Re: Problem with JNDIRealm

It looks like one of you attributes is missing (i.e. null). Do you have a role associated with the username? I'm also having problems with JNDIRealm -- I can't get it working ! Going to check if it is because I'm missing some libraries. Regards, pascal chong Jörn Heid wrote: I have successfull

Re: Forwarding

Dnia 2003-11-26 23:00, Użytkownik Jeff Tulley napisał: I think Kuba wants to redirect all requests that end with "/something.jsp/" to "/something.jsp" Exactly. Are you using Apache on the front end? I think this would be best done in Apache, with mod_rewrite, and a RewriteRule. (Do not forget

RE: RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

Remedy Application Request System - comprises a server component which is C based. Applications are developed using Remedy workflow on the server. A midtier component connects to server and dependent on config renders jsp's which are deployed to Tomcat. There is a Java API to the Remedy ARS server

Re: Forwarding

Dnia 2003-11-26 22:38, Użytkownik Ben Souther napisał: Can you re-phrase that? Well, I can, but what with URL such as "/article.jsp?id=435/"? They are not static, I can't put them all to web.xml. Kuba - To unsubscribe, e-mail:

Re: changing user/group tomcat is running as

Hi Marten, We're struggling with this same issue on AIX 5.2. If you're on linux Check this out: http://www.klawitter.de/tomcat80.html see: "Kernel space port forwarding" Since AIX doesn't have iptables we may end up just using port 8080 and 8443 as the service is limited to around 300 internal u

OT: RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

Simon, Just for curiosity, is the Remedy trouble reporting system (don't know the specific name) Java-based? We have some support folks that are running Remedy for the Gov. Thanks Chuck -Original Message- From: Simon Taylor [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003

changing user/group tomcat is running as

Hello, after almost comleting Oreilly's "Tomcat - The Definitive Guide", the only thing mentioned there about changing the user tomcat is running as is to put it into a chroot-environment, whereby the chroot is not as important as changing the user and group in the same step. Without doing chr

mod-jk2 on Linux. Tomcat on a NT server

Hi, I have mod-jk2 working on Linux where I can see the JKstatus page. My tomcat is running on an NT server. Do I need to configure the jk2.properties file as well. Thanks Asif mailto:[EMAIL PROTECTED] www.xeye.com -

Re: Forwarding

I think Kuba wants to redirect all requests that end with "/something.jsp/" to "/something.jsp" Are you using Apache on the front end? I think this would be best done in Apache, with mod_rewrite, and a RewriteRule. (Do not forget to turn the RewriteEngine on, a common mistake). >>> [EMAIL PRO

Re: auto (re)deploy for war files which need to be expanded

Autodeploy only works when you restart tomcat. Have you looked at the Tomcat Manager app? It allows you to deploy/un-deploy right from a browser. You could also write an ANT script to do this. On Wednesday 26 November 2003 04:42 pm, Rob Harrington wrote: > T4127, SunOS, release 5.7 > > Short ver

Re: Tomcat Dies

On Wed, November 26, 2003 1at 1:17 am, Jeff Tulley wrote: > I had not thought of that, but that should work well. I'll try it out > and see. > > Right now I'm evaluating whether my test is actually a reasonable > real-world test. The reason our testers did not find this earlier, is > that their t

Re: Intermittent failures using DataSources

Chris, I'm not sure if it makes a difference but try putting the ResourceLinks before the Realm definition in server.xml. HTH Liem - Original Message - From: "Chris Ward" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, November 26, 2003 12:23 PM Subject: Intermittent failur

auto (re)deploy for war files which need to be expanded

T4127, SunOS, release 5.7 Short version: I want to be able to deploy my .war file into webapps and have it be autodetected, expanded, and used without having to restart Tomcat. I need it to be expanded. I want to avoid restarting Tomcat as this may (adversely) affect other running apps. I have

Does acceptCount in the coyote conf have anything to do with this: server has been restarted or reset this connection

Over the past few days, my server has been crashing hard and often, now I see these every minute or so, would this have to do with the acceptCount in server.xml for the coyote connector? Nov 26, 2003 2:24:41 PM org.apache.jk.common.ChannelSocket processConnection INFO: server has been restarted

Re: Forwarding

Can you re-phrase that? I'm not sure what you want to do. On Wednesday 26 November 2003 04:25 pm, Kuba Królikowski wrote: > Hi, > > I want to make forwarding in my web application which forward every > /.jsp/ (url without '/' at the end) link to /.jsp (url without > '/' at the end). Do yo

