__
Join Freeserve http://www.freeserve.com/time/
Winner of the 2003 Internet Service Providers' Association awards for Best Unmetered
ISP and Best Consumer Application.
---
I came across what appears to be a security hole when running tomcat.
I'm not sure how widespread it is, but my linux server is safe, yet my
windows XP, tomcat 4.1.24 is vulnerable.
I found that if you append %20 to a jsp page it shows the source code
instead of displaying the page:
http://192
Did you reboot the system?
From: "Bala Kiran" <[EMAIL PROTECTED]>
Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Subject: Re: Tomcat 4.1x with IIS 6 on Windows server 2003
Date: Mon, 11 Aug 2003 08:01:46 -0500
I guess it does. Here is a posting on JG
tesing email manager ezmlm
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Also, a suggestion:
- add a cleanout of the work directory on restarts or stops.
John
Mike Millson wrote:
Here is my documentation on integrating apache + tomcat on RH 9.0. For
admin simplicity, I keep the RedHat apache install.
http://www.meritonlinesystems.com/docs/
On Mon, 2003-08-11 at 0
hi
is there a way to download a .jsp file without executing it? ie i need the
content od jsp file, not the result of that jsp file. same question goes
with .cgi, .asp, .pl etc
regds
Prince
- Original Message -
From: "Bill Barker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday,
Let me try again.
I've done a lot of testing, and reading.
Tomcat doesn't honor a HTTP/1.0 Connection: keep-alive when it comes from
SQUID. I've upgraded Tomcat to 4.1.27 (latest stable), and I am still
seeing these errors. Any ideas?
Brian Peterson
-Original Message-
From: Brian Pete
Hi Fred,
Then you must try the -encoding option of java.exe in configuration file of
tomcat.
Also you can try setting the encoding type to ISO 8859 1.
Regards,
Punam
-Original Message-
From: Fred Whipple [mailto:[EMAIL PROTECTED]
Sent: Sunday, August 10, 2003 11:30 PM
To: 'Tomcat Users
Howdy,
I don't see a factory defined in your server.xml, so you're not really
using connection pooling (I think). You're getting a new conn each
time.
Verify this by logging connection.toString() every time you get one and
watching the memory addresses.
Yoav Shapira
Millennium ChemInformatics
I'm not sure if this will solve your problems, but take a look at the
changes made to Tomcat 5's manager application. It allows for
versioning. I haven't read about this much so I can't tell you the
details. I just thought I'd alert you to it. Grab the latest 5.0.7
version. Seems to be pre
Not annoying at all, all advices are welcome... in fact, I'll give it a
try... Any suggestions to start (tutorials, samples, whatever - I don't know
much about Eclipse)?
Regards,
Carlos
- Original Message -
From: "Angus Mezick" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[E
Are you sure its set to info? If you're using the auto-generation
feature of Tomcat, then your change is probably getting overwritten.
There should be something if JkLogLevel is set to info.
John
[EMAIL PROTECTED] wrote:
Yes I don't have a mod_jk.log being created with the level set to info
Thank you, Punam, for the suggestion -- However this is already
specified both in the HTML file, and my browser is setup and capable of
viewing x-sjis. This is illustrated by the fact that the exact same
file works perfectly under Tomcat so long as its file extension is .html
and not .jsp. Only w
It's true. The name comes from "A PatCHy server".
It was first developed as a series of patches to the NCSA (National Center for
Supercomputer Applications) httpd 1.3 web server, and was informally named "A
PatCHy server". The first stable release, V1.0, was released on 1 December,
1995. This
I also cannot see this on Windows 2000, or on NetWare, using Tomcat
4.1.18, 4.1.24, or 4.1.26. On NetWare I tried going through Apache and
through 8080, on Windows port 8080.
Jeff Tulley ([EMAIL PROTECTED])
(801)861-5322
Novell, Inc., The Leading Provider of Net Business Solutions
http://www.nov
Tomcat Experts,
I have the following setup.
