Tomcat, Security, Anonymous Authentication

2006-02-13 Thread Aydın Toprak
Hi, I have a question about the security issue that I have to cover of my server. I have web service which runs on Tomcat 5.5 with SSL ... I have installed all the SSL system on the server and it works fine, however as a little advance subject, I have to recover some security issues,...

RE: Desperate for help with isapi_redirect.dll

2006-02-13 Thread Paul Hamer
Hi David, First, it seems to not write all of the log entries. The final line is: [Sun Feb 12 21:14:08 2006] [warn] jk_uri_worker_map.c (42 This, I think, is normal. The logentries appear to be cached, and may therefore seem incomplete at any given time. Just wait a couple of minutes and

Re: Desperate for help with isapi_redirect.dll

2006-02-13 Thread Mladen Turk
David Thielen wrote: Hello; Ok, I upped the cachesize and now have a new problem worker for name ajp13 [Sun Feb 12 15:29:22 2006] [error] jk_isapi_plugin.c (1049): could not get a worker for name ajp13 Post your workers.properties file. Regards, Mladen.

Re: Apache 2.2 and mod_proxy_ajp performance

2006-02-13 Thread Gmail User
On Mon, 2006-02-13 at 00:37 -0800, Ian Shafer wrote: What do I need to look out for in getting this to perform better? I tried the max=XXX configuration at the end of my ProxyPass line, but that didn't help. Any thoughts? What about your Apache keepalivetimeout? Shorter timeout should free

jdbc context

2006-02-13 Thread jacky
hi, I have deploy a workflow webapp in Tomcat4.1.31. First time, i add the following code in server.xml: Context path=/myworkflow docBase=myworkflow reloadable=true Resource name=jdbc/DefaultDS type=javax.sql.DataSource/ ResourceParams name=jdbc/DefaultDS

RE: Tomcat5.15 basic setup question

2006-02-13 Thread Tim Lucia
You might consider the necessity of using port 8080 as well - client-side firewalls might block it, it is non-standard, and probably hard-coded everywhere along side the IP address. You can run Tomcat on port 80 (see the archives of this list--it has been discussed recently), or front with httpd

Re: java.lang.Object cannot be resolved

2006-02-13 Thread Sebastian Funk
Hi, Do you really need sudo here? Perhaps that's creating some issues. doesn't seem so. I get exactly the same error in my home directory. What happens if you try to compile a simple Hello World program, without anything specified for -cp? (Try it with and without sudo to see if that makes

RE: Suggestion for documentation update about jvmRoute

2006-02-13 Thread Tim Lucia
While you're at it, you could add and must not contain the . character (and any other illegal ones... I had a bear of a time figuring that out a few years ago when I chose the FQDN of the machine for the jvmRoute!) Tim -Original Message- From: Fred K [mailto:[EMAIL PROTECTED] Sent:

No of concurrent requests per session

2006-02-13 Thread Abhilash Kumar
Hello: I am using Tomcat 5.0.30 with HTTP 1.1 Connector. If I try to make a third request while two other request's (which i have already made) responses have not yet arrived, then Tomcat is not serving the request until one of the pending response arrives. This limits me to only two pending

RE: Desperate for help with isapi_redirect.dll

2006-02-13 Thread David Thielen
worker.properties.minimal: worker.list=ajp13w worker.ajp13.cachesize=100 worker.ajp13w.type=ajp13 worker.ajp13w.host=localhost worker.ajp13w.port=8009 uriworkermap.properties: /store/*=ajp13w /store=ajp13w /track/*=ajp13w /forums/*=ajp13w /forums=ajp13w /WindwardReportsServlet/*=ajp13w

problems with Clusters or apache connector not sure which one

2006-02-13 Thread Randy Paries
hello, I am running apache-tomcat-5.5.15 on three boxes 2 rh9 and one fedora 4. and they are clustered together I am seeing problems where apache can not longer talk to tomcat. if anyone can point me on how to debug this please help, i am not sure what else i should include as far a conf setups,

RE: Desperate for help with isapi_redirect.dll

2006-02-13 Thread Paul Hamer
Hiya David, You have a typo (forgot a w) in the cachesize line of your worker.properties... worker.ajp13w.cachesize=100 Should fix most of y'r problems :) Greetz, Paul Hamer management development [EMAIL PROTECTED] toHAVE websolutions www.tohave.nl [EMAIL PROTECTED] -Original

RE: Desperate for help with isapi_redirect.dll

2006-02-13 Thread David Thielen
First off, thank you. Second, if there is someone who knows isapi_redir very very well, I would be happy to rewrite the docs for it if I can ask him/her questions so I can get all of it fully documented. Thanks - dave David Thielen www.windwardreports.com 303-499-2544 -Original

RE: Tomcat, Security, Anonymous Authentication

2006-02-13 Thread Duan, Nick
Anonymous authentication is an additional feature that you need to create in your web application. It doesn't come by default in any app servers. So there is no need to disable it when configuring Tomcat. There is a good article in JavaWorld discussing about anonymous authentication in J2EE.

RE: problems with Clusters or apache connector not sure which one

2006-02-13 Thread Duan, Nick
It looks like a network problem to me. Is there any firewall between the apache and your tomcat server? Or did your IT dept reconfigure the network recently? ND -Original Message- From: Randy Paries [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 9:27 AM To: Tomcat Users

RE: jdbc context

2006-02-13 Thread Duan, Nick
You should be able to add the context info in your web.xml file. In other words, instead of making the JDBC resource available to all web apps, you make it only to particular applications. If this JDBC connection is only used by the workflow web app, defining it in web.xml is actually preferred.

Re: problems with Clusters or apache connector not sure which one

2006-02-13 Thread Antony Riley
I thought you said tomcat ran on 3 different boxes and it was a cluster ? java.io.IOException: Connection reset by peer This means that the tcp connection was severed somehow, this is typically caused by a firewall dropping idle TCP connections, or someone unplugging a network cable, or someone

Re: problems with Clusters or apache connector not sure which one

2006-02-13 Thread Randy Paries
Thanks for your help I already have localhost set in my workers.properties file Randy On 2/13/06, Antony Riley [EMAIL PROTECTED] wrote: I thought you said tomcat ran on 3 different boxes and it was a cluster ? java.io.IOException: Connection reset by peer This means that the tcp

RE: No of concurrent requests per session

2006-02-13 Thread George Sexton
I'm guessing this is more of a browser issue. If you're using IE, I seem to recall there is a registry entry that lets you set the maximum concurrent requests. George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 -Original Message- From: Abhilash Kumar

RE: jdbc context

2006-02-13 Thread chen jacky
hi, Do you mean add the following code in the web.xml? resource-ref descriptionDB Connection/description res-ref-namejdbc/TestDB/res-ref-name res-typejavax.sql.DataSource/res-type res-authContainer/res-auth /resource-ref But this still need to add the jdbc config in the

Re: problems with Clusters or apache connector not sure which one

2006-02-13 Thread Filip Hanik - Dev Lists
Hi Randy, if Apache cannot talk to Tomcat, then its not because of the clustering. The first error in catalina.out, is just a result of replication keep alive sessions getting closed, I will fix the code that generates that error so that it doesn't log as an error. do you have a firewall or

Re: problems with Clusters or apache connector not sure which one

2006-02-13 Thread Randy Paries
Filip The Both the apache and tomcat are on the same server and the workers.properties connects via localhost Thanks On 2/13/06, Filip Hanik - Dev Lists [EMAIL PROTECTED] wrote: Hi Randy, if Apache cannot talk to Tomcat, then its not because of the clustering. The first error in catalina.out,

Re: problems with Clusters or apache connector not sure which one

2006-02-13 Thread Filip Hanik - Dev Lists
When this error happens, are you able to issue the command 1. to see if tomcat is listening, netstat -na |grep 8009 |grep LISTEN 2. if yes, try to connect to the socket telnet localhost 8009 on the box you see the error, this will tell you if the server socket is alright. Fillip Randy

Re: jdbc context

2006-02-13 Thread Hadraba Petr
Hi, maybe helps this, but it's working on Tomcat 5.5.15:-( http://mail-archives.apache.org/mod_mbox/tomcat-users/200602.mbox/[EMAIL PROTECTED] PETR On 2/13/06, chen jacky [EMAIL PROTECTED] wrote: hi, Do you mean add the following code in the web.xml? resource-ref descriptionDB

RE: jdbc context

2006-02-13 Thread Duan, Nick
Well, I guess it was my mistake. In Tomcat 5.5 you will be able to define the context information within each web app, by creating a context.xml in your war file, and the corresponding resource-ref in web.xml. Apparently this is not available in tomcat 4.1 I guess there are two options you may