Forwarding

Hi, I want to make forwarding in my web application which forward every /.jsp/ (url without '/' at the end) link to /.jsp (url without '/' at the end). Do you know how to do it on Tomcat? I know, that I can define for every site and tags in web.xml, but is there any "universal" metho

RE: JDBCRealm problem

The line above the line you mentioned in the error log indicates that the connection was established at one point: 2003-11-26 11:53:19 JDBCRealm[localhost]: Username admin successfully authenticated 2003-11-26 11:53:19 JDBCRealm[localhost]: Exception performing authentication So, I don't think th

Re: Tomcat Multi-Tier Authentication

HttpServletRequest.getUserPrincipal() or HttpServletRequest.getRemoteUser() -Tim Hart, Justin wrote: Is there anywhere in tomcat that there is convenient access to: 1) The authenticated principal 2) The session 3) The private credentials associated with the principal Or

Re: JDBCRealm problem

The problem is this: 2003-11-26 11:53:19 JDBCRealm[localhost]: Exception performing authentication java.sql.SQLException: [Microsoft][SQLServer 2000 Driver for JDBC]Can't start a cloned connection while in manual transaction mode. Since I don't use SQL server and Java, I can't be of more help, b

Re: Tomcat and Firewall

Ullrich, Ralf wrote: Hello list, i'm a tomcat newbie looking for information about tomcat and firewalls. what i want to do is to connect apache2(mod_ssl) and tomcat with mod_jk2 , where tomcat is within a firewall. which ports do i need to open for apache to connect to tomcat? the ServerPort and

RE: Tomcat 4.1.27/IE 6.0 Lockup

http://www.dcs.napier.ac.uk/~shaun/rtse/week06.pdf :-) Justin -Original Message- From: Antonio Fiol Bonnín [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 3:42 PM To: Tomcat Users List Subject: Re: Tomcat 4.1.27/IE 6.0 Lockup Hi, What do you mean by "real-time"? Red.es u

Re: Tomcat 4.1.27/IE 6.0 Lockup

Hi, What do you mean by "real-time"? Red.es uses Tomcat for the Spanish NIC domain registration system. Good experience so far... If you want sth more specific, please ask me privately. Antonio Fiol S R wrote: Chris, Yup - quite a busy front end! Typically 100 dynamic objects (images swap

RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

Ok thanks for the feedback. Ended up reverting to Tomcat 4.0.6 which played better with the midtier. Cheers Simon -Original Message- From: Jeff Tulley [mailto:[EMAIL PROTECTED] Sent: 26 November 2003 18:04 To: [EMAIL PROTECTED] Subject: RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier Yeah,

Re: [OT] Mozilla/Firebird and Session Cookie Problem (Mozilla-BUG)

What is the behaviour on other browsers? (MSIE, Opera, ...) Antonio Fiol Mario Ivankovits wrote: Just for the records: Someone on mozillazine told me, this is an open bug/enhancement http://bugzilla.mozilla.org/show_bug.cgi?id=117222 Maybe we should vote on it. Ciao, Mario --

Tomcat Multi-Tier Authentication

Is there anywhere in tomcat that there is convenient access to: 1) The authenticated principal 2) The session 3) The private credentials associated with the principal Or even just the username, password and session? I want to authenticate a user to my database (IE, the

Re: HTTP Error 302

Well... Try it! ;-) I believe it should work, but it's a matter of faith and not of knowledge... I can't see how you will be doing magic on your request anyway. Maybe you can use URL encoded session ID instead of cookies, or whatever it is called. I'm sure you know what I mean. Good luck! Ant

Problem with JNDIRealm

I have successfully installed mod_auth_ldap with Apache. Here's the configuration: LDAP_Protocol_Version 2 LDAP_Server LDAP_Port Base_DN "ou=People,o=,c=DE" UID_Attr_Alt uid require valid-user Bind_DN "cn=appadmin,o=,c=DE" Bind_Pass I want to use this in Tomcat. I tested a lot of configurat

Intermittent failures using DataSources

Hi all, Please excuse any going over of old ground with this question, I have searched every archive I can find. I have recently started using DataSources from JSPs using the JSTL taglib (I think this is a Tomcat rather than taglib question). I've got a for my apps and initially had my bunch

Re: HttpSessionListener in Tomcat 4.1.27 (or HttpSessionListener in general)

