTcpConnector: Starting Ajp12ConnectionHandler on
> > 8007
> >
> >
> > I then tried to run the Hello World applet.  When I successfully compile
> and
> > then try to run an applet, I get this error message:
> > Exception in thread "main" java.lang.NoSuchMethodError: main
> >
> > Any ideas why?
> >
> > Jeff W.
> >
> >
> > - Original Message -
> > From: "Jim Cheesman" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Wednesday, July 25, 2001 7:49 AM
> > Subject: Re: Simple Tomcat Install on Win98
> >
> >
> > > At 01:30 PM 25/07/01, you wrote:
> > > In html, which is horrible! Please sort it out!
> > >
> > >
> > > >I'm having problems installing Tomcat on my Win98Se machine.  Below
are
> > > >the directions from Jakarta for installing Tomcat.  I've commented
what
> I
> > > >don't understand.
> > > >
> > >
> > > 
> > >
> > >
> > > >
> > > >Change directory to "jakarta-tomcat-3.2.1" and set a new environment
> > > >variable (TOMCAT_HOME) to point to the root directory of your Tomcat
> > hierarchy.
> > > >This I don t understand.  Are they talking about doing this in
> > > >autoexec.bat or in the tomcat.bat file?
> > >
> > > In autoexec.bat
> > >
> > >
> > > >
> > > >On Win32 you should type:
> > > >"set TOMCAT_HOME=foo\jakarta-tomcat-3.2.1"
> > > >Again, are they talking about within autoexec.bat or someplace
> > else?
> > >
> > > In autoexec.bat
> > >
> > >
> > > >
> > > >  Set the environment variable JAVA_HOME to point to the root
directory
> > of
> > > > your JDK hierarchy...
> > > >Where is the environment variable JAVA HOME located?
> > >
> > > In autoexec.bat
> > >
> > > >
> > > > then add the Java interpreter to your PATH environment variable.
> > > >How does one do this?
> > >
> > > In autoexec.bat (!)
> > >
> > > The basic syntax:
> > > set MY_ENVIRONMENT_VARIABLE=c:\path\to\whatever
> > >
> > > and to add to the previously set variable
> > >
> > > set
> MY_ENVIRONMENT_VARIABLE=%MY_ENVIRONMENT_VARIABLE%;c:\path\to\whatever
> > >
> > >
> > >
> > >
> > >
> > > >
> > > >
> > >
> > >
> > > --
> > >
> > >*   Jim Cheesman   *
> > >  Trabajo:
> > > [EMAIL PROTECTED] - (34)(91) 724 9200 x 2360
> > >   I keep telling
> > > myself that I am a pathological
> > >  liar, but I am not sure if
> > > I believe it.
> > >
> > >
> > >
> >
>

Re: Help w/ Tomcat 4.0b6 and Apache

[Mark Dzmura]

Pier et al:

Yes... and ... YES!!

I downloaded the newest jakarta-tomcat-connectors, built, installed, and
ran, and my two big problems have disappeared!  THANK YOU!

I am now cautiously beginning to test our application to see that everything
else works.

Thanks again for the excellent fix!

Regards,
Mark

"Pier P. Fumagalli" wrote:

