Re: Problem with security?

2005-06-10 Thread Robert r. Sanders
There are some pretty good resources for getting started on Servlet/JSP 
stuff; try the O'Reilly books, especially the latest version of their 
JSP book. 


I suggest that you need to think of what you are wanting to do in 2 phases:
   1. Login
   2. Authenticate (using values supplied by login).


There are a couple of alternatives if you want to save your user's from 
having to type in passwords over and over; since I'm kind of bored, 
here's a brief list:


   1. If you're users are on Windows desktops, then NTLM Auth can get 
the User information from the browser (either IE or Firefox) without the 
user having to login (see http://jcifs.samba.org/src/docs/ntlmhttpauth.html)
   2. If you have then deployed, then you could use client-certificates 
to authenticate users.
   3. You could use a 'remember-me' library (typically uses cookies so 
that user only has to login once).



Gagnon, Joseph M (US SSA) wrote:


Did I not say that I'm new to this?

I made no mention to whether or not I was trying to make it secure.
This is only meant to be used within my company's intranet and my
intention was to take the user account and then compare it with a set of
registered users in the application's DB.

I am beginning to see that at the very least I need to create some kind
of mechanism (although I don't understand yet how to go about that, or
how many different ways it can be done) to perform user authentication.

If anyone can provide information on how to do this (keep in mind I'm
new at this), please let me know.

-Original Message-
From: Robert Harper [mailto:[EMAIL PROTECTED] 
Sent: Friday, June 10, 2005 10:59 AM

To: 'Tomcat Users List'
Subject: RE: Problem with security?
 



--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Accessing images through FrontController Servlet

2005-05-20 Thread Robert r. Sanders
Do you have any logs of what's going on?  Also, make sure the pages are 
using the  tag (or equivalent), as the image paths need to be 
relative to the url that the client browser see - should be able to hard 
code the path to be /ntrr/images/whatever.jpg


To check for bad paths  first view page source from your browser, then 
you can get the image urls and see if they map to the correct path.  
There are also some nice tools that you can run to see what's going on, 
for instance the "Live Headers" extension for Firefox, or Ethereal for a 
more general solution


William BC Crandall wrote:


Hello,

I'm starting a new project, using a FrontController servlet
(http://java.sun.com/j2ee/patterns/FrontController.html),
and am unable to access image files. 

My understanding is that each  invokes another call 
to the server/servlet, which, due to the mapping in web.xml,

is channeled through the controller servlet, which rejects
the call because it does not point to a sub-servlet.

How can I access images in webapps/ntrr/images/ ?

My web.xml: 




 
   
 controller
   
   
 org.ntrr.core.ControlServlet
   
 

 
   
 controller
   
   
 /*
   
 
 



I have tried, without success, adding: 


   
 imageUrl
 http://localhost:8080/ntrr/images/
   

The files in webapps/ntrr/images/ ARE accessible from
webapps/ntrr/css/ntrr.css, when called as background 
page images, for example.


Any suggestions welcomed. 


Thanks,

-BC

William BC Crandall
bc.crandall [around] earthlink.net


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

 



--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net



Re: What happened to the searchable list archive?

2005-05-20 Thread Robert r. Sanders

You can also use:  http://dir.gmane.org/gmane.comp.jakarta.tomcat.user

I tend to like its interface a little bit better.

Steve Kirk wrote:


Thanks - great site.  Just what I was looking for.

 


-Original Message-
From: GB Developer [mailto:[EMAIL PROTECTED] 
Sent: Friday 20 May 2005 18:05

To: 'Tomcat Users List'
Subject: RE: What happened to the searchable list archive?


I like marc.

http://marc.theaimsgroup.com/?l=tomcat-user&r=1&w=2



   


-Original Message-
From: Steve Kirk [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 20, 2005 8:14 AM

To: tomcat-user@jakarta.apache.org
Subject: What happened to the searchable list archive?



It's been a few months since I've been active on the list, 
and the list archive seems to have changed in that time, 
could someone please advise?


