Re: manager for some users

2005-11-22 Thread Alex Moreno
The problem is that some partners has said me that this is insecure and
should only be used on beta application servers. At least this is what the
department says us to deny this petition.


On 11/22/05, Kyle [EMAIL PROTECTED] wrote:

 If you set which ever server.xml parameter it is that auto-reloads an
 application (I think it's reloadable=true, or something like that) and
 just have your users recompile their entire app each time and then ftp
 it into the relevant directory, tomcat should automatically reload each
 app for them without anyone needing manager access.


 Alex Moreno wrote:

 Hello everybody,
 
 i´m working in a university where we have a tomcat server running some
 different aplications developed by ourselves. We have different people
 working on each application and each one of them needs to restart at some
 different moments their applications.
 
 The problem is that the department don´t want to give us manager access
 for
 all the applications. I´ve been looking for the way of giving manager
 access
 to only one or two application, depending on the user.
 
 For example, alex should be able to access as manager (to restart the
 app)
 with permissions on postgrados application, but not able to see
 presupuestum
 app. In the other way, the user Maria should be able to access to
 presupuestum but not to postgrados.
 
 Can it be done in tomcat? I really need this, in advance thanks for your
 help.
 
 Regards.
 
 
 

 --
 
 Kind Regards

 Kyle Lange

 Tel: +61 (0)431 88 3978


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




Re: manager for some users

2005-11-22 Thread erh
 On 11/22/05, Kyle [EMAIL PROTECTED] wrote:
  If you set which ever server.xml parameter it is that auto-reloads an
  application (I think it's reloadable=true, or something like that) and
  just have your users recompile their entire app each time and then ftp
  it into the relevant directory, tomcat should automatically reload each
  app for them without anyone needing manager access.

On Tue, Nov 22, 2005 at 01:17:56PM +0100, Alex Moreno wrote:
 The problem is that some partners has said me that this is insecure and
 should only be used on beta application servers. At least this is what the
 department says us to deny this petition.

what?  They say ftp is insecure?  Well horray for inept admins who don't
know how to configure their system.  Or are they claming that reloadable is
insecure?
uh, so if you can't use the manager, and you can't put files where
tomcat can get at them, how DO you install a webapp?

  The problem is that the department don?t want to give us manager access
  for
  all the applications. I?ve been looking for the way of giving manager
  access
  to only one or two application, depending on the user.

What you probably want is different instances of tomcat for each user.
Otherwise it is trivial for one person's webabb to bring down everyone
elses.  e.g. sometimes all it takes is re-installing the webapp enough
times until tomcat runs out of memory.

eric

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



FTP Was: Re: manager for some users

2005-11-22 Thread Steve Ochani
On 22 Nov 2005 at 14:14, [EMAIL PROTECTED] wrote:

 On Tue, Nov 22, 2005 at 01:17:56PM +0100, Alex Moreno wrote:
  The problem is that some partners has said me that this is insecure
  and should only be used on beta application servers. At least this
  is what the department says us to deny this petition.

  what?  They say ftp is insecure?  Well horray for inept admins who
  don't
 know how to configure their system.

Yes, FTP itself is insecure. It has nothing to do with ability of admins. The 
protocol
iteself is a clear text protocol and is thus insecure.


Or are they claming that
 reloadable is insecure?
  uh, so if you can't use the manager, and you can't put files where
 tomcat can get at them, how DO you install a webapp?

You can upload/install a webapp in many ways that do not require you to use 
FTP, ssh
is one example.

-Steve O.


«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»
There's no obfuscated Perl contest because it's pointless.
 - Jeff Polk

Steve O.
http://www.steveo.us

New pics: B17G and B24
http://www.steveo.us/B17-B24

B17G WWII Bomber Yankee Lady Flight
http://www.steveo.us/b17ride

SUNY NCC MATH/COMPUTER Dept.
http://www.matcmp.ncc.edu


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]