javax.servlet.request.cipher_suite and javax.servlet.request.key_size attributes not being set on HTTPS connection?

2002-09-19 Thread Jonathan Eric Miller
It used to be the case that javax.servlet.request.cipher_suite and javax.servlet.request.key_size attributes would be set by Tomcat to something similar to the following for HTTPS connections. I just noticed that this no longer seems to be the case? javax.servlet.request.cipher_suite: SSL_RSA_WIT

Re: JNDIRealm and 4.1.10 with iPlanet

2002-09-23 Thread Jonathan Eric Miller
Did you protect the resource that you're trying to access with a security-constraint in your web.xml? Jon - Original Message - From: "Douglas L Stewart" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, September 23, 2002 11:31 AM Subject: JNDIRealm and 4.1.10 with iPlanet > I'

Possible to disable session persistence?

2002-10-10 Thread Jonathan Eric Miller
Does anyone know if it is possible to turn off session persistence? I don't have an immediate need to do so, but, I was thinking that it might be a nice option to have while testing an application if you want to make sure all the state is getting cleared out. You could do that by just opening a ne

Re: Authentification LDAP multiple entries

2002-10-14 Thread Jonathan Eric Miller
Don't use cn, use uid. Jon - Original Message - From: "hans albers" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 14, 2002 4:09 AM Subject: Authentification LDAP multiple entries > Authentification with JNDI-Realm works fine, > but what to do if there are multiple e

Re: Anyone running 4.1.12 with SDK 1.4.1 on Solaris 7?

2002-10-28 Thread Jonathan Eric Miller
Did you set your CATALINA_HOME environment variable to point to the directory you have Tomcat installed in? Jon - Original Message - From: "Shapira, Yoav" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Monday, October 28, 2002 11:12 AM Subject: RE: Anyone running 4.

GlobalNamingResources element required in Tomcat 4.1.2?

2002-06-04 Thread Jonathan Eric Miller
I noticed that you will receive the following error if you do not have a GlobalNamingResources element in your server.xml file for Tomcat 4.1.2. IMHO, this tag shouldn't be required because sometimes you might not having anything to put in that section. i.e. I want to use JNDIRealm, not the UserDa

Tomcat 4.0 nightly build binary downloads broken?

2002-06-07 Thread Jonathan Eric Miller
I found that it looks like the nightly binary builds are broken. As you can see, for some reason the many of the file sizes are only 45 bytes. Also, the .zip file builds are missing. http://jakarta.apache.org/builds/jakarta-tomcat-4.0/nightly/ of /builds/jakarta-tomcat-4.0/nightly Name

Re: Roles in JNDIRealms

2002-06-10 Thread Jonathan Eric Miller
If you are using Tomcat 4.1.3, there are two modes that you can use for checking roles. If you set roleSearch, it will look for search for group objects that contain a list of users for each group. If you set userRoleName, it will get the group information out of the user's entry instead. i.e. you

Re: Re[2]: Roles in JNDIRealms

2002-06-10 Thread Jonathan Eric Miller
t; > > > Monday, June 10, 2002, 3:18:15 PM, you wrote: > > > > R> Jonathan, > > R> This is sort of off subject, but does your Active > > R> Directory setup work for Authentication?? It > > seems to > > R> me that it wouldn't since there is

Re: AW: SSL Certificates from a CA...

2002-06-11 Thread Jonathan Eric Miller
Here's a link to the Tomcat SSL How To document. http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html This is a link to the keytool documentation in the JDK. http://java.sun.com/j2se/1.4/docs/tooldocs/tools.html Note, it's also now possible to use a PKCS12 keystore. This would be use

Re: JDBC BASIC authentication and SSL

2002-06-11 Thread Jonathan Eric Miller
When you say that you configured SSL to work, do you mean you enabled HTTPS? You may also want to enable SSL for the JDBC connection assuming the database server is on a different host. The problem there is that many databases don't support SSL. It depends on which DBMS your using. If you want the

Re: Re[3]: Roles in JNDIRealms

2002-06-11 Thread Jonathan Eric Miller
ssociated to. > Which objectclass must be these group entries? > groupOfUniqueNames objectclass? group class? Are both > valid? > > > Thanks, > > Cristina > > > --- Jonathan Eric Miller <[EMAIL PROTECTED]> > wrote: > > Jacob, > > > > I&#

