Re: Tomcat IIS Redirector Issues with SSL and Query Strings

2007-08-03 Thread Rainer Jung

To check the log:

At which time did you send which request, and what was the result (OK, 
or what kind of problem)?


And please give us your config (worker configuration, platform and web 
server versions, ...)


Regards,

Rainer

Antonio Santana wrote:

The main unique thing we have with IIS is a redirector on port 80 traffic so
it is forced to 443 (SSL).  Here is the log:



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Quality check mod_jk 1.2.25-dev

2007-08-03 Thread Rainer Jung

Hi all,

unfortunately we had to withdraw mod_jk 1.2.24. It had a serious 
regression bug. To ensure the quality of the new 1.2.25 we invite you to 
actively participate in testing.


A code snapshot (revision 562250) is available at:

http://people.apache.org/~rjung/mod_jk-dev/

It is in the same format as a release download, so easy to build.
Under the same URL you can find the updated documentation.

It would be really nice, if we could get some testing feedback from the
community. Feel free to post any observations.

Depending on your feedback we plan to tag the release next week.

The most important changes after 1.2.24 are:

- fix flushing regression bug
- fix behaviour of fail_on_status
- additional soft error mode for fail_on_status
- bug fixes for nsapi plugin (see changelog)

The full change log is available under:

http://people.apache.org/~rjung/mod_jk-dev/docs/miscellaneous/changelog.html

Thanks for your valuable time!

Regards,

Rainer



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Installing Tomcat on Linux

2007-08-03 Thread Gregor Schneider
Tomcat installing from source doesn't make *any* sense, not even on Linux.

Why?

Well, Tomcat is written entirely in Java. Therefore, you can download
the binaries from the Apache website and check the KEYS
(MD5-checksums). If they are ok, you can be sure nobody has tampered
with.

Building from source in Linux makes sense if you're talking about
native programs, which you may have to compile so that they match your
kernel / hardware.

And even here, there are OSs like Debian, where you have comfortable
installers like aptitude that install the binaries, check the
checksums for you and you're done.
However, that depends on the OS you're running.

Coming back to Tomcat:

Download the binaries, check the KEYS, install them and while your
colleque is still compiling his sources, have a beer in your favourite
pub :)

Cheers

Gregor
-- 
what's puzzlin' you, is the nature of my game
gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
gpgp-key available @ http://pgpkeys.pca.dfn.de:11371

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



tomcat 6 and setenv.sh?

2007-08-03 Thread Kristian Rink
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Folks, 

after switching our production environment to tomcat 6.0.13, most of
the things work fine again by now. One thing, however, is still giving
me headaches: By now, I used to have something like

export CATALINA_OPTS=-server -Xmx512m ...  

in CATALINA_HOME/bin/setenv.sh (running Linux), which worked fine with
tc5.5.23. However, by now having settings like these in setenv.sh, I
just end up with this message...


WARNUNG: Dynamic setProperty(className,value) has been disabled, please
use explicit properties for the element you are trying to identify
03.08.2007 09:50:36 org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded Apache Tomcat Native library 1.1.10. 03.08.2007 09:50:36
org.apache.catalina.core.AprLifecycleListener init INFO: APR
capabilities: IPv6 [true], sendfile [true], accept filters [false],
random [true].

... in catalina.out while tomcat refuses to start up correctly. Does
anyone have an idea what the problem is like? Is setenv.sh not
supported that way anymore in tc6.0? Is there a better way to do these
settings?

Environment:
- - Ubuntu 6.06.1 LTS
- - JDK 1.6.0-b105
- - tomcat 6.0.13, cluster-configured with two hosts


Thanks in advance for any hints and bye,
Kristian


- -- 
Kristian Rink * http://zimmer428.net * http://flickr.com/photos/z428/
jab: [EMAIL PROTECTED] * icq: 48874445 * fon: ++49 176 2447 2771
One dreaming alone, it will be only a dream; many dreaming together
is the beginning of a new reality. (Hundertwasser)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGst+xcxBAPOA1m6wRArfIAKCmMRY3GGc90o6q2NVHHAhyNxMUewCfQ9Yu
GdjSLPYqmAfRRMibc/VRXqg=
=s7UW
-END PGP SIGNATURE-


AW: AW: Application outside WEBAPPS

2007-08-03 Thread hans.mader
hi,

useNaming does not affect here, correct.

What's the reason ignoring the path attribute? (6.0.14 ignores as well)

hans

-Ursprüngliche Nachricht-
Von: Pid [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 03. August 2007 09:39
An: Tomcat Users List
Betreff: Re: AW: Application outside WEBAPPS


[EMAIL PROTECTED] wrote:
 Place the myapp.xml in the /conf/Catalina/localhost/ directory.
 
 ?xml version='1.0' encoding='utf-8'?
 Context docBase=\\server02\share\dir1\dir2 path=/myapp useNaming=false 
 
 /Context

The path attribute will be ignored if your server version is +5.5.
(useNaming is not relevant to this problem.)

p


 That's all.
 
 Regards, Hans
 
 -Ursprüngliche Nachricht-
 Von: Mladen Turk [mailto:[EMAIL PROTECTED]
 Gesendet: Donnerstag, 02. August 2007 13:11
 An: Tomcat Users List
 Betreff: Re: Application outside WEBAPPS
 
 
 André Vila Cova wrote:
 Hello!

 How can I invoke an application located outside WEBAPPS? What setup I need
 to do?
 If I have an application inside WEBAPPS, p.e., ../WEBAPPS/test/ in URL I
 invoke http://localhost/test... but if application is in other location?

 
 Take a look at
 http://tomcat.apache.org/tomcat-6.0-doc/config/context.html
 
 docBase is your friend ;)
 
 Regards,
 Mladen
 
 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
 
 
 
 Diese Nachricht ist ausschliesslich fuer den oben bezeichneten Adressaten 
 bestimmt und enthaelt moeglicherweise vertrauliche Informationen. Sollten Sie 
 nicht der oben bezeichnete Adressat sein oder diese Nachricht irrtuemlich 
 erhalten haben, ersuchen wir Sie, diese Nachricht nicht weiterzugeben, zu 
 kopieren oder im Vertrauen darauf zu handeln, sondern den Absender zu 
 verstaendigen und diese Nachricht samt allfaelliger Anlagen sofort zu 
 loeschen. Vielen Dank. 
 
 This message is intended only for use by the named addressee and may contain 
 privileged and/or confidential information. If you are not the named 
 addressee, you should not disseminate, copy, or take any action in reliance 
 on it. If you have received this message in error, please immediately notify 
 the sender of this message and delete this message and any attachment. Thank 
 you.
 
 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 







Diese Nachricht ist ausschliesslich fuer den oben bezeichneten Adressaten 
bestimmt und enthaelt moeglicherweise vertrauliche Informationen. Sollten Sie 
nicht der oben bezeichnete Adressat sein oder diese Nachricht irrtuemlich 
erhalten haben, ersuchen wir Sie, diese Nachricht nicht weiterzugeben, zu 
kopieren oder im Vertrauen darauf zu handeln, sondern den Absender zu 
verstaendigen und diese Nachricht samt allfaelliger Anlagen sofort zu loeschen. 
Vielen Dank.

This message is intended only for use by the named addressee and may contain 
privileged and/or confidential information. If you are not the named addressee, 
you should not disseminate, copy, or take any action in reliance on it. If you 
have received this message in error, please immediately notify the sender of 
this message and delete this message and any attachment. Thank you.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: AW: Application outside WEBAPPS

2007-08-03 Thread Pid

[EMAIL PROTECTED] wrote:

Place the myapp.xml in the /conf/Catalina/localhost/ directory.

?xml version='1.0' encoding='utf-8'?
Context docBase=\\server02\share\dir1\dir2 path=/myapp useNaming=false 
/Context


The path attribute will be ignored if your server version is +5.5.
(useNaming is not relevant to this problem.)

p



That's all.

Regards, Hans

-Ursprüngliche Nachricht-
Von: Mladen Turk [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 02. August 2007 13:11
An: Tomcat Users List
Betreff: Re: Application outside WEBAPPS


André Vila Cova wrote:

Hello!

How can I invoke an application located outside WEBAPPS? What setup I need
to do?
If I have an application inside WEBAPPS, p.e., ../WEBAPPS/test/ in URL I
invoke http://localhost/test... but if application is in other location?



Take a look at
http://tomcat.apache.org/tomcat-6.0-doc/config/context.html

docBase is your friend ;)

Regards,
Mladen

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






Diese Nachricht ist ausschliesslich fuer den oben bezeichneten Adressaten bestimmt und enthaelt moeglicherweise vertrauliche Informationen. Sollten Sie nicht der oben bezeichnete Adressat sein oder diese Nachricht irrtuemlich erhalten haben, ersuchen wir Sie, diese Nachricht nicht weiterzugeben, zu kopieren oder im Vertrauen darauf zu handeln, sondern den Absender zu verstaendigen und diese Nachricht samt allfaelliger Anlagen sofort zu loeschen. Vielen Dank. 


This message is intended only for use by the named addressee and may contain 
privileged and/or confidential information. If you are not the named addressee, 
you should not disseminate, copy, or take any action in reliance on it. If you 
have received this message in error, please immediately notify the sender of 
this message and delete this message and any attachment. Thank you.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]







smime.p7s
Description: S/MIME Cryptographic Signature


Apache Tomcat 5.5 install issues.

2007-08-03 Thread William Rui
Hi, all

 

During the process of installing Apache Tomcat 5.5 on redhat 9, pop following 
error:

Code:

[EMAIL PROTECTED] bin cd jsvc-src/

[EMAIL PROTECTED] jsvc-src autoconf

[EMAIL PROTECTED] jsvc-src ./configure

-bash: ./configure: Permission denied

 

 

It should be following as the instruction 
(http://tomcat.apache.org/tomcat-5.5-doc/setup.html):

 

cd $CATALINA_HOME/bin

tar xvfz jsvc.tar.gz

cd jsvc-src

autoconf

./configure

make

cp jsvc ..

cd ..

 

Any suggestion is highly appreciated!

 

Best regards,

 

William

 



Re: Java source encoding

2007-08-03 Thread Artur Rataj
 
 What do you need source files stored inside war file for?


I don't need them them there. The conversion of characters is at
compile time, of course.
I have mistaken this. Thank you.

Best regards,
Artur

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Apache Tomcat 5.5 install issues.

2007-08-03 Thread Kristian Rink
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


William;

[William Rui [EMAIL PROTECTED] @ Fri, 3 Aug 2007
15:43:18 +0800]
...
 [EMAIL PROTECTED] bin cd jsvc-src/
 
 [EMAIL PROTECTED] jsvc-src autoconf
 
 [EMAIL PROTECTED] jsvc-src ./configure
 
 -bash: ./configure: Permission denied

First bet would be that configure is not actually marked as executable,
try either

sh ./configure 

or do a 

chmod u+x configure 


prior to running ./configure to move on.

Cheers,
Kristian

- -- 
Kristian Rink * http://zimmer428.net * http://flickr.com/photos/z428/
jab: [EMAIL PROTECTED] * icq: 48874445 * fon: ++49 176 2447 2771
One dreaming alone, it will be only a dream; many dreaming together
is the beginning of a new reality. (Hundertwasser)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGsuKBcxBAPOA1m6wRApH4AJ4+ox35fpsgMPBvC3e+pKMcWUB9PgCgjn3I
ATlUyJUqLeO4Xv074eTo59Y=
=7mGT
-END PGP SIGNATURE-


RE: Apache Tomcat 5.5 install issues.

2007-08-03 Thread William Rui
Kristian:

Thank you for your reply. I did as you said, got following info:
[CODE]
[EMAIL PROTECTED] jsvc-src autoconf
[EMAIL PROTECTED] jsvc-src sh ./configure
*** Current host ***
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking cached host system type... ok
*** C-Language compilation tools ***
checking for gcc... gcc
checking for C compiler default output... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
checking for ranlib... ranlib
*** Host support ***
checking C flags dependant on host system type... ok
*** Java compilation tools ***
checking for javac... NONE
checking for javac... NONE
configure: error: javac not found
[EMAIL PROTECTED] jsvc-src
[/CODE]

I wander if above info maybe something error, for somebody has installed
tomcat some early time on this pc but failed.


Br, william

-Original Message-
From: Kristian Rink [mailto:[EMAIL PROTECTED] 
Sent: 2007?8?3? 16:08
To: users@tomcat.apache.org
Subject: Re: Apache Tomcat 5.5 install issues.

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


William;

[William Rui [EMAIL PROTECTED] @ Fri, 3 Aug 2007
15:43:18 +0800]
...
 [EMAIL PROTECTED] bin cd jsvc-src/
 
 [EMAIL PROTECTED] jsvc-src autoconf
 
 [EMAIL PROTECTED] jsvc-src ./configure
 
 -bash: ./configure: Permission denied

First bet would be that configure is not actually marked as executable,
try either

sh ./configure 

or do a 

chmod u+x configure 


prior to running ./configure to move on.

Cheers,
Kristian

- -- 
Kristian Rink * http://zimmer428.net * http://flickr.com/photos/z428/
jab: [EMAIL PROTECTED] * icq: 48874445 * fon: ++49 176 2447 2771
One dreaming alone, it will be only a dream; many dreaming together
is the beginning of a new reality. (Hundertwasser)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGsuKBcxBAPOA1m6wRApH4AJ4+ox35fpsgMPBvC3e+pKMcWUB9PgCgjn3I
ATlUyJUqLeO4Xv074eTo59Y=
=7mGT
-END PGP SIGNATURE-



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



worker.lock property question.

2007-08-03 Thread Gerhardus . Geldenhuis
Hi

 

The documentation states the following about the lock property.

 

Specifies what lock method the load balancer will use for synchronizing
shared memory runtime data. If lock is set to O[ptimistic] balancer will not
use shared memory lock to find the best worker. If set to P[essimistic]
balancer will use shared memory lock. The balancer will work more accurately
in case of Pessimistic locking, but can slow down the average response time.


 

How does the balancer find the best worker if set to optimistic? Reading the
documentation it seems that using pessimistic is the only accurate way of
doing load balancing if you are willing to take a performance hit. 

 

I am not sure how method and locking properties relate to one another.

 

It would be really great if someone could expand a bit more on this property
and implications.

 

Regards



__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
__

Re: tomcat 6 and setenv.sh?

2007-08-03 Thread Johnny Kewl
Hi, Kristian... listen I dont use Tomcats built in clustering, so I dont 
know anything about it.
However below is the actual code that is giving you that error message and 
it seems that clustering properties must not be set in CATALINA_OPTS.

Unfortunately you didnt post all your CATALINA_OPTS properties
 however its definitely not CATALINA_OPTS or java Djava properties that 
are not allowed... it seems JUST properties related to clustering will 
generate this warning
So now, you... like me, are probably wondering how one must set those 
properties if I had to guess, I think they have to be set in the XML 
configuration only.
I dont know how it works and how fancy it is, like whether one can set 
properties in one manager and they propogated to members of the cluster, or 
whether they have to be set for each tomcat. It seems they changed it 
because one could screw clustering up thru JMX


Sorry couldnt help more... but at least you can see how the programmer is 
thinking about it below.

Good luck...



- Original Message - 
From: Kristian Rink [EMAIL PROTECTED]

To: Tomcat Users List users@tomcat.apache.org
Sent: Friday, August 03, 2007 9:56 AM
Subject: tomcat 6 and setenv.sh?



-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Folks,

after switching our production environment to tomcat 6.0.13, most of
the things work fine again by now. One thing, however, is still giving
me headaches: By now, I used to have something like

export CATALINA_OPTS=-server -Xmx512m ... 

in CATALINA_HOME/bin/setenv.sh (running Linux), which worked fine with
tc5.5.23. However, by now having settings like these in setenv.sh, I
just end up with this message...


WARNUNG: Dynamic setProperty(className,value) has been disabled, please
use explicit properties for the element you are trying to identify
03.08.2007 09:50:36 org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded Apache Tomcat Native library 1.1.10. 03.08.2007 09:50:36
org.apache.catalina.core.AprLifecycleListener init INFO: APR
capabilities: IPv6 [true], sendfile [true], accept filters [false],
random [true].


HERE IS THE ACTUAL CODE IN SimpleTcpCluster
   public void setProperty(String name, Object value) {
   if (log.isTraceEnabled())
   log.trace(sm.getString(SimpleTcpCluster.setProperty, name, 
value,properties.get(name)));

   properties.put(name, value);
   //using a dynamic way of setting properties is nice, but a security 
risk
   //if exposed through JMX. This way you can sit and try to guess 
property names,

   //we will only allow explicit property names
   log.warn(Dynamic setProperty(+name+,value) has been disabled, 
please use explicit properties for the element you are trying to identify);

   if(started) {
   // FIXME Hmm, is that correct when some DeltaManagers are direct 
configured inside Context?
   // Why we not support it for other elements, like sender, 
receiver or membership?

