RE: [OT] Securing Tomcat Applications from Reverse Engineering

2010-01-27 Thread Dmitry Leskov
> Dmitry Leskov wrote: > > So far only some aspects of code protection have been considered in this > > (off-)topic, namely preventing illegal use and protecting the code itself > > as a piece of intellectual property. However, there are at least two other > > scenarios that may make protection

RE: Tomcat+Apatche for two websites on one server

2010-01-27 Thread chenll
Thank you! Can i install Tomcat and GeonetWork node firstly, because i will use Apatche for building another website later instead of now. in this case, should i just install Tomcat without any manual setting. And do the setting you told me just when i building another website by Apatche? >

Unable to set loginTimeout on data sources defined in context.xml

2010-01-27 Thread Jorge Medina
Hi, I have the following Resource defined in context.xml where the user, password and url are all defined at install time and are not important for this issue. I use Hibernate on my application, and define my hibernate.master.cfg.xml as java:/comp/env/jdbc/MasterDB org.

Re: FW: JNDIRealm and roleNested

2010-01-27 Thread TahitianGabriel
Mark, I've opened a bug : https://issues.apache.org/bugzilla/show_bug.cgi?id=48629 https://issues.apache.org/bugzilla/show_bug.cgi?id=48629 I've also attached a patch that fixed the problem. Regards, Gabriel. Mark Thomas wrote: > > Please do. Also, if you are able to test any patch produce

Re: FW: JNDIRealm and roleNested

2010-01-27 Thread TahitianGabriel
Should I take the sources files from the http://svn.apache.org/repos/asf/tomcat/trunk/ trunk or the http://svn.apache.org/repos/asf/tomcat/tc6.0.x/trunk/ tc6.0.x branche ? Mark Thomas wrote: > > On 26/01/2010 19:45, TahitianGabriel wrote: >> >> Hi Mark, >> >> Tomcat 6.0.24 has been releas

RE: tomcat memory usage

2010-01-27 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: tomcat memory usage > > What else goes into PermGen, other than java.lang.Class objects? It varies by JVM level. In the original HotSpot implementation it was pretty much just the instances of java.lang.Class. As

Re: Tomcat manager

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 1/27/2010 2:47 PM, André Warnier wrote: > Mark Thomas wrote: >> On 27/01/2010 09:58, Toman, Chuck [Stock] wrote: >>> I changed the config file and added manager and the UNIX account and >>> still not working. >> >> UNIX account information i

Re: tomcat memory usage

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 1/27/2010 2:50 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: tomcat memory usage >> >> The compiler knows that the "staticObject" member is static, and might >> even be abl

RE: tomcat memory usage

2010-01-27 Thread Caldarale, Charles R
> From: Steffen Heil [mailto:li...@steffen-heil.de] > Subject: AW: tomcat memory usage > > I am not sure, where the Class objects themselfes reside. They are in PermGen along with a very few other internally-generated structures. > Whereever they are, static references are in there. Actually, t

AW: tomcat memory usage

2010-01-27 Thread Steffen Heil
Hi > So, static members are stored outside the heap? Where are they stored? > PermGen? For sure, no. ALL persistent java objects are on the heap. With optimization some very short living objects may reside on the stack only. References to static objects ARE probably stored in PermGen, but the

Re: Tomcat+Apatche for two websites on one server

2010-01-27 Thread André Warnier
chenll wrote: > Hi, My server is on Windows 2003 64 bit, and is running GIS license manager. > Now, i need to install Tomcat for runing GeonetWork node and Apatche for > building another website. And i have gotten two domain name for both of them > yet. > > My question is how to install and set

RE: tomcat memory usage

2010-01-27 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: tomcat memory usage > > The compiler knows that the "staticObject" member is static, and might > even be able to tell the runtime that the object to be used for that > static member should go into PermGen. You're con

Re: Tomcat manager

2010-01-27 Thread André Warnier
Mark Thomas wrote: On 27/01/2010 09:58, Toman, Chuck [Stock] wrote: I changed the config file and added manager and the UNIX account and still not working. UNIX account information is not used by Tomcat. tomcat-users.xml is entirely separate. At a guess, you left the comments around the XML.

