manager/remove functionality

[Michael Teter]

Hello.

I'm just beginning to use the manager app to deploy my
app instead of dropping a myapp.war file into the
webapps dir, deleting the webapps/myapp directory and
myapp.war file, stopping Tomcat, and retarting Tomcat.

The stopping and restarting of Tomcat was a real drag.

So now I do manager/install ... my war file from my
dist directory, and that makes my app available.  I
like it so far.  But then I modify my app, build (with
ant), manager/remove, and manager/install.

That doesn't work unless I manually (or as part of my
ant dist activity) delete webapps/myapp directory.

Now to my point.  I would expect manager/remove to
completely remove the app (including the webapps/myapp
directory.)  It doesn't remove the directory, so
subsequent manager/install attempts do nothing.  At
least, I can't see my changes unless I: ant dist
(including rm $TOMCAT_HOME/webapps/myapp),
manager/remove, and then manager/install.

Am I misusing this or misunderstanding it?  Shouldn't
manager/remove actually remove the webapps/myapp dir? 
Or shouldn't manager/install remove or overwrite the
webapps/myapp directory or its contents?

Thanks for any pointers.  (I've read what
documentation I can find on Manager app, but it's
fairly sparse.)  I suppose I could change manager's
behavior by modifying its source, but I'll reserve
that for last.

Michael

PS: anyone know how to get XEmacs to highlight
Java/JSP code?  any pointers there would be welcome...
not much useful answers to this question from what I
can find on the net.

__
Do You Yahoo!?
Yahoo! Movies - coverage of the 74th Academy Awards®
http://movies.yahoo.com/

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Please help me on a question about TOMCAT OR APACHE + TOMCAT

[Michael Teter]

Howdy.

I found a very useful document that describes in
simple terms how to set up Apache + (n * Tomcat) in
load-balancing fashion.  That may be something to
consider just for flexibility.

I currently have mine configured with only one Tomcat,
so the load balancer isn't doing much for me, but it's
trivial for me to add another internal machine with
Tomcat and share the load.

http://www.ubeans.com/tomcat/index.html

Good luck.

Michael

--- todd tredeau <[EMAIL PROTECTED]> wrote:
> Hi;
> I have a sample with example virtual host setup
> on my Chiki open 
> source project site.
> http://chiki.wiserlabz.com/view.do?nodeId=Tomcat4 
> Unfortunately, you'll have to sign in and "edit" to
> view the full 
> source. I think it answers your question.
> Personally, I'd probably still 
> run Apache in front, but it really doesn't matter.
> 
> todd
> http://www.wiserlabz.com
> collaborative effort to promote Novell and Open
> Source solutions
> 
> Jakarta Tomcat Newsgroup (@Basebeans.com) wrote:
> 
> >Subject: Please help me on a question about TOMCAT
> OR APACHE + TOMCAT
> >From: "Hyunjin Kim" <[EMAIL PROTECTED]>
> > ===
> >all my web pages will be in jsps (to use include).
> Should I still use Apache
> >in front of TOMCAT? won't it be better to use
> tomcat only in my
> >case?(although I will still use images and other
> medias) I think coming
> >through apache and talking to tomcat via a
> connector is more pricey in my
> >case...
> >
> >and also..
> >
> >if i choose to use tomcat only.. (stand-alone)..
> can i use name virtual
> >host?? It seems like  tag in server.xml is
> for that purpose.. but
> >there's very vew documentations on how to configure
> server.xml file for
> >tomcat-stand alone + name virtual host..
> >
> >
> >
> >--
> >To unsubscribe:  
> 
> >For additional commands:
> 
> >Troubles with the list:
> 
> >
> >
> 
> 
> 
> 
> --
> To unsubscribe:  
> 
> For additional commands:
> 
> Troubles with the list:
> 
> 


__
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Tomcat and Load-Balancing

[Michael Teter]

Howdy.

I followed this guide, and it seems to work fine.

http://www.ubeans.com/tomcat/index.html

Good luck.
Michael

--- Gabriel Maffia <[EMAIL PROTECTED]> wrote:
> Hi!
> 
> I´m looking for a way to load-balance my
> Apache+Tomcat Website. I´ve already tried with
> mod_backhand, but I couldn't make it workIf
> anyone could make this work, how did u do it?
> 
> I know that there is a connector for mod_jk, called
> lb that is useful for load balancing. Is it possible
> for me to Take requests in one apache server, and
> then send the requests via this connector, to
> machines running tomcat?.
> 
> 
> 
> Thanks in advance.
> 
> Gabriel Maffia
> 
> 


__
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Authenticating against Microsoft ActiveDirectory

[Michael Teter]

I would really love to see a little more detail about
how you did this if you don't mind.

