Re: Re: Problem in starting up TOMCAT, please help.

[jay n gaba]

try checking the log.

On Sun, 03 Feb 2002 Ashutosh Shah wrote :
> Hi everybody,
> 
> Here is my problem.
> 
> I loaded Tomcat successfully on a Windows 2000 platform 
> setting the
> environment variables
> CATALINA_HOME: c:\jakarta-tomcat-4.0
> JAVA_HOME: c:\jdk1.3
> CLASSPATH: C:\jakarta-tomcat-4.0\common\lib\servlet.jar
> 
> Then I went on the DOS prompt and gave the command
> c:\jakarta-tomcat-4.0\bin\startup.bat.
> 
> At this time, another DOS window pops up for a second 
> and then goes
> away. However on the parent DOS window, I receive a 
> message:
> 
> c:\jakarta-tomcat-4.0\bin\startup.bat
> Using CATALINA_BASE:   c:\jakarta-tomcat-4.0
> Using CATALINA_HOME:   c:\jakarta-tomcat-4.0
> Using CATALINA_TMPDIR: c:\jakarta-tomcat-4.0\temp
> Using JAVA_HOME:   c:\jdk1.3
> 
> When I try going to http://localhost:8080 I get a 'Page 
> cannot be displayed
> error'.
> 
> I dont know what I am doing wrong. Please help.
> 
> Thank you,
> Ash.
> 
> 
> --
> To unsubscribe:    a.apache.org>
> For additional commands:  a.apache.org>
> Troubles with the list:  a.apache.org>
> 
 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Re: RE: Digest authentication problem

[jay n gaba]

hi attila
thank you. can u give some pointers on bind authentication method.

thanks.

regards
jay

On Mon, 18 Feb 2002 Attila Szegedi wrote :
> Netscape 4.x versions don't implement DIGEST 
> authentication. When faced with a DIGEST auth, Netscape 
> 4.x will ask the user for a username and password, and 
> send the server a BASIC auth. This is why you're seeing 
> base64 encoded header in a Netscape request - it's 
> BASIC auth, not DIGEST auth.
> 
> --
> Attila Szegedi
> home: http://www.szegedi.org
> 
> 
> - Original Message - 
> From: "jay n gaba" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" <[EMAIL PROTECTED]>
> Sent: 2002. február 18. 15:50
> Subject: Re: RE: Digest authentication problem
> 
> 
> 
> hi
> i am facing the same problem. there is a problem while 
> using the digest authentication mode. it seems the 
> password format return by ldap,in my case netscape 
> directory structure, is different than one used by the 
> digest class of tomcat.netscape uses base64 encoding 
> while tomcat uses some hash functionality. so the 
> authentication fails. 
> 
> solving this is in the to do list. if u wish there are 
> 2 ways to solve it urself.
> 1. make changes to JNDIRealm class. 
> 2. binding user to ldap using bind authentication, 
> which i am not very clear. I am trying to search on 
> this.
> 
> regards
> jay
> 
> ps: check previous mail archives for more details.
> 
> On Mon, 18 Feb 2002 Meurant , Gerald wrote :
> > I forgot to mention that it´s a tomcat 4.01 .
> > 
> > -Mensaje original-
> > De: Meurant , Gerald [mailto:[EMAIL PROTECTED]
> el-
> > .es]
> > Enviado el: lunes, 18 de febrero de 2002 13:23
> > Para: [EMAIL PROTECTED]
> > Asunto: Digest authentication problem
> > 
> > 
> > Hi,
> > 
> > I have a tomcat server using a JNDI-Realm to 
> > authenticate against a LDAP
> > server. It works fine when using the BASIC 
> > authentication mode, but it
> > doesn´t work when specifying the DIGEST 
> authentication 
> > mode.
> > There´s no error message in tomcat, neither in the 
> LDAP 
> > server, so I used a
> > sniffer to watch the network traffic and the 
> > communication between the 2
> > servers : there´s no communication !!
> > So I think the problem has its origin in tomcat. I 
> post 
> > the realm
> > description of the server.xml (I replaced the lines 
> > that specified my ldap
> > server, the connection works in basic mode anyway) : 
> > 
> >   
> > debug="4"
> > connectionName="cn=administrador"
> > connectionPassword="mypassword"
> > connectionURL="ldap://myserver:389";
> > roleBase="dc=roles,o=artic,c=es"
> > roleName="cn"
> > roleSearch="(uniqueMember={0})"
> > roleSubtree="false"
> > userPassword="userPassword"
> > userPattern="cn={0},o=artic,c=es"
> > digest="MD5"
> > />
> > 
> > I would really apreciate any help, my searches on the 
> > net and in the doc are
> > not giving me any result. Is the realm descriptor 
> > correct ? Thanks.
> > 
> > Gerald.
> > 
> > 
> > --
> > To unsubscribe:   <mailto:tomcat-user-unsubscribe@jaka-
> rt-
> > a.apache.org>
> > For additional commands: <mailto:tomcat-user-help@jaka-
> rt-
> > a.apache.org>
> > Troubles with the list: <mailto:tomcat-user-owner@jaka-
> rt-
> > a.apache.org>
> > 
> > --
> > To unsubscribe:   <mailto:tomcat-user-unsubscribe@jaka-
> rt-
> > a.apache.org>
> > For additional commands: <mailto:tomcat-user-help@jaka-
> rt-
> > a.apache.org>
> > Troubles with the list: <mailto:tomcat-user-owner@jaka-
> rt-
> > a.apache.org>
> > 
>  
> 
> 
> --
> To unsubscribe:   <mailto:tomcat-user-unsubscribe@jakart-
> a.apache.org>
> For additional commands: <mailto:tomcat-user-help@jakart-
> a.apache.org>
> Troubles with the list: <mailto:tomcat-user-owner@jakart-
> a.apache.org>
> 
> 
> 
 