I used to search the list archives here: 
http://nagoya.apache.org/eyebrowse/SearchList?listName=tomcat-
 


[EMAIL PROTECTED]
pache.org 

But that archive appears to contain very few of the current 
messages (e.g.
only 7 from April, none at all for this month), is there a 
reason for that?
It appears to have gone quiet after Jan 2005 for some reason, 
see here: 
http://nagoya.apache.org/eyebrowse/SummarizeList?listName=tomc
   


[EMAIL PROTECTED]
a.apache.org 

I see that there is an archive here now 
http://mail-archives.apache.org/mod_mbox/jakarta-tomcat-user 
but it doesn't appear to be searchable...?


Of course we can use google site search to search this list, but it's not
quite the same thing because you can't select a list to search.  Also the
thread browsing is not as easy from this archive, once you have found a post
via google.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

 



--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net



Re: server options

2005-05-20 Thread Robert r. Sanders
Running "java -h" from Windows XP w/ JRE 1.5.0_02 claims that it 
supports the -server flag.  Try creating an environment variable 
JAVA_OPTS and setting it to be "-server -Xmx256m".


--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Can a servlet receive its own request?

2005-05-18 Thread Robert r. Sanders
I've done something a little similar w/ the HTTPClient.  What I ended up 
w/ was a Object that was run in the Servlet container but was not itself 
a servlet.  Nit-picking.  Anyway, you can do this, you just have to use 
other libraries (like the Commons HTTPClient).

Michael Mehrle wrote:
Thanks for your elaborate reply - actually, someone else also 
suggested to use commons HTTPClient. I might have over-explained all 
this - the major difference is that the servlet is being launched by 
Quartz, not by an outside HTTP request. Thus, it is the servlet that 
needs to be able to receive the response to its own request, and it 
appears that HTTPClient might enable the servlet to do this.

Michael

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Turbine? DBCP?

2005-05-03 Thread Robert r. Sanders
You might want to checkout Spring:  
http://www.springframework.org/docs/reference/index.html

Geoff Wiggs wrote:
What ever happened to Turbine?  Is it still used with Tomcat 5.5.+?  If so,
where do I go to get it?  If not, then how am I supposed to handle things
like connection pooling?  Is there a good tutorial available?
I'm working my way through some examples that were written in previous
version of Tomcat.  Can anyone provide a little direction?
Thanks, List.
Geoff [EMAIL PROTECTED]
www.orcastech.com
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: 2 nd Try : help need for hosting the website

2005-04-29 Thread Robert r. Sanders
Is your machine's IP mapped to www.anishanumandla.com  ?  Try running 
"nslookup www.anishanumandla.com" and/or "ping www.anishanumandla.com" 
from the command-line and see what you get.  It not, you can test using 
the hostname by creating a local mapping 
C:\WINNT\system32\drivers\etc\hosts file.

Ashok Anumandla wrote:
Hi All,
I am trying to host my website on Tomcat 5.5.9 in my home machine, i 
did following steps ..

- installed the JRE,JAVA, and Tomcat 5.5.9
- installed ant
- when i run ant, it created anishanumandla under tomcat webapps.
- configured following in server.xml

   
 
- Configured web.xml for welcome file.
- Configured my linksys to fwd the any request from 
www.anishanumandla.com to port number and 8080 port.

- Restarted the tomcat,
But unfortunately i am not able to make it working , when i try 
http://localhost:8080/anishanumandla, it is working fine, but when i 
try accessing www.anishanumandla.com it is not working, i am getting 
page not found error, can somebody please tell me what i am doing 
wrong here?? or if there is step by step document, can u please send 
me the url,,,

the environmentment is Windows 2000...
Thanks in advance
Regards
Ashok
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: How to use servlet filters without modifying webapp

2005-04-28 Thread Robert r. Sanders
Try the following:
   - Put you filter into a package, I've seen some versions of the JVM 
that really don't like non-package classes.
   - Make sure you are using settings compatible with the JVM that 
Tomcat is running under when compiling the class.

joelsherriff wrote:
I've done that, thanks.  Here's what I added for the filter:
   
   timerFilter
   TimerFilter
   
   
   timerFilter
   /*
   
to my web.xml.  It appears to be finding it properly.  If I change the
filter name to a non-existent filter, I
properly get a ClassNotFoundException.  So it's something IN the filter, or
so it would seem.  All I've
done is copy an example filter from the web - it looks like:
import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;
public class TimerFilter implements Filter {
 private FilterConfig config = null;
 public void init(FilterConfig config) throws ServletException {
   this.config = config;
 }
 public void destroy() {
   this.config = null;
 }
 public void doFilter(ServletRequest request, ServletResponse response,
FilterChain chain) throws IOException, ServletException
{
   long before = System.currentTimeMillis();
   chain.doFilter(request, response);
   long after = System.currentTimeMillis();
   String name = "";
   if (request instanceof HttpServletRequest) {
 name = ((HttpServletRequest)request).getRequestURI();
   }
   config.getServletContext().log(name + ": " + (after - before) + "ms");
 }
}