Re: LDAP Authentication with Tomcat 4.1.3

2002-06-12 Thread Jonathan Eric Miller
Have a look at these links. There is some new functionality in Tomcat 4.1 that isn't mentioned in the main end-user document yet that is in the second link. Namely, how to get it to bind as a user to do the authentication rather than querying for a password and comparing it. http://jakarta.apache

Re: Question regarding Active Directory/LDAP

2002-06-12 Thread Jonathan Eric Miller
If you want to see what the structure of AD is, run LDIFDE. LDIFDE comes with Windows 2000 Server and will dump the contents of AD to a LDIF file. Jon - Original Message - From: "Chris Shen" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Thursday, June 06, 2002 4:3

Re: JNDIRealm authentication

2002-06-12 Thread Jonathan Eric Miller
Josh, You also need to put something similar to the following in your web.xml file. i.e. the stuff you put in server.xml, just tells Tomcat where to authenticate. The stuff in web.xml, tells Tomcat what resources are protected and what roles are required in order to access a particular resource.

Re: JNDIRealm authentication

2002-06-12 Thread Jonathan Eric Miller
e introduced if you're using Apache HTTP Server on the front end. Jon - Original Message ----- From: "Jonathan Eric Miller" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Wednesday, June 12, 2002 2:20 PM Subject: Re: JNDIRealm authent

Re: JNDIRealm authentication

2002-06-12 Thread Jonathan Eric Miller
The value that you have connectionName set to looks invalid. It looks like you have it set to the name of a container rather than to the dn of the admin account that is used to bind to the directory for querying for user passwords and role information. Jon - Original Message - From: "Jos

Re: Tomcat 4.0.3 on Solaris

2002-06-15 Thread Jonathan Eric Miller
If I remember correctly, JAXP is optional if you are using JDK 1.4. I remember having the same problem, but, then I realized that it was optional. I was able to get Tomcat to build without it. Jon - Original Message - From: "Heap, John" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: F

Re: mod_webapp and Virtual Hosts

2002-07-09 Thread Jonathan Eric Miller
FYI, something is screwed up with your email application. You have no To field in the headers. Jon - Original Message - From: <[EMAIL PROTECTED]> Sent: Tuesday, July 09, 2002 11:29 AM Subject: mod_webapp and Virtual Hosts > Following the installation instructions, I have successfully c

Re: Starting Tomcat without new DOS Window

2001-05-29 Thread Jonathan Eric Miller
I don't know about the service related part of your question, but, I found out how to start it without opening a new Command Prompt window. In startup.bat, you should see a line like the following. call "%TOMCAT_HOME%\bin\tomcat" start %1 %2 %3 %4 %5 %6 %7 %8 %9 If you change the text "start" t

Re: The pitfalls in restarting tomcat

2001-09-12 Thread Jonathan Eric Miller
I agree that there should be a restart.sh. However, it is possible to restart/reload a servlet without having to stop and start Tomcat, in version 4 that is, which is due for release any day now. I think you can do it in Tomcat 3 as well. In 4, you can mark a Context as reloadable. Then, it will

Re: JDBC Realms 3.3 or maybe 4.0

2001-09-13 Thread Jonathan Eric Miller
You might want to have a look at JNDIRealm in Tomcat 4. If you're also running a LDAP or NIS server, you might be able to tie into that. For example, I'm pretty sure iPlanet Directory Server has account expirations. It depends on what you already have to some extent. I figured that I would mention

Re: tomcat-users.xml reload.

2001-09-13 Thread Jonathan Eric Miller
IMHO, a "reload" method in MemoryRealm would be very useful though. IMHO, using JDBC or JNDI in some cases is overkill. For example, if you otherwise had no need for a SQL server or directory server. Jon - Original Message - From: "Craig R. McClanahan" <[EMAIL PROTECTED]> To: <[EMAIL PRO

Re: Using Windows Native Security

2001-09-13 Thread Jonathan Eric Miller
In the future when "username login mode" authentication is supported in JNDIRealm, you could probably get it to authenticate against ActiveDirectory that way. It wouldn't actually be using NTLM though. Also, I was thinking that it might be cool to have a KerberosRealm class that you could use to a

Re: The pitfalls in restarting tomcat

2001-09-13 Thread Jonathan Eric Miller
s in restarting tomcat > > > On Wed, 12 Sep 2001, Jonathan Eric Miller wrote: > > > Date: Wed, 12 Sep 2001 23:57:07 -0500 > > From: Jonathan Eric Miller <[EMAIL PROTECTED]> > > Reply-To: [EMAIL PROTECTED] > > To: [EMAIL PROTECTED] > > Subject: Re: Th

Re: To all people who are mailing me.

2001-09-13 Thread Jonathan Eric Miller
Yeah, I noticed that this morning. I was going to complain, but, I figured, I'd be nice. ;-) Jon - Original Message - From: "Paul Downs" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 13, 2001 10:54 AM Subject: Re: To all people who are mailing me. > Hi, > > > an

Re: The pitfalls in restarting tomcat

2001-09-13 Thread Jonathan Eric Miller
- Original Message - From: "Craig R. McClanahan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 13, 2001 7:40 PM Subject: Re: The pitfalls in restarting tomcat > > > On Thu, 13 Sep 2001, Jonathan Eric Miller wrote: > > &g

Re: The pitfalls in restarting tomcat

2001-09-13 Thread Jonathan Eric Miller
- Original Message - From: "Craig R. McClanahan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 13, 2001 9:08 PM Subject: Re: The pitfalls in restarting tomcat > On Thu, 13 Sep 2001, Jonathan Eric Miller wrote: > > > Date: Thu, 1

Re: System.err.println

2001-09-14 Thread Jonathan Eric Miller
I think at least for Tomcat 4, it depends on what platform you are running on. I noticed that on UNIX it gets redirected to catalina.out, but, on Windows it just gets displayed to the screen. Jon - Original Message - From: "Abhijat Thakur" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent

Re: TOMCAT RC1 SERVLET RELOADING NOT WORKING ON AIX

2001-09-14 Thread Jonathan Eric Miller
Yeah, next time make the entire message in caps. ;-) Jon - Original Message - From: "De Ridder, Bavo" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 14, 2001 6:15 AM Subject: RE: TOMCAT RC1 SERVLET RELOADING NOT WORKING ON AIX > Could you shout a little harder next

Re: Spaces in TOMCAT_HOME

2001-09-14 Thread Jonathan Eric Miller
If you are running Windows 2000/NT, you need to include the /X parameter as in, DIR /X I'm pretty sure that as long as you put the path in quotes ("), you don't need to use the 8.3 names though. Jon - Original Message - From: "David Smith" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Se

Re: Catalina RC2 BASIC still *NOT* working

2001-09-14 Thread Jonathan Eric Miller
If you're talking about the nullPointerException that was occurring in MemoryRealm in RC1, that is gone as far as I can tell. I have it working fine here. Jon - Original Message - From: "Raimee Stevens" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 14, 2001 10:39 AM

Re: JDBC Realms

2001-09-14 Thread Jonathan Eric Miller
JDBCRealm lets you store user accounts, passwords, and roles in a SQL database. Then, you can protect things like servlets so that they require a user to authenticate using a user name and password before they are granted access to the servlet/resource. By default, Tomcat uses MemoryRealm which d

Re: Tomcat - Running as non root and thread limiting.

2001-09-14 Thread Jonathan Eric Miller
How do you get it to listen on port 80? I thought you needed to be root to listen on ports less than 1024? I saw something in the release notes about a JavaService or something, but, I haven't been able to locate much else on it (running Tomcat as a non-root user). Jon - Original Message ---

Possible to run Tomcat 4 as non-root user?

2001-09-14 Thread Jonathan Eric Miller
RELEASE-NOTES-4.0-B7.txt in Tomcat 4 mentions the following. - Catalina New Features: - Connectors - Refactored the startup code so that Catalina can run on port 80 (without being root) when started by JavaService or equivalent service managers. I'm wonde

Possible to import SSL private/public key pair from Apache into Tomcat?

2001-09-14 Thread Jonathan Eric Miller
This question is kind of about Tomcat, but, also to some extent about keytool and SSL in general. I've been running Apache Web Server 1.3.x as a Web server with JRun as a Java Servlet engine in our production environment. I have SSL enabled on the Apache Web Server and I have the certificate sign

Is the Jakarta Web site running Tomcat?

2001-09-14 Thread Jonathan Eric Miller
Anyone know if the Jakarta Web site is running Tomcat? I know that it's mostly static content, but, I think that would be cool if it was. Jon

Re: Possible to import SSL private/public key pair from Apache into Tomcat?

2001-09-17 Thread Jonathan Eric Miller
> Ricardo Borillo Domenech > Programació - Servei d'Informàtica > Universitat Jaume I > - Original Message - > From: "Jonathan Eric Miller" <[EMAIL PROTECTED]> > To: "Tomcat User List" <[EMAIL PROTECTED]> > Sent

Re: Thanks for the note on JNI and class loading in the release notes

2001-09-17 Thread Jonathan Eric Miller
re than once. If the above code were placed in a class inside > the web application (i.e. under /WEB-INF/classes or /WEB-INF/lib), and the > application were reloaded, the loadLibrary() call would be attempted a > second > time. > > To avoid this problem, place classes that load nativ

Link to JSR-000053 JavaTM Servlet 2.3 and JavaServer PagesTM 1.2 Specifications broken?

2001-09-18 Thread Jonathan Eric Miller
This isn't really Tomcat specific, but, I'm guessing that some of the Tomcat developers might be able to fix it if it's broken. I tried downloading the final Servlet spec at the following link which I found off of java.sun.com. http://www.jcp.org/aboutJava/communityprocess/final/jsr053/ But, whe

Re: JNDI Realms and Win2000 Active Directory

2001-09-18 Thread Jonathan Eric Miller
I'm pretty sure that it currently doesn't work, but, likely will in the hopefully near future. There are two different modes of authentication. One queries for the user password and then compares it (on the Tomcat side of things). This is the mode that is currently supported. The other mode attemp

Re: TC 4.0 Final breaks my ldap

2001-09-18 Thread Jonathan Eric Miller
Yup, I'm having the same problem. Looking into how to solve it... Jon - Original Message - From: "Holscher, David M" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 18, 2001 7:55 AM Subject: TC 4.0 Final breaks my ldap > > For some reason TC 4.0 Final includes more

Re: TC 4.0 Final breaks my ldap

2001-09-18 Thread Jonathan Eric Miller
From: "Jonathan Eric Miller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 18, 2001 11:48 AM Subject: Re: TC 4.0 Final breaks my ldap > Yup, I'm having the same problem. Looking into how to solve it... > > Jon > > - Original Me

Re: nonroot standalone tomcat 4? how?

2001-09-18 Thread Jonathan Eric Miller
This is the response that I received a few days ago. I haven't had a chance to test it yet though. I'm running it chrooted, so, I don't think that I need to run it as non-root. Jon "Jonathan Eric Miller" <[EMAIL PROTECTED]> wrote: > RELEASE-NOTES-4.0-B7.txt

Re: [ANNOUNCEMENT] Apache Tomcat 4.0 Final Release

2001-09-18 Thread Jonathan Eric Miller
I second that. You guys are doing a great job. Keep it up. I particularly like the fact that the developers appear to pay a lot of attention to these lists. I've gotten answers to questions many times late at night and I just wanted to say that I very much appreciate it. Jon - Original Messa

Re: Tomcat 4.0

2001-09-18 Thread Jonathan Eric Miller
I haven't tried it with a Verisign cert yet, but, I've been able to import certs signed by my test CA no problem. Have a look at the tools documentation that comes with the JDK for the keytool command. After you have the tomcat key in there, you do a -certreq, give that certificate request to Veri

Re: Tomcat 4.0

2001-09-19 Thread Jonathan Eric Miller
public key certificate in tomcat to > perform client authentication ?? > > Thanks, > > Ricardo Borillo Domenech > Programació - Servei d'Informàtica > Universitat Jaume I > - Original Message - > From: "Jonathan Eric Miller" <

Re: Using JNI from a servlet (solution)

2001-09-19 Thread Jonathan Eric Miller
There's another problem to look out for as well with regard to servlet reloading and where you place your .jar files that use JNI. See the latest release notes regarding that. Jon - Original Message - From: "Les Parkin" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, Septemb

Re: Question on conf

2001-09-19 Thread Jonathan Eric Miller
I noticed the following in the default server.xml. Maybe you need to set a blank context path for that? i.e. "" not "/"? Jon - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 19, 2001 10:30 AM Subject: RE: Question on c

Re: Getting a Verisign certificate

2001-09-19 Thread Jonathan Eric Miller
Also, checkout the documentation on the keytool command in the Tools section in Sun's JDK documentation. Jon - Original Message - From: "pero" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 19, 2001 1:16 PM Subject: RE: Getting a Verisign certificate > first gen

Re: Logout with basic autorization

2001-09-19 Thread Jonathan Eric Miller
The only way to logout with basic authentication is to close the Web browser. Otherwise, you may want to do form-based authentication. Jon - Original Message - From: "Oleksandr Fedorenko" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 19, 2001 8:43 AM Subject: Re:

Tomcat security questions

2001-09-19 Thread Jonathan Eric Miller
I'm wondering if anyone has any suggestions on how to best setup Tomcat for maximum security? Currently, I'm running Tomcat in a chrooted environment. I see that there is also a way to run Tomcat as a non-root user. I'm wondering what the best configuration is. It seems like running it chrooted

Re: Tomcat port configuration

2001-09-19 Thread Jonathan Eric Miller
It's been awhile since I've looked at Tomcat 3.x, but, if it's like 4.0, it's just a setting in conf/server.xml. Do a search in that file for 8443. Basically, just changes all the values of 8443 in that file to 443. Jon - Original Message - From: "Peter L. Markowsky" <[EMAIL PROTECTED]>

Re: Tomcat 4.0 Session Timeout

2001-09-20 Thread Jonathan Eric Miller
I haven't tested this using the configuration files or not, so, I can't verify whether that's a problem or not, but, failing that, you can use HttpSession.setMaxInactiveInterval() from within your Web application. Actually, I should probably test this myself to make sure that it's still working OK

Re: Tomcat Spontaneously Restarting System

2001-09-20 Thread Jonathan Eric Miller
I concur, sounds like a hardware or other problem. Jon - Original Message - From: "Matt Hudson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, September 20, 2001 6:56 AM Subject: Re: Tomcat Spontaneously Restarting System > I've had flaky hardware befo

Fw: Tomcat security questions

2001-09-20 Thread Jonathan Eric Miller
For some reason this didn't seem to go through the first time... Jon - Original Message - From: "Jonathan Eric Miller" <[EMAIL PROTECTED]> To: "Tomcat User List" <[EMAIL PROTECTED]> Sent: Wednesday, September 19, 2001 10:11 PM Subject: Tomcat se

Re: Authentication issue

2001-09-20 Thread Jonathan Eric Miller
Yes, you can do that. I don't recall the specific commands that you need to put in httpd.conf off hand though. Actually, the way that I did it, it wasn't protecting directories, it was protecting the URL pattern. Jon - Original Message - From: "Jaime Garcia" <[EMAIL PROTECTED]> To: <[EMA

Re: New xml parser on startup in Tomcat ?

2001-09-22 Thread Jonathan Eric Miller
The reason it's slow is because it's creating a SecureRandom object (used for creating session IDs and for SSL) and that is true for all platforms. There's a way to speed it up, but, it is supposed to decrease security. Jon - Original Message - From: "Anthony Green" <[EMAIL PROTECTED]> T

Re: SSL Connection problem through jsp

2001-09-23 Thread Jonathan Eric Miller
I think I've seen this problem when trying to use "ldaps" with JNDI. I found that you still have to use "ldap", not, "ldaps". Then, you tell it to use the SSL port. In the case of LDAPS, it's 636. For HTTPS, it's 443. I think if you leave the "s" off the end it will probably work. At least that's

Session timeout in Tomcat 4.0 off by 10 seconds?

2001-09-23 Thread Jonathan Eric Miller
I did some testing to make sure that my sessions were getting timed out correctly. It appears that it's working. However, it appears to be off by 10 seconds. Not a big deal at all, but, it's not what I expected. You can use the following application to test it. First you need to add the following

Re: Tomcat Spontaneously Restarting System

2001-09-23 Thread Jonathan Eric Miller
get the usual NT blue > > screen, that can give you more information about the > > problem. > > > > I had a motherboard (ASUS P3C2000) based on a Intel > > 820 chipset that boots > > win2k at least once a day. I agree that sounds like > > a hardware or other &

Re: importing an existing certificate

2001-09-23 Thread Jonathan Eric Miller
It's not that simple because you need to import the private key as well. I'm in the same situation, except that I'm importing from Apache Web Server to Tomcat in standalone mode. I posted this question a few days ago and someone told me about the following link which has a program that is supposed

Re: importing an existing certificate

2001-09-23 Thread Jonathan Eric Miller
Jon - Original Message - From: "Jonathan Eric Miller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Sunday, September 23, 2001 12:22 PM Subject: Re: importing an existing certificate > It's not that simple because you need to import t

Re: Tomcat 4 and session persistance ...

2001-09-23 Thread Jonathan Eric Miller
Dunno. I just noticed the same thing. The howto document is in b7, but not in rc1, or the release version of 4.0. Jon - Original Message - From: "David Cassidy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 20, 2001 8:57 AM Subject: Tomcat 4 and session persistanc

Re: 4.0 RPMs: when

2001-09-23 Thread Jonathan Eric Miller
What's wrong with the .zip file? Jon - Original Message - From: "Sergey V. Udaltsov" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, September 22, 2001 12:05 PM Subject: Re: 4.0 RPMs: when > Hi > > > We still have problems with related jars, like jdbc2.0ext, jta, > > jmx,

Re: Get Friggin Verisign Working on Tomcat 4.0 Standalone How To - The Official Thread

2001-09-23 Thread Jonathan Eric Miller
If you haven't already done this, you might want to check out the keytool documentation that comes with the JDK. The Examples section pretty much explains how to do it. The next thing you need to do is a -import when you get back the signed certificate from Verisign. http://java.sun.com/j2se/1.4/

Re: i´m in a muddle

2001-09-23 Thread Jonathan Eric Miller
I think you're supposed to use mod_webapp with Tomcat 4. I think that's the Tomcat 4 equivalent of mod_jk. I think the source for it was just recently released. It came out a little later than the release version of Tomcat 4.0 itself. Jon - Original Message - From: "Jaime Garcia" <[EMAIL

Re: tomcat 4 (final) quits without notice

2001-09-23 Thread Jonathan Eric Miller
Are there errors in the logs? Jon - Original Message - From: "pero" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 20, 2001 1:54 PM Subject: tomcat 4 (final) quits without notice > Hi there, > > After months of developing with tomcat 4 (yes, I was there from the

Re: Has anyone configured tomcat 4.0 with IIS???

2001-09-23 Thread Jonathan Eric Miller
Have a look at $CATALINA_HOME/conf/server.xml. That's where all the settings are such as what ports it listens on. Jon - Original Message - From: "Tia Haenni" <[EMAIL PROTECTED]> To: "Tomcat Mailing List" <[EMAIL PROTECTED]> Sent: Thursday, September 20, 2001 7:34 PM Subject: Has anyone

Re: and Tomcat v4.0

2001-09-24 Thread Jonathan Eric Miller
Yeah, I'm pretty sure that I had the same problem. I'm pretty sure it's just the ordering. Jon - Original Message - From: "Graham Leggett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 21, 2001 12:59 PM Subject: Re: and Tomcat v4.0 > "Craig R. McClanahan" wrote:

Re: JDBC Connection Pool Theory ??

2001-09-24 Thread Jonathan Eric Miller
What I want to know is how much of a difference connection pooling really makes? My application isn't taking a lot of hits, so, maybe if it was, I would notice the difference, but, right now, I see no need to use connection pooling. Jon - Original Message - From: "Gustavo Saramago" <[EMA

Re: JDBC Connection Pool Theory ??

2001-09-24 Thread Jonathan Eric Miller
You could also probably just store the database connection in a session variable. That way, the connection is only setup after the user first authenticates instead of at each page request. Jon - Original Message - From: "Mihai Gheorghiu" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent:

Re: How to set servlet reloadable in Tomcat 4.0 ?

2001-09-24 Thread Jonathan Eric Miller
I only know how to do it in Tomcat 4.0. You need to add a reloadable="true" into your server.xml for the Context that your servlet resides in. The following link has some information on it. http://jakarta.apache.org/tomcat/tomcat-4.0-doc/config/context.html Jon - Original Message - From

Re: Catalina SSL failure

2001-09-25 Thread Jonathan Eric Miller
You need to use https://localhost:8443. Note, the "s" after "http". I've done that on accident a few times myself. What's up with those 5 little squares anyways? I would have expected it to print an error instead. A bug in IE? I get an error message when I try it with Netscape, which is what I wou

Re: Tomcat: can I use .htaccess files to protect html files

2001-09-25 Thread Jonathan Eric Miller
If you are using Tomcat in standalone mode, you can put something similar to the following in your web.xml file to do that. For more information, check out the Servlet 2.3 spec which you can get at the following URL. http://jcp.org/aboutJava/communityprocess/first/jsr053/index.html http://java