--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Re: RE: Digest authentication problem

[jay n gaba]

hi
i am facing the same problem. there is a problem while using the digest authentication 
mode. it seems the password format return by ldap,in my case netscape directory 
structure, is different than one used by the digest class of tomcat.netscape uses 
base64 encoding while tomcat uses some hash functionality. so the authentication 
fails. 

solving this is in the to do list. if u wish there are 2 ways to solve it urself.
1. make changes to JNDIRealm class. 
2. binding user to ldap using bind authentication, which i am not very clear. I am 
trying to search on this.

regards
jay

ps: check previous mail archives for more details.

On Mon, 18 Feb 2002 Meurant , Gerald wrote :
> I forgot to mention that it´s a tomcat 4.01 .
> 
> -Mensaje original-
> De: Meurant , Gerald [mailto:[EMAIL PROTECTED]
> .es]
> Enviado el: lunes, 18 de febrero de 2002 13:23
> Para: [EMAIL PROTECTED]
> Asunto: Digest authentication problem
> 
> 
> Hi,
> 
> I have a tomcat server using a JNDI-Realm to 
> authenticate against a LDAP
> server. It works fine when using the BASIC 
> authentication mode, but it
> doesn´t work when specifying the DIGEST authentication 
> mode.
> There´s no error message in tomcat, neither in the LDAP 
> server, so I used a
> sniffer to watch the network traffic and the 
> communication between the 2
> servers : there´s no communication !!
> So I think the problem has its origin in tomcat. I post 
> the realm
> description of the server.xml (I replaced the lines 
> that specified my ldap
> server, the connection works in basic mode anyway) : 
> 
>debug="4"
>   connectionName="cn=administrador"
>   connectionPassword="mypassword"
>   connectionURL="ldap://myserver:389";
>   roleBase="dc=roles,o=artic,c=es"
>   roleName="cn"
>   roleSearch="(uniqueMember={0})"
>   roleSubtree="false"
>   userPassword="userPassword"
>   userPattern="cn={0},o=artic,c=es"
>   digest="MD5"
>   />
> 
> I would really apreciate any help, my searches on the 
> net and in the doc are
> not giving me any result. Is the realm descriptor 
> correct ? Thanks.
> 
> Gerald.
> 
> 
> --
> To unsubscribe:    a.apache.org>
> For additional commands:  a.apache.org>
> Troubles with the list:  a.apache.org>
> 
> --
> To unsubscribe:    a.apache.org>
> For additional commands:  a.apache.org>
> Troubles with the list:  a.apache.org>
> 
 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Re: Using JNDIRealm with password digesting and Netscape Directory Structure

[jay n gaba]

hi

Has the bind style authentication been implemented?? has anyone tried it??

How does it work? I mean when I authenticate using bind style why is the password 
ignored? I will seach on the web but would appreciate if someone gives me a pointer.