> I'm almost done with a PATCH to fix that... I should be able to commit it
> later tonight...
>
> Pier
>
> Jeff Hoare at [EMAIL PROTECTED] wrote:
>
> > Hi,
> > I'm using it but as you have found out I think very few ppl are using it on
> > this list. I was able to view servlets thru apache, but the integration fails
> > whenever I try reading any data (I use the post method for form data). I
> > found a java null pointer exception in the catalina log trying to read from
> > the input stream, which I guess is the problem. I have posted a bug on the
> > bugzilla site. As with your experience everything works flawlessly when
> > accessing the servlets thru tomcat directly, but seems broken when using the
> > apache-tomcat extension. This could be some mis-configuration, or a bug but
> > either way the lack of any response is not encouraging.
> >
> > I know this is no help, but at least someone else is suffering as well :-).
> > If I get any response I'll post it to this list
> >
> > Jeff
> >
> > On Wednesday 25 July 2001 03:45, you wrote:
> >> Folks:
> >>
> >> I have received but a single response to my multiple posts
> >> regarding Tomcat 4 Beta 6 and Apache, but, alas, it, was not helpful.
> >> Given the otherwise high level of activity on this list, I must again ask
> >> this question:
> >>
> >> "Is anybody on this list successfully using Tomcat 4 with Apache??"
> >>
> >> If so, I would desperately like to know your configuration and see the
> >> relevant parts of your server.xml, apache configs, and know what
> >> module/version you are using as bridge between Apache and Tomcat.
> >>
> >> Our desired benchmark is simply to achieve the same behaviors from the
> >> example JSP's through port 80 (via Apache) as we do through port 8080.
> >>
> >> It has taken enormous effort just to get something limping along, but still
> >> the transport between Apache and Tomcat (mod_webapp) is clearly broken -
> >> key header variables have default values instead of actual values,
> >> preventing the application from using sessions or accessing the proper
> >> values of header variables.
> >>
> >> As an example, the "snoop" JSP provides reasonable values when executed
> >> from port 8080 but reports mostly null's and -1's, when executed from port
> >> 80.
> >>
> >> We are using the latest versions of everything - Tomcat milestone 4.0b6,
> >> apr, and mod_webapp CVS snapshot.  We have tried using the Java Warp code
> >> that comes with Tomcat, and replacing it with the Java part of the
> >> mod_webapp build.
> >>
> >> I have also rebuilt mod_webapp with --enable-debug and see NO DIFFERENCE
> >> WHATSOEVER in the log contents.
> >>
> >> Any ideas at all would be appreciated.  If I don't get any responses I will
> >> have to conclude that nobody is actually using Tomcat 4.  However, I find
> >> it difficult to justify that conclusion for a distribution in its 6th
> >> Beta!!
> >>
> >> Thanks,
> >>
> >> Mark
> >>
> >> --
> >> Mark Dzmura
> >> Digital Mission LLC

--
Mark Dzmura
Digital Mission LLC

Re: Simple (I think) Running Tomcat Question

[Matt Read]

Hello World is a servlet, not an applet - a world of difference.

Exactly how are you trying to run it?

Matt.

- Original Message -
From: "Jeffrey Worst" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: 25 July 2001 16:54
Subject: Simple (I think) Running Tomcat Question


> I believe I now have Tomcat running successfully. But...
>
> After starting Tomcat I get the following screen:
> 01-07-25 11:37:26 - ContextManager: Adding context Ctx(  )
> 01-07-25 11:37:26 - ContextManager: Adding context Ctx( /test )
> 01-07-25 11:37:29 - PoolTcpConnector: Starting HttpConnectionHandler on
8080
> 01-07-25 11:37:29 - PoolTcpConnector: Starting Ajp12ConnectionHandler on
> 8007
>
>
> I then tried to run the Hello World applet.  When I successfully compile
and
> then try to run an applet, I get this error message:
> Exception in thread "main" java.lang.NoSuchMethodError: main
>
> Any ideas why?
>
> Jeff W.
>
>
> - Original Message -
> From: "Jim Cheesman" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, July 25, 2001 7:49 AM
> Subject: Re: Simple Tomcat Install on Win98
>
>
> > At 01:30 PM 25/07/01, you wrote:
> > In html, which is horrible! Please sort it out!
> >
> >
> > >I'm having problems installing Tomcat on my Win98Se machine.  Below are
> > >the directions from Jakarta for installing Tomcat.  I've commented what
I
> > >don't understand.
> > >
> >
> > 
> >
> >
> > >
> > >Change directory to "jakarta-tomcat-3.2.1" and set a new environment
> > >variable (TOMCAT_HOME) to point to the root directory of your Tomcat
> hierarchy.
> > >This I don t understand.  Are they talking about doing this in
> > >autoexec.bat or in the tomcat.bat file?
> >
> > In autoexec.bat
> >
> >
> > >
> > >On Win32 you should type:
> > >"set TOMCAT_HOME=foo\jakarta-tomcat-3.2.1"
> > >Again, are they talking about within autoexec.bat or someplace
> else?
> >
> > In autoexec.bat
> >
> >
> > >
> > >  Set the environment variable JAVA_HOME to point to the root directory
> of
> > > your JDK hierarchy...
> > >Where is the environment variable JAVA HOME located?
> >
> > In autoexec.bat
> >
> > >
> > > then add the Java interpreter to your PATH environment variable.
> > >How does one do this?
> >
> > In autoexec.bat (!)
> >
> > The basic syntax:
> > set MY_ENVIRONMENT_VARIABLE=c:\path\to\whatever
> >
> > and to add to the previously set variable
> >
> > set
MY_ENVIRONMENT_VARIABLE=%MY_ENVIRONMENT_VARIABLE%;c:\path\to\whatever
> >
> >
> >
> >
> >
> > >
> > >
> >
> >
> > --
> >
> >*   Jim Cheesman   *
> >  Trabajo:
> > [EMAIL PROTECTED] - (34)(91) 724 9200 x 2360
> >   I keep telling
> > myself that I am a pathological
> >  liar, but I am not sure if
> > I believe it.
> >
> >
> >
>