Much thanks,
Michael Teter

--- Don Sauer <[EMAIL PROTECTED]> wrote:
> You can script your JSP/servlets to do this with
> application code --
> another way would be in the server.xml to configure
> the
> credentialInterpretor to make the LDAP link (this is
> a little more
> difficult)and I have got it to work consistently
> under high traffic
> 
> -Original Message-
> From: Galbraith, Paul
> [mailto:[EMAIL PROTECTED]] 
> Sent: Friday, May 10, 2002 2:49 PM
> To: Tomcat Users List
> Subject: RE: Authenticating against Microsoft
> ActiveDirectory
> 
> 
> Don, are you talking about application code to do
> this, or can Tomcat be
> configured to do this?
> 
> -Original Message-
> From: Don Sauer [mailto:[EMAIL PROTECTED]]
> Sent: May 10, 2002 3:47 PM
> To: 'Tomcat Users List'
> Subject: RE: Authenticating against Microsoft
> ActiveDirectory
> 
> 
> Sure, the easiest way is to do a LDAP query to a DC
> 
> -Original Message-
> From: Galbraith, Paul
> [mailto:[EMAIL PROTECTED]] 
> Sent: Friday, May 10, 2002 2:35 PM
> To: [EMAIL PROTECTED]
> Subject: Authenticating against Microsoft
> ActiveDirectory
> 
> 
> Can anyone tell me if it's possible to configure
> tomcat to authenticate
> users against MS ActiveDirectory?  Cheers,
>  
> Paul
> 
> 
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 
> 
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 
> 
> --
> To unsubscribe, e-mail:  
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 


__
Do You Yahoo!?
Yahoo! Shopping - Mother's Day is May 12th!
http://shopping.yahoo.com

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Re: jsp's do not compile

[Michael Teter]

My understanding is that Tomcat does usually does not,
and never really has :) reloaded things when they
change, regardless of you specifying that a webapp is
"reloadable".

I use the manager app, and it works great.  With my
ant build.xml set up right, I can build/distribute my
webapp in an instant, then click on two bookmarks on
my browser (to tell the manager to remove my webapp,
and then install my webapp.)

Good luck.
Michael

--- Xinji Gu <[EMAIL PROTECTED]> wrote:
> maybe you should close your browser and start it
> again?
> 
> Jim
> 
> - Original Message -
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, May 10, 2002 5:23 PM
> Subject: jsp's do not compile
> 
> 
> > I cannot get tomcat to recompile jsp's after I
> change them. I have tried
> > the 4.1 alpha nightly build as well as 4.0.3. I
> know this is supposed to
> > work...
> >
> > Is there some special parameter I should be
> configuring or something? I've
> > searched the docs.
> >
> > Troy
> >
> >
> > --
> > To unsubscribe, e-mail:
> 
> > For additional commands, e-mail:
> 
> >
> 
> 
> --
> To unsubscribe, e-mail:  
> 
> For additional commands, e-mail:
> 
> 


__
Do You Yahoo!?
Yahoo! Shopping - Mother's Day is May 12th!
http://shopping.yahoo.com

--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

Re: jsp's do not compile

[Michael Teter]

Well, I'm probably not using this the best way, but I
just have my ant prod_dist wrap up the project as
ROOT.war and drop it in webapps/

I have webapps nfs-shared, and I have tomcat running
as a member of group "web", so when I run ant with
prod_dist target, that deletes the
/mount/webapps/ROOT, then copies ROOT.war ->
/mount/webapps/ROOT.  Then I remove/install from
manager.

There may be documentation that describes the best
practices, but I haven't seen it.

Michael

--- Xinji Gu <[EMAIL PROTECTED]> wrote:
> For double check, I just put an JSP file that doing
> simple
> math (1+1) under /webapps, and query it, got 2 :)
> and then, change the JSP to do (1+2), and without
> doing any
> configuration/deployment, I reinput the query in the
> same browser:
> I got 3. So, it compiled automatically. The web.xml
> file has nothing in it:
> 
> 
>   
> 
> BTW, I have been confused by Tomcat manager: where
> does it
> put the deployment information? I mean the app.war
> could be anywhere
> in 4.1. How could Tomcat figure out the location of
> the war file when
> a request comes in?
> 
> thanks a lot
> 
> Jim Gu
> 
> - Original Message -
> From: "Michael Teter" <[EMAIL PROTECTED]>
> To: "Tomcat Users List"
> <[EMAIL PROTECTED]>
> Sent: Friday, May 10, 2002 5:50 PM
> Subject: Re: jsp's do not compile
> 
> 
> > My understanding is that Tomcat does usually does
> not,
> > and never really has :) reloaded things when they
> > change, regardless of you specifying that a webapp
> is
> > "reloadable".
> >
> > I use the manager app, and it works great.  With
> my
> > ant build.xml set up right, I can build/distribute
> my
> > webapp in an instant, then click on two bookmarks
> on
> > my browser (to tell the manager to remove my
> webapp,
> > and then install my webapp.)
> >
> > Good luck.
> > Michael
> >
> > --- Xinji Gu <[EMAIL PROTECTED]> wrote:
> > > maybe you should close your browser and start it
> > > again?
> > >
> > > Jim
> > >
> > > - Original Message -
> > > From: <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Friday, May 10, 2002 5:23 PM
> > > Subject: jsp's do not compile
> > >
> > >
> > > > I cannot get tomcat to recompile jsp's after I
> > > change them. I have tried
> > > > the 4.1 alpha nightly build as well as 4.0.3.
> I
> > > know this is supposed to
> > > > work...
> > > >
> > > > Is there some special parameter I should be
> > > configuring or something? I've
> > > > searched the docs.
> > > >
> > > > Troy
> > > >
> > > >
> > > > --
> > > > To unsubscribe, e-mail:
> > >
> <mailto:[EMAIL PROTECTED]>
> > > > For additional commands, e-mail:
> > > <mailto:[EMAIL PROTECTED]>
> > > >
> > >
> > >
> > > --
> > > To unsubscribe, e-mail:
> > >
> <mailto:[EMAIL PROTECTED]>
> > > For additional commands, e-mail:
> > > <mailto:[EMAIL PROTECTED]>
> > >
> >
> >
> > __
> > Do You Yahoo!?
> > Yahoo! Shopping - Mother's Day is May 12th!
> > http://shopping.yahoo.com
> >
> > --
> > To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> > For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> >
> 
> 
> --
> To unsubscribe, e-mail:  
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 