Re: tomcat memory usage

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 1/27/2010 1:50 PM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: tomcat memory usage >> >> So, static members are stored outside the heap? Where are they >> stored? PermGen?

RE: Supporting multiple hostnames with one TomCat?

2010-01-27 Thread Caldarale, Charles R
> From: Hare, Tim [mailto:tim.h...@ssrc.myflorida.com] > Subject: RE: Supporting multiple hostnames with one TomCat? > > Does that mean having /ren/app1 and /stimpy/app1 > won't work That's not an overlap - they're completely distinct if each has its own appBase. What you don't want is have on

RE: Supporting multiple hostnames with one TomCat?

2010-01-27 Thread Hare, Tim
Thanks - one thing I'm not clear about on that page is where it says the directory structures should not overlap each other. Does that mean having /ren/app1 and /stimpy/app1 won't work (that would be a deal-breaker for having /prod/ and /test/ structures. I will correct my spelling for Tomcat a

Re: Tomcat on Ubuntu 8.04 VPS and presumably multiple socket problems

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fatzopilot, On 1/26/2010 7:16 PM, fatzopilot wrote: > I switched from a Windows XP based VPS to a Ubuntu 8.04 linux machine. Good choice! Are you still on a virtualized platform? > Both run Tomcat 6.0.18 and 2.2.8 on tcp4. Could that mean Apache ht

Re: Tomcat/JDBC Thin Client and Oracle SQL Parsing

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan, On 1/26/2010 12:40 PM, Dan Denton wrote: > While it's possible there's something we missed, I would like to know > if anyone out there knows why a webapp restart would cause the > database to reparse and choose a new execution plan. If the JDBC

RE: tomcat memory usage

2010-01-27 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: tomcat memory usage > > So, static members are stored outside the heap? Where are they stored? > PermGen? They're definitely not in the main Java heap; I'm pretty sure they're in PermGen, although it's been awhile s

Re: Tomcat+Apatche for two websites on one server

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ling, On 1/27/2010 10:28 AM, chenll wrote: > Hi, My server is on Windows 2003 64 bit, and is running GIS license > manager. Now, i need to install Tomcat for runing GeonetWork node and > Apatche for building another website. And i have gotten two doma

Re: Grails WAR file not working

2010-01-27 Thread AwTIn
anthonyvierra wrote: > > Did you list the version of JVM & Tomcat & OS from the server you are > having > trouble with, or from the desktop that is working? Your asking for help > but > not giving any info here > > On Wed, Jan 27, 2010 at 8:41 AM, AwTIn wrote: > >> >> >> >> n828cl wrote: >>

RE: CometProcessor proxied through Apache httpd

2010-01-27 Thread Robin Wilson
Stephen Byrne wrote: > Have you successfully used a CometProcessor behind an AJP proxy? I guess not. Sorry to waste your time... ;-) -- Robin D. Wilson Director of Web Development KingsIsle Entertainment, Inc. CELL: 512-426-3929 DESK: 512-623-5913 www.KingsIsle.com -

Re: tomcat memory usage

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 1/27/2010 11:28 AM, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >> Subject: Re: tomcat memory usage >> >> All Java objects and their associated data are stored >> within the heap. > > Well

RE: Supporting multiple hostnames with one TomCat?

2010-01-27 Thread Caldarale, Charles R
> From: Hare, Tim [mailto:tim.h...@ssrc.myflorida.com] > Subject: Supporting multiple hostnames with one TomCat? > > We are running TomCat on z/OS on an IBM mainframe I suspect you're running Tomcat; I'm not aware of any product named TomCat, at least not from Apache. > Is it possible to do thi

Supporting multiple hostnames with one TomCat?

2010-01-27 Thread Hare, Tim
We are running TomCat on z/OS on an IBM mainframe, but I don't think that's relevant to my issue (just including it for complete documentation). We are moving from some CGI scripts to servlets . On the old web server, we could code Exec/prodcgi_URL_value/*/prod_cgi_d

Re: Grails WAR file not working

2010-01-27 Thread anthonyvierra
Did you list the version of JVM & Tomcat & OS from the server you are having trouble with, or from the desktop that is working? Your asking for help but not giving any info here On Wed, Jan 27, 2010 at 8:41 AM, AwTIn wrote: > > > > n828cl wrote: > > > >> From: AwTIn [mailto:tanner.kl...@gmail.co

Re: CometProcessor proxied through Apache httpd

2010-01-27 Thread Stephen Byrne
Robin Wilson wrote: Where are you putting the ProxyPass (which file, where in the file)? Also, did you have this in the file somewhere before the ProxyPass: LoadModule proxy_ajp_module modules/mod_proxy_ajp.so AND... In your Apache "modules" directory, is there a 'mod_proxy_ajp.so' fil

RE: CometProcessor proxied through Apache httpd

2010-01-27 Thread Robin Wilson
Where are you putting the ProxyPass (which file, where in the file)? Also, did you have this in the file somewhere before the ProxyPass: LoadModule proxy_ajp_module modules/mod_proxy_ajp.so AND... In your Apache "modules" directory, is there a 'mod_proxy_ajp.so' file? Lastly, this is wh

RE: Grails WAR file not working

2010-01-27 Thread AwTIn
n828cl wrote: > >> From: AwTIn [mailto:tanner.kl...@gmail.com] >> Subject: RE: Grails WAR file not working >> >> Tomcat version: 5.5.7 > > That's over 4.5 years old, so it might be time to upgrade... > >> JVM: 1.5.0-b64 > > That's nearly 6 years old... > >> OS: Ubuntu > > Are you running

RE: tomcat memory usage

2010-01-27 Thread Caldarale, Charles R
> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: tomcat memory usage > > All Java objects and their associated data are stored > within the heap. Well... no. The OP's original question was about what was outside the -Xmx heap setting, and Class objects and the a

Re: tomcat memory usage

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hüsnü, On 1/27/2010 2:06 AM, Hüsnü Þentürk wrote: > As far as I know, heap memory is used by objects. On the other hand, > our application has static variables and references to the objects > residing in heap area. Does it mean, static variables and r

Re: CometProcessor proxied through Apache httpd

2010-01-27 Thread Stephen Byrne
Robin Wilson wrote: Have you tried using mod_proxy_ajp? ProxyPass /some/path ajp://tomcat.host.domain:8009/some/other/path Yes, I did try this, and got the same results as using RewriteRule - a 405 error. -- Robin D. Wilson Director of Web Development KingsIsle Entertainment, Inc. CELL: 51

RE: CometProcessor proxied through Apache httpd

2010-01-27 Thread Robin Wilson
Have you tried using mod_proxy_ajp? ProxyPass /some/path ajp://tomcat.host.domain:8009/some/other/path -- Robin D. Wilson Director of Web Development KingsIsle Entertainment, Inc. CELL: 512-426-3929 DESK: 512-623-5913 www.KingsIsle.com -Original Message- From: Stephen Byrne [mailto:ste

Re: CometProcessor proxied through Apache httpd

2010-01-27 Thread Filip Hanik - Dev Lists
On 01/27/2010 08:26 AM, Stephen Byrne wrote: Is there a way to get CometProcessor to work when proxying through Apache httpd? Here is what I have tried: I have an HttpServlet implementing CometProcessor. When I have a Tomcat connector like this: and I connect to it directly, everything work

Re: mod_jk codepage in header values

2010-01-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mirko, On 1/27/2010 3:02 AM, Mirko Solic wrote: > OK. He was my mistake i thought that mod_jk automatically takes > environment variables and puts them in header. But, yes, as you said > this is done by AAI. So right encoding should be done by AAI si