Lukas, Check the difference in the javadoc for HttpSessionListener between servlet specs 2.3 (J2EE 1.3) and 2.4 (J2EE 1.4). In 2.4 containers the session should (as I read it) still be valid in sessionDestroyed(...). Jon J2EE 1.3: http://java.sun.com/j2ee/sdk_1.3/techdocs/api/index.html J2EE 1

Re: Tomcat Dies

I had not thought of that, but that should work well. I'll try it out and see. Right now I'm evaluating whether my test is actually a reasonable real-world test. The reason our testers did not find this earlier, is that their tests are a little more realistic to typical web site use. My test wa

RE: Tomcat 4.1.24 Standalone max requests serviced java exception

Howdy, Thank you for posting the followup -- it's important when people actually report results. Expect JDK 1.5 (this is not a tomcat-specific issue) to run better on Hyperthreaded machines. Yoav Shapira Millennium ChemInformatics >-Original Message- >From: Kilic, Hakan [mailto:[EMAIL

RE: Tomcat 4.1.24 Standalone max requests serviced java exception

Hi all, After realizing that the application bug wasn't a bug or my main culprit, I did some checking on my machine setup. I found that Hyperthreading actually decreased the total load Tomcat could handle. Once I turned HT off, I was able to significantly increase the amount of load the server cou

RE: org.apache.catalina.valves.RemoteHostValve

Howdy, By specifying just the subnet. It's a regular expression match. Since you had *.my.host.uk I took my.host.uk. Anything with 'my.host.uk' will be denied. Yoav Shapira Millennium ChemInformatics >-Original Message- >From: Drinkwater, GJ (Glen) [mailto:[EMAIL PROTECTED] >Sent: We

RE: org.apache.catalina.valves.RemoteHostValve

Hi If i specify a host, then i only deny one machine. How do you deny all hosts on a sub net? Glen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: Security Hole - server.xml

No prob, good luck. -Original Message- From: Curley, Thomas [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 1:21 PM To: Tomcat Users List Subject: RE: Security Hole - server.xml thanks for your time Justin - I will look into this - T -Original Message- From: Hart, J

Re: Problem creating Tyrex resources in GlobalNamingResources

Hello, In answer to my own question... it would seem that whenever a tyrex.resource.Resource is requested from JNDI in Tomcat, the TyrexFactory that deals with these requests will only ever create/iniatilise one TransactionDomain... thereby making all tyrex.resource.Resources declared in a el

RE: org.apache.catalina.valves.RemoteHostValve

Howdy, The allow and deny attributes of RemoteHostValve are regular expressions. Try deny="my.host.uk" for example. As for using the valve for a Context of a Server: it applies wherever you put it in server.xml, so if you put it inside a specific the valve will apply only to that context. Yoav

RE: HttpSessionListener in Tomcat 4.1.27 (or HttpSessionListener in general)

Howdy, By the time sessionDestroyed is call, the session has been invalidated. That doesn't mean you can't get information about it: only certain information ;) HttpSession#getAttribute is clearly documented to throw an IllegalStateException if called on an invalidated session. If you're interes

RE: Security Hole - server.xml

thanks for your time Justin - I will look into this - T -Original Message- From: Hart, Justin [mailto:[EMAIL PROTECTED] Sent: 26 November 2003 18:17 To: Tomcat Users List Subject: RE: Security Hole - server.xml Well, right, but if you were to inherit from the realm that you wanted to use

RE: Security Hole - server.xml

Well, right, but if you were to inherit from the realm that you wanted to use, you can manipulate the password field in any way that you wish. Unix password shadows are plantext, as are MD5 hashes. All you do now is run MD5 over the password field in the authenticate method, and viola, you have

org.apache.catalina.valves.RemoteHostValve

Hi I am trying to only allow localhost to access my tomcat server. I have tried to put in my context but it keeps on throwing an exception Catalina.start: java.lang.IllegalArgumentException: Syntax error in request filter pattern *.my.host.uk Can wild cards be used in this context? Does a

RE: Security Hole - server.xml

Note - in reply to Justin - I don't have a multi-tier login So to sumarise I guess the ansswer to this is that Tomcat currently does not support encrypted datasource user/passwd or does not allow the option to enter user/passwd at startup The most one can do is to apply strict unix permissions

Re: JK2 in server.xml with 4.1.29

I'm using Red Hat Linux 9, and my experience has been the opposite. When I used CoyoteConnector I got errors like this in catalina.out: java.net.SocketException: Broken pipe Also, I got this: INFO: Jk running ID=0 time=2/85 config=/usr/local/jakarta-tomcat/conf/jk2.properties Why the heck am I

HttpSessionListener in Tomcat 4.1.27 (or HttpSessionListener in general)

All, When I attempt to access the HttpSession object within the sessionDestroyed(), I get the following error. DEBUG [StandardManager[]] (SessionListener.java:40) - sessionDestroyed() StandardManager[] Session event listener threw exception java.lang.IllegalStateException: getAttribute: Session a

Re: Datasource problem upgrading from 4.06

Much thanks, I can figure it out from here. http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jndi-datasource-examples-how to.html Actual link above. Jim Kennedy IT Consultant Mobile Phone: 813-503-1484 - - Original Message - From: "Sha

RE: Tomcat 4.1.29 and Remedy 5.1.2 MidTier

Yeah, that is mostly correct. There are also places where the spec is vague or doesn't specify behavior, and different application servers implement things differently. There are not a whole lot of spec or operation changes from the 4.0.x series that would completely break you. Offhand I can thi

RE: Datasource problem upgrading from 4.06

Howdy, http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jndi-datasource-examples -howto.html Yoav Shapira Millennium ChemInformatics >-Original Message- >From: Jim Kennedy [mailto:[EMAIL PROTECTED] >Sent: Wednesday, November 26, 2003 12:47 PM >To: Tomcat Users List >Subject: Re: Datasour

Re: Datasource problem upgrading from 4.06

How do I define host and database name with this version? Need a good example to look at. Thanks Jim Kennedy IT Consultant Mobile Phone: 813-503-1484 - - Original Message - From: "Shapira, Yoav" <[EMAIL PROTECTED]> To: "Tomcat Users L

RE: Datasource problem upgrading from 4.06

Howdy, You need a ResourceParam for the DB URL. It looks like your driver name me be the URL? Yoav Shapira Millennium ChemInformatics >-Original Message- >From: Jim Kennedy [mailto:[EMAIL PROTECTED] >Sent: Wednesday, November 26, 2003 12:30 PM >To: Tomcat Users List >Subject: Datasourc

Re: JK2 in server.xml with 4.1.29

Really? With all due respect, I have to totally disagree. You can use the Coyote Connector with mod_jk, and really should do so. The Ajp13Connector has had an exception at startup time and problems shutting down since about 4.1.18. It is an easy fix - I submitted a patch for it, only a simple c

Datasource problem upgrading from 4.06

Below is a little bit of the trace I'm seeing. org.apache.commons.dbcp.SQLNestedException: Cannot create JDBC driver of class 'com. microsoft.jdbc.sqlserver.SQLServerDriver' for connect URL 'null', cause: java.lang.NullPointerException at java.lang.String.regionMatches(String.java:967)

Taglib problem with more information ...

Hi, I have two taglibs. 1. myTag1 2. myTag2 Both taglibs essentially do the following: I have a one.jsp on which i am using a taglib called Inside the taghandler class i do the following: try { pageContext.i

RE: JDBCRealm problem

one more thing, you might have notice by my first email, I am initializing the database connection within the web.xml. I am not sure that has to do with the problem. The initialization in web.xml is for internal bean usage. thanks, James -Original Message- From: Ostad, James Sent: Wednes

RE: Security Hole - server.xml

I consider things like this. By encrypting the password I'm protecting against casual learning of the password. I'm not really referring to hackers, but administrators of the system. There's a big difference between a hacker and an administrator. What if I need the administrator to add a new ent

JDBCRealm problem

Hi everyone, Hope everyone will have a great TG Day. Problem: I am not able to login successfully. It keeps failing. Structure: using JDBCRealm + form authentication database property: match exactly as explained in tomcat documentation for setting up JDBCRealm I am including three things: 1-se

Re: Catalina.stop: java.net.ConnectException Help - Thanks!

Good question. I am not doubt it, because I dont have IIS and it was doing this when it was on thed default port 8080. how would I determine and possibily disable that? thanks! --- Ben Souther <[EMAIL PROTECTED]> wrote: > Is something else already bound to port 80 on that machine? > IE.. IIS? >

Re: JK2 in server.xml with 4.1.29

If you are going to use the mod_jk connector, I would stick with the old AJP connector. If you are going to use the mod)jk2 connector, use the newer Coyote connector. On Wed, 2003-11-26 at 08:44, Antony Paul wrote: > Hi, > I am trying configure Tomcat 4.1.27 + IIS on win2k. In server.xml there

building mod_jk - exportable?

Im wanting to integrate tomcat and Apache on a 'public' server. In the directions for building mod_jk it states that you need to modify the build.properties files to point to your apache and tomcat installations and the use 'ant' to build the code. For obvious reasons I don't have ant or any compil

Difficulty with SSL authentication without client certificate

Hello there. I've tried to configure a security realm for pages; that if a user certificate is present it will be used, but if it doesn't exist the application will resolve the situation with the user authentication level already known. After wrestling with the web.xml parameters and defining a

RE: Problem getting Tomcat 4.1.29 on board

Hi, The admin and manager webapps requires users with specific roles to be define. Add to $CATALINA_HOME/conf/tomcat-users.xml. Yoav Shapira Millennium ChemInformatics >-Original Message- >From: P. Chewning Toulmin [mailto:[EMAIL PROTECTED] >Sent: Wednesday, November 26, 2003 11:07 AM

RE: Security Hole - server.xml

> From: Curley, Thomas [mailto:[EMAIL PROTECTED] > I'd feel more secure with an MD5 or SHA1 encrypted user and > password that relying on unix file level security - what > happens if a hacker gets root priv's ? Er ... Without wishing to flame, but if they've got root priv's they can do what the

including a .jsp from within a taglib.

Hi, I have a one.jsp on which i am using a taglib called Inside the taghandler class i do the following: try { pageContext.include(path); } catch(ServletExcepti

OT: Using authenticated URLs

Hi all, I am trying to implement a downloading web service that will act as an internet front-end for an intranet server. I want my service to return a file as an attachment. For this, I have a method like this (simplified code): public DataHandler download(String path) throws AxisFault { St

RE: mail.jar and activation.jar in Tomcat 4.1.29

I have made handlers for multipart/related, etc. for use in a web based mailclient. This gives a lot of trouble with ClassLoaders. Removing mail.jar and activation.jar from common/lib solves the problem. And I'm 100% sure, that I've never had to do that before 4.1.29. Greetings, Ronald. On

concerning availability and performance of e-commerce applications

Hello! I am a Ph.D. student at Universidade Federal de Campina Grande. I am currently trying to better understand why and when n-tier applications fail, and how administrators keep e-commerce applications up and running. We intend to make this task easier than it is up to now. In order to come up w

Problem getting Tomcat 4.1.29 on board

Hi everyone, I've been having some strange problems in getting Tomcat 4.1.29 going. I've installed the software according to instructions--basically unzip it into a directory. I got Tomcat server up and running without problem and can even run the examples. But I can't seem to log into the

Re: Security Hole - server.xml

The link below is for users logging-in (FORM or BASIC). Not for database connections. -Tim [EMAIL PROTECTED] wrote: A direct question arising from a security review :- Using a datasource it is possible to remove the 'username', 'password' or at least encrypt them using someting like MD5 The

RE: Tomcat 4 - IIS 5 on Win 2K: Unable to connect IIS to tomcat on AJP13 connector

You will find more infos here. http://www.onjava.com/pub/a/onjava/2002/12/18/tomcat.html Remember to restart iis and tomcat after modify properties files (workers.properties; uriworkermap.properties) Stéphane Brogi -Message d'origine- De : Walter do Valle [mailto:[EMAIL PROTECTED] Envo

Re: Security Hole - server.xml

> A direct question arising from a security review :- > > Using a datasource it is possible to remove the 'username', > 'password' or at least encrypt them using someting like MD5 The Password can be digested. See http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html#Digested%20Pa

A lot of Warnings building JK2 on Aix

Hi! I'm compiling mod_jk2 on Aix 4.3.3. I follow this process: I use: gcc.3.2.1, libtool 1.4.2,autoconf 2.53,automake 1.5, make 3.79 #cd jakarta-tomcat-connectors-4.1.29-src/jk/native2 #./buildconf.sh #CC=gcc ./configure --with-java-home=/usr/java131 --with-apxs2=/usr/local/apache2/bi n/apxs --wi

RE: mail.jar and activation.jar in Tomcat 4.1.29

Howdy, Tomcat can provide mail sessions to you via JNDI as illustrated here: http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jndi-resources-howto.htm l. mail.jar and activation.jar are not new nor moved in 4.1.29, they were in common/lib before. FYI, I also use mail 1.3.1 by putting it in WEB-IN

Connection not timing out

When the client issues a request on Explorer to the tomcat servlet and the request takes longer than the connectionTimeout, the client hangs. I am no longer able to make any html requests to my tomcat appliction or the tomcat manager/html application and must restart tomcat. I am running ja

mail.jar and activation.jar in Tomcat 4.1.29

Hello, Why is mail.jar and activation.jar added in Tomcat 4.1.29 in common/lib? My webapp uses it's own mail.jar (1.3.1 in stead of 1.2) and activation.jar and everything doesn't work anymore. I think this is a major 'API' change for a minor release. For what are these api's used by Tomcat?

RE: Webapp obfuscation

Howdy, >1) Precompile all jsps >2) Don't provide the jsps since they are precompiled (see 1) >3) Compile all code with debugging off so line numbers don't appear in >compiled objects >4) Compile with optimizations (from javac: "Optimize; may hinder debugging >or >enlarge class file") All good ad

RE: Removing Examples context in Tomcat 4.1

This may be what I have to do - just leave a broken examples there. As to other comments received, I already tried them before even emailing the group. I actually doubt it's really an error in the web.xml documents. The default one is the default one that comes with tomcat. The application speci

RE: Security Hole - server.xml

You're not reusing the passwords anywhere else in the system (IE, you don't have a multi-tier login, do you?) If you do, you can quite feasibly shadow the passwords. I don't know if such an implementation exists in tomcat, but I would assume that someone, somewhere, has written a realm impleme

Tomcat and Firewall

Hello list, i'm a tomcat newbie looking for information about tomcat and firewalls. what i want to do is to connect apache2(mod_ssl) and tomcat with mod_jk2 , where tomcat is within a firewall. which ports do i need to open for apache to connect to tomcat? the ServerPort and all ConnectorPort in

Re: Security Hole - server.xml

If a hacker gets root privileges, the username and password for tomcat are the least of your concerns. On Wednesday 26 November 2003 08:53 am, Curley, Thomas wrote: > I'd feel more secure with an MD5 or SHA1 encrypted user and password that > relying on unix file level security - what happens

RE: Importing WAR File in Tomacat

Howdy, Tomcat has administration and manager webapps: RTFM on how to use them. To deploy a war file, again RTFM. By default you can just drop it into $CATALINA_HOME/webapps. Yoav Shapira Millennium ChemInformatics >-Original Message- >From: dakavara [mailto:[EMAIL PROTECTED] >Sent: We

Re: Security Hole - server.xml

To connect to a database, you need the *real* userid password. (IIRC) SHA1 and MD5 are both one way hashes so you can't use it to for database connectivity. The only feasible alternative (which isn't present in tomcat) is too force a password to be entered by keyboard on tomcat startup to allow

RE: Tomcat 4.1.29 deployment stops with 'java.lang.exception FIXME'

Howdy, You're asking the wrong list: this is an axis issue. Yoav Shapira Millennium ChemInformatics >-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >Sent: Wednesday, November 26, 2003 5:50 AM >To: [EMAIL PROTECTED] >Subject: Tomcat 4.1.29 deployment stops with 'ja

RE: Security Hole - server.xml

I'd feel more secure with an MD5 or SHA1 encrypted user and password that relying on unix file level security - what happens if a hacker gets root priv's ? thanks Thomas -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: 26 November 2003 13:51 To: Tomcat Users List Subjec

RE: nsapi_redirect.dll

You mean asapi_redirect.dll? I don't know what net.commerce 3 is, but you'd use asapi_redirect.dll to connect to IIS (and I would assume any web server that uses asapi). Justin -Original Message- From: Wilson Chang [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 11:03 PM To:

Re: Security Hole - server.xml

The username and password still need decrypted at some time. It just makes the attacker jump through 1 hoop. Using file permissions on the config file as well and server security are the ways to go. -Tim Curley, Thomas wrote: Hi all, A direct question arising from a security review :- Usin

Security Hole - server.xml

Hi all, A direct question arising from a security review :- Using a datasource it is possible to remove the 'username', 'password' or at least encrypt them using someting like MD5 thanks in advance for your info Thomas **

JK2 in server.xml with 4.1.29

Hi, I am trying configure Tomcat 4.1.27 + IIS on win2k. In server.xml there are two entries namely and which one is to uncommented. rgds Antony Paul. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-ma

Re: Disable Directory Listing

You need to restart tomcat for the property to take effect. Yuval Zantkeren wrote: I wrote false in the listing but it still giving the listing, any idea? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e

Re: Webapp obfuscation

1) Precompile all jsps 2) Don't provide the jsps since they are precompiled (see 1) 3) Compile all code with debugging off so line numbers don't appear in compiled objects 4) Compile with optimizations (from javac: "Optimize; may hinder debugging or enlarge class file") Other than that - any cus

Re: Catalina.stop: java.net.ConnectException Help - Thanks!

Is something else already bound to port 80 on that machine? IE.. IIS? On Wednesday 26 November 2003 12:41 am, SL wrote: > Hi everyone, > > I am Tomcat newbie, so please pardon the dumb question. > > I am using Windows 2000, jdk 1.4.1, tomcat 4.1. > > Here is what I have done so far: > > installe

RE: Disable Directory Listing

I wrote false in the listing but it still giving the listing, any idea? Regards, Yuval Zantkeren Domain The Net Technologies Ltd. 81 Sokolov St. Ramat-Hasharon Israel 47238 Tel: 972-3-7600500 Fax: 972-3-7600505 www.DomainTheNet.com "This email message and any attachments hereto are intended onl

Webapp obfuscation

Hi, Can anyone recommend a good product (preferably cheap, although all considered) to protect my JSP/Servlet/Bean application from being reverse engineered? It's an intranet application to be installed in many customer sites & we would prefer to protect our IP as much as possible. Thanks, Steve

Re: Disable Directory Listing

Only $CATALINA_HOME/conf/web.xml needs changed. (Make sure browser cache is cleared) -Tim Yuval Zantkeren wrote: Its not working do i need to change it in each web.xml under each directory or just in the conf/web.xml? Regards, Yuval Zantkeren "This email message and any attachments hereto are

RE: Disable Directory Listing

Its not working do i need to change it in each web.xml under each directory or just in the conf/web.xml? Regards, Yuval Zantkeren "This email message and any attachments hereto are intended only for use by the addressee(s) named above, and may contain legally privileged and/or confidential infor

nsapi_redirect.dll

To whom it may conern, I am a tomcat, net.commerce 3 user, I would like to use tomcat to integrate with Net.Commerce, I found some of the document about how to do it. However, it needs nsapi_redirect.dll, but I can't find where to d/l it. anyone can help to let me d/l it ? many thanks, Wilson -

Re: Disable Directory Listing

http://jakarta.apache.org/tomcat/faq/misc.html#listing Yuval Zantkeren wrote: HI, How do I disable that in the Tomcat 4.1.27 that if someone write only the directory like 127.0.0.1/servlet with no file name after and he gets Directory Listing of all the directory.

Disable Directory Listing

HI, How do I disable that in the Tomcat 4.1.27 that if someone write only the directory like 127.0.0.1/servlet with no file name after and he gets Directory Listing of all the directory. Regards, Yuval Zantkeren “This email message and any attachments hereto are intended only for use by the

Vedr.: Re: TOMCAT 3.3 crash daily

Hi Sarel, regarding the jvm settings you might want to look at http://web.bvu.edu/staff/david/index.jsp?section=software&subsection=tcservcfg&page=overview from http://jakarta.apache.org/tomcat/faq/windows.html. I havent tried the utility myself but has modified the parameters in the Windows re

Re: Access to Session ID from Realm

In tomcat 4 - no. In tomcat 5 - maybe. (It has methods which can access take an HttpRequest as an arguement) -Tim Hart, Justin wrote: Is there a way to get at the Session ID from RealmBase? Justin - To unsubscribe, e-mail: [

JK2 help!!!

Hi, I need to use tomcat for few websites with each one of them use the tomcat but each one of them have different IP address (on the same computer) the question is what I need to write in the worker.properties under the: # Example socket channel, override port and host. [channel.socket:localhost:

Re: TOMCAT 3.3 crash daily

Sarel Bester wrote: Hi all I have an app running on the following config: - Windows 2000 Advanced server (Dual PIII 1GHz CPU with 4GB RAM) - IIS 5 - Tomcat 3.3 (NOT 3.3.x) - ISAPI redirector 1.2 (size = 128K) - JDK 1.3.1_09 - Oracle 8.1.7 Tomcat is locking up almost everyday. Log files show a lo

  1   2   >