__
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Re: I'm getting no responses to my requests for help on this list

[Michael Teter]

This list is very active, and due to the amount of
noise, it's hard to see or respond to every message. 
I'm sure it's not personal :)

Anyway, I don't know the background on your problem,
but the "address already in use" issue is certainly
not going to help anything.

You've got to figure out what you have running that
could be using that port.  I can't remember which app
servers use which ports for sure, but almost certainly
you already have an app server running.  Do a $ ps -ef
| more and scour the list of processes.  Do you have
Turbine/tdk?  Zope?  OpenACS/AOLServer?  Anything
else?

As a last resort, (but I really recommend you find the
conflict instead), you could edit your
$TOMCAT_HOME/conf/server.xml file and change your
non-SSL HTTP connector entry to use a different port,
like say 8675.  Then create the following file in your
$TOMCAT_HOME/webapps/ROOT

File test.jsp---
Test

<%
String s = "Hello World.";
%>
This is my test page
<%=s%>


(end of test.jsp)

Now point your browser to
http://127.0.0.1:8675/test.jsp

You should see a page that says 
"This is my test page
 Hello World."

Good luck.
Michael


--- Gary Frick <[EMAIL PROTECTED]> wrote:
> Hi All,
> 
>I've been working day and night trying to get
> Tomcat started and to get past the HTTP 500 error
> when trying to invoke the JSP examples.  I've been
> combing the archives, but I'm not seeing any real
> solutions.  What must I do and where must I go to
> get help?
> 
>First it would be helpful to know what is going
> on.  When I try to start Tomcat I get the following
> (See below. Only providing first few lines of
> trace).  When I try //localhost/examples  I can
> execute the servlets, but not the JSPs.  On the JSPs
> I always get HTTP Status 500 messages.  I've
> followed the recommendations to recheck the
> classpaths and environment variables (JAVA_HOME and
> TOMCAT_HOME), but this hasn't helped.  For one thing
> I don't understand why port 8080 is already in use. 
> How can I check?
> 
> Thanks,
> Gary
> 
> Catalina.start: LifecycleException:  null.open: 
> java.net.BindException: Address
>  already in use: JVM_Bind:8080
> LifecycleException:  null.open: 
> java.net.BindException: Address already in use:
>  JVM_Bind:8080
> at
>
org.apache.catalina.connector.http.HttpConnector.initialize(HttpConne
> ctor.java:1130)
> at
>
org.apache.catalina.core.StandardService.initialize(StandardService.j
> ava:454)
> at
>
org.apache.catalina.core.StandardServer.initialize(StandardServer.jav
> a:553)
> at
>
org.apache.catalina.startup.Catalina.start(Catalina.java:780)
> at
>
org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
> at
>
org.apache.catalina.startup.Catalina.process(Catalina.java:179)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke0(Native
> Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(Unknown
> Source)
> at
>
sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown
> Source)
> at
>
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)
> - Root Cause -
> java.net.BindException: Address already in use:
> JVM_Bind:8080
> at
>
org.apache.catalina.connector.http.HttpConnector.open(HttpConnector.j
> ava:950)
> 


__
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

What methodologies/systems/practices do you use?

[Michael Teter]

Howdy.

I'm looking for one or more guide documents for
JSP/Servlet/? development for doing web applications.

Specifically, I'm hoping to find some best practices
for doing modern web application development using
production quality (not bleeding edge) technologies.

For example, right now I generally follow the Model-2
practice (JSPs, JavaBeans, and Servlets), using JDBC
with some db connection pool objects I found on the
web.  However, I feel like I'm reinventing lots of
wheels (I especially dislike manual form development.)
 On the other hand, I took a cursory look at Turbine
(for example), but I found it to be too complex to
interest me.  I have fiddled with Zope, peeked at
OpenACS, fumbled with ColdFusion, and even (gasp!)
considered ASP.NET.  At this point I don't care what
language or technology.

I am willing to dig deep, but I'd like some idea in
advance so I hopefully don't invest a lot of time into
something I'll throw away.

If this helps, here are the things I need.
o  I need robust forms (server, and optionally also
client side validation of fields)
o  Transactional, pooled database access
o  User/form access security
o  As a bonus, it would be super nifty if I could find
a system that would allow me to train a less technical
(non-programmer) to develop and test database-backed
forms.  (This person currently is experienced doing MS
Access forms.)

If this is the wrong forum for this kind of
discussion, my apologies.  In my work (mostly
contract), I usually find myself working solo on a
project, or being the only person in the company doing
development, so I don't have any peers to discuss
these topics with.

Much thanks,
Michael Teter


__
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Re: reloadable=true just not working. Any ideas gentlefolk?

[Michael Teter]

I don't have the answer to why reloading isn't
working, but I can recommend using the tomcat manager
app to "remove" and "install" your app to freshen it. 
That doesn't require a restart of tomcat.

One important note though, if your webapp's main
directly exists, this won't work.  You have to blow
away that directory after you "remove".

I just have ant blow away the directory and drop a
fresh .war in the webapps/ dir, then manager-remove,
then manager-install.

The only downside is that I haven't worked out why my
db pool object doesn't release its connections.  Thus,
each time I do it I burn 3 database connections :)

Michael

--- Ray Letts <[EMAIL PROTECTED]> wrote:
> 
> Below is a snippet from my conf/server.xml file.
>  From all the docs 
> I've read, and the examples, this should work.
> However the tomcat class 
> loader does not recognize newly compiled class files
> and still uses the 
> cached versions.
>   Can anyone spot a problem with the xml below? It
> parses upon startup. 
> But to get the newly compiled classes cached I have
> to restart the 
> server. and whether thru cmd line or manager web
> app, this is not want I 
> want to do during development.
> 
> TIA
> 
> Ray
> 
>  
docBase="/app/tomcat/jakarta-tomcat/dist/webapps/BugTracker/"
> debug="0" 
> reloadable="true"  />
> 
> ps above is the full path to the webapp, however I
> have tried the 
> relative  as well.
> 
> 
> --
> To unsubscribe, e-mail:  
> 
> For additional commands, e-mail:
> 
> 


__
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

Web development forum

[Michael Teter]

Howdy again.

Thanks for the good responses to my web
development/methodology question post.

New Question: Does there exist an active forum for
discussion of (generally Tomcat-related) web
development?  

Ideally such a forum would focus on experiences with
different web development technologies or
methodologies.  Also useful would be tales of
production experiences.

If no such forum exists, I'm inclined to start one. 
>From responses I got about my earlier post, there is
interest in this.

Comments?

Thanks,
Michael

__
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

Is this possible?

[Michael Teter]

Hello.

I would like to be able to create something like the
following example, and I need to know if this is
feasible with Tomcat...

Assume I have the domain blah.com, and I would like to
be able to create virtual names like "mary.blah.com",
"john.blah.com", "michael.blah.com", etc.

When someone goes to mary.blah.com, I would like the
pages they see to be dynamically generated, something
like this:


Welcome Mary!  Based on your ranking, you can do the
following actions:
  _View Production Reports_
  _Edit Report Profiles_


(or when someone goes to john.blah.com)

Welcome John!  Based on your ranking, you can do the
following actions:
  _Create Accounts_
  _Edit Accounts_
  _Input Production Numbers_



I wouldn't know how to classify my experience with
Tomcat/Servlets/JSP, but if this helps tailor the
answers, I'm fairly comfortable using the Model2
paradigm with JSP/Serlets and beans to generate fairly
complicated interfaces.  However, what I'm wanting to
do now seems well beyond my current knowledge, so any
pointers would be most welcome.

Much thanks,
Michael


__
Do You Yahoo!?
Yahoo! Greetings - Send FREE e-cards for every occasion!
http://greetings.yahoo.com

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

RE: Is this possible?

[Michael Teter]

I'm still very new at this, so I would welcome more
detail in the explanation :)

First let me make clear what things I do have some
understanding of, to give perspective.

I have created a system on Tomcat4 (on port 8443,
although I'd prefer port 443) that has a login page. 
That login page hits a database to authenticate the
login, and if successful, it allows the user to move
around the site.  For example,
https://mydomain.com:8443/mysite/Login.jsp is the
start.  Currently the pages aren't tailored to the
user that logs in, but that's something I can handle
when I get around to it.

What I'd rather have is this:
https://joe.mydomain.com
There I would show a dynamically-generated page,
tailored somewhat to how Joe wants it (via some
template system using my database, which I can
handle).  Then on Joe's page I would have a login form
somewhere, which would allow Joe more access to his
personal pages (all of which would be
dynamically-generated as well.)

I don't know much about a lot of this, including DNS,
apache configuration, etc.  I'd be glad to learn, just
point me to the information.  I've read the apache doc
on large-scale virtual name-based hosting, but it
depended on a physical directory for each virtual (and
I think it requires me to have a DNS of my own?)

Thanks again for any information.

Michael

--- Brian Adams <[EMAIL PROTECTED]> wrote:
> yep you can do that.
> I would put apache web server as the front end then
> use mod_jk or mod_webapp
> as the connector to the tomcat instance.
> Are you going to have mary login?
> easy stuff, no problem.
> have fun.
> B
> 
> -Original Message-
> From: Michael Teter [mailto:[EMAIL PROTECTED]]
> Sent: Friday, March 01, 2002 4:13 PM
> To: [EMAIL PROTECTED]
> Subject: Is this possible?
> 
> 
> Hello.
> 
> I would like to be able to create something like the
> following example, and I need to know if this is
> feasible with Tomcat...
> 
> Assume I have the domain blah.com, and I would like
> to
> be able to create virtual names like
> "mary.blah.com",
> "john.blah.com", "michael.blah.com", etc.
> 
> When someone goes to mary.blah.com, I would like the
> pages they see to be dynamically generated,
> something
> like this:
> 
> 
> Welcome Mary!  Based on your ranking, you can do the
> following actions:
>   _View Production Reports_
>   _Edit Report Profiles_
> 
> 
> (or when someone goes to john.blah.com)
> 
> Welcome John!  Based on your ranking, you can do the
> following actions:
>   _Create Accounts_
>   _Edit Accounts_
>   _Input Production Numbers_
> 
> 
> 
> I wouldn't know how to classify my experience with
> Tomcat/Servlets/JSP, but if this helps tailor the
> answers, I'm fairly comfortable using the Model2
> paradigm with JSP/Serlets and beans to generate
> fairly
> complicated interfaces.  However, what I'm wanting
> to
> do now seems well beyond my current knowledge, so
> any
> pointers would be most welcome.
> 
> Much thanks,
> Michael
> 
> 
> __
> Do You Yahoo!?
> Yahoo! Greetings - Send FREE e-cards for every
> occasion!
> http://greetings.yahoo.com
> 
> --
> To unsubscribe:  
> <mailto:[EMAIL PROTECTED]>
> For additional commands:
> <mailto:[EMAIL PROTECTED]>
> Troubles with the list:
> <mailto:[EMAIL PROTECTED]>
> 
> 
> 
> --
> To unsubscribe:  
> <mailto:[EMAIL PROTECTED]>
> For additional commands:
> <mailto:[EMAIL PROTECTED]>
> Troubles with the list:
> <mailto:[EMAIL PROTECTED]>
> 


__
Do You Yahoo!?
Yahoo! Sports - sign up for Fantasy Baseball
http://sports.yahoo.com

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Sessions sans cookies? URL Rewriting?

[Michael Teter]

Howdy.

I have two questions.  Note that I have made effort to find answers in 
archives but haven't found what I think I need.

Q1: Can Tomcat 4.X do session management if the user's browser is 
rejecting cookies?  If so, how do I do that?  Do I change my code, or 
just server/app configuration?

Q2: If I want to allow my user, John Smith, to use 
http://mycompany.com/johnsmith to access his custom view of my site, how 
would I do that?  Neither my Apache Jakarta-Tomcat book nor the Valve 
HowTo get into much detail.  I'm thinking I want that URL to convert to 
something like http://mycompany.com/portal?u=johnsmith.  Suggestions, 
examples, outright solutions? :)

Thanks much.

Michael Teter

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Sessions sans cookies? URL Rewriting?

[Michael Teter]

Ok, I'll give a little more detail.

Q1 - I'm looking for pointers to examples or documents.  I see where the 
spec requires that capability, but I don't know the correct way to 
exercise it.  Does it just mean that I wrap every  url 
and every reponse.sendRedirect() with encodeUrl()?

Q2 - If you got to http://mycompany.com/index.jsp, you see "Welcome 
Guest".  As a very simple example, I want http://mycompany.com/johnsmith 
to become something like 
http://mycompany.com/portal.jsp?username=johnsmith.  Then when John 
Smith uses his special URL, he'll see "Welcome John Smith".  I can do 
everything but the automagic URL mapping.  It would be good enough just 
for the URL to be rewritten to the second one above, but the ultimate 
would be for the URL to remain in the simple form first listed.

I hope this clarifies my questions.

Thanks for the quick response.

MT

Shapira, Yoav wrote:
Howdy,


Q1: Can Tomcat 4.X do session management if the user's browser is
rejecting cookies?  If so, how do I do that?  Do I change my code, or
just server/app configuration?


Yes, via URL rewriting, per the Servlet Specification.


Q2: If I want to allow my user, John Smith, to use
http://mycompany.com/johnsmith to access his custom view of my site,
how

would I do that?


You need to precisely define "access" and "custom view" in the above
question.  The solution depends on your specific app.

Neither my Apache Jakarta-Tomcat book nor the Valve
HowTo get into much detail.  I'm thinking I want that URL to convert to
something like http://mycompany.com/portal?u=johnsmith.  Suggestions,
examples, outright solutions? :)


A filter that does redirection based on request.getUserPrincipal() is
one option.
Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged.  This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender.  Thank you.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Sessions sans cookies? URL Rewriting?