Thanks&Regards
jay

On Sat, 16 Feb 2002 Jonathan Eric Miller wrote :
> How about bind-style authentication to the directory? 
> Is that on the todo
> list? If you implement that, you no longer need to 
> worry about supporting
> all the varying password formats.
> 
> Jon
> 
> - Original Message -
> From: "jay n gaba" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, February 15, 2002 12:47 PM
> Subject: Using JNDIRealm with password digesting and 
> Netscape Directory
> Structure
> 
> 
> >
> > Hi
> > Has anyone solved the following problem regarding the 
> digest password
> >
> > please give me some hint;
> >
> > thanks
> >
> > regards
> > jay
> >
> > Hi,
> > >
> > > I'm trying to use tomcat's JNDIRealm with OpenLDAP. 
> I've
> > converted my
> > > passwords to digest format in the LDAP directory 
> instead of
> > plain text.
> > >
> > > Apparently, tomcat only excepts only hex formatted 
> password
> > where openLDAP
> > > provides passwords of the format
> > > {crypt}X where crypt = { SHA, MD, ... } and XXX 
> is a base64
> > encoded
> > > integer.
> > >
> > > Is there a way to configure tomcat to accept this 
> format of
> > passwords? If
> > > so does this require any recompilation of
> > > tomcat?
> > >
> >
> > Supporting passwords in this format (with the leading 
> {foo} prefix)
> > is
> > high on my TODO list of enhancements for JNDIRealm -- 
> along with
> > other
> > improvements -- but it hasn't been done yet.
> >
> > > Thanks for your help,
> > > --  Dirk
> > >
> >
> >
> >
> > --
> > To unsubscribe:   <mailto:tomcat-user-unsubscribe@jaka-
> rta.apache.org>
> > For additional commands: <mailto:tomcat-user-help@jaka-
> rta.apache.org>
> > Troubles with the list: <mailto:tomcat-user-owner@jaka-
> rta.apache.org>
> >
> 
> 
> --
> To unsubscribe:   <mailto:tomcat-user-unsubscribe@jakart-
> a.apache.org>
> For additional commands: <mailto:tomcat-user-help@jakart-
> a.apache.org>
> Troubles with the list: <mailto:tomcat-user-owner@jakart-
> a.apache.org>
> 
 


--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Using JNDIRealm with password digesting and Netscape Directory Structure

[jay n gaba]

Hi 
Has anyone solved the following problem regarding the digest password

please give me some hint;

thanks

regards
jay

Hi,
>
> I'm trying to use tomcat's JNDIRealm with OpenLDAP. I've
converted my
> passwords to digest format in the LDAP directory instead of
plain text.
>
> Apparently, tomcat only excepts only hex formatted password
where openLDAP
> provides passwords of the format
> {crypt}X where crypt = { SHA, MD, ... } and XXX is a base64
encoded
> integer.
>
> Is there a way to configure tomcat to accept this format of
passwords? If
> so does this require any recompilation of
> tomcat?
>

Supporting passwords in this format (with the leading {foo} prefix)
is
high on my TODO list of enhancements for JNDIRealm -- along with
other
improvements -- but it hasn't been done yet.

> Thanks for your help,
> --  Dirk
>
 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Has anyone configured security example using Netscape Directory Structure

[jay n gaba]

Hi
Has anyone tried to configure the security example provided with tomcat using 
jndirealm. It uses memoryrealm by default. I trying to configure it using netscape 
directory server running on unix with tomcat running on windows nt. I am able to 
connect to ldap but when run the application it always throws invalid user or password 
exception. I have made the entries as specified in How to to-Realm documentation.

please give me some direction. I am attaching the server.xml configuration.

thanks in advance

regards
jay

ldap://abc2.xyz.org:8389/o=abc.org";
roleBase="cn=roles,o=abc.org"
roleName="cn"
roleSearch="(uniqueMember={0})"
roleSubtree="false"
userPassword="userpassword"
userPattern="cn={0},o=abc.org" 
digest="SHA"/>

ldap entry : 
dn: cn=tomcat,o=abc.org
cn: tomcat
userPassword: tomcat
sn: Tomcat User
objectclass: top
objectclass: person

# Define an entry to base role searches on
dn: dc=roles,o=abc.org
cn: roles
objectClass: person
sn: Roles Entry

# Define all members of the 'tomcat' role
dn: cn=tomcat,o=abc.org
cn: tomcat
objectClass: groupOfUniqueNames
uniqueMember: cn=tomcat,o=abc.org 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

problem configuring security appn with Netscape Directory Structure

[jay n gaba]

hi
I am trying to run the sample security example (i.e 
http://localhost:8080/examples/jsp/security/protected/)
using netscape directory structure.I can connect to ldap but while trying to connect 
to the application I receive an invalid user or password error.
I have successfully connected through an ldap browser.
Netscape Directory server has been configured to use the SHA algorithm for encrypting 
the passwords.I read some previous archives which suggests that there is some problem 
while comparing the passwords.I have tried removing passwords but still it throws the 
same error.

Can anyone give me some direction on this.??? I have pasted below the realm 
configuration and a sample entry in the ldap. I have used the sample entry given by 
the tomcat site.

Thanks in advance

Jay

ldap://abc2.xyz.org:8389/o=abc.org";
roleBase="cn=roles,o=abc.org"
roleName="cn"
roleSearch="(uniqueMember={0})"
roleSubtree="false"
userPassword="userpassword"
userPattern="cn={0},o=abc.org" 
digest="SHA"/>

ldap entry :

# Define a user named 'tomcat'
dn: cn=tomcat,o=abc.org
cn: tomcat
userpassword: tomcat
sn: Tomcat User
objectClass: person
 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: