Re: Do objects in session always need to be serializable?

2011-04-20 Thread Thomas Strauß
Am 20.04.2011 um 07:41 schrieb Mukarram Baig: Hello Guys, Hello, I will not comment on the low memory feature, as I don't know it, but if you do not enable serialization on your session objects and shutdown or reload an app, the sessions will get persisted and you get an exception telling

AW: Restarting Tomcat Threads

2011-04-20 Thread Thomas Strauß
Mit freundlichen Grüßen Thomas Strauß Geschäftsführer Entwicklung SRS PaperDynamixR DIGITAL SCHON AUF DEM PAPIER SRS-Management GmbH Berliner Ring 93 64625 Bensheim T +49 6251 85 424 - 20 F +49 6251 85 424 - 14 M +49 174 2110912 www.srs-management.de www.srs-paperdynamix.de HRB 25262 AG

Why can't Tomcat find class org.apache.tomcat.jdbc.pool DataSourceFactory?

2011-04-20 Thread dunnlow
So, I'm investigating moving away from an oracleconnectionpool and using the tomcat connection pool. I followed the myriad of examples for configuring the Resource in the server.xml. Found great info here (http://people.apache.org/~fhanik/tomcat/jdbc-pool.html) However, when I start tomcat, I

Re: [OT] Protecting against HTTP response splitting

2011-04-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 4/19/2011 4:37 AM, Konstantin Kolinko wrote: 2011/4/19 Christopher Schultz ch...@christopherschultz.net: Looks like I must override sendRedirect because otherwise the setHeader call implemented in Response.sendRedirect isn't

Re: Fix the cookie path with mod_jk

2011-04-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 4/19/2011 6:53 PM, André Warnier wrote: Getting back to the original issue, Thomas seems to be right when he says that if the cookie path is set to /foo, the browser will return it also for URLs such as /foobar and /foofoo. From the

RE: Why can't Tomcat find class org.apache.tomcat.jdbc.pool DataSourceFactory?

2011-04-20 Thread Propes, Barry L
Dunlow, I have this in mine (driver attribute) driverClassName=oracle.jdbc.driver.OracleDriver But also, it could be that you've got the oracle jdbc jar file in more than one directory. That happened to me and I was getting very unstable error messages I could not account for, and it was

Re: Do objects in session always need to be serializable?

2011-04-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mukarram, On 4/20/2011 1:41 AM, Mukarram Baig wrote: We are using tomcat in a non-clustered environment. We put certain domain objects in the session [...]. The domain objects are not serializable. No problem: there is no requirement that session

Re: Why can't Tomcat find class org.apache.tomcat.jdbc.pool DataSourceFactory?

2011-04-20 Thread Filip Hanik - Dev Lists
download tomcat-jdbc.jar from http://people.apache.org/~fhanik/jdbc-pool/ and put it in your lib directory Filip On 4/20/2011 7:38 AM, dunnlow wrote: So, I'm investigating moving away from an oracleconnectionpool and using the tomcat connection pool. I followed the myriad of examples for

Re: [OT] Protecting against HTTP response splitting

2011-04-20 Thread Konstantin Kolinko
2011/4/20 Christopher Schultz ch...@christopherschultz.net: I was considering scouring the URL/URI specs for exactly what characters are allowed but then decided that I didn't really care: I was mostly concerned with thwarting a response-splitting attack and avoiding \r and \n does that. See

Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.

2011-04-20 Thread Jin H
Don't know what is happening but I keep getting NDR's for my reply's to this group. So in case it didn't get through: Crypto.Sal thank you so much. It works!! Openssl was so much simpler than the jdk keytool. I just wanted to share some quirks I ran into when installing the SSL on APR

Re: Do objects in session always need to be serializable?

2011-04-20 Thread Mukarram Baig
Thanks for the responses Thomas and Chris. To clarify, the application is not being defined as being distributable in my web.xml. The exceptions that I am seeing here are not at webapp restarts (we basically have very infrequent application restarts and we can afford to lose out on the user

Re: Do objects in session always need to be serializable?

2011-04-20 Thread Thomas Strauß
Am 20.04.2011 um 19:43 schrieb Mukarram Baig: Thanks for the responses Thomas and Chris. To clarify, the application is not being defined as being distributable in my web.xml. The exceptions that I am seeing here are not at webapp restarts (we basically have very infrequent application

AJPv13 extensions

2011-04-20 Thread Jordan Michaels
Are there any plans to implement the AJPv13 extensions at any point? I'm sure I can't be the only one who's anxious to see those implemented some time. Just curious. =) -Jordan - To unsubscribe, e-mail:

RE: To re-write URLs, is there a better solution than www.zlatkovic.com/httpredirectfilter.en.html ?

2011-04-20 Thread Caldarale, Charles R
From: Brian Braun [mailto:brianbr...@gmail.com] Subject: To re-write URLs, is there a better solution than www.zlatkovic.com/httpredirectfilter.en.html ? I'm using this solution to apply URL rewrite in my app: www.zlatkovic.com/httpredirectfilter.en.html I'm wondering if there is a better

Re: To re-write URLs, is there a better solution than www.zlatkovic.com/httpredirectfilter.en.html ?

2011-04-20 Thread Brian Braun
Thanks a lot! MAY GOD BLESS THE INTERNET. On Wed, Apr 20, 2011 at 7:53 PM, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Brian Braun [mailto:brianbr...@gmail.com] Subject: To re-write URLs, is there a better solution than www.zlatkovic.com/httpredirectfilter.en.html ?

Re: Fix the cookie path with mod_jk

2011-04-20 Thread Thomas Freitag
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi André, On 04/20/2011 12:53 AM, André Warnier wrote: Fixing/altering outgoing (response) headers is beyond the functionality of mod_rewrite. The other parts work with mod_rewrite, but mod_headers (with its edit functionality) is an important