(1) Client App --> SQUID --> Tomcat 4.1.18
and
(2) Client App --> Tomcat 4.1.18
Where Client App is a program, not a webuser. When I remove SQUID, the
Client App seems to function normally. With SQUID, I get an HTTP/1.0 100
Continue going back to t
Hi -
This might help:
http://jakarta.apache.org/tomcat/faq/misc.html#compile
and
http://jakarta.apache.org/tomcat/faq/classnotfound.html (especially all
of the threads relating to packageless classes)
John
Susanne Munker wrote:
Hello,
I´m a newbie here and please excuse my english
I h
Bala Kiran wrote:
Yes. I did reboot the system. Did you try with IIS 6 on Windows Server 2003?
Kiran
- Original Message -
From: "vikas jain" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 11, 2003 8:44 AM
Subject: Re: Tomcat 4.1x with IIS 6 on Windows server 2003
D
I am saying that you only need what you want to resolve.
If you want to serve requests for "1.2.3.4", then you have to set Tomcat
to do so.
If you want to serve requests for "www.foobar.com" then you have to set
Tomcat to do so.
Tomcat is only set to serve requests by default for "localhost".
One thing is that DocumentRoot is typically not "webapps" but some
directory under webapps, like "webapps/ROOT" or "webapps/myApp" or whatever.
What URL is causing the 500 error?
What do Tomcat's logs say?
Also, try setting JkLogLevel to "info", restarting, and trying it then.
Also, the JkMounts
Hello,
In order to internationalize a web application I would like several hosts to map to a
unique directory i.e. "fr.localhost" and "en.localhost" to map to "localhost".
I have created an alias under the "localhost" host of tomcat which I have called
"fr.localhost". When I type in http://fr
Having read the somewhat forbidding rules, I haven't found anywhere better
to post this. Java fanatics please bear with me.
I've made a simple attempt at the basics of a C++ client for ajp14. The
source code, sample files, and a readme can be downloaded from
http://www.opents.com/ajp14cc.tar.gz .
you can also turn on the AccessLogValve in server.xml to show if the request
gets to tomcat from apache and to see what it looks like.
> -Original Message-
> From: Angus Mezick [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 11, 2003 12:56 PM
> To: Tomcat Users List
> Subject: RE: secur
ÔÚ 2003-08-08 22:29:00 ÄúдµÀ£º
>Hello,of you ? Could you tell me ? Thanks~~
>
>We are running Apache/Tomcat/Mysql on linux. The site was working fine till a few
>days back. When we introduced a few services, the tomcat server hangs very often.
>Then we have to restart it using startup.sh.
>
>S
Ok, can we please stop poking the Unix geek?
I'll say it for the record. Georges is using LINUX in both a server AND
client capacity. Therefore, he is not using IE (Internet Explorer).
SHEESH!
Besides.. I've already linked the known issue.
> -Original Message-
> From: Abid Ali Tee
http://localhost/examples/jsp/num/numguess.jsp%20 = 404
(my tomcat is running on port 80)
---
Fabio Moraes
[EMAIL PROTECTED]
System Engineer
Work Force Management System
+55 21 3088 9548
-Original Message-
From: Eric J. Pinnell [mailto:[EMAIL PROTECTED]
Sent: Monday, August 11, 20
sorry, that should be http://localhost:8080/john/test.jsp%20 = 404
No Apache is involved.
John
John Turner wrote:
Red Hat Linux.
I just tried this on Windows 2000 Pro, Tomcat 4.1.27 (downloaded 30
minutes ago, .exe install, installed as service).
http://localhost/john/test.jsp%20 = 404
John
HI,
Okay I restarted and it now works - Thanks.
I now have the apache part working but when I go to
https://placeanad.classifiedmarketplace.net:8080/AdWebster it doesn't work?
What else do I need to add?
Thanks,
Bobbie
-Original Message-
From: John Turner [mailto:[EMAIL PROTECTED]
Se
That's because my HOWTO only addresses setting up "localhost" and not
"some.other.host.com". You have to do the same that is done for
localhost for every other host you want to use.