   // Must we restart element after change?
//if (name.startsWith(manager)) {
//String key = name.substring(manager.length() + 1);
//String pvalue = value.toString();
//for (Iterator iter = managers.values().iterator(); 
iter.hasNext();) {

//Manager manager = (Manager) iter.next();
//if(manager instanceof DeltaManager  
((ClusterManager) manager).isDefaultMode()) {
//IntrospectionUtils.setProperty(manager, key, 
pvalue );

//}
//}
//}
   }
   }




... in catalina.out while tomcat refuses to start up correctly. Does
anyone have an idea what the problem is like? Is setenv.sh not
supported that way anymore in tc6.0? Is there a better way to do these
settings?

Environment:
- - Ubuntu 6.06.1 LTS
- - JDK 1.6.0-b105
- - tomcat 6.0.13, cluster-configured with two hosts


Thanks in advance for any hints and bye,
Kristian


- -- 
Kristian Rink * http://zimmer428.net * http://flickr.com/photos/z428/

jab: [EMAIL PROTECTED] * icq: 48874445 * fon: ++49 176 2447 2771
One dreaming alone, it will be only a dream; many dreaming together
is the beginning of a new reality. (Hundertwasser)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGst+xcxBAPOA1m6wRArfIAKCmMRY3GGc90o6q2NVHHAhyNxMUewCfQ9Yu
GdjSLPYqmAfRRMibc/VRXqg=
=s7UW
-END PGP SIGNATURE-




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Installing Tomcat on Linux

2007-08-03 Thread Peter Crowther
 From: Vigorito, Nicholas E. [mailto:[EMAIL PROTECTED] 
 A coworker claims that all unix admins should never install 
 open source binaries. They should build using the source.

Binaries are marginally more open to tampering; this is why most (all?)
Apache projects provide checksums of the built packages.  A cracker
would have to replace the binaries on the distribution machine *and*
tamper with the checksums that are held on a different machine.  Or
they'd have to be part of the relevant build team, in which case they
may well be able to get their crack into the source anyway.

It's rather like conducting a detailed inspection of everything you buy
for bugs before loading it into your car.  You *might* catch something,
but the odds are low.

Here's how to decide.  If you multiply the expected loss due to a
break-in (say $10M) by the probability of catching something you
wouldn't have caught because the binary's been compromised *and* the
checksums have been tampered with (say 1 in 100,000) by the probability
of that security hole being exploited (say 1 in 10), you get an expected
loss of $10.  I suspect it would cost half a day to build from source
(say $150 of staff time); so in this case the organisation should use
the binary, because the expected cost to the organisation is lower than
the cost of building from source.  Substitute your own figures for loss,
probabilities, and cost of build to come up with your own answer for
your own organisation!

- Peter

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



How many webapps on one instance? How to tell when to add another?

2007-08-03 Thread Newman, John W
Ok ok i know this is very much not a one size fits all sort of question,
but I'm just wondering what those out there have.  How many webapps do
you have per instance?  What is recommended (one, three, 10, 40 i have
no idea) ?  Hardware specs are probably about the norm these days, 2 G
of ram dual processor etc.  

 

How were you able to realize you needed to add a second?  Right now we
have 6 smaller CRUD like applications on there, trying to get a feel for
whether or not I need to start messing with the servers again.

 

Thanks
john



Re: Installing Tomcat on Linux

2007-08-03 Thread Bruno Harbulot

Hello,

Peter Crowther wrote:
From: Vigorito, Nicholas E. [mailto:[EMAIL PROTECTED] 
A coworker claims that all unix admins should never install 
open source binaries. They should build using the source.


Binaries are marginally more open to tampering; this is why most (all?)
Apache projects provide checksums of the built packages.  A cracker
would have to replace the binaries on the distribution machine *and*
tamper with the checksums that are held on a different machine.  Or
they'd have to be part of the relevant build team, in which case they
may well be able to get their crack into the source anyway.


Source files have checksums too (and I don't think source files are less 
open to tampering -- in fact it's probably easier to change something in 
the source code). The safety provided by checking the checksums of a 
binary package is more or less the same as that offered by checking the 
checksums of the source packages (in the case when the people who 
produce the packages are the same).
If you want to push the verification to a further level, we go back to 
the argument that you must personally check each and every single line 
of code -- simply infeasible.


The one thing you are forced to trust when you use a binary package is 
the compiler with which it has been built. Most of the time, you don't 
even need to worry about the libraries your application relies on, since 
dynamic linking means that the binary application is going to use those 
already on your system (which I guess you trust).
Perhaps binary packagers could say with which compiler their code has 
been compiled, just in case you were worried about a particular compiler.


The real main advantage you get from building from source is to have a 
binary executable that can be optimised for the target machine.
In the case of Tomcat, since it's all Java-based and it relies on the 
JVM to do that, it does not really matter. It might help for the native 
libraries.



Regards,

Bruno.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



How to avoide delete context.xml - 6.0.14

2007-08-03 Thread hans.mader
Hi all,

I'm using /conf/Catalina/localhost/myapp.xml context configuration.
My deployment works as ant-copy directly to the /webapps directory.

After the copy, the previous installed /conf/Catalina/localhost/myapp.xml will 
be deleted by the
server automatically.

So I have to provide the file again, and to restart the server ;(

In 5.0.30 it works so cool...


Thanks.

Regards, hans





Diese Nachricht ist ausschliesslich fuer den oben bezeichneten Adressaten 
bestimmt und enthaelt moeglicherweise vertrauliche Informationen. Sollten Sie 
nicht der oben bezeichnete Adressat sein oder diese Nachricht irrtuemlich 
erhalten haben, ersuchen wir Sie, diese Nachricht nicht weiterzugeben, zu 
kopieren oder im Vertrauen darauf zu handeln, sondern den Absender zu 
verstaendigen und diese Nachricht samt allfaelliger Anlagen sofort zu loeschen. 
Vielen Dank.

This message is intended only for use by the named addressee and may contain 
privileged and/or confidential information. If you are not the named addressee, 
you should not disseminate, copy, or take any action in reliance on it. If you 
have received this message in error, please immediately notify the sender of 
this message and delete this message and any attachment. Thank you.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: AW: AW: Application outside WEBAPPS

2007-08-03 Thread Mark Thomas
[EMAIL PROTECTED] wrote:
 hi,
 
 useNaming does not affect here, correct.
 
 What's the reason ignoring the path attribute? (6.0.14 ignores as well)

It isn't needed. The path is derived from the file name.

Mark


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: worker.lock property question.

2007-08-03 Thread Mladen Turk

[EMAIL PROTECTED] wrote:


It would be really great if someone could expand a bit more on this property
and implications.



Mod_jk has a shared data that gets read/updated from multiple
concurrent threads/processes.
It depends on the web server and in case it's Apache httpd, on mpm used.
With Optimistic locking the sync is done on per thread basis, while
with Pessimistic, it's done as global lock.
The first means that the data is assured to be valid across the threads
in the child process, while the other assures that for all clients.

If using prefork mpm the only solution is to use the Pessimistic locking.

However it all depends how much accuracy you need from load balancer.
If you can live with 20% error, the locking itself is irrelevant.

On Apache httpd for windows or netware that are pure threaded, the
Optimistic (thread) is enough.
With Apache httpd using worker mpm (semi threaded) you can choose
between O and P. Optimistic will be fine cause the total error is
divided by the ThreadsPerChild (the higher the number, the lower the error).

Pessimistic locking should be used for prefork mpms and in situations
where you have spikes of burst load.

Each locking makes the things works slower although we done lots of
optimizations to keep the time inside locks as low as possible.
Mod_jk locks only during reading and storing data to the shared memory,
so that other childs/clients has correct data.
However it depends on the OS and it's implementation of the locking,
on the fact weather you have lock file on the NFS share, etc...

So, since locking is tuning parameter it depends on many things,
and as word tunning suggests, it pretty much empirical.

Regards,
Mladen

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Failed Authentication

2007-08-03 Thread Lisa Tan
I am trying to set up Tomcat form based authentication and received the
following error.
Failed authenticate() test ??/j_security_check -
org.apache.catalina.authenticator.AuthenticatorBase [20070802]

What I have done is:
a). in $TOMCAT/conf/server.xml, I add JNDIRealm Realm
className=org.apache.catalina.realm.JNDIRealm
   debug='55'
connectionURL=ldap://xxx:xxx;
 userBase=ou=People,dc=example,dc=edu
 userSearch=(uid={0})
 /
b). in tomcat WEB-INF/web.xml,  I add security and login blocks 
   security-constraint
 web-resource-collection
  web-resource-nametracker/web-resource-name
  url-pattern*.jsp/url-pattern
  http-methodGET/http-method
  http-methodPOST/http-method
 /web-resource-collection
 !-- Security roles referenced by this web application --
 security-role
  descriptionAll Users/description
  role-nameperson/role-name
 /security-role
  /security-constraint
  
  login-config
auth-methodFORM/auth-method
realm-nameldapRealm/realm-name
form-login-config
form-login-page/login.jsp/form-login-page
form-error-page/login_error.jsp/form-error-page
/form-login-config
  /login-config
c). create login.jsp and login_error.jsp and put them in the web-app's
document root
  form action=j_security_check method=POST
LDAP AuthenticationBR
  
strongEnter UserId/strongbr
input type=text name=j_username size=22
  br
strongEnter Password/strongbr
input type=password name=j_password size=22
  
input type=submit name=Submit value=Submit
  /form
  
  login_error.jsp can be as simple as:
 
html
  body
  The system was not able to log you in.br
 form
   input type=button onclick=history.go(-1) value=Retry/
 /form
  /body
/html

Any directions will appreciate. Thanks,

Lisa


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Error reported when starting app in cluster

2007-08-03 Thread Derek Alexander

 Does this application run well in a tomcat that isn't clustered? 
Yes

 Does your application have the distributable/ element in web.xml?
Yes

 I'd recommend looking through the output in the other log files in
 $CATALINA_HOME/logs/, especially localhost, to see whether there are
 any exceptions / errors reported that might keep your application from
 comin' up well.

No other problems reported.

This error appears at the beginning of the application's log then afterwards
it continues and starts the application without problem. I can then go on to
use the application.

Haven't tested whether session replication is working yet, but this doesn't
inspire confidence. 
Sounds like it is not normal to see this, so will check my cluster
configuration.

Cheers,
D.

-- 
View this message in context: 
http://www.nabble.com/Error-reported-when-starting-app-in-cluster-tf4212847.html#a11984950
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Jkoptions error

2007-08-03 Thread André Vila Cova
Why I get

Syntax error on line 516 of Z:/Apache Software
Foundation/Apache2.2/conf/httpd.conf:

JkOptions: Illegal option 'DisableReuse'

When I setup

 JkOptions +DisableReuse
in httpd.conf??

Thanks a lot


Re: Error reported when starting app in cluster

2007-08-03 Thread Derek Alexander

 the same app would have to run on both instances,

You mean this error is normal when starting the first server in a cluster?


-- 
View this message in context: 
http://www.nabble.com/Error-reported-when-starting-app-in-cluster-tf4212847.html#a11985035
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Installing Tomcat on Linux

2007-08-03 Thread Mark H. Wood
On Thu, Aug 02, 2007 at 05:51:27PM -0400, Steve Ochani wrote:
 LOL, I would ask him if he sits there and examines all the code of
 everything that is on his system.

Ya know, I don't do that before I install most stuff, but I *do* tend
to open the source kit and read it when I want the product to do more,
or when I think it's failing, or just when I don't understand why it
does *that* when I say *this*.  In a former position I wound up
reading maybe 70% of the entire operating system over the course of
several years.  It really does happen.  In fact I have some bits of
Tomcat source on my desk right now, and a pile of somebody else's
servlet code as well.

-- 
Mark H. Wood, Lead System Programmer   [EMAIL PROTECTED]
Typically when a software vendor says that a product is intuitive he
means the exact opposite.



pgpu9wPj3oawH.pgp
Description: PGP signature


Re: How to avoide delete context.xml - 6.0.14

2007-08-03 Thread Hassan Schroeder
On 8/3/07, Mark H. Wood [EMAIL PROTECTED] wrote:

  After the copy, the previous installed
  /conf/Catalina/localhost/myapp.xml will be deleted by the server
  automatically.

You won't have this problem if you use META-INF/context.xml for
your context descriptor.

-- 
Hassan Schroeder  [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: How to avoide delete context.xml - 6.0.14

2007-08-03 Thread Mark H. Wood
On Fri, Aug 03, 2007 at 02:05:07PM +0200, [EMAIL PROTECTED] wrote:
 I'm using /conf/Catalina/localhost/myapp.xml context configuration.
 My deployment works as ant-copy directly to the /webapps directory.
 
 After the copy, the previous installed
 /conf/Catalina/localhost/myapp.xml will be deleted by the server
 automatically.
 
 So I have to provide the file again, and to restart the server ;(
 
 In 5.0.30 it works so cool...

If you get an answer off-list, please share.  5.5 has the same problem.

-- 
Mark H. Wood, Lead System Programmer   [EMAIL PROTECTED]
Typically when a software vendor says that a product is intuitive he
means the exact opposite.



pgpmDIt4nCM7q.pgp
Description: PGP signature


Re: Error reported when starting app in cluster

2007-08-03 Thread Filip Hanik - Dev Lists

the same app would have to run on both instances,

Filip

Derek Alexander wrote:
Getting an ERROR reported when starting webapp within a cluster. 


Note, at this time I am starting the first server in the cluster, which is
the 192.168.0.1 mentioned in the error message.

Can someone please explain if it is correct that I am receiving an error and
if so, what is wrong.

2007-08-03 15:12:25,796 36   [main] WARN 
org.apache.catalina.cluster.session.DeltaManager  - Manager [/123/456/789],

requesting session state from
org.apache.catalina.cluster.mcast.McastMember[tcp://192.168.0.1:12345,catalina,192.168.0.1,12345,
alive=20829629727]. 
This operation will timeout if no session state has been received within 60

seconds.

2007-08-03 15:13:25,853 60093 [main] ERROR
org.apache.catalina.cluster.session.DeltaManager  - Manager [/123/456/789]:
No session state send at 03/08/07 15:12 received, timing out after 60,086
ms.

Thanks,
D.

  



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Tomcat6 and JVMTI Interface provided by SUN for Java profiler.

2007-08-03 Thread Liang, Chong
Can anybody give a response? Or redirect me to another resource? Thanks.

-Original Message-
From: Liang, Chong [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 02, 2007 9:40 AM
To: users@tomcat.apache.org
Subject: Tomcat6 and JVMTI Interface provided by SUN for Java profiler.



Hi there, 

  I am working on a Java profiler using JVMTI interface provided by JDK 5 and 
above. I always get abnormal termination of tomcat 6 when stopping it. I ran 
through DevStudio debugger and found the callback of jvmtiEventVMDeath in JVMTI 
is never activated when shutting down tomcat 6 and a unhandled exception is 
caught. It doesn't happen on tomcat 5.5.

Thanks, 
Chong 

abnormal.doc 


The contents of this e-mail are intended for the named addressee only. It 
contains information that may be confidential. Unless you are the named 
addressee or an authorized designee, you may not copy or use it, or disclose it 
to anyone else. If you received it in error please notify us immediately and 
then destroy it.





Re: tomcat 6 and setenv.sh?

2007-08-03 Thread Robert Casties
Kristian Rink wrote:
 
 Folks,
 
 after switching our production environment to tomcat 6.0.13, most of
 the things work fine again by now. One thing, however, is still giving
 me headaches: By now, I used to have something like
 
 export CATALINA_OPTS=-server -Xmx512m ... 
 
 in CATALINA_HOME/bin/setenv.sh (running Linux), which worked fine with
 tc5.5.23. However, by now having settings like these in setenv.sh, I
 just end up with this message...

It works fine for me with 6.0.13 (plain config, no cluster, no APR),
although I don't use export but just CATALINA_OPTS=... (the script
uses the variables itself and not the started executable).

Cheers
Robert


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Apache Tomcat 5.5 install issues.

2007-08-03 Thread Kristian Rink
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

William;


[William Rui [EMAIL PROTECTED] @ Fri, 3 Aug 2007
16:19:17 +0800]

 *** Host support ***
 checking C flags dependant on host system type... ok
 *** Java compilation tools ***
 checking for javac... NONE
 checking for javac... NONE
 configure: error: javac not found

There could be two things causing this issue:

(a) You don't have a JDK installed but just a JRE which, well, just
provides the features required to run Java application but actually
lacks everything required to build Java apps from source. Solution
would be to install an up-to-date JDK.