Tomcat+Apatche for two websites on one server

2010-01-27 Thread chenll
Hi, My server is on Windows 2003 64 bit, and is running GIS license manager. Now, i need to install Tomcat for runing GeonetWork node and Apatche for building another website. And i have gotten two domain name for both of them yet. My question is how to install and set up both of them on my se

CometProcessor proxied through Apache httpd

2010-01-27 Thread Stephen Byrne
Is there a way to get CometProcessor to work when proxying through Apache httpd? Here is what I have tried: I have an HttpServlet implementing CometProcessor. When I have a Tomcat connector like this: and I connect to it directly, everything works wonderfully - I get CometEvent.EventType.RE

RE: Tomcat manager

2010-01-27 Thread Toman, Chuck [Stock]
That was it. Thanks, Charles G. Toman Trend DBA T: +1 (919) 431 1792 * M: +1 (919) 524 8652 Customer Focused, Associate Driven. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, January 27, 2010 9:01 AM To: Tomcat Users List Subject: Re: Tomcat manager

Re: Tomcat manager

2010-01-27 Thread Mark Thomas
On 27/01/2010 09:58, Toman, Chuck [Stock] wrote: > I changed the config file and added manager and the UNIX account and > still not working. UNIX account information is not used by Tomcat. tomcat-users.xml is entirely separate. At a guess, you left the comments around the XML. Mark

Tomcat manager

2010-01-27 Thread Toman, Chuck [Stock]
I changed the config file and added manager and the UNIX account and still not working. You are not authorized to view this page. If you have not changed any configuration files, please examine the file conf/tomcat-users.xml in your installation. That file will contain the credentials to let yo

Admininistration

2010-01-27 Thread Toman, Chuck [Stock]
Cannot login to "Tomcat Manager", I added manager to config conf/tom-cat-users. xml file and user account and get a "401" error. You are not authorized to view this page. If you have not changed any configuration files, please examine the file conf/tomcat-users.xml in your installation. That fi

Re: FW: JNDIRealm and roleNested

2010-01-27 Thread Mark Thomas
On 26/01/2010 19:45, TahitianGabriel wrote: > > Hi Mark, > > Tomcat 6.0.24 has been released and the roleNested="true" still doesn't work > with roleSearch="(member={1})" > > Shall I open a bug in https://issues.apache.org/bugzilla bugzilla ? Please do. Also, if you are able to test any patch

Re: Global JNDI resource loaded from a webapp

2010-01-27 Thread Woonsan Ko
Hi Mark, Thanks for your comments. Please see my comments below. - Original Message > From: Mark Thomas > To: Tomcat Users List > Sent: Tue, January 26, 2010 11:19:33 PM > Subject: Re: Global JNDI resource loaded from a webapp > > On 26/01/2010 07:59, Woonsan Ko wrote: > > Does *glo

Re: [OT] Securing Tomcat Applications from Reverse Engineering

2010-01-27 Thread André Warnier
Dmitry Leskov wrote: So far only some aspects of code protection have been considered in this (off-)topic, namely preventing illegal use and protecting the code itself as a piece of intellectual property. However, there are at least two other scenarios that may make protection against reverse

RE: [OT] Securing Tomcat Applications from Reverse Engineering

2010-01-27 Thread Dmitry Leskov
So far only some aspects of code protection have been considered in this (off-)topic, namely preventing illegal use and protecting the code itself as a piece of intellectual property. However, there are at least two other scenarios that may make protection against reverse engineering desirable:

Re: mod_jk codepage in header values

2010-01-27 Thread Mirko Solic
> > According to André Warnier: > > > >> But, because the HTTP RFC specifies that HTTP headers > >> should contain only US-ASCII character data, mod_jk would be allowed, > >> if > >> it finds non-US-ASCII data in a HTTP header, to strip this data or > >> ignore the header or something like that.