You might want to read up a little on what a virtual host is, and how it
is setup in Apache.
It works with Tomcat
As my programmer and I continue to troubleshoot our DBCP problems (thanks to
everyone, especially Angus for all the feedback), I am looking at some other
settings I have made from day 1, and wonder if there are any downsides or
benefits to what I have done.
First off, we're running Apache 1.
do you have apache on the front end and are you only mapping *.jsp where
*.jsp%20 is not a match and apache would then serve the file as text?
Charlie
> -Original Message-
> From: John Turner [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 11, 2003 9:22 AM
> To: Tomcat Users List
> Subje
Hi
I"m having some performance problems with my apache/tomcat setup and I'm
looking for ideas.
first, my setup.
I'm running apache 2 with tomcat 4.1.24, mod_jk2. My webapp serves content
over both http and https. 1 coyote connector is used to handle both secure
and unsecure requests. Static con
"servelet" should be "servlet", I think, unless you also have it as
"servelet" elsewhere in your config.
The error message you're getting is the same one we discussed last week:
are you sure you are loading mod_jk.so?
Are your mod_jk directives like "LaodModule" and "JkWorkersFile" etc. in
htt
Hello,
I shifted from Tomcat 4.0.4 and JDK 1.4 to Tomcat 4.1.27 and JDK 1.4.2 on my Windows
2000 Professional.
My application works fine on the older Tomcat but when I run the application on Tomcat
4.1.27 I get an error -
HTTP Status 404 - /netapsv1/servlet/EntryServlet
---
ÔÚ 2003-08-09 16:30:00 ÄúдµÀ£º
>Tomcat 4.0.6of you ? Could you tell me ? Thanks~~
>Windows 2000
>IE 5, SP3
>Netscape 7.02
>
>
>I have a website which is part public, part secure. There are html entries
>such as "< a href=members/index.jsp >" in the public area which will
>jump to the secure are
On Mon, Aug 11, 2003 at 02:49:52PM +0530, Antony paul wrote:
:
: I would like to know how to pronoune Apache in US English. I found two
: pronounciations at http://dictionary.reference.com/search?q=apache which one
: is right ?. Or any other forms ?
If we're talking about the web server, look
Hi!
I haven't got any answers to my question and I'm really stuck with it.
Please, could anybody give me some ideas or do you need any other
information?
Thansk a lot.
Monica
> Hi!
>
>
> I'm using Tomcat 4.1.24 with Apache 2 and MySQL 4.0.13. I have the
> mysql- connector-java-2.0.14-bin.jar i
Howdy,
>It actually makes since. Most web servers are in native code which is
>uasually faster, and tomcat is in java.
You're right (in meaning if not in spelling ;)), it does make sense for
native code to execute faster. But java performance has been
continually improving so that it's no long
Hi Fred,
In the html header u will have to set the char set as SHIFT JIS. And in the
browser SHIFT JIS should be set.
Regards,
Punam
-Original Message-
From: Fred Whipple [mailto:[EMAIL PROTECTED]
Sent: Sunday, August 10, 2003 8:01 PM
To: [EMAIL PROTECTED]
Subject: Japanese Characters
Howdy,
>I have tried so many things to use log4j from tomcat and struts and
>finaly I found the solution that I have to copy log4.jar into
common/lib
>server/lib and /WEB-INF/lib (to be able to get jsp files
>compiled). I find it a bit complicated that I have to copy the same jar
>file into three
unplug wrote:
I have installed RH9 and it contains apache2.0.40. Then I installed
tomcat4.1.27 by binary. After that I want to integrate them to work
together by using jk2. What is the easy way to integrate them?
Use a connector.
http://jakarta.apache.org/tomcat/faq/connectors.html
Any
do
Hey I'm new to this list and apache and tomcat
I'm trying to run apache 2.0.47 with tomcat 5.0 on xp
i know there are issues witht his but i don't know how to fix them
any help?