[Michael Teter]

Maybe my homegrown access control is flawed.  When I disable cookies in 
my browser, my apps break.

I have a login form whose action is "ProcessLogin.jsp".  That page 
validates the username and password against a database, and if 
successful it stuffs my valid User object into an App object, and that 
App object already exists as a session var (by virtue of ).

Then all my pages <%@ include file="LoginCheck.jsp" %>, which checks the 
App object to see if it has a valid User object, and if so, it then 
checks to see if that user is a member of a group that has access to the 
current page.  It's a little complicated, but it seems to work well when 
cookies are enabled.

With cookies DISabled, it appears that my session scope App bean is 
being recreated because the session isn't sticking.  In my logs I see 
the session ID to be one thing, and then on the next page I see a 
totally different session ID.  Incidentally, if I should be seeing a 
session ID in the URL, I'm not.

Am I going about it completely wrong?

MT

Shapira, Yoav wrote:
Howdy,


Q1 - I'm looking for pointers to examples or documents.  I see where
the

spec requires that capability, but I don't know the correct way to
exercise it.  Does it just mean that I wrap every  url
and every reponse.sendRedirect() with encodeUrl()?


No, you don't need to worry about it.  The server rewrites the URL
automatically.

Q2 - If you got to http://mycompany.com/index.jsp, you see "Welcome
Guest".  As a very simple example, I want
http://mycompany.com/johnsmith

to become something like
http://mycompany.com/portal.jsp?username=johnsmith.  Then when John
Smith uses his special URL, he'll see "Welcome John Smith".  I can do
everything but the automagic URL mapping.  It would be good enough just
for the URL to be rewritten to the second one above, but the ultimate
would be for the URL to remain in the simple form first listed.


The Apache URL rewriter is excellent for this.  But you can do it in
tomcat-standalone as well, with a filter as I mentioned.  Map the filter
to /*.  Have the filter inspect the request URI and convert /x to
/portal.jsp?username=x unless x is in a set of resources (probably
obtained from ServletContext#listResourcePaths or whatever that method
is called).
Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged.  This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender.  Thank you.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [OT] Some one executing windows commands in Tomcat 4.1.18.

[Michael Teter]

This is the age old IIS worm working its magic.  It's either Code Red or 
Code Red 2 or whatever.

In any case, you can safely ignore it if Tomcat is the one reporting it. 
 And unfortunately, you're unlikely to get anywhere by trying to 
contact the offending server owner or ISP.

Just ignore it, as long as you're not using IIS, or you have IIS patched up.

MT

Antony paul wrote:
Althoug it is an intranet application Tomcat is listening on the public IP
address accessible from internet(temporary arrangement) and the IP address
in the log is out side the intranet but of same ISP. The IIS is not running
but we have some other web server program(probably apache) which listens on
this IP address.
- Original Message -
From: "Ralph Einfeldt" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Tuesday, August 12, 2003 2:08 PM
Subject: RE: [OT] Some one executing windows commands in Tomcat 4.1.18.
There is someone from xx.xx.xx.xx trying to use an IIS
vulnerability. If it's realy intranet your admin should
have a look at the offending pc if it is infected by a
virus. (Not shure out of the head if this is nimda, code
red or what else)
This vulnerability is not affecting tomcat.


-Original Message-
From: Antony paul [mailto:[EMAIL PROTECTED]
Sent: Monday, August 11, 2003 2:11 PM
To: tomcat mail list
Subject: [OT] Some one executing windows commands in Tomcat 4.1.18.
   I have Tomcat standalone running on a local Intranet. The
server is
windows 2000 SP2. Today while checking the access log files I
found the following lines
xx.xx.xx.xx - - [11/Aug/2003:09:47:38 5050] "GET
/scripts/root.exe?/c+dir


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

mysite -> 3rd party -> mysite, session *sometimes* lost

[Michael Teter]

Howdy.

I've got a site I am interfacing with PaySystems.com (credit card 
processing).

For some users (Internet Explorer, same or very similar version, default 
settings), when they return to my site after doing the credit card dance 
on the paysystems.com site, they get a new session.

I can't figure out why some do and some don't.  The way PaySystems 
works, after the user gives ccard info, and assuming it is accepted, 
PaySystems then forwards the user back to my site, along with a bunch of 
GET parameters that describe the order.  But some users arrive back at 
my site and are given a new sessionid, and so there's no context, and my 
system is rejecting their attempt to visit the page.

I can go into lots more detail if necessary.  Does anyone have any ideas 
right away?

Thanks very much.

MT



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: jakarta website FAQ system and an alternative

[Michael Teter]

wow, that's very nice.  I would sure like to see your
system adopted, because the faq-o-matic, for whatever
reason, has been almost entirely useless for me.