- Original Message - 
From: "Anhony" <[EMAIL PROTECTED]>
To: "Tomcat Users List" 
Sent: Thursday, April 28, 2005 9:48 AM
Subject: Re: How to use servlet filters without modifying webapp

 

Greetings,
Try adding a  block to your web.xml. Your JSP container locates
   

your
 

filters thru these sections in the web.xml. I included a small sample
 block below.

processingFilter
servletFilters.ProcessingFilter

I hope this helps.
Anthony-

- Original Message - 
From: "joelsherriff" <[EMAIL PROTECTED]>
To: "Tomcat Users List" 
Sent: Thursday, April 28, 2005 9:36 AM
Subject: How to use servlet filters without modifying webapp

Hello,
   I'm experimenting with applying a servlet filter to an existing webapp
and I'm getting a ClassCastException upon startup.
Can I do this without modifying the webapp source and adding my filter in
there?  If so, what else could be causing this?
I'm not sure where it looks for the filter .class file but I put it in the
webapp's WEB-INF/classes directory - I guess it finds it
since I'm getting this error.  The filter really does nothing, I'm just
trying to get A filter in place before making it more complicated.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   


-------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: set header in all responses

2005-04-27 Thread Robert r. Sanders
I'd use a servlet filter; but either way it should work.
Peter Crowther wrote:
From: Rodrigo Avila [mailto:[EMAIL PROTECTED] 
Is possible to put this headers in all responses generated by Tomcat?

response.setHeader("Pragma","no-cache"); response.setHeader
("Cache-Control","no-history");
response.setDateHeader("Expires",-1); 
   

Yes.  At worst, you could write a Valve that set those fields before
invoking the next valve in the chain, and put it into your server.xml.
There may well be more elegant solutions.
- Peter
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: snmp and Nagios

2005-04-24 Thread Robert r. Sanders
A quick search of google for "jmx snmp" found this: 
http://edge.mcs.drexel.edu/GICL/people/sevy/snmp/snmp.html

lawrence wrote:
Hi all,
New to the tomcat list.
I have spent the last few days searching the net for ideas on how to monitor 
tomcat via SNMP.
I am trying to gather information like:
Number of sessions per minute.
Number of spare threads etc.
Basically I am trying to get over all health of the tomcat servers(s)
The trick is, I am trying to trap this information with my monitoring server 
(Nagios) so I can alert on it and have all my monitoring in a central location.
Can anyone give me any pointers, solutions, examples for this? I have not been able to come 
up with many “Open Source” solutions.
Thanks
Lawrence.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: going nuts here

2005-04-20 Thread Robert r. Sanders
Try ServletContext.getRealPath(relativePath)
Didier McGillis wrote:
I want to see if an image exists I dont want red "x"'s
yet I cant seem to get the real path to check with File so is there 
another way.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Can't do logout in basic authentication

2005-04-20 Thread Robert r. Sanders
You can try google:  
http://www.modpython.org/pipermail/mod_python/2001-August/012120.html

Otgonbayar wrote:
I am using basic authentication in my application and I need to create
logout link in my JSP that does LOGOUT. 
It seems session.invalidate() doesn't work.
How can I do this? Please help me!
Thanks
Otgo


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: How do I restrict access to webapps applications from browser users?

2005-04-13 Thread Robert r. Sanders
Note that there are also a number of Filters that can implement 
something similar, with much more fine grained control than the 
servlet-spec allows for container-managed security.

Darryl Wilburn wrote:
I lost the thread to this original message, but found
what I consider good information.
Ike,
Here's a link to some information on using
security-constraint: 
http://www.onjava.com/pub/a/onjava/2001/07/24/tomcat.html

It also states:
"The  sub-element defines the
authentication method for the defined realm. The
possible values are BASIC, DIGEST, and FORM. And the
 sub-element names the Web resource that
this  maps to."
So it doesn't seem to require BASIC authentication.
Darryl
		
__ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Can you use Tomcat when you are not on line?

2005-04-06 Thread Robert r. Sanders
Try using the 'full' path - add the http:// before localhost:8080.  IE 
automatically adds it if the port is 80 or unspecified, otherwise it 
gets confused. 