RE: authentification for differents groups FORM or BASIC

[zze-messager FTM balr002]

Precision : 

The group2 must access also to the same urls that the group1.
 
group1 : 
/sc?AI=A*
/sc?AI=M*
/sc?AI=D

group2 : 
/sc?AI=A*
/sc?AI=M*
/sc?AI=D
/sc?AI=V*


-Message d'origine-
De : zze-messager FTM balr002 
Envoye : mercredi 25 juillet 2001 18:04
A : '[EMAIL PROTECTED]'
Objet : authentification for differents groups FORM or BASIC


Hello, 


I have to do protect the accesses to my application in fuction of groups of
users.
For exemple, the group1 can access to the application if the url likes this
: 
/sc?AI=A*
/sc?AI=M*
/sc?AI=D

And the group2 can access with a url likes : /sc?AI=V*

How to do that with a FORM or a BASIC authentification ?

Delphine

authentification for differents groups FORM or BASIC

[zze-messager FTM balr002]

Hello, 


I have to do protect the accesses to my application in fuction of groups of
users.
For exemple, the group1 can access to the application if the url likes this
: 
/sc?AI=A*
/sc?AI=M*
/sc?AI=D

And the group2 can access with a url likes : /sc?AI=V*

How to do that with a FORM or a BASIC authentification ?

Delphine

Tomcat & multibyte data

[Sankaranarayanan Ganapathy]

Hi All,
 
I have a servlet hosted in tomcat3.2.1. I am trying to get it work with
multibyte data with no luck. Does the tomcat servlet container support
multibyte data.

Any information or pointers to info will be greatly appreicated.

Thanx
Ganesh

RE: newbie (or a dummy?)

[Vladimir Grishchenko]

I don't know the exact answer but here are some clues:

1. what jdk are you running on? upgrade to 1.2/1.3 if it's <= 1.1
2. check your java.security file, make sure you have the following
   entry:
security.provider.1=sun.security.provider.Sun
   I guess if you're using non-sun jdk it could be something else.
3. read this

http://java.sun.com/products/jdk/1.2/docs/guide/security/HowToImplAProvider.
html
   to understand Java security provider mechanisms

Hope this helps.

--V.


-Original Message-
From: Henderson, Kevin CECOM RDEC STCD
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 8:41 AM
To: '[EMAIL PROTECTED]'
Cc: Lange, Mark A CECOM RDEC STCD
Subject: RE: newbie (or a dummy?)


This is so frustrating.  I got JCE, stuck all the jars in jdk/jre/lib/ext,
and no dice.  I have been reading thru forums for 2 weeks now, and it seems
that everytime someone had a 'SHA-1 not avail' error, nobody replied.  I
don't know where to start.  PLEASE HELP me  8<(


-Original Message-
From: Vladimir Grishchenko [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 4:21 AM
To: '[EMAIL PROTECTED]'
Subject: RE: newbie (or a dummy?)


Just a wild guess: may be you are missing SHA-1 security provider?
See if you can get it in a separate download from Sun.

--V.

-Original Message-
From: Henderson, Kevin CECOM RDEC STCD
[mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 24, 2001 8:35 AM
To: '[EMAIL PROTECTED]'
Subject: newbie (or a dummy?)


I am trying to run tomcat 3.2.2 and cocoon 1.8.2 on a win2k box.
I followed all instructions to setup tomcat to work with cocoon, and when I
try to run tomcat (w/ tomcat run, cause a new window closes to fast!) , the
output looks normal up until this:

Exception in thread "main" java.lang.InternalError: internal error: SHA-1
not available
at sun.security.provider.SecureRandom.init(SecureRandom.java:89)

... the error stack goes on for twenty or so lines...

