RE: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread ohaya
"Caldarale wrote: > > From: oh...@cox.net [mailto:oh...@cox.net] > > Subject: Re: Do any of the Tomcat LDAP-type realms support "no password" > > authentication? > > > In my sniffer, I can see the REMOTE_USER set to the hard-coded > > string, but in my test JSP on Tomcat, there getUserPr

RE: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread Caldarale, Charles R
> From: oh...@cox.net [mailto:oh...@cox.net] > Subject: Re: Do any of the Tomcat LDAP-type realms support "no password" > authentication? > In my sniffer, I can see the REMOTE_USER set to the hard-coded > string, but in my test JSP on Tomcat, there getUserPrincipal() > is returning null. I've

RE: Logging - including host name in log file?

2011-12-01 Thread Caldarale, Charles R
> From: Jerry Malcolm [mailto:2ndgenfi...@gmail.com] > Subject: Re: Logging - including host name in log file? > Where should the properties file be located? All of the > docs say it should be in /common/classes. What docs are those? Please be specific, because they're wrong and need correct

RE: Form-based Login question

2011-12-01 Thread Caldarale, Charles R
> From: Jerry Malcolm [mailto:2ndgenfi...@gmail.com] > Subject: Re: Form-based Login question > Before I start, any words of advice for migrating? Should > it be relatively painless It's pretty painless, if your webapps are well-behaved. Tomcat 7 is better at detecting errors (e.g., memory l

Re: Form-based Login question

2011-12-01 Thread Jerry Malcolm
Ouch... you said a curse word "Upgrade" :-) I know I've needed to do it for a long time now... I'm still on 5.5. But if it ain't broke You've at least given me a good excuse to dive in and upgrade to get this login feature. Before I start, any words of advice for migrating? Should i

Re: Logging - including host name in log file?

2011-12-01 Thread Jerry Malcolm
Thanks so much, Chris. Yes, I did see those lines in the properties file. But it didn't have a lot of explanation. Thanks for the clarification. Where should the properties file be located? All of the docs say it should be in /common/classes. But in my install, it's in /conf. At the risk of o

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread ohaya
oh...@cox.net wrote: > > oh...@cox.net wrote: > > > > "André Warnier" wrote: > > > oh...@cox.net wrote: > > > > "André Warnier" wrote: > > > >> oh...@cox.net wrote: > > > >>> Hi, > > > >>> > > > >>> I'm new here, and hope that someone can help. > > > >>> > > > >>> I was

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread ohaya
oh...@cox.net wrote: > > "André Warnier" wrote: > > oh...@cox.net wrote: > > > "André Warnier" wrote: > > >> oh...@cox.net wrote: > > >>> Hi, > > >>> > > >>> I'm new here, and hope that someone can help. > > >>> > > >>> I was wondering if any of the LDAP-type realms (e.g., JND

Re: Form-based Login question

2011-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerry, On 12/1/11 9:30 PM, Jerry Malcolm wrote: > I have been using form-based auth for several years. I understand > the challenge concept where TC puts up the pre-defined login page > when the first page requiring auth is requested. But I have a >

Re: Logging - including host name in log file?

2011-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerry, On 12/1/11 9:21 PM, Jerry Malcolm wrote: > I'm trying to get my hands around the whole tomcat logging system. > I've read the docs, wikis, samples, etc. But I still struggling a > bit. I've been just using System.out.println for years, and it

Form-based Login question

2011-12-01 Thread Jerry Malcolm
I have been using form-based auth for several years. I understand the challenge concept where TC puts up the pre-defined login page when the first page requiring auth is requested. But I have a slightly different situation. I want all of my non-protected pages (guest-level) to include the id/pw

Logging - including host name in log file?