--- Alex Muc <[EMAIL PROTECTED]> wrote:
> Hi all,
> 
> I apologize for sending this message to two lists,
> but I wasn't sure
> which would be more relevant.
> 
> I have been trying to access the FAQ-O-Matic from
> the jakarta.apache.org
> site for the last few days without any luck.  It is
> always returning an
> HTTP 500 error.  I don't know why this is happening.
> 
> Anyways, I'd like to offer the jakarta project
> another possibility for a
> database-driven FAQ system.  I developed it over the
> summer in Geneva,
> Switzerland and my employer said that he had no
> problem with me
> open-sourcing the code.
> The details of the system:
> - It breaks down into two parts, a maintenance part
> and a browsing part.
> 
> - The maintenance part is written in JSP.
> - The browsing part is written using XML and Cocoon.
> - The FAQ is organized in a hierarchical structure
> so that the content
> proceeds from general questions to progressively
> more detailed questions
> the further "into" the tree you browse.  There is
> not limit to the depth
> of the tree.
> - The system is built so that it can accomodate
> multiple FAQs.  This is
> like having multiple FAQ "trees".  So, for example,
> there could be a
> tree for each of the projects on the
> jakarta.apache.org site.
> - Each question has the ability to be linked to any
> other question in
> the system.  This is important because sometimes the
> questions grouped
> in one branch may have some logical connection to
> questions in some
> other branch.
> - The system has the ability to add questions
> dynamically.  That is, the
> system allows anyone to post questions to the FAQ
> and these questions
> then wait in a buffer to be answered by someone who
> knows the answer at
> which point the question gets added to the tree.
> - The system is fully XHTML compliant.  Which means
> that users can input
> any valid XHTML markup and it will be properly
> displayed in the system.
> This is handy for doing code examples and what-not.
> - Because the browsing part is completely Cocoon
> based it can be
> completely customized by using different .xsl
> stylesheets.  This is
> handy if you want to have the same underlying system
> look different
> depending on the area of the site and the website
> look and feel that it
> has to "plug in to".
> - There is a simple search engine to query the FAQ
> database.
> - It runs on a simple database backend.  I've had
> the system up and
> running on both a Microsoft SQL Server and a MySQL
> Server without any
> problems.
> - It was developed against Cocoon 1.7.4 and Tomcat
> 3.1, but I don't
> think there is anything which ties it specifically
> to either of those
> releases, so upgrading the server shouldn't be a
> problem.
> 
> If you'd like to check the system out I have a demo
> currently running.
> It is accessible at the following URLs
> Browsing:
>
http://24.112.129.151:8080/faq/questionpage.xml?QID=1
> Maintenance: http://24.112.129.151:8080/faqmaint
> To login to the maintenance side of the system use
> the following:
> username: root
> password: root
> email address: [EMAIL PROTECTED]
> Web name: FAQ0
> The first link will take you to an FAQ tree of about
> 250 questions which
> is taken from the work I did.  I have setup another
> tree for testing
> purposes, you can add a tree yourself if you want,
> and questions too.
> 
> So, if you're interested check it out.  Like I said
> at the beginning, if
> people are interested I'd be happy to open source
> the whole thing.  I
> also have some computing resources available which
> could be used to host
> the project should that be necessary.
> 
> Cheers
> Alex.
> 
> 
>
-
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 


__
Do You Yahoo!?
Yahoo! Messenger - Talk while you surf!  It's FREE.
http://im.yahoo.com/

session problems: www.blahblah.com versus blahblah.com

[Michael Teter]

Howdy.

I'm having some problems with sessions.

If my users come to "blahblah.com", then go away, then return, they
get a new session id (for www.blahblah.com).

But if they come to www.blahblah.com, leave, and return (via link from
external site), they keep the same session.

I finally discovered that the browser (Firefox in this case) ends up
with two different session cookies - one for www.blahblah.com and one
for blahblah.com.

What's the right thing to do to solve this?

Thanks much.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems: www.blahblah.com versus blahblah.com

[Michael Teter]

I tried that, but it's not working.

I tried:

  www.blahblah.com


and I also tried:

  blahblah.com


Both ways, I still got a session cookie associated with the name the
user entered as the address.  If the user then changed the address to
www., it created a new session and session cookie (with the new name).

On 8/15/05, Peter Rossbach <[EMAIL PROTECTED]> wrote:
> Hmm,
> 
> I thing  a host alias at for your tomcat configuration was helpfull :-)
> 
> 
> www.blahblah.com
> 
> 
> 
> Peter
> 
> Michael Teter schrieb:
> 
> >Howdy.
> >
> >I'm having some problems with sessions.
> >
> >If my users come to "blahblah.com", then go away, then return, they
> >get a new session id (for www.blahblah.com).
> >
> >But if they come to www.blahblah.com, leave, and return (via link from
> >external site), they keep the same session.
> >
> >I finally discovered that the browser (Firefox in this case) ends up
> >with two different session cookies - one for www.blahblah.com and one
> >for blahblah.com.
> >
> >What's the right thing to do to solve this?
> >
> >Thanks much.
> >
> >-
> >To unsubscribe, e-mail: [EMAIL PROTECTED]
> >For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> >
> >
> >
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems: www.blahblah.com versus blahblah.com

[Michael Teter]

Great.

I don't mean to be a bonehead, but what's the right way to redirect
based on name?

I'm not using Apache on the front, so I don't have the mod_rewrite
(nor do I understand how to use it... yet).

On 8/15/05, Dale, Matt <[EMAIL PROTECTED]> wrote:
> 
> I'm not sure if there is a technical way to do this or not as it's the 
> browser that saves the cookie based on the current URL.
> 
> The way I would do this is to not allow the user to create a session in one 
> of them in the first place. ie, if they browse to blahblah.com then just 
> redirect them to www.blahblah.com so that whenever they are interacting with 
> the webapp.
> 
> Ta
> Matt
> 
> -Original Message-
> From: Michael Teter [mailto:[EMAIL PROTECTED]
> Sent: 15 August 2005 21:05
> To: Tomcat Users List
> Cc: [EMAIL PROTECTED]
> Subject: Re: session problems: www.blahblah.com versus blahblah.com
> 
> 
> I tried that, but it's not working.
> 
> I tried:
> 
>   www.blahblah.com
> 
> 
> and I also tried:
> 
>   blahblah.com
> 
> 
> Both ways, I still got a session cookie associated with the name the
> user entered as the address.  If the user then changed the address to
> www., it created a new session and session cookie (with the new name).
> 
> On 8/15/05, Peter Rossbach <[EMAIL PROTECTED]> wrote:
> > Hmm,
> >
> > I thing  a host alias at for your tomcat configuration was helpfull :-)
> >
> > 
> > www.blahblah.com
> >
> > 
> >
> > Peter
> >
> > Michael Teter schrieb:
> >
> > >Howdy.
> > >
> > >I'm having some problems with sessions.
> > >
> > >If my users come to "blahblah.com", then go away, then return, they
> > >get a new session id (for www.blahblah.com).
> > >
> > >But if they come to www.blahblah.com, leave, and return (via link from
> > >external site), they keep the same session.
> > >
> > >I finally discovered that the browser (Firefox in this case) ends up
> > >with two different session cookies - one for www.blahblah.com and one
> > >for blahblah.com.
> > >
> > >What's the right thing to do to solve this?
> > >
> > >Thanks much.
> > >
> > >-
> > >To unsubscribe, e-mail: [EMAIL PROTECTED]
> > >For additional commands, e-mail: [EMAIL PROTECTED]
> > >
> > >
> > >
> > >
> > >
> > >
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: session problems: www.blahblah.com versus blahblah.com

[Michael Teter]

I guess I was hoping there was some server-level redirect.

I'm not sure how I would put the meta redirect in all my pages.  My
app is a complicated mess (my fault - my lack of skill).

The issue is that my users are clicking a PayPal "Subscribe" button,
which sends them off to PayPal.  Part of the hidden information sent
to PayPal when the user clicks that button is the return path.

So if user comes to blahblah.com, clicks the Subscribe button it sends
them to PayPal with a return path of www.blahblah.com (because that's
what I'm telling PayPal to do.)  I'm thinking now I can just look at
the URL they're at now and set my PayPal return path dynamically... If
they're here as blahblah.com, I make sure to tell the PayPal form that
the return path is blahblah.com.  If www, then return to www...

Thanks for your suggestion though.  I can even continue using PayPal's
encrypted buttons - I'll just make two buttons, one for www, and
theother for just blahblah, and display the appropriate button based
on current situation.

Still, I think I was hoping that somewhere in server.xml I could say
"all requests for blahblah.com should be mapped to www.blahblah.com."

Thanks all.

On 8/16/05, Peter Rossbach <[EMAIL PROTECTED]> wrote:
> Hey Michael,
> 
> I look inside the tomcat source and find that we don't set the cookie
> hostname attribute.
> That means that the calling client/browser must made the hostname
> handling. I also
> thing the redirect way is currently right direction.
> 
> Peter
> 
> Paul Singleton schrieb:
> 
> > Michael Teter wrote:
> >
> >> If my users come to "blahblah.com", then go away, then return, they
> >> get a new session id (for www.blahblah.com).
> >>
> >> But if they come to www.blahblah.com, leave, and return (via link from
> >> external site), they keep the same session.
> >>
> >> I finally discovered that the browser (Firefox in this case) ends up
> >> with two different session cookies - one for www.blahblah.com and one
> >> for blahblah.com.
> >
> >
> > this behaviour seems reasonable to me...
> >
> >> What's the right thing to do to solve this?
> >
> >
> > it doesn't need solving, just accepting :-)
> >
> > but assuming you want www.blahblah.com and blahblah.com
> > to behave (session-wise) like one domain, which they aren't,
> > you could redirect (client-side) from www.blahblah.com
> > (which IMHO is the redundant/obsolete/legacy domain) to
> > blahblah.com, which allocates sessions and dishes out cookies.
> >
> > i.e. www.blahblah.com is a static site which just serves e.g.
> >
> > 
> >   
> > <%= a.appTitle %>: redirection page
> > http://blahblah.com"; />
> >   
> >   http://blahblah.com')">
> > 
> >   
> > 
> >
> > NB I haven't actually *tried* this :-)
> >
> > Paul Singleton
> >
> >
> 
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]