Regards,
David O'Sullivan
__
Join Freeserve ht
Hi!
I've configured jk2 with a loadbalancer and stickySession=1 and made
a simple Testservlet with a getSession().
I can see the JSESSION cookie in my browser but the loadbalancer
still uses all workers and not only the worker with my session.
What is going wrong?
Regards,
Christian
-
On Tuesday 05 August 2003 13:46,
[EMAIL PROTECTED] wrote:
> Hi! This is the ezmlm program. I'm managing the
> [EMAIL PROTECTED] mailing list.
>
> I'm working for my owner, who can be reached
> at [EMAIL PROTECTED]
>
> To confirm that you would like
>
>[EMAIL PROTECTED]
>
> removed from the tom
I am having these exact problems with DBCP. How do you configure a JNDI database connection pool on Tomcat using these
libs?
Best regards,
Eulogio Robles
Metropolis Intercom
On Sat, 09 Aug 2003 11:11:29 -0400
Mark <[EMAIL PROTECTED]> wrote:
For what it's worth... in a webapp I wrote for my comp
I'm sure that other people will offer their favorites, but I'm going to
offer:
" />
"Rick Roberts" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
>
> What is recomended technique for reading initialization parameters from a
Bean?
>
> --
> *
Hi all,
Any idea why TOMCAT (4.1.12) /JBOSS (3.0.4) on Win2K thinks the certificate
reply that I had imported (using keytool) into Tomcat's keystore, is a root
CA cert, instead of a trusted cert?
I have imported a certificate reply (created from my own CA) into a keystore
used by Tomcat (successf
I haven't changed anything in these xml files except enableing invoker
servlet and servlet reloading true. I was just trying to change
worker.properties file and see if it works. But it's not working. what else
could be wrong? I have following contents in worker.properties file
worker.list=test
Ah-patch-ee?
-Original Message-
From: Eugene Lee [mailto:[EMAIL PROTECTED]
Sent: 11 August 2003 10:23
To: tomcat mail list
Subject: Re: [OT] how to pronounce Apache ?
On Mon, Aug 11, 2003 at 02:49:52PM +0530, Antony paul wrote:
:
: I would like to know how to pronoune Apache in US E
Good morning John.
I had intended to effuse greatly if I actually got a reply but the breadth
of it suggests such a response would be over-reaction.
Than
Norm
- Original Message -
From: "John Turner" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Thursday, August 07
note you can also define the classpath to the catalina-ant.jar from the
taskdef itself:
this way you may wish to keep the path independant rather than copying
the jar to the ant home!
Steph Richardson wrote:
Juraj
Look for TOMCAT_HOME/server/lib/catalina-ant.jar and copy it to your ANT_HOME
Sheesh! Turned out, I was compiling Tomcat 4 against the wrong cvs branch
of jakarta-tomcat-connectors. Once I checked out the TOMCAT_4_1_27 branch
and recompiled, the error went away.
Thanks for your help
Dmitry
At 10:39 AM 8/8/2003, Jeanfrancois.Arcand wrote:
Try adding the mx4j jar file to
Hi.. Dear all,
I am looking a free web hosting site that I can upload
my homepage file? Any recommendation?? Besides, I want
my homepage have this function like allow member to
login or create a account and they can participate in
forum or etc.
sometime like www.channelnewsasia.com
Can public we
"Robert J. Sanford, Jr." <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> That's great advice but it doesn't answer my basic question of whether or
> not I can import a certificate that was issued based on a request
generated
> by IIS.
Since I don't use IIS, I don't know the answer.
Bill Barker wrote:
>
> "Martin Jericho" <[EMAIL PROTECTED]> wrote in message
> news:[EMAIL PROTECTED]
> > - Original Message -
> > From: "Bill Barker" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Monday, August 11, 2003 2:03 PM
> > Subject: Re: Client SSL certificates signed b
55 matches
Mail list logo