2011-12-01 Thread Jerry Malcolm
I'm trying to get my hands around the whole tomcat logging system. I've read the docs, wikis, samples, etc. But I still struggling a bit. I've been just using System.out.println for years, and it's getting totally out of control. So time to learn tomcat logging. Basically, I host quite a few d

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread ohaya
Mark Thomas wrote: > On 01/12/2011 18:17, oh...@cox.net wrote: > > Having said all of that, I guess that my question has changed > > somewhat. Specifically, now I'm wondering: With what I described > > above, and with my valve as described above, does the asserted user > > NOT have to be

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread ohaya
"André Warnier" wrote: > oh...@cox.net wrote: > > "André Warnier" wrote: > >> oh...@cox.net wrote: > >>> Hi, > >>> > >>> I'm new here, and hope that someone can help. > >>> > >>> I was wondering if any of the LDAP-type realms (e.g., JNDIRealm, etc.) > >>> support an authentication m

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 12/1/11 9:50 AM, Mark H. Wood wrote: > On Thu, Dec 01, 2011 at 12:38:01PM +0100, Mikolaj Rydzewski wrote: >> On the other hand, increasing java heap size is not always the >> best option. It heavily depends on memory usage pattern in your >>

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mikolaj, On 12/1/11 6:38 AM, Mikolaj Rydzewski wrote: > On Thu, 1 Dec 2011 12:29:14 +0100, Casper Wandahl Schmidt wrote: > >> That didn't quite help me understand, because how can the OS map >> from ie. 0-4GB to 4-8GB (the window is moved) when it ca

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Casper, On 12/1/11 3:39 AM, Casper Wandahl Schmidt wrote: > Aha so I learned something new today :) I'm still puzzled as to > how a 32 bit CPU can compute and fetch a memory cell with address > above 4GB since it cannot hold this large value. OS != C

Re: Antw.: how to properly configure tomcat 7 cluster with BackupManager

2011-12-01 Thread Filip Hanik - Dev Lists
http://www.datadisk.co.uk/html_docs/java_app/tomcat6/tomcat6_clustering.htm http://tomcat.apache.org/tomcat-6.0-doc/cluster-howto.html http://tomcat.apache.org/tomcat-6.0-doc/tribes/introduction.html On 10/27/2011 9:29 AM, juergen.l...@gmail.com wrote: Hi Mark, thanks a lot for this clarificatio

Re: Tomcat 7 + exception while adding cookies

2011-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 12/1/11 4:29 AM, Pid wrote: > On 01/12/2011 04:38, Debraj Mallick wrote: >> hi Christopher, >> >> my tomcat version is : 7.0.14 working on Window7 with JDK 1.6 > > Can you try again with at least 7.0.21? +1 There are 9 releases between you

Re: Logging

2011-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thom, On 12/1/11 9:39 AM, Thom Hehl wrote: > I'm not sure. Whichever log file the stack traces goto. Yes, > they're writing to a local drive. Yes as a windows service which > came with the installer. As Pid says, it's all configurable. The log files

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread André Warnier
oh...@cox.net wrote: "André Warnier" wrote: oh...@cox.net wrote: Hi, I'm new here, and hope that someone can help. I was wondering if any of the LDAP-type realms (e.g., JNDIRealm, etc.) support an authentication mode where no password or credentials are required? In other words, wher

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread Mark Thomas
On 01/12/2011 18:17, oh...@cox.net wrote: > Having said all of that, I guess that my question has changed > somewhat. Specifically, now I'm wondering: With what I described > above, and with my valve as described above, does the asserted user > NOT have to be in the Tomcat realm at all? Correct.