Walter Lee wrote:
I have Tomcat installed on W2K and it says it is installed correctly. When I try the examples it tells me that I must be on line.  If I am using localhost:8080 why does it need to be on line?
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: transport guarantee in server.xml?

2005-04-05 Thread Robert r. Sanders
I'm not am expert, but I don't know of any way other than creating a 
stub web.xml file - it shouldn't have to be much, but I think you're 
going to need it.  Although an alternative would be to have a  element in the server.xml file that has ONLY the SSL 
, but that seems like even more overkill to me.

Ossie Guy wrote:
In our server.xml (Tomcat 4.1), we have a context that is used to 
serve up static content (PDFs) that are collected in a directory on 
our server:



There is no war or other webapp involved here, just the folder with 
the static files, and thus no web.xml either... (Don't worry, we are 
making much use of the servlet API elsewhere on the same server ;)

Now, we want to serve these files up through SSL - we have the SSL 
Connector configured correctly, everything's just great, BUT a savvy 
user can still get the files through non-SSL by changing the URL. So - 
is there any way to *enforce* that this context is accessed only 
through SSL?

I have seen documentation suggesting something like the following:

But this goes in web.xml, and again, we have none here - do we need to 
make one just to enforce this constraint? Or is there some way to 
enforce this from within the server.xml file itself, perhaps within 
the above  section?

Any help would be appreciated.
Cheers,
Ossie
_
Express yourself instantly with MSN Messenger! Download today - it's 
FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Wild Card Hosting

2005-03-25 Thread Robert r. Sanders
I have a sort of similar setup; we have shell script that simple adds an 
hostname to Tomcat's server.xml file; not the optimal 
solution, but it works for us for now.

Drew Jorgenson wrote:
Woops, I don't think that will work with Tomcat since the
subdomain.mydomain.com would be passed to it and Tomcat won't know which
container it goes to.
The way I normally do this, is assign a static IP to a virtual host and
set the IP as one of its aliases. That way all wild card domains point
to the same container.
Drew
P.S. I will think about this a bit more since it is valid point, I
wouldn't want to give out all my static IPs just for the wild cards to
work.
On Fri, 2005-03-25 at 12:36, Drew Jorgenson wrote:
 

I think that would still be up to your dns settings. You could have
something like
* IN CNAME mydomain.com
correct me if I'm wrong ;-)
Drew.

On Thu, 2005-03-24 at 17:46, George Sexton wrote:
   

Oh, I see where you are headed. 

One way to go would be to have a new service, with a new IP address, and
make that the default host.
That's out of the question since I host for so many people.
George Sexton
MH Software, Inc.
http://www.mhsoftware.com/
Voice: 303 438 9585
 

 

-Original Message-
From: Drew Jorgenson [mailto:[EMAIL PROTECTED] 
Sent: Thursday, March 24, 2005 4:14 PM
To: Tomcat Users List
Subject: Re: Wild Card Hosting

Are you able to assign a static IP address to your virtual 
host, meaning
do you have a static IP available?

Drew.
On Wed, 2005-03-23 at 10:42, George Sexton wrote:
   

Does anyone know if Tomcat supports Wild card hosting? Can 
 

I specify a
   

pattern say
*.domain.com
And have all requests get forwarded to a specific host?
Making the host the default host is not an option, because 
 

there is already
   

another default host that is used.

George Sexton
MH Software, Inc.
http://www.mhsoftware.com/
Voice: 303 438 9585

 

-
   

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Wild Card Hosting

2005-03-24 Thread Robert r. Sanders
You might also be able to do something similar by using Apache httpd as 
frontend and combining mod_jk with either mod_vhost or mod_rewrite.

Rob Hunt wrote:
There are some domain-name-registrars/DNS-providers that allow you to set up a wildcard 
"host" where their domain name servers will dynamically redirect HTTP requests. 
 For example:
   http://*.domain.tld/  

could be redirected to something like 

   http://mywildcardhost.domain.tld/%SERVER_NAME%/ 

where "%SERVER_NAME%" would take on the whatever "host" was originally used in the HTTP 
request.  It's then a simple task of using a wildcard  servlet mapping ("/*" in this 
example) to direct the request accordingly.
This obviates the need to customize Tomcat code.  However, you'll probably need 
a nominal monetary outlay to use the services of said DDNS provider.

