Re: Encrypting password

2001-03-13 Thread Francisco M. Marzoa Alonso

On Tuesday 13 March 2001 09:59, Sam Newman wrote:
 Joe Wrote:
  If you are using SSL then why even bother hashing the password? I think
  the original poster said he/she could not use SSL (but I may be
  mistaken).

 Well, we want to avoid SSL if possible. Certificates for the servers aren't
 that cheap, and we could potentially have quite a few servers. As we're a
 startup company, I don't really want to commit ourselves to get SSL, seeing
 as with SSL is only partly about encryption - its more to do with making
 sure yiour dealing with trusted parties.

As far as I known, you do NOT need Certificates, you can run SSL encryption 
without them, certificates are just for identify without doubt that a server 
is who it says. By other side, you can create your own certificates but 
they'll be not signed by a h... certification authority.


Please, excuse my poor english.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]




NCSA Combined log format. Tomcat limitations?

2001-03-12 Thread Francisco M. Marzoa Alonso

Ok, the scenario:

Who m I?

I've no idea about Tomcat, my first contact with it has been an hour ago. 
I've been LiNUX user for several years and I know how Java servlets serves 
works, so I think I'm an average system administrator. I've been application 
programmer for several years also, so I'm an average developer also. I've 
some contact with Enhydra that perhaps you know, but I've never installed or 
use it in a production environment.

Hope this information helps.



What's the matter?

In a project, we need some collaborators each one with his own http server 
and operating system, give us they http logs in NCSA Combined format for 
generate stats for third parties.

Well, one of those collaborators told us that they cannot generate NCSA 
Combined logs because they're using TomCat... As I CANNOT reproduce each 
collaborator system environment conditions, you will understand that's not 
reasonable that I must install a TomCat server just to see if this is true.

I've seen that TomCat could be installed standalone or dependant of another 
web server like Apache or IIS. I think the situation of this collaborator is 
'standalone' because another manner should provide they the logs of its 
apache or IIS web server without troubles.



The trouble in a brief?

Just two questions:

Can TomCat as standalone server produce NCSA Combined logs? if yes... in a 
brief: How?



Please note that by evident reasons I'm not suscribed to TomCat Users list, 
so if there's an answer, please, send it to my own mail box: fmmarzoa at 
e-samuelson.com

THANKS A LOT everyone in advance, excuse my poor english and have a good one,

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]