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread ohaya
"André Warnier" wrote: > oh...@cox.net wrote: > > Hi, > > > > I'm new here, and hope that someone can help. > > > > I was wondering if any of the LDAP-type realms (e.g., JNDIRealm, etc.) > > support an authentication mode where no password or credentials are > > required? In other word

Re: Tomcat Logging and HTTP Header question

2011-12-01 Thread jmpaul012
Sorry, the only acronym I really used was STIG, but I probably shouldn'tve included that in the question since it isn't really relavent to the question. STIGs are security proceduers the govt has to lock down their software, servers, etc. awarnier wrote: > > jmpaul012 wrote: >> So I am doing T

Re: Problems with forwaring HTTP to HTTPS

2011-12-01 Thread Gregor S.
Marc, thanks for your comment and thanks for pointing me to the right direction. I guess this one is the matching excerpt from the specs: = [snip ] The combination of user-data-constraints that apply to a common urlpattern and http-method shall yield the union of connection types ac

Re: Tomcat 7 + exception while adding cookies

2011-12-01 Thread Mark Thomas
On 01/12/2011 15:49, Martin Kuen wrote: > I first blamed eclipse wtp doing sth. wrong when applying the > configuration. Therefore, I checked the connector's jmx properties and to > my surprise I could no longer find a property called "maxHttpHeaderSize" > for the connector (comparing tc 6 to 7).

Re: Logging

2011-12-01 Thread Pid
On 01/12/2011 14:39, Thom Hehl wrote: > I'm not sure. Whichever log file the stack traces goto. Yes, they're writing > to a local drive. Yes as a windows service which came with the installer. Well, given that this is configurable, it could be anywhere... You could find out & let us know. A pre

Re: Tomcat 7 + exception while adding cookies

2011-12-01 Thread Martin Kuen
Hi Mallick, hi all, To me it appears this setting is ignored by tc 7.0.x. I created a servlet: protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { request.getSession().invalidate(); final int NUM_COOKIES = 500; for (int i = 0; i

RE: Problems with forwaring HTTP to HTTPS

2011-12-01 Thread markt
Jeffrey Janner wrote: >I might be a little off You are a long way off and also need to read the Servlet 2.5 spec. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h.

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread Marvin Addison
> I was wondering if any of the LDAP-type realms (e.g., JNDIRealm, etc.) > support an authentication mode where no password or credentials are required? It's hard to imagine a valid use case for this -- I hope you know what you're doing. That said, you could use JAASRealm with http://code.google

Re: Logging

2011-12-01 Thread Pid
On 01/12/2011 14:10, Pid wrote: > On 01/12/2011 14:01, Thom Hehl wrote: >> I'm looking for stack traces. People report defects and we get a stack trace >> and I need to see it in the log, but instead, the log is still in the >> buffer. Usually I have to shutdown the server and start it back up to

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Mark H. Wood
On Thu, Dec 01, 2011 at 12:38:01PM +0100, Mikolaj Rydzewski wrote: > On the other hand, increasing java heap size is not always the best > option. It heavily depends on memory usage pattern in your application. > In general: the bigger heap, the longer GC will run. I was thinking that someone

RE: Problems with forwaring HTTP to HTTPS

2011-12-01 Thread Jeffrey Janner
I might be a little off (and I'm sure Pid or Chuck will correct me), but security-constraints are applied based on matching url-patterns, and you're using the same pattern in both places. Therefore, the webapp's definition will take precedence over the global. Looks like it is best to bite the b

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Mark H. Wood
The OS has little to do with the calculation. The CPU hardware is doing it. The processor's address logic uses registers which are wider than 32 bits. Just as you can add a 1-digit number to a 3-digit number and get a 3-digit result, the widget that maps a process' virtual address space to the h

Re: Problems with forwaring HTTP to HTTPS

2011-12-01 Thread Mark Thomas
On 30/11/2011 18:32, Gregor S. wrote: > My understanding was, that in the global web.xml > ($catalina.home/conf/web.xml) the defaults are specified and promoted > to all webapps. But it seems as the webapp doesn't inherit the element > from the global web.xml if it specifies it's > own - my expec

RE: Logging

2011-12-01 Thread Thom Hehl
I'm not sure. Whichever log file the stack traces goto. Yes, they're writing to a local drive. Yes as a windows service which came with the installer. -Original Message- From: Daniel Mikusa [mailto:dmik...@vmware.com] Sent: Thursday, December 01, 2011 9:38 AM To: Tomcat Users List Subjec