Re: How to know which ajp in tomcat 4

2001-09-25 Thread Jonathan Eric Miller
I'm not really an expert on this, so, I could be wrong, but, I'm not sure if Tomcat 4 actually uses AJP. It uses something referred to as a WarpConnector. It's located at the bottom of the default server.xml file. Not sure if that uses AJP or not... Jon - Original Message - From: "tom ca

Re: Tomcat 4.0 in Win2000 as service

2001-09-25 Thread Jonathan Eric Miller
I haven't tried this, but, I think you are right, it could be a permissions problem. Note, by default it uses .keystore in your home directory to store the certificate. You may want to copy the .keystore file under your Tomcat directory. Then, in server.xml for the HttpConnector, add a keystoreFil

Re: webapp Module

2001-09-25 Thread Jonathan Eric Miller
I don't think it has been released yet. I think I remember seeing something about how the Windows version was postponed in order to provide a stable UNIX version. Jon - Original Message - From: "Jim Urban" <[EMAIL PROTECTED]> To: "Tomcat-User" <[EMAIL PROTECTED]> Sent: Monday, September

Re: Limits of Web

2001-09-25 Thread Jonathan Eric Miller
I think it depends on the requirements of the application. If all you need is data entry forms that contain elements such as text boxes, drop-down list, radio buttons, etc., then, you can do it no problem. In the end, you may find that it's actually a hell of a lot easier making them Web based. Th

Re: Limits of Web

2001-09-25 Thread Jonathan Eric Miller
Unless, Web forms are inadequate, I wouldn't use applets at all, I'd just make it completely server-side and use servlets. Jon - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, September 24, 2001 10:43 AM Subject: Re: Limits of Web > > When we started

Re: Where to get mod_webapp

2001-09-25 Thread Jonathan Eric Miller
Why not just run Tomcat in standalone mode? Jon - Original Message - From: "Jim Urban" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 25, 2001 1:26 PM Subject: RE: Where to get mod_webapp > That's fine for the Unix shops, but what about us Win32 shops? For > star

Re: How to start/stop tomcat from a remote machine???

2001-09-25 Thread Jonathan Eric Miller
How about just SSHing into the box and restarting it using the startup.sh and shutdown.sh scripts? Jon - Original Message - From: "Siomara Pantarotto" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 25, 2001 1:13 AM Subject: Re: How to start/stop tomcat from a remote

Re: Will tomcat sessions work with IE6?

2001-10-04 Thread Jonathan Eric Miller
- Original Message - From: "Reynir Hübner" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, October 02, 2001 4:29 PM Subject: RE: Will tomcat sessions work with IE6? > I´ve also made few tests on this, sessions are being created both when > user is logged on and not. > > the o

Re: Will tomcat sessions work with IE6?

2001-10-04 Thread Jonathan Eric Miller
If you use the default privacy settings for IE6, it should work fine. As you noted, third party cookies are blocked by default. However, the cookie that Tomcat uses for session IDs isn't a third party cookie. Jon - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent

How to call code in catalina.jar from a servlet?

2001-10-22 Thread Jonathan Eric Miller
I'm wondering if it is possible to call code that is located in catalina.jar from a normal servlet? Specifically, I want to call the following method in order to create a hash that is in the format the JDBCRealm expects so that I can have a form which allows users of my application to change thei

Re: How to put getRemoteAddr() into SQL server table in Tomcat 4.0 ?

2001-10-24 Thread Jonathan Eric Miller
String updateip ="Update tbluser set incomingip= '" + request.getRemoteAddr() + "' where uname ='" + uname + "'"; Jon - Original Message - From: "Miao, Franco CAWS:EX" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, October 24, 2001 12:18 AM Subject: How to put getRemoteAddr

Link on Jakarta Web site to Tomcat 4.0 not 4.0.1?

2001-10-26 Thread Jonathan Eric Miller
I just noticed that the link to the release version of Tomcat on the Jakarta Web site is pointing to 4.0 and not 4.0.1? I thought that it pointed to 4.0.1 previously, but, I don't remember for sure. Is this an indication that there is a problem with 4.0.1? I'm currently running 4.0, but, I was th

Does -d64 option for JDK 1.4.0b3 speed up Tomcat at all on Solaris?

2001-11-01 Thread Jonathan Eric Miller
I just installed the latest JDK 1.4 beta and noticed that there is now 64-bit support for Solaris. I noticed that there is a -d64 option in the java command. Does anyone know if this will speed up the performance of Tomcat at all, or what advantages it offers in that type of environment if any? J

Way to alias/redirect index.html to a servlet with Tomcat 4 in standalone mode?

2001-12-18 Thread Jonathan Eric Miller
This is probably a newbie question, but, it's something that I've been meaning to find the answer to for awhile. I'm using Tomcat 4.0.1 in standalone mode. What I want to do is be able to assign an alias to a servlet so that a user can just enter the name of an HTML file to access the servlet rat

Possible to have multiple SSL enabled virtual hosts with Tomcat 4 in standalone mode?

2001-12-18 Thread Jonathan Eric Miller
I'm wondering if anyone knows if it is possible to have multiple virtual hosts in Tomcat 4 standalone mode, each with a SSL enabled? If so, do I need to somehow put more than one host name into the SSL certificate? Or, is there a way to install multiple SSL certificates? So, for example, say I h

Re: Way to alias/redirect index.html to a servlet with Tomcat 4 in standalone mode?

2001-12-18 Thread Jonathan Eric Miller
That worked, thanks. Jon - Original Message - From: <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Tuesday, December 18, 2001 2:42 PM Subject: Re: Way to alias/redirect index.html to a servlet with Tomcat 4 in standalone mode? > > >

JNDIRealm with bind as user functionality

2002-03-15 Thread Jonathan Eric Miller
Does anyone know if JNDIRealm is going to be fixed up anytime soon so that the bind as user functionality is in there? I know someone had a patch for this. I'm wondering if that patch is going to be integrated into the main distribution. Jon -- To unsubscribe: For

Re: JNDIRealm with bind as user functionality

2002-03-19 Thread Jonathan Eric Miller
AIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]>; "Jonathan Eric Miller" <[EMAIL PROTECTED]> Sent: Friday, March 15, 2002 5:14 PM Subject: Re: JNDIRealm with bind as user functionality > > > On Fri, 15 Mar 2002, Jonathan Eric Miller wrote: >

Tomcat 4.0.4-b2 available?

2002-03-25 Thread Jonathan Eric Miller
I noticed that the following directory now exists on the Jakarta Web site. http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0.4-b2/bin/ Does this mean that 4.0.4-b2 is out? Or, is that a nightly build? Also, anyone know if this release will contain the JNDIRealm enhancements? I th

Re: Tomcat 4.0.4-b2 available?

2002-03-26 Thread Jonathan Eric Miller
Thanks! Jon - Original Message - From: "Remy Maucherat" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Tuesday, March 26, 2002 1:00 AM Subject: Re: Tomcat 4.0.4-b2 available? > > I noticed that the following directory now exists on the Jakarta Web site. > > > > h

Re: [ANNOUNCEMENT] Tomcat 4.0.4 Beta 2 released

2002-03-27 Thread Jonathan Eric Miller
It is possible to use the Coyote connector for SSL connections as well? Jon - Original Message - From: "Remy Maucherat" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, March 26, 2002 1:34 PM Subject: [ANNOUNCEMENT] Tomcat 4.0.4 Beta 2

Re: JNDI realm against win2000 DC (REPOST SORRY)

2002-04-22 Thread Jonathan Eric Miller
As far as I know, you won't be able to do this until Tomcat 4.1 is released. In the current version of Tomcat, it binds as an administrator and then queries for the user's password and compares it to that which was provided by the user. This comparison takes place on the client-side. i.e. in Tomca

Re: JNDI Realm with Tomcat 4.0.1 and Netscape LDAP

2002-04-22 Thread Jonathan Eric Miller
I don't know if you noticed, but, the password has to be stored as a hex string rather than a base64 encoded string in the directory in order for it to work. I think there is a patch that is supposed to fix this that I think is supposed to be included when Tomcat 4.1 comes out. Also, there's suppo

Re: How to enforce SSL???

2002-04-26 Thread Jonathan Eric Miller
I think if you add something similar to the following to the web.xml file for your application, it will make it automatically redirect from HTTP to HTTPS. Tomcat /* CONFIDENTIAL As far as requiring a particular encryption strength, the only way I kno

Re: [ANNOUCEMENT] Apache Tomcat 4.1.0 Alpha

2002-05-06 Thread Jonathan Eric Miller
Does anyone know if this release contains the new JNDI Realm code that allows you to authenticate users using LDAP binds instead of querying the directory for the password and comparing? Jon - Original Message - From: "Remy Maucherat" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EM

  1   2   3   >