RE: No of concurrent requests per session

2006-02-13 Thread DJohnson
I suspect the problem relates to pipelining of HTTP 1.1 requests over a single persistent TCP connection. Pipelining is intended to improve efficiency, allowing the need for multiple images to present a web page be expressed to a web server one after another, before any of the responses are

RE: No of concurrent requests per session

2006-02-13 Thread Caldarale, Charles R
From: Abhilash Kumar [mailto:[EMAIL PROTECTED] Subject: No of concurrent requests per session I am using Tomcat 5.0.30 with HTTP 1.1 Connector. If I try to make a third request while two other request's (which i have already made) responses have not yet arrived, then Tomcat is not

concerned who is creating my logs

2006-02-13 Thread Randy Paries
Hello, I am running apache-tomcat-5.5.15 I start tomcat under the user apache what concerns me is that when i look at my logs in $TOMCAT/logs the catalina logs (currently and rotated) are owned by apache, But the admin, host-manager and manager rotated logs are owned by root. Does this mean these

RE: java.lang.Object cannot be resolved

2006-02-13 Thread Caldarale, Charles R
From: Sebastian Funk [mailto:[EMAIL PROTECTED] Subject: Re: java.lang.Object cannot be resolved No, simple javac Hello.java doesn't work. Only if I set $CLASSPATH to /usr/lib/jdk/jre/lib/rt.jar or with the -cp-option. Then your JDK installation is broken. Where is javac being executed

Re: Someone successfully Installed Tomcat as Windows Service with StartMode=java or StartMode=exe?

2006-02-13 Thread David Kerber
I run tomcat 5.5.12 as a service on Win2K (not 2k3), but don't know what mode it is in. How do I find that? Sebastian Himberger wrote: Hi, a week ago i posted a question regarding my problem installing Tomcat as a windows service. Before i'll try again to get it work it would be nice if

OT: Example of Flaky Problems with Microsoft Products

2006-02-13 Thread George Sexton
In another thread I commented on strange behaviors when dealing with MS Products, and the time that they eat in projects. Here is an example: http://support.microsoft.com/default.aspx?scid=kb;en-us;824106 For any row in the ResultSet, you can read any column from left to right, and each column

Re: Someone successfully Installed Tomcat as Windows Service with StartMode=java or StartMode=exe?

2006-02-13 Thread Mladen Turk
Sebastian Himberger wrote: Hi, a week ago i posted a question regarding my problem installing Tomcat as a windows service. Before i'll try again to get it work it would be nice if anybody could just give me a sign if he or she has installed Tomcat (5.5) successfully using StartMode=java or

RE: Apache 2.0.50 - Tomcat 5.0.28 - Mod_jk - .htaccess

2006-02-13 Thread Manuel Nicolas Ortuño
Thank you for your help. I have other Server. This server have apache 2.0.46 and httpd -l are: core.c prefork.c http_core.c mod_so.c I switch the order of LoadModule #-- LoadModule jk_module modules/mod_jk.so LoadModule access_module modules/mod_access.so LoadModule

Re: Apache 2.0.50 - Tomcat 5.0.28 - Mod_jk - .htaccess

2006-02-13 Thread Mladen Turk
Manuel Nicolas Ortuño wrote: JkMount /jsps/servlet/* ajp13 JkMount /jsps/*.jsp ajp13 #-- But i get the same result: http://my_server/jsps/page.jsp -- not password needed http://my_server/jsps/page.js -- password needed You have any idea? Since mod_jk mounts 'virtual'

Re: java.lang.Object cannot be resolved

2006-02-13 Thread Sebastian Funk
Hi, On Feb 13, 2006, at 5:56 PM, Caldarale, Charles R wrote: From: Sebastian Funk [mailto:[EMAIL PROTECTED] Subject: Re: java.lang.Object cannot be resolved No, simple javac Hello.java doesn't work. Only if I set $CLASSPATH to /usr/lib/jdk/jre/lib/rt.jar or with the -cp-option. Then your

c:forEach not working as expected

2006-02-13 Thread Reinhard Moosauer
Hi List, it seemed clear to me, that this construct: c:forEach items=${t.records} var=x ... (some inner logic) /c:forEach should be equivalent to this one: % for (Iterator it=t.getRecords(); it.hasNext(); ) { String x = (String)it.next(); % ... (some inner logic) %

Re: Encrypting ajp13 traffic

2006-02-13 Thread Mark Thomas
Akoulov, Alexandre wrote: I am wondering if there is a way encrypt the traffic between apache and tomcat when they talk to each other on ajp13. Why do you want to do this? What requirement are you trying to meet / security threat are you trying to mitigate? Mark