RE: Logging

2011-12-01 Thread Daniel Mikusa
On Thu, 2011-12-01 at 06:01 -0800, Thom Hehl wrote: > I'm looking for stack traces. People report defects and we get a stack trace > and I need to see it in the log, but instead, the log is still in the buffer. > Usually I have to shutdown the server and start it back up to get the log > entries

Re: Tomcat Logging and HTTP Header question

2011-12-01 Thread André Warnier
jmpaul012 wrote: So I am doing Tomcat STIGS and I am stuck on two of the STIGs. It would be nice to explain acronyms, so that nincompoops like me would understand what's going on without consulting Wikipedia.. 1. How do I change what tomcat logs? I think it's something I need to do in se

Re: timeout exception is ignored?

2011-12-01 Thread Konstantin Kolinko
2011/12/1 Ronald Klop (Mailing List) : > Hi, > > The method org.apache.catalina.connector.Request.parseParameters() contains > this code. > >               try { >                    if (readPostBody(formData, len) != len) { >                        return; >                    } >                }

RE: Logging

2011-12-01 Thread Thom Hehl
I'm looking for stack traces. People report defects and we get a stack trace and I need to see it in the log, but instead, the log is still in the buffer. Usually I have to shutdown the server and start it back up to get the log entries. I'd just like to be able to flush the logs without shuttin

Tomcat Logging and HTTP Header question

2011-12-01 Thread jmpaul012
So I am doing Tomcat STIGS and I am stuck on two of the STIGs. 1. How do I change what tomcat logs? I think it's something I need to do in server.xml but I'm not sure. This is what I need to log: • Date, Time • IP address of the host that initiated the request • User ID supplied for HTTP auth

Re: Logging

2011-12-01 Thread Pid
On 01/12/2011 13:03, Thom Hehl wrote: > > > -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Wednesday, November 30, 2011 6:15 PM > To: Tomcat Users List > Subject: Re: Logging > > Thom, > > On 11/30/11 1:04 PM, Thom Hehl wrote: >>> I'm using

RE: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Caldarale, Charles R
> From: André Warnier [mailto:a...@ice-sa.com] > Subject: Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows > platform > > In general: the bigger heap, the longer GC will run. Not strictly true, and hasn't been true for many years. GC time is proportional to the number of l

RE: Logging

2011-12-01 Thread Thom Hehl
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, November 30, 2011 6:15 PM To: Tomcat Users List Subject: Re: Logging -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thom, On 11/30/11 1:04 PM, Thom Hehl wrote: >> I'm using VI to reading

timeout exception is ignored?

2011-12-01 Thread Ronald Klop (Mailing List)
Hi, The method org.apache.catalina.connector.Request.parseParameters() contains this code. try { if (readPostBody(formData, len) != len) { return; } } catch (IOException e) { // Cl

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread André Warnier
Mikolaj Rydzewski wrote: On Thu, 1 Dec 2011 12:29:14 +0100, Casper Wandahl Schmidt wrote: That didn't quite help me understand, because how can the OS map from ie. 0-4GB to 4-8GB (the window is moved) when it can only use a 32bit register to tell the machine where to look in the psysical memor

RE: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Mikolaj Rydzewski
On Thu, 1 Dec 2011 12:29:14 +0100, Casper Wandahl Schmidt wrote: That didn't quite help me understand, because how can the OS map from ie. 0-4GB to 4-8GB (the window is moved) when it can only use a 32bit register to tell the machine where to look in the psysical memory, that is where my knowl

RE: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Casper Wandahl Schmidt
-Original Message- From: Francis GALIEGUE [mailto:f...@one2team.com] Sent: 1. december 2011 12:33 To: Tomcat Users List Subject: Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform On Thu, Dec 1, 2011 at 12:29, Casper Wandahl Schmidt wrote: [...] > > