Tomcat 5.5 security policie read jar content

2008-02-22 Thread Filipe David Manana
Hi,

How can I specify in catalina.policy (tomcat 5.5) that a webapp can read the
contents of any jar file within WEB-INF/lib/ ? (namely, read xml files
within jar files)

cheers

-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.


Tomcat 5.5 vs Tomcat 6

2008-01-21 Thread Filipe David Manana
Good morning,

I would like to know if Tomcat 6 is much more advantageous than 5.5 in
a production server.
I plan to deploy Tomcat in a production server where High Availability
requirement is about 100%.
I am newbie to Tomcat, so I would like to have opinions from people
which have used both versions in a production environment.

Thank you,

-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Tomcat 5.5 and loading of native libraries

2008-01-10 Thread Filipe David Manana
Hi,

I am using Tomcat 5.5.23 and I have a webapp which uses a library (more
specifically, Oracle's JDBC) that loads a native library on my system (
libocijdbc10.so ).
Whenever I redeploy my webapp into tomcat, I get the exception
java.lang.UnsatisfiedLinkError, since the native library was already loaded
before by another class loader. By what I understand, tomcat uses a
different class loader for each webapp (including new versions of existing
ones). Is there anyway to force tomcat to use the same class loader for all
webapps (or for new versions of existing ones) ?

The details of the exception:

java.lang.UnsatisfiedLinkError: Native Library
/usr/lib/oracle/10.2.0.3/client/lib/libocijdbc10.so already loaded in
another classloader
java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1716)
java.lang.ClassLoader.loadLibrary(ClassLoader.java:1676)
java.lang.Runtime.loadLibrary0(Runtime.java:822)
java.lang.System.loadLibrary(System.java:993)
oracle.jdbc.driver.T2CConnection$1.run(T2CConnection.java:3135)


Thanks

-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.


Re: Tomcat 5.5 and loading of native libraries

2008-01-10 Thread Filipe David Manana
That was it.
I had ojdbc14.jar in the WAR archive.

I just moved it into CATALINA_HOME/common/lib/ and it works now :)

By the way, is any of you using plain Oracle JDBC or with an ORM?

On 1/10/08, Wesley Schwengle [EMAIL PROTECTED] wrote:

 On 10.01.08 13:22 Filipe David Manana wrote:

  I am using Tomcat 5.5.23 and I have a webapp which uses a library (more
  specifically, Oracle's JDBC) that loads a native library on my system (
  libocijdbc10.so ).

 Is did you put the library files in your war file?

 I experienced similair problems when we wanted to use C libraries for
 Remedy. We ended up removing the library files from the war file and
 put them in /path/to/lib and added this path to LD_LIBRARY_PATH and
 added set the following param when starting tomcat:

-Djava.library.path=/path/to/lib

 This resolved our unsatisfiedlink error. Hope this helps.

 Cheers,
 Wesley


 --
 Orange Nederland Breedband BV, http://www.orange.nl  http://www.equant.nl;
 http://www.euronet.nl
 Wesley Schwengle, System Administrator, IT Operations - Business Systems
 Muiderstraat 1, P.o. BOX 10241 , 1001 EE Amsterdam
 T:+31 (0)20 535 52 55, F:+31 (0)20 535 57 49




-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.


Tomcat 5.5 + SSL

2007-12-19 Thread Filipe David Manana
Hi,

I am pretty newbie to Tomcat.
I have been reading the documentation, and I was not successful enabling SSL
for tomcat 5.5.

I have a PKCS12 certificate  (file name ***-cert.p12) and I want to use it
as my Tomcat certificate.

When I run the keytool command line utility I always get an error
complaining that my cert is not X.509 format:

# keytool -import -alias fdmanana -storetype pkcs12 -file cern-cert.p12
Enter keystore password:  qwerty
keytool error: java.lang.Exception: Input not an X.509 certificate

How to get keytool to work with PKCS12 certificates? Or convert it to a
X.509 one?

Then, if it were successful, in my Connector I should use the attribute
keystoreType with value pkcs12, right?


thank you

-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.


Beginner question

2007-12-17 Thread Filipe David Manana
Hi,

2 questions:

1) Is Tomcat reliable for a production environment, where client requests
can be in the order of a few thousands per hour?


2) I've red the documentation and I was not able to do the following: I
created a struts 2 app and I want to access it through http://myhost:8080/ .
By what I have understood I have to set the path of my  application context
(cdbweb.war located in $CATALINA_HOME/webapps). to . This can be done in
$CATALINA_HOME/conf/context.xml. The contents of my context.xml file are:

Context path= docBase=/opt/tomcat/webapps/cdbweb.war
!-- Default set of monitored resources --
WatchedResourceWEB-INF/web.xml/WatchedResource
/Context

My $CATALINA_HOME shell var has the correct value - /opt/tomcat

Yet I am not able to access my webapp as http://myhost:8080/ but only as
http://myhost:8080/cdbweb2/

How can I accomplish that?

Thank you

-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.


Re: Beginner question

2007-12-17 Thread Filipe David Manana
Ok many thanks.
As I told, I am just a beginner, and pondering to use Tomcat 5.5 in a big
environment (at CERN).


On Dec 17, 2007 8:50 PM, Dan Keeley [EMAIL PROTECTED] wrote:

  Filipe David Manana wrote:
  1) Is Tomcat reliable for a production environment, where client
 requests
  can be in the order of a few thousands per hour?
 
  Easily.
 

 Is it fair to say that with load balancing through apache or similar, if
 you
 spread out your app servers you can go up virtually any production
 throughput?

 For example, we may have a system that is going to have to process over
 4,000 transactions every second...  A pretty tough call!

 Thanks,
 Dan


 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.


Re: Beginner question

2007-12-17 Thread Filipe David Manana
Unfortunately it's not that simple.

CERN has its own linux distribution  - Scientific Linux CERN (SLC) based on
the Scientific Linux. The latest release is based on SL4 which is pretty
old, so most packages are 1, 2 or more years old. Adding new packages to the
distro is a task handled by the Linux group, that does extensive testing of
every package release in order to assure there are no incompatibility
problems with other existing packages and security risks.

Not using packages from the distro, is also out of question. Since all the
machines in the computing centre are managed by a tool for automating their
installation and configuration, which relies on the packages of this
official distro.

Yes, it sounds like nuts, but this kind of control is necessary in such a
large environment (6000+ machines).

On Dec 17, 2007 9:42 PM, Caldarale, Charles R [EMAIL PROTECTED]
wrote:

  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
  Behalf Of Filipe David Manana
  Subject: Re: Beginner question
 
  As I told, I am just a beginner, and pondering to use Tomcat
  5.5 in a big environment (at CERN).

 Then why not use 6.0?  It has several improvements over 5.5, including
 compatibility with the latest servlet and JSP specs.

  - Chuck


 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
 MATERIAL and is thus for use only by the intended recipient. If you
 received this in error, please contact the sender and delete the e-mail
 and its attachments from all computers.

 -
 To start a new topic, e-mail: users@tomcat.apache.org
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
Filipe David Manana,
[EMAIL PROTECTED]

Obvious facts are like secrets to those not trained to see them.