RE: Example of Flaky Problems with Microsoft Products

2006-02-13 Thread Earnie Dyke
That has not been my experience. We use Opta2000 drivers with MS SQL Server and we can read columns in any order and any number of times within the same row. Earnie! -Original Message- From: Rhino [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 3:06 PM To: Tomcat Users List

Re: Having problem with special characters

2006-02-13 Thread Pulkit Singhal
Hi I think there were a few posts earlier regarding consistent UTF-8 encoding in tomcat. If I remember correctly, this was resolved by setting some flags in a few files. I know I'm being awfully vague :( but I know its there. Cheers, - Pulkit On 2/7/06, Randy Paries [EMAIL PROTECTED] wrote:

RE: Example of Flaky Problems with Microsoft Products

2006-02-13 Thread George Sexton
I've never ran into this problem in PostgreSQL. Note that its also dependent upon the presence of a BLOB. So, if someone adds a field to your table, BANG! Your application will start dying. George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 -Original

autodeploy without monitoring web.xml changes in tomcat 5.0.28

2006-02-13 Thread Day, Ron
Ron Day Is there a way to have autodeploy=true, but inhibit a redeploy when only the web.xml is changed. I'm using 5.0.28 not 5.5 so I do not have a context.xml file with WatchedResources. Thanks Ron Day - To unsubscribe,

Re: Having problem with special characters

2006-02-13 Thread Randy Paries
i ending up modifying the startup to include -Dfile.encoding=ISO-8859-1 On 2/13/06, Pulkit Singhal [EMAIL PROTECTED] wrote: Hi I think there were a few posts earlier regarding consistent UTF-8 encoding in tomcat. If I remember correctly, this was resolved by setting some flags in a few

Re: Encrypting ajp13 traffic

2006-02-13 Thread David Smith
While I can't speak for the O.P., I have had need for this myself once upon a time. Consider a setup where the content has to be secured via SSL and communication to/from the tomcat is over untrusted infrastructure SSL can't be proxied, so there is a need for the AJP/13 communication to be

Re: java.lang.Object cannot be resolved

2006-02-13 Thread Antony Riley
try as root: rpm -e `rpm -q -f /usr/bin/javac` Or something like that. Basically uninstall which ever pitiful excuse for java is installed on your system by default leaving only the sun jdk. Probably a good idea to check that nothing needs it before you do it. On that note, why do certain

Re: c:forEach not working as expected

2006-02-13 Thread Len Popp
On 2/13/06, Reinhard Moosauer [EMAIL PROTECTED] wrote: Hi List, it seemed clear to me, that this construct: c:forEach items=${t.records} var=x ... (some inner logic) /c:forEach should be equivalent to this one: % for (Iterator it=t.getRecords(); it.hasNext(); ) {

Re: java.lang.Object cannot be resolved

2006-02-13 Thread Leon Rosenberg
because some distribution like debian only offer FREE and OPEN SOURCE software, which Sun's JDK is not... regards Leon On 2/13/06, Antony Riley [EMAIL PROTECTED] wrote: try as root: rpm -e `rpm -q -f /usr/bin/javac` Or something like that. Basically uninstall which ever pitiful excuse for

RE: Example of Flaky Problems with Microsoft Products

2006-02-13 Thread George Sexton
-Original Message- From: Len Popp [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 2:32 PM To: Tomcat Users List; [EMAIL PROTECTED] Subject: Re: Example of Flaky Problems with Microsoft Products From the documentation of the ResultSet interface: For maximum portability,

Connectors configure can't find apxs, but it is there

2006-02-13 Thread Neil Aggarwal
Hello: I am running Apache 1.3 on a Linux box and when I try to configure the JK 1.2.15 connectors, I do these commands: cd /usr/local/jakarta-tomcat-connectors-1.2.15-src/jk/native ./configure --with-apxs=/usr/sbin/apxs I get this error: could not find /usr/sbin/apxs configure: error: You

Re: jdbc context

2006-02-13 Thread jacky
ok, thanks a lot! Best Regards. jacky - Original Message - From: Duan, Nick [EMAIL PROTECTED] To: Tomcat Users List users@tomcat.apache.org Sent: Tuesday, February 14, 2006 12:21 AM Subject: RE: jdbc context Well, I guess it was my mistake. In Tomcat 5.5 you will

Re: java.lang.Object cannot be resolved

2006-02-13 Thread Martin Gainty
Sebastian- Sorry Im just a portal developer and not a Super User 'sudo' guy Im used to sticking environment variables into .profile or .bashrc files or execute at home/$USER as . .profile Thanks, Martin- 603-438-6038 - Original Message - From: Sebastian Funk [EMAIL PROTECTED] To:

Loading data in tree model from database table by Java

2006-02-13 Thread Gangaa D
How do I loading data in tree model from database table by Java? 1) ReadData(Result); read following table; table structure: id msg child 1 msg1 0 2 msg2 1 3 msg3 2 2) ViewTree(); print following tree; Tree View: msg1 msg2 msg3 Please help me solve it.

Trouble accessing Resources in my Context

2006-02-13 Thread Mark Slater
I'm running Tomcat 5.5.9 with JVM 1.5.0_05-83 on MacOS X 10.4.4. I'm trying to build an example webapp that shows the configuration for two Jackrabbit resources: one configured as an embedded resource for that web app and another configured as a shared resource for the entire host. I've

App will work on localhost but blank on client PC.

2006-02-13 Thread Alexander Alekseev
I have a 2K3 Server on our intranet running Trend InterScan Messaging Security Suite which uses Apache Tomcat. I can access this app on the server through http://localhost:8447/ just fine. But when we try to access this app through a client connected to the 2k3s, we get a blank page with

RE: ask a comparison between J2EE and JAVA, please help

2006-02-13 Thread Tim Lucia
http://www.google.com/search?hl=enq=j2ee+versus+php http://www.google.com/search?hl=enlr=q=%22j2ee+or+php . . . -Original Message- From: Iosev Perez Rivero [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 10:43 PM To: Tomcat Users List Subject: ask a comparison between J2EE and

public void AuthenticatorBase.doLogin(request, response, principal)

2006-02-13 Thread Ken Johanson
Dear tomcat internals experts; I'm taking a shot at prototyping a new method (yet untested) within org.apache.cataline.authenticator.AuthenticatorBase: public void doLogin(HttpServletRequest request, HttpServletResponse response, Principal principal) {

New isapi_redirect.dll has problems

2006-02-13 Thread David Thielen
Hi; Still having problems. I think among other issues, it is forwarding for pages it should not forward on. This is using the new version Mark Thomas created. uriworkermap.properties: /store/*=ajp13w /store=ajp13w /track/*=ajp13w /forums/*=ajp13w /forums=ajp13w

RE: Encrypting ajp13 traffic

2006-02-13 Thread Akoulov, Alexandre
Yes, i've got similar setup . We might end up setting up ssh tunnelling as well. Kind regards, Sasha. -Original Message- From: David Smith [mailto:[EMAIL PROTECTED] Sent: Tuesday, 14 February 2006 8:18 AM To: Tomcat Users List Subject: Re: Encrypting ajp13 traffic While I can't

RE: No of concurrent requests per session

2006-02-13 Thread Abhilash Kumar
Hello: Thanking everyone for words of wisdom .. I checked with firefox 1.0.7 also. It is also showing the same behaviour as with IE. thanks and regards, -- Kannan. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 9:58 PM To: Tomcat

RE: No of concurrent requests per session

2006-02-13 Thread Abhilash Kumar
Hello: Hello: Can u tell how to prevent browser or webserver using persistent connection ? thanks and regards, -- Kannan. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 9:58 PM To: Tomcat Users List Subject: RE: No of concurrent

context error

2006-02-13 Thread jacky
hi, When i add a Context in the server.xml, an error occurs: Apache Tomcat/4.1.31 Catalina.start: LifecycleException: Context startup failed due to previous errors LifecycleException: Context startup failed due to previous errors at

RE: New isapi_redirect.dll has problems

2006-02-13 Thread Ian Buzer
OK, first I'll point out that I'm pretty new to Tomcat myself workers.properties.minimal: Is jk even using this config file? Normally it would use workers.properties unless it was configured otherwise. [Mon Feb 13 07:56:49 2006] [info] jk_ajp_common.c (1248): Error connecting to the

Blocking AJP13 (port 8009) access

2006-02-13 Thread OG
Hi, I'm trying to block external access to port 8009 (AJP13), as only my local host really needs to be able to talk to it. I'm wondering if there are any internal/mod_jk mechanisms for that, or if iptables is the best option. I have tried iptables, which did block external requests, but it