Re: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
es that may be hard for tomcat but trivial for apache. -Tim Kristján Rúnarsson wrote: > So in summary, if I read you right, you are saying that java processes can > not fork kids that run under another UID as the parent process? > > If that is true, this whole situation sux ass an

RE: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
Kristján Rúnarsson, Tæknifræðingur, BSc.Eng. (Hons) - Íslandssími, Sóltún 26, 105 Reykjavík, Iceland GSM: 8200222 E-mail: kristjan.runarsson@islandssimi.is

Re: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
ve OS system call. The bad part about this is if something happens to the port 80 and you must reopen it - the whole JVM needs restarted. Kristján Rúnarsson wrote: > I know, I accidentally posted that message before completing it, I posted > the rest of it seperately. > > I have

RE: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
t is still listening on 8080 and the proxy directs the requests from port 80 to 8080 - Use Tomcat behind a port mapper Quite (if you don't look to close) the same solution as the proxy (iptables) > -----Original Message- > From: Kristján Rúnarsson [mailto:[EMAIL PROTECTED]] >

RE: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
First of did you read any but my original post? , please read the one I posted a little later. Hell! for your benifit I will reproduce it here: quote Sorry to tear up the message, I forgot to paste this into my first one. You should also note that if you Run Tomacat as ROOT you may be more

RE: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
f you want to use port 80 it is better to run tomcat behind a connector, a port mapper or a proxy and use a user with the least possible rights. > -Original Message- > From: Kristján Rúnarsson [mailto:[EMAIL PROTECTED]] > Sent: Thursday, December 05, 2002 1:34 PM > To: Tomcat

Re: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
Sorry to tear up the message, I forgot to paste this into my first one. You should also note that if you Run Tomacat as ROOT you may be more secure against a local user trying to sabotage your Tomcat but you will be vulnerable to malicious manipulations of your servlets. It is possible for some

Re: Why run tomcat as root

2002-12-05 Thread Kristján Rúnarsson
"Sanjaya Singharage" <[EMAIL PROTECTED]> 05.12.2002 10:33 Please respond to "Tomcat Users List" To: [EMAIL PROTECTED] cc: Subject:Why run tomcat as root with respect to security what is the best way to run tomcat on linux? I am running tomcat3.2.3 with apac

Overview of the various approaches to supressing directory contentslistings in tomcat standalone

2002-12-05 Thread Kristján Rúnarsson
is possible to do this in server.xml. 2) Supposedly it is posseble to supress the listing for a single sub directory of the webapps directory but not others using web.xml. How? 3) Supressing certain items in the directory listing but not others. Mvh Kristján Rúnarsson

Re: Session Tracking based on the Client's IP

2002-11-20 Thread Kristján Rúnarsson
Is there any way of keeping track of people that contact a site? I have had problems with people writing automated scripts to abuse a JSP based service. What they basically do is to write a script that fakes a http request sequence, pretending it is a browser like IExporer or Netscape. I realis

Re: SSL Connector port problems

2002-11-19 Thread Kristján Rúnarsson
Those ports you mentioned are privileged ports, I think you can only use them if you have ROOT rights (UNIX) or admin rights (Windoze NT/2000), if you don't have root rights I don´t think Tomcat can bind to a privileged port. Do you start Tomcat as ROOT? Mvh KR -- To unsubscribe, e-mail:

AutoSetup and of applications (dynamic contexts) in Tomcat 4.x

2002-10-18 Thread Kristján Rúnarsson
I have been studying the Manager utility of Tomcat 4 and discovered that it is possible to add contexts for webapps here just like in the Admin utility in tomcat 3.x. If I add a context for my WebApplication with the Manager's "install" command the WebApp also works. What bothers me is that in

Re: Webinterface for tomcat?

2002-10-16 Thread Kristján Rúnarsson
Hello Kristján, http://localhost:8080/admin/ http://localhost:8080/manager/html Boy do I feel stupid now! :-) And where/how pray tell do I set the Passwd? Is there no proper online ,blow by blow, tutorial for Tomcat? Their own documentation is not very well structured. Cheers KR -- To uns

Webinterface for tomcat?

2002-10-16 Thread Kristján Rúnarsson
Ist there a webinterface for Tomcat and where can I get it (if such an animal exists that is)? Greetings and Salutations Kristjan Runarsson -- To unsubscribe, e-mail: For additional commands, e-mail:

Context-tags/ServeletContext entries and server.xml in Tomcat 3.x and 4.x

2002-10-16 Thread Kristján Rúnarsson
Hello everybody! How does that servers.xml tie in with the : ServeletContext/Context-tags? I am trying to port somebody elses (Grrr. no docu) webapps from Tomcat 3.2.1 to Tomcat 4.0.6 and so far I have figured out that 4.0.6 needs ServeletContext entries (see Ex. above) to be wri

RE: Upgrading from 3.2.1 to 4.0.6

2002-10-15 Thread Kristján Rúnarsson
First off thanx for the reply! did you create a 'foo' context in server.xml? No I just changed the ports in the example file that came with Tomcat 4.0.6 because the diff between it and the on for the 3.2.1 server seemd too great. I suspect I am getting the server.xml configuration wrong. Yo

Upgrading from 3.2.1 to 4.0.6

2002-10-15 Thread Kristján Rúnarsson
First off Hello everybody! I have been given the task of migrating from Tomcat 3.2.1 to 4.0.6. After a lot of cussing I finally noticed that reference to port 8008 at the very end of the server.xml and changed it to an unused port which means that I have finally managed to get both the 3.2.1 a