Stefan So static parts inside the /mywebapp directoy were served by
Stefan Apache directly and dynamic parts (JSP pags and servlets) were
Stefan passed to Tomcat using mod_jk. This changed in Tomcat 3.3: All
Stefan files inside /mywebapp are handled by Tomcat now, like in this
Stefan example:
Stefan So static parts inside the /mywebapp directoy were served by
Stefan Apache directly and dynamic parts (JSP pags and servlets) were
Stefan passed to Tomcat using mod_jk. This changed in Tomcat 3.3: All
Stefan files inside /mywebapp are handled by Tomcat now, like in this
Stefan example:
-Original Message-
From: Adam Heath [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 9:44 PM
To: Stefan Gybas
Cc: [EMAIL PROTECTED]
Subject: Re: Tomcat 3.3 / 4.0 ? When?
On Thu, 29 Nov 2001, Stefan Gybas wrote:
Fine, and the Debian package uses the same user as Apache (default:
www-data
On Fri, Nov 30, 2001 at 02:43:31PM -0600, Adam Heath wrote:
I consider that a bug, and should probably file one. tomcat should not run as
the same user as apache, for security reasons.
In previous versions the auto-generated config file looked like this:
JkMount /mywebapp/*.jsp ajp12
Stefan == Stefan Gybas [EMAIL PROTECTED] writes:
Stefan So static parts inside the /mywebapp directoy were served by
Stefan Apache directly and dynamic parts (JSP pags and servlets) were
Stefan passed to Tomcat using mod_jk. This changed in Tomcat 3.3: All
Stefan files inside /mywebapp are
-Original Message-
From: Adam Heath [mailto:[EMAIL PROTECTED]
Sent: Friday, November 30, 2001 9:44 PM
To: Stefan Gybas
Cc: debian-java@lists.debian.org
Subject: Re: Tomcat 3.3 / 4.0 ? When?
On Thu, 29 Nov 2001, Stefan Gybas wrote:
Fine, and the Debian package uses the same user as Apache (default
On Fri, Nov 30, 2001 at 02:43:31PM -0600, Adam Heath wrote:
I consider that a bug, and should probably file one. tomcat should not run as
the same user as apache, for security reasons.
In previous versions the auto-generated config file looked like this:
JkMount /mywebapp/*.jsp ajp12
I consider that a bug, and should probably file one. tomcat
should not run as
the same user as apache, for security reasons.
In previous versions the auto-generated config file looked like this:
JkMount /mywebapp/*.jsp ajp12
Location /mywebapp/WEB-INF/
AllowOverride None
deny from all
Stefan == Stefan Gybas [EMAIL PROTECTED] writes:
Stefan So static parts inside the /mywebapp directoy were served by
Stefan Apache directly and dynamic parts (JSP pags and servlets) were
Stefan passed to Tomcat using mod_jk. This changed in Tomcat 3.3: All
Stefan files inside /mywebapp are
On 2001/11/30 22:28
Adam == Adam Heath [EMAIL PROTECTED] writes:
Stefan == Stefan Gybas wrote:
Stefan Fine, and the Debian package uses the same user as Apache
Stefan (default: www-data), also for security reasons :)
Adam I consider that a bug, and should probably file one. tomcat
On 2001/11/30 22:28
Adam == Adam Heath [EMAIL PROTECTED] writes:
Stefan == Stefan Gybas wrote:
Stefan Fine, and the Debian package uses the same user as Apache
Stefan (default: www-data), also for security reasons :)
Adam I consider that a bug, and should probably file one. tomcat
Adam
Max == Max Kellermann [EMAIL PROTECTED] writes:
[Running tomcat as www-data]
Max Not really a security risk, as it does not open new holes, but
Max running both with the same UIDs means they've got the same
Max permissions on the system.
I understand.
Thanks for the explanation.
--
G.
On Thu, 29 Nov 2001, Stefan Gybas wrote:
Fine, and the Debian package uses the same user as Apache (default:
www-data), also for security reasons :)
I consider that a bug, and should probably file one. tomcat should not run as
the same user as apache, for security reasons.
--
To
Adam == Adam Heath [EMAIL PROTECTED] writes:
Stefan == Stefan Gybas wrote:
Stefan Fine, and the Debian package uses the same user as Apache
Stefan (default: www-data), also for security reasons :)
Adam I consider that a bug, and should probably file one. tomcat
Adam should not run as the same
On Wed, Nov 28, 2001 at 04:15:59PM +0100, GOMEZ Henri wrote:
Did you take a look at my RPM for TC 3.3 and 4.0 ?
To be honest, no. I think there are quite some differences between
the .deb and .rpm, e.g. I'll stick with TOMCAT_HOME=/usr/share/tomcat
and symlinks there:
In tomcat 4.0 everything
On Wed, Nov 28, 2001 at 04:15:59PM +0100, GOMEZ Henri wrote:
Did you take a look at my RPM for TC 3.3 and 4.0 ?
To be honest, no. I think there are quite some differences between
the .deb and .rpm, e.g. I'll stick with TOMCAT_HOME=/usr/share/tomcat
and symlinks there:
In tomcat 4.0 everything
Markus Garscha wrote:
can anyone say when tomcat 3.3 / 4.0 will exist as .deb package?
Yes, I can. :-)
The servlet classes from Tomcat 3.3 have been uploaded yesterday,
they will be installed in the archive soon (the have moved from main
to contrib because Ant is required to build them),
: Stefan Gybas [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 1:02 PM
To: Markus Garscha
Cc: [EMAIL PROTECTED]
Subject: Re: Tomcat 3.3 / 4.0 ? When?
Markus Garscha wrote:
can anyone say when tomcat 3.3 / 4.0 will exist as .deb package?
Yes, I can. :-)
The servlet classes from Tomcat
On Wed, Nov 28, 2001 at 04:15:59PM +0100, GOMEZ Henri wrote:
Did you take a look at my RPM for TC 3.3 and 4.0 ?
To be honest, no. I think there are quite some differences between
the .deb and .rpm, e.g. I'll stick with TOMCAT_HOME=/usr/share/tomcat
and symlinks there:
Markus Garscha wrote:
can anyone say when tomcat 3.3 / 4.0 will exist as .deb package?
Yes, I can. :-)
The servlet classes from Tomcat 3.3 have been uploaded yesterday,
they will be installed in the archive soon (the have moved from main
to contrib because Ant is required to build them), Tomcat
Gybas [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 28, 2001 1:02 PM
To: Markus Garscha
Cc: debian-java@lists.debian.org
Subject: Re: Tomcat 3.3 / 4.0 ? When?
Markus Garscha wrote:
can anyone say when tomcat 3.3 / 4.0 will exist as .deb package?
Yes, I can. :-)
The servlet classes
On Wed, Nov 28, 2001 at 04:15:59PM +0100, GOMEZ Henri wrote:
Did you take a look at my RPM for TC 3.3 and 4.0 ?
To be honest, no. I think there are quite some differences between
the .deb and .rpm, e.g. I'll stick with TOMCAT_HOME=/usr/share/tomcat
and symlinks there:
sgybas:/usr/share/tomcat$
22 matches
Mail list logo