I really would like to get this shtuff working!  what have I overlooked?
THANK YOU  ;P

{then when I try to put the error trace to a file for the sake of my hand->
(tomcat run >err.txt), the output is there up until the errors, then it says
error report can be found in/logs/tomcat.log ... but its
not there!}


***
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. Any unauthorized review, use, disclosure or distribution
is prohibited. If you are not the intended recipient, please contact
the sender by reply e-mail and destroy all copies of the original
message.
***

RE: Simple (I think) Running Tomcat Question

[zze-messager FTM balr002]

check if your servlet is in your classpath. before starting tomcat, i
execute un file "gotomcat.bat" which fix the values for the classpath.
see below this file : 

set JAVA_HOME=d:\jdk\jdk1.2.2
set TOMCAT_HOME=d:\softs\jakarta-tomcat-3.2.1
set CLASSPATH=%CLASSPATH%;d:\jdk\jdk1.2.2
set CLASSPATH=%CLASSPATH%;d:\jdk\jdk1.2.2\jre\lib\rt.jar
set CLASSPATH=%TOMCAT_HOME%\webapps
set PATH=%PATH%;JAVA_HOME\bin


set CLASSPATH=%CLASSPATH%;c:\tutu\WEB-INF\lib\tutu1.jar
set CLASSPATH=%CLASSPATH%;c:\tutu\WEB-INF\lib\tutu2.jar
set CLASSPATH=%CLASSPATH%;c:\tutu\WEB-INF\classes

-Message d'origine-
De : Jeffrey Worst [mailto:[EMAIL PROTECTED]]
Envoyé : mercredi 25 juillet 2001 17:54
À : [EMAIL PROTECTED]
Objet : Simple (I think) Running Tomcat Question


I believe I now have Tomcat running successfully. But...

After starting Tomcat I get the following screen:
01-07-25 11:37:26 - ContextManager: Adding context Ctx(  )
01-07-25 11:37:26 - ContextManager: Adding context Ctx( /test )
01-07-25 11:37:29 - PoolTcpConnector: Starting HttpConnectionHandler on 8080
01-07-25 11:37:29 - PoolTcpConnector: Starting Ajp12ConnectionHandler on
8007


I then tried to run the Hello World applet.  When I successfully compile and
then try to run an applet, I get this error message:
Exception in thread "main" java.lang.NoSuchMethodError: main

Any ideas why?

Jeff W.


- Original Message -
From: "Jim Cheesman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 25, 2001 7:49 AM
Subject: Re: Simple Tomcat Install on Win98


> At 01:30 PM 25/07/01, you wrote:
> In html, which is horrible! Please sort it out!
>
>
> >I'm having problems installing Tomcat on my Win98Se machine.  Below are
> >the directions from Jakarta for installing Tomcat.  I've commented what I
> >don't understand.
> >
>
> 
>
>
> >
> >Change directory to "jakarta-tomcat-3.2.1" and set a new environment
> >variable (TOMCAT_HOME) to point to the root directory of your Tomcat
hierarchy.
> >This I don t understand.  Are they talking about doing this in
> >autoexec.bat or in the tomcat.bat file?
>
> In autoexec.bat
>
>
> >
> >On Win32 you should type:
> >"set TOMCAT_HOME=foo\jakarta-tomcat-3.2.1"
> >Again, are they talking about within autoexec.bat or someplace
else?
>
> In autoexec.bat
>
>
> >
> >  Set the environment variable JAVA_HOME to point to the root directory
of
> > your JDK hierarchy...
> >Where is the environment variable JAVA HOME located?
>
> In autoexec.bat
>
> >
> > then add the Java interpreter to your PATH environment variable.
> >How does one do this?
>
> In autoexec.bat (!)
>
> The basic syntax:
> set MY_ENVIRONMENT_VARIABLE=c:\path\to\whatever
>
> and to add to the previously set variable
>
> set MY_ENVIRONMENT_VARIABLE=%MY_ENVIRONMENT_VARIABLE%;c:\path\to\whatever
>
>
>
>
>
> >
> >
>
>
> --
>
>*   Jim Cheesman   *
>  Trabajo:
> [EMAIL PROTECTED] - (34)(91) 724 9200 x 2360
>   I keep telling
> myself that I am a pathological
>  liar, but I am not sure if
> I believe it.
>
>
>