(b) you don't have your PATH set up so your shell can't find javac.
To set this right, best is putting something like this to your shell
configuration file:

export JAVA_HOME=/path/to/your/jdk
export PATH=$JAVA_HOME/bin:$PATH

(assuming a bash-like shell).


By the way you can check pretty well how things are by trying to
manually entering java or javac in your terminal, or by using

which java
which javac

to locate where these friends are. Maybe, however, you'll be better /
quicker off installing a pre-built tomcat binary. :)

Cheers,
Kristian

- -- 
Kristian Rink * http://zimmer428.net * http://flickr.com/photos/z428/
jab: [EMAIL PROTECTED] * icq: 48874445 * fon: ++49 176 2447 2771
One dreaming alone, it will be only a dream; many dreaming together
is the beginning of a new reality. (Hundertwasser)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGsueWcxBAPOA1m6wRAjF9AJ92sDDUMX4+rLplBn7GNtxvS2j2JQCdE4yk
Psy9OUqGng9xy3pXOdKFaVM=
=woaR
-END PGP SIGNATURE-


Re: Jkoptions error

2007-08-03 Thread Rainer Jung

Which version of mod_jk?
This option has been introduced in JK 1.2.19.
It works for me.

Regards,

Rainer

André Vila Cova wrote:

Why I get

Syntax error on line 516 of Z:/Apache Software
Foundation/Apache2.2/conf/httpd.conf:

JkOptions: Illegal option 'DisableReuse'

When I setup

 JkOptions +DisableReuse
in httpd.conf??

Thanks a lot


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Error reported when starting app in cluster

2007-08-03 Thread Kristian Rink
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Derek;

[Derek Alexander [EMAIL PROTECTED] @ Fri, 3 Aug 2007 07:22:21
- -0700 (PDT)]

 2007-08-03 15:13:25,853 60093 [main] ERROR
 org.apache.catalina.cluster.session.DeltaManager  - Manager
 [/123/456/789]: No session state send at 03/08/07 15:12 received,
 timing out after 60,086 ms.

Does this application run well in a tomcat that isn't clustered? 

Does your application have the distributable/ element in web.xml?

Having gone through something like that as well, a while ago, I'd
recommend looking through the output in the other log files in
$CATALINA_HOME/logs/, especially localhost, to see whether there are
any exceptions / errors reported that might keep your application from
comin' up well.

Cheers,
Kristian


- -- 
Kristian Rink * http://zimmer428.net * http://flickr.com/photos/z428/
jab: [EMAIL PROTECTED] * icq: 48874445 * fon: ++49 176 2447 2771
One dreaming alone, it will be only a dream; many dreaming together
is the beginning of a new reality. (Hundertwasser)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGszuDcxBAPOA1m6wRAo05AKCZQ+EWwJTI9ISGk8jIRdMbV6Y+yACdER5a
HkVUqUrLOHsDQPfpb7x94J8=
=qr33
-END PGP SIGNATURE-


JDBC problem: PreparedStatement.setTimestamp function ignores milliseconds in TOMCAT + ddbb Oracle

2007-08-03 Thread Jose Gargallo

Hi all,

I have a J2EE application that runs in Oracle and Postgres databases and 
OC4J and Tomcat servers. I've got a problem using the 
PreparedStatement.setTimestamp function runing TOMCAT 5.5 + Oracle 9i 
becouse it ignores the milliseconds. It works fine runing in OC4J 10.1.3 
and Oracle 9i. ¿Why?


Any answer will be welcome!

Thanks

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Installing Tomcat on Linux

2007-08-03 Thread Mark H. Wood
Well, the security argument depends more on you *could* than on you
*do*.  Somewhere out there is someone crazy enough to comb through
any given source kit looking for evil.  Would any counterfeiter have
the guts to set up his print shop on the sidewalk outside a police
station?  Much of security boils down to convincing the bad guys that
they *could* be caught.

The efficiency argument (you can tune it to your specific setup)
doesn't really apply to Java programs (like Tomcat) because the
(virtual) hardware is the same everywhere.  If the build process
isn't configurable, I wouldn't give this one any weight for Java
app.s.

There's the self-maintenance argument: if you see anomalous behavior,
or want to make modifications, or just want to better understand
what's going on, you can read or modify the source.  If you're not at
least part programmer, though, you probably won't do that.

The other argument is that you know what goes into your system.  For
example, I know that Gnome is a big fat pig because I have one
Slackware system where I've had to spend hours pulling down library
after library after huge library just to get one or two tiny app.s to
compile. :-)  Again, this has little application to Java app.s because
their packaging teams always throw in whatever pile of .jar files is
needed to make them work, no matter how many copies of any library you
may have already.

So, if you're not going to inspect the code yourself, it makes little
difference whether you build Tomcat yourself or let someone else do it
for you.  The one weak argument against is that popularity of source
packages tends to make the risk of corrupting them seem larger, so you
could lie to the bad guys by fetching a source kit that you intend to
blindly install.  I doubt this would sway many sysadmin.s.

As another Gentoo fan, I'd certainly get source and tweak the living
daylights out of the build configuration and compiler switches of any
non-Java app. I wanted.  But I probably wouldn't do the same for a
Java app. unless I had some reason to dig into the source myself.

-- 
Mark H. Wood, Lead System Programmer   [EMAIL PROTECTED]
Typically when a software vendor says that a product is intuitive he
means the exact opposite.



pgpbsOETUsCLz.pgp
Description: PGP signature


Error reported when starting app in cluster

2007-08-03 Thread Derek Alexander

Getting an ERROR reported when starting webapp within a cluster. 

Note, at this time I am starting the first server in the cluster, which is
the 192.168.0.1 mentioned in the error message.

Can someone please explain if it is correct that I am receiving an error and
if so, what is wrong.

2007-08-03 15:12:25,796 36   [main] WARN 
org.apache.catalina.cluster.session.DeltaManager  - Manager [/123/456/789],
requesting session state from
org.apache.catalina.cluster.mcast.McastMember[tcp://192.168.0.1:12345,catalina,192.168.0.1,12345,
alive=20829629727]. 
This operation will timeout if no session state has been received within 60
seconds.

2007-08-03 15:13:25,853 60093 [main] ERROR
org.apache.catalina.cluster.session.DeltaManager  - Manager [/123/456/789]:
No session state send at 03/08/07 15:12 received, timing out after 60,086
ms.

Thanks,
D.

-- 
View this message in context: 
http://www.nabble.com/Error-reported-when-starting-app-in-cluster-tf4212847.html#a11984296
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Question on starting tomcat (as a windows service) from Ant

2007-08-03 Thread Lenny Wintfeld

Rodrigo,

Per your request, here are files in WEB-INF and WEB-INF/lib. All the 
subdirectories of WEB-INF/classes have our webapp class names an I 
assume are of no interest to you.


According to the guy who  I inherited this project from, servlet-api is 
in the WEB-INF/lib for the Ant build so the compile will run. I will 
edit the ant script to delete it from WEB-INF/lib after the compile and 
before the .war generation, if you think that would help.


-Lenny

C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\server-config.wsdd
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\web.xml


C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\webui.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\wsdl4j-1.5.1.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\xpp3-1.1.4.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\activation-1.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\appbase.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\avalon-framework-cvs-20020806.jar 

C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\axis.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\axis-ant.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\batik.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-beanutils.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-collections-3.1.jar 

C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-collections.jar 

C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-digester.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-discovery-0.2.jar 

C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-fileupload-1.0.jar 

C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-io-1.3.1.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\commons-logging-1.0.4.jar 

C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\concurrent.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\dataprovider.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\defaulttheme.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\errorhandler.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\fop.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\htmLib.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\HTMLPage.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\j4j.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\jaxrpc.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\jcommon-0.9.3.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\jconn2.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\jcs-1.2.7.0.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\jfreechart-0.9.18.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\jta.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\ldap.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\log4j-1.2.8.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\luce1.jar
C:\Program Files\Apache Software Foundation\Tomcat 
5.5.23\apache-tomcat-5.5.23\webapps\CR42\WEB-INF\lib\mail.jar
C:\Program Files\Apache Software 

Re: AW: AW: Application outside WEBAPPS

2007-08-03 Thread Pid

[EMAIL PROTECTED] wrote:

hi,

useNaming does not affect here, correct.

What's the reason ignoring the path attribute? (6.0.14 ignores as well)


Because it's only used when the context is defined in server.xml and the 
path can't be derived from the name of the deployed context.xml file.


p



hans

-Ursprüngliche Nachricht-
Von: Pid [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 03. August 2007 09:39
An: Tomcat Users List
Betreff: Re: AW: Application outside WEBAPPS


[EMAIL PROTECTED] wrote:

Place the myapp.xml in the /conf/Catalina/localhost/ directory.

?xml version='1.0' encoding='utf-8'?
Context docBase=\\server02\share\dir1\dir2 path=/myapp useNaming=false 
/Context


The path attribute will be ignored if your server version is +5.5.
(useNaming is not relevant to this problem.)

p



That's all.

Regards, Hans

-Ursprüngliche Nachricht-
Von: Mladen Turk [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 02. August 2007 13:11
An: Tomcat Users List
Betreff: Re: Application outside WEBAPPS


André Vila Cova wrote:

Hello!

How can I invoke an application located outside WEBAPPS? What setup I need
to do?
If I have an application inside WEBAPPS, p.e., ../WEBAPPS/test/ in URL I
invoke http://localhost/test... but if application is in other location?


Take a look at
http://tomcat.apache.org/tomcat-6.0-doc/config/context.html

docBase is your friend ;)

Regards,
Mladen

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






Diese Nachricht ist ausschliesslich fuer den oben bezeichneten Adressaten bestimmt und enthaelt moeglicherweise vertrauliche Informationen. Sollten Sie nicht der oben bezeichnete Adressat sein oder diese Nachricht irrtuemlich erhalten haben, ersuchen wir Sie, diese Nachricht nicht weiterzugeben, zu kopieren oder im Vertrauen darauf zu handeln, sondern den Absender zu verstaendigen und diese Nachricht samt allfaelliger Anlagen sofort zu loeschen. Vielen Dank. 


This message is intended only for use by the named addressee and may contain 
privileged and/or confidential information. If you are not the named addressee, 
you should not disseminate, copy, or take any action in reliance on it. If you 
have received this message in error, please immediately notify the sender of 
this message and delete this message and any attachment. Thank you.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]










Diese Nachricht ist ausschliesslich fuer den oben bezeichneten Adressaten bestimmt und enthaelt moeglicherweise vertrauliche Informationen. Sollten Sie nicht der oben bezeichnete Adressat sein oder diese Nachricht irrtuemlich erhalten haben, ersuchen wir Sie, diese Nachricht nicht weiterzugeben, zu kopieren oder im Vertrauen darauf zu handeln, sondern den Absender zu verstaendigen und diese Nachricht samt allfaelliger Anlagen sofort zu loeschen. Vielen Dank. 


This message is intended only for use by the named addressee and may contain 
privileged and/or confidential information. If you are not the named addressee, 
you should not disseminate, copy, or take any action in reliance on it. If you 
have received this message in error, please immediately notify the sender of 
this message and delete this message and any attachment. Thank you.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]







smime.p7s
Description: S/MIME Cryptographic Signature


Re: AW: AW: Application outside WEBAPPS

2007-08-03 Thread Scott McClanahan
On Fri, 2007-08-03 at 18:58 +0100, Pid wrote:
 [EMAIL PROTECTED] wrote:
  hi,
  
  useNaming does not affect here, correct.
  
  What's the reason ignoring the path attribute? (6.0.14 ignores as well)
 
 Because it's only used when the context is defined in server.xml and the 
 path can't be derived from the name of the deployed context.xml file.
 

What if you want the path to the application to differ from the name of
the deployed application?


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Error reported when starting app in cluster

2007-08-03 Thread Filip Hanik - Dev Lists

Derek Alexander wrote:

the same app would have to run on both instances,



You mean this error is normal when starting the first server in a cluster?
  
if it was the first server, it wouldn't request state from another, 
would it ?:)


  



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: AW: AW: Application outside WEBAPPS

2007-08-03 Thread Caldarale, Charles R
 From: Scott McClanahan [mailto:[EMAIL PROTECTED] 
 Subject: Re: AW: AW: Application outside WEBAPPS
 
 What if you want the path to the application to differ from 
 the name of the deployed application?

Several options:

1) Correct the name of the deployed .war file (or expanded directory
thereof).

2) Deploy the webapp outside of the Host appBase directory.

3) Write your own servlet container.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Suggestions for overlapping URI spaces

2007-08-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

All,

I have two applications deployed in production that share a URL space.
Actually, one is deployed as the root webapp, the the other one is at,
say, /foo.

My problem is that each webapp maintains its own session identifiers as
cookies. Since the session id cookie is always called JSESSIONID, a
visitor who uses both applications gets two cookies (one with /, and one
with /foo) with different JSESSIONID values. I'm guessing that Tomcat
doesn't try to pick the best one, since things get /really/ confusing
when this happens. Basically, our users get caught in a continuous
please-login - login - please-login - login loop. It appears that the
root JSESSIONID is being preferred over the more recent /foo one, which
is never read properly so the login can never happen.

Does anyone have any suggestions for how to fix this? Some obvious ideas
are:

1. Don't do that.
2. Change the session id cookie name in one of the apps (is this
   possible and/or recommended?)
3. Use SSO -- except that I currently deploy these two applications
   in separate Tomcat instances.
4. Re-deploy the root webapp to /bar and forward / to /bar.

I'm just looking for the right solution. Any comments or suggestions
would be appreciated.

Thanks,
- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGs38V9CaO5/Lv0PARApHzAKCqMrz2AntBJDAosgUkd5iBzBZVRwCglY2m
SlO68LvbodFxNLWIoObTorQ=
=KdXa
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Failed Authentication

2007-08-03 Thread Propes, Barry L
what version do you have? Of TC?

-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 9:59 AM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am trying to set up Tomcat form based authentication and received the
following error.
Failed authenticate() test ??/j_security_check -
org.apache.catalina.authenticator.AuthenticatorBase [20070802]

What I have done is:
a). in $TOMCAT/conf/server.xml, I add JNDIRealm Realm
className=org.apache.catalina.realm.JNDIRealm
   debug='55'
connectionURL=ldap://xxx:xxx;
 userBase=ou=People,dc=example,dc=edu
 userSearch=(uid={0})
 /
b). in tomcat WEB-INF/web.xml,  I add security and login blocks 
   security-constraint
 web-resource-collection
  web-resource-nametracker/web-resource-name
  url-pattern*.jsp/url-pattern
  http-methodGET/http-method
  http-methodPOST/http-method
 /web-resource-collection
 !-- Security roles referenced by this web application --
 security-role
  descriptionAll Users/description
  role-nameperson/role-name
 /security-role
  /security-constraint
  
  login-config
auth-methodFORM/auth-method
realm-nameldapRealm/realm-name
form-login-config
form-login-page/login.jsp/form-login-page
form-error-page/login_error.jsp/form-error-page
/form-login-config
  /login-config
c). create login.jsp and login_error.jsp and put them in the web-app's
document root
  form action=j_security_check method=POST
LDAP AuthenticationBR
  
strongEnter UserId/strongbr
input type=text name=j_username size=22
  br
strongEnter Password/strongbr
input type=password name=j_password size=22
  
input type=submit name=Submit value=Submit
  /form
  
  login_error.jsp can be as simple as:
 
html
  body
  The system was not able to log you in.br
 form
   input type=button onclick=history.go(-1) value=Retry/
 /form
  /body
/html

Any directions will appreciate. Thanks,

Lisa


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Failed Authentication

2007-08-03 Thread Lisa Tan
I am using apache-tomcat-5.5.17, and Apache 2.0.52 which comes with RedHat.

Thanks,

Lisa

-Original Message-
From: Propes, Barry L [mailto:[EMAIL PROTECTED] 
Sent: Friday, August 03, 2007 4:40 PM
To: Tomcat Users List
Subject: RE: Failed Authentication

what version do you have? Of TC?

-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 9:59 AM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am trying to set up Tomcat form based authentication and received the
following error.
Failed authenticate() test ??/j_security_check -
org.apache.catalina.authenticator.AuthenticatorBase [20070802]

What I have done is:
a). in $TOMCAT/conf/server.xml, I add JNDIRealm Realm
className=org.apache.catalina.realm.JNDIRealm
   debug='55'
connectionURL=ldap://xxx:xxx;
 userBase=ou=People,dc=example,dc=edu
 userSearch=(uid={0})
 /
b). in tomcat WEB-INF/web.xml,  I add security and login blocks 
   security-constraint
 web-resource-collection
  web-resource-nametracker/web-resource-name
  url-pattern*.jsp/url-pattern
  http-methodGET/http-method
  http-methodPOST/http-method
 /web-resource-collection
 !-- Security roles referenced by this web application --
 security-role
  descriptionAll Users/description
  role-nameperson/role-name
 /security-role
  /security-constraint
  
  login-config
auth-methodFORM/auth-method
realm-nameldapRealm/realm-name
form-login-config
form-login-page/login.jsp/form-login-page
form-error-page/login_error.jsp/form-error-page
/form-login-config
  /login-config
c). create login.jsp and login_error.jsp and put them in the web-app's
document root
  form action=j_security_check method=POST
LDAP AuthenticationBR
  
strongEnter UserId/strongbr
input type=text name=j_username size=22
  br
strongEnter Password/strongbr
input type=password name=j_password size=22
  
input type=submit name=Submit value=Submit
  /form
  
  login_error.jsp can be as simple as:
 
html
  body
  The system was not able to log you in.br
 form
   input type=button onclick=history.go(-1) value=Retry/
 /form
  /body
/html

Any directions will appreciate. Thanks,

Lisa


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Failed Authentication

2007-08-03 Thread Propes, Barry L
looking at this,

http://svn.apache.org/repos/asf/tomcat/container/branches/tc5.0.x/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java

it looks like at lines 448 or 506, it's choking perhaps at the URI.

Also shows this -

and therefore the j_security_check URI
// to which it submits) might be outside the secured area

have you gotten a failure no matter what account you try to use logging in?



-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 3:55 PM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am using apache-tomcat-5.5.17, and Apache 2.0.52 which comes with RedHat.

Thanks,

Lisa

-Original Message-
From: Propes, Barry L [mailto:[EMAIL PROTECTED] 
Sent: Friday, August 03, 2007 4:40 PM
To: Tomcat Users List
Subject: RE: Failed Authentication

what version do you have? Of TC?

-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 9:59 AM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am trying to set up Tomcat form based authentication and received the
following error.
Failed authenticate() test ??/j_security_check -
org.apache.catalina.authenticator.AuthenticatorBase [20070802]

What I have done is:
a). in $TOMCAT/conf/server.xml, I add JNDIRealm Realm
className=org.apache.catalina.realm.JNDIRealm
   debug='55'
connectionURL=ldap://xxx:xxx;
 userBase=ou=People,dc=example,dc=edu
 userSearch=(uid={0})
 /
b). in tomcat WEB-INF/web.xml,  I add security and login blocks 
   security-constraint
 web-resource-collection
  web-resource-nametracker/web-resource-name
  url-pattern*.jsp/url-pattern
  http-methodGET/http-method
  http-methodPOST/http-method
 /web-resource-collection
 !-- Security roles referenced by this web application --
 security-role
  descriptionAll Users/description
  role-nameperson/role-name
 /security-role
  /security-constraint
  
  login-config
auth-methodFORM/auth-method
realm-nameldapRealm/realm-name
form-login-config
form-login-page/login.jsp/form-login-page
form-error-page/login_error.jsp/form-error-page
/form-login-config
  /login-config
c). create login.jsp and login_error.jsp and put them in the web-app's
document root
  form action=j_security_check method=POST
LDAP AuthenticationBR
  
strongEnter UserId/strongbr
input type=text name=j_username size=22
  br
strongEnter Password/strongbr
input type=password name=j_password size=22
  
input type=submit name=Submit value=Submit
  /form
  
  login_error.jsp can be as simple as:
 
html
  body
  The system was not able to log you in.br
 form
   input type=button onclick=history.go(-1) value=Retry/
 /form
  /body
/html

Any directions will appreciate. Thanks,

Lisa


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Failed Authentication

2007-08-03 Thread Propes, Barry L
might try this link, too.

http://svn.apache.org/repos/asf/tomcat/container/branches/other/tc5.5.x/ASF/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java

-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 3:55 PM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am using apache-tomcat-5.5.17, and Apache 2.0.52 which comes with RedHat.

Thanks,

Lisa

-Original Message-
From: Propes, Barry L [mailto:[EMAIL PROTECTED] 
Sent: Friday, August 03, 2007 4:40 PM
To: Tomcat Users List
Subject: RE: Failed Authentication

what version do you have? Of TC?

-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 9:59 AM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am trying to set up Tomcat form based authentication and received the
following error.
Failed authenticate() test ??/j_security_check -
org.apache.catalina.authenticator.AuthenticatorBase [20070802]

What I have done is:
a). in $TOMCAT/conf/server.xml, I add JNDIRealm Realm
className=org.apache.catalina.realm.JNDIRealm
   debug='55'
connectionURL=ldap://xxx:xxx;
 userBase=ou=People,dc=example,dc=edu
 userSearch=(uid={0})
 /
b). in tomcat WEB-INF/web.xml,  I add security and login blocks 
   security-constraint
 web-resource-collection
  web-resource-nametracker/web-resource-name
  url-pattern*.jsp/url-pattern
  http-methodGET/http-method
  http-methodPOST/http-method
 /web-resource-collection
 !-- Security roles referenced by this web application --
 security-role
  descriptionAll Users/description
  role-nameperson/role-name
 /security-role
  /security-constraint
  
  login-config
auth-methodFORM/auth-method
realm-nameldapRealm/realm-name
form-login-config
form-login-page/login.jsp/form-login-page
form-error-page/login_error.jsp/form-error-page
/form-login-config
  /login-config
c). create login.jsp and login_error.jsp and put them in the web-app's
document root
  form action=j_security_check method=POST
LDAP AuthenticationBR
  
strongEnter UserId/strongbr
input type=text name=j_username size=22
  br
strongEnter Password/strongbr
input type=password name=j_password size=22
  
input type=submit name=Submit value=Submit
  /form
  
  login_error.jsp can be as simple as:
 
html
  body
  The system was not able to log you in.br
 form
   input type=button onclick=history.go(-1) value=Retry/
 /form
  /body
/html

Any directions will appreciate. Thanks,

Lisa


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Failed Authentication

2007-08-03 Thread Propes, Barry L
ok. I'm stuck in ancient times on the 4.xx series, but the security constraint 
params are likely to be similar enough.

Let me double check mine.


-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 3:55 PM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am using apache-tomcat-5.5.17, and Apache 2.0.52 which comes with RedHat.

Thanks,

Lisa

-Original Message-
From: Propes, Barry L [mailto:[EMAIL PROTECTED] 
Sent: Friday, August 03, 2007 4:40 PM
To: Tomcat Users List
Subject: RE: Failed Authentication

what version do you have? Of TC?

-Original Message-
From: Lisa Tan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 9:59 AM
To: 'Tomcat Users List'
Subject: RE: Failed Authentication


I am trying to set up Tomcat form based authentication and received the
following error.
Failed authenticate() test ??/j_security_check -
org.apache.catalina.authenticator.AuthenticatorBase [20070802]

What I have done is:
a). in $TOMCAT/conf/server.xml, I add JNDIRealm Realm
className=org.apache.catalina.realm.JNDIRealm
   debug='55'
connectionURL=ldap://xxx:xxx;
 userBase=ou=People,dc=example,dc=edu
 userSearch=(uid={0})
 /
b). in tomcat WEB-INF/web.xml,  I add security and login blocks 
   security-constraint
 web-resource-collection
  web-resource-nametracker/web-resource-name
  url-pattern*.jsp/url-pattern
  http-methodGET/http-method
  http-methodPOST/http-method
 /web-resource-collection
 !-- Security roles referenced by this web application --
 security-role
  descriptionAll Users/description
  role-nameperson/role-name
 /security-role
  /security-constraint
  
  login-config
auth-methodFORM/auth-method
realm-nameldapRealm/realm-name
form-login-config
form-login-page/login.jsp/form-login-page
form-error-page/login_error.jsp/form-error-page
/form-login-config
  /login-config
c). create login.jsp and login_error.jsp and put them in the web-app's
document root
  form action=j_security_check method=POST
LDAP AuthenticationBR
  
strongEnter UserId/strongbr
input type=text name=j_username size=22
  br
strongEnter Password/strongbr
input type=password name=j_password size=22
  
input type=submit name=Submit value=Submit
  /form
  
  login_error.jsp can be as simple as:
 
html
  body
  The system was not able to log you in.br
 form
   input type=button onclick=history.go(-1) value=Retry/
 /form
  /body
/html

Any directions will appreciate. Thanks,

Lisa


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Can't find ServletContext.getContextPath()

2007-08-03 Thread aladdin
I have the following two lines of code in a context listener:

ServletContext sc= e.getServletContext(); // e is a ServletContextEvent
log.write(AppInitializer::ContextInitializer: context name=' + 
sc.getServletContextName() + ');
log.write(AppInitializer::ContextInitializer: context path=' + 
sc.getContextPath() + ');

When I try to compile this, I get:
./src/utils/AppInitializer.java:33: cannot find symbol
symbol  : method getContextPath()
location: interface javax.servlet.ServletContext
log.write(AppInitializer::ContextInitializer: context path=' + 
sc.getContextPath() + ');

Why is it not finding the function (and only the function) 
ServletContext.getContextPath()?  It's the first time I've used this function, 
but it is typed (I think; maybe I'm going crazy- too much programming, ya' 
know) exactly as it appears in the Sun J2EE documentation.

TIA,
Allen





Re: Can't find ServletContext.getContextPath()

2007-08-03 Thread David Smith
Could be because ServletContext doesn't have that method.  You might 
want to try using getServletContextName().


The Servlet API is available online at the tomcat website.

--David

aladdin wrote:

I have the following two lines of code in a context listener:

ServletContext sc= e.getServletContext(); // e is a ServletContextEvent
log.write(AppInitializer::ContextInitializer: context name=' + 
sc.getServletContextName() + ');
log.write(AppInitializer::ContextInitializer: context path=' + 
sc.getContextPath() + ');

When I try to compile this, I get:
./src/utils/AppInitializer.java:33: cannot find symbol
symbol  : method getContextPath()
location: interface javax.servlet.ServletContext
log.write(AppInitializer::ContextInitializer: context path=' + 
sc.getContextPath() + ');

Why is it not finding the function (and only the function) 
ServletContext.getContextPath()?  It's the first time I've used this function, 
but it is typed (I think; maybe I'm going crazy- too much programming, ya' 
know) exactly as it appears in the Sun J2EE documentation.

TIA,
Allen




  



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Can't find ServletContext.getContextPath()

2007-08-03 Thread David Smith

Doh!

Looks like you already know about getServletContextName().  
getContextPath() still doesn't exist.  If getContextPath() is what I 
think it is, it's only available in ServletRequest.


--David

aladdin wrote:

I have the following two lines of code in a context listener:

ServletContext sc= e.getServletContext(); // e is a ServletContextEvent
log.write(AppInitializer::ContextInitializer: context name=' + 
sc.getServletContextName() + ');
log.write(AppInitializer::ContextInitializer: context path=' + 
sc.getContextPath() + ');

When I try to compile this, I get:
./src/utils/AppInitializer.java:33: cannot find symbol
symbol  : method getContextPath()
location: interface javax.servlet.ServletContext
log.write(AppInitializer::ContextInitializer: context path=' + 
sc.getContextPath() + ');

Why is it not finding the function (and only the function) 
ServletContext.getContextPath()?  It's the first time I've used this function, 
but it is typed (I think; maybe I'm going crazy- too much programming, ya' 
know) exactly as it appears in the Sun J2EE documentation.

TIA,
Allen




  



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Can't find ServletContext.getContextPath()

2007-08-03 Thread aladdin
Hmmm!  One other thing, if you please.  There is no name attribute that I 
can find under the Context entry on the Tomcat website.  If I use 
getServletContextName(), where does the name come from?

Thanks some more,
Allen

On Friday 03 August 2007 19:42, David Smith wrote:
 Doh!

 Looks like you already know about getServletContextName().
 getContextPath() still doesn't exist.  If getContextPath() is what I
 think it is, it's only available in ServletRequest.

 --David

 aladdin wrote:
  I have the following two lines of code in a context listener:
 
  ServletContext sc= e.getServletContext(); // e is a ServletContextEvent
  log.write(AppInitializer::ContextInitializer: context name=' +
  sc.getServletContextName() + ');
  log.write(AppInitializer::ContextInitializer: context path=' +
  sc.getContextPath() + ');
 
  When I try to compile this, I get:
  ./src/utils/AppInitializer.java:33: cannot find symbol
  symbol  : method getContextPath()
  location: interface javax.servlet.ServletContext
  log.write(AppInitializer::ContextInitializer: context path=' +
  sc.getContextPath() + ');
 
  Why is it not finding the function (and only the function)
  ServletContext.getContextPath()?  It's the first time I've used this
  function, but it is typed (I think; maybe I'm going crazy- too much
  programming, ya' know) exactly as it appears in the Sun J2EE
  documentation.
 
  TIA,
  Allen

 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Can't find ServletContext.getContextPath()

2007-08-03 Thread Mark Thomas
aladdin wrote:
 If you go here (Sun's official docs):
 
 http://java.sun.com/javaee/5/docs/api/
 
 you'll find it under the ServletContext interface.  However, not being one to 
 argue with the obvious, I'm surely going to take your advice, and, in fact, 
 thank you very much for it.
 
 Can you post the URL to the Tomcat api docs that you mentioned in your first 
 email?  It looks like that maybe I should be using that instead of Sun's 
 documentation, although, after at least a couple of years of doing this, this 
 is the first time I've seen a disconnect between Tomcat and Sun's official 
 documentation.

ServletContext.getContextPath() was introduced in the 2.5 spec so
you'll need to use Tomcat 6 or later to make use of it.

Mark

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Can't find ServletContext.getContextPath()

2007-08-03 Thread Mark Thomas
aladdin wrote:
 Hmmm!  One other thing, if you please.  There is no name attribute that I 
 can find under the Context entry on the Tomcat website.  If I use 
 getServletContextName(), where does the name come from?

Of the top of my head, no idea. Have you tried looking at the source code?

Mark


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Can't find ServletContext.getContextPath()

2007-08-03 Thread Bill Barker

Mark Thomas [EMAIL PROTECTED] wrote in message 
news:[EMAIL PROTECTED]
 aladdin wrote:
 Hmmm!  One other thing, if you please.  There is no name attribute that 
 I
 can find under the Context entry on the Tomcat website.  If I use
 getServletContextName(), where does the name come from?

 Of the top of my head, no idea. Have you tried looking at the source code?


It is whatever is in the display-name.../display-name in your web.xml 
file.

 Mark


 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

 




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Suggestions for overlapping URI spaces

2007-08-03 Thread Bill Barker

Christopher Schultz [EMAIL PROTECTED] wrote in message 
news:[EMAIL PROTECTED]
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 All,

 I have two applications deployed in production that share a URL space.
 Actually, one is deployed as the root webapp, the the other one is at,
 say, /foo.

 My problem is that each webapp maintains its own session identifiers as
 cookies. Since the session id cookie is always called JSESSIONID, a
 visitor who uses both applications gets two cookies (one with /, and one
 with /foo) with different JSESSIONID values. I'm guessing that Tomcat
 doesn't try to pick the best one, since things get /really/ confusing
 when this happens. Basically, our users get caught in a continuous
 please-login - login - please-login - login loop. It appears that the
 root JSESSIONID is being preferred over the more recent /foo one, which
 is never read properly so the login can never happen.

 Does anyone have any suggestions for how to fix this? Some obvious ideas
 are:


Enabling the RequestDumper to see if the browser is actually sending the 
path would help.  ATM, Tomcat simply assumes that the browser sends the 
longest matching cookie (or at least sends the longest matching cookie 
first) and doesn't send back the path.  If any significant browser is 
sending the path back, then Tomcat could also pick the longest path cookie 
as well.

 1. Don't do that.
 2. Change the session id cookie name in one of the apps (is this
   possible and/or recommended?)

Not possible on TC without hacking the code.

 3. Use SSO -- except that I currently deploy these two applications
   in separate Tomcat instances.
 4. Re-deploy the root webapp to /bar and forward / to /bar.

The browser should reject the '/' cookie in this case, since the URL that it 
sees doesn't start with '/bar'.


 I'm just looking for the right solution. Any comments or suggestions
 would be appreciated.

 Thanks,
 - -chris
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.7 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iD8DBQFGs38V9CaO5/Lv0PARApHzAKCqMrz2AntBJDAosgUkd5iBzBZVRwCglY2m
 SlO68LvbodFxNLWIoObTorQ=
 =KdXa
 -END PGP SIGNATURE-

 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

 




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]