Read more:  http://www.changeip.com/
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: [Slightly OT] MVC approach when JSP are not allowed

2005-03-19 Thread Robert r. Sanders
You could look into alternate MVC approachs like Freemarker, Velocity, 
or XSLT; these are processed by a servlet, but allow you to extract the 
presentation logic into a text-based template file.  Also, as others 
have pointed out JSPs are compiled into servlets; and if you know your 
deployment target server then they can be precompiled.

Elihu Smails wrote:
I am working on a project that uses servlets exclusively.  I would
like to take advantage of a Model-View-Controller system in order to
develop my servlets.  For the last servlet project I worked on, I was
in charge of the "back-end" data processing and did not have to mess
with HTML.  This time I do have to roll up my sleeves and play with
HTML.
So I ask the question.  Since the requirement that I have is to use
servlets only, can I use something like Struts or Java Server Faces? 
I am reading some information and it looks like they both rely on JSP
to ge the job done.

Thank you for your time...
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Interframework Authentication.

2005-03-18 Thread Robert r. Sanders
You might look into:  
http://tp.its.yale.edu/tiki/tiki-index.php?page=CentralAuthenticationService

Elam Daly wrote:
Howdy all,
I am writing an web application for a client in which customers can 
browse an order database.  This application would be linked to from a 
.net application in which the said user has already been 
authenticated.  Can anyone suggest or know of an authentication scheme 
which could be shared by both so the customers don't have to log in 
twice?

Cheers,
Elam Daly
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: mod_jk + ssl on a virtual host.

2005-03-17 Thread Robert r. Sanders

Caldarale, Charles R wrote:
From: Robert r. Sanders [mailto:[EMAIL PROTECTED]
Subject: mod_jk + ssl on a virtual host.
When connecting, I can access the web application via HTTPS;
however Tomcat seems unaware that the connection is secure
   

Have you set secure="true" in the connector entry in server.xml that you're 
using for Tomcat?  (Not sure what the side effects might be.)
- Chuck
 

No, currently the same connection (ajp13) is being used for both http 
and https.  I have had success with this in the past; but not with the 
admitedly wierd setup that I currently am trying to get working.

--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


mod_jk + ssl on a virtual host.

2005-03-17 Thread Robert r. Sanders
I have an issue with detecting HTTPS when running on a virtual server 
behing mod_jk; here's my setup:

For reasons that I can't currently change I have an internal server 
running as  app.server.com (example url); it is aliased so that multiple 
virtual hosts (name based) are running as:  x.app.server.com ,  
y.app.server.com,  z.app.server.com, etc...  The server has an internal 
SSL certificate generated for app.server.com; this produces a warning, 
but otherwise works when using HTTPS to connect to x.app.server.com.  
Not the best solution, I know, but like I said right now I am just 
trying to support it.

So, to complicate matters I have Tomcat (5.0.28) running on the same 
machine, with all the virtual hosts using  
x.app.server.com in my server.xml file.  When connecting, 
I can access the web application via HTTPS; however Tomcat seems unaware 
that the connection is secure - request.isSecure() == false, as well as 
other tests that I can think of, overall annoying, but not too bad 
except that redirects are generated pointing to HTTP instead of HTTPS. 

I have tried:
   JkExtractSSL On
   JkHTTPSIndicator HTTPS
Does anyone know of any work around/fix to this?
Thanks,
--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Start and stop Tomcat + Cron

2005-03-17 Thread Robert r. Sanders
Are your JAVA_HOME and other vars defined in a global context?  Other 
than that I don't really know.

Cédric Buschini wrote:
Hi
I'd like to stop and start my tomcat using cron so I added this in the 
root's crontab and /etc/crontab :

00 22 * * * root /PATH/TO/JAKARTA/bin/shutdown.sh
02 22 * * * root /PATH/TO/JAKARTA/bin/startup.sh
but it does work :s
Any got ideas ???
Thk
Cedric
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
   Robert r. Sanders
   Chief Technologist
   iPOV
   (334) 821-5412
   www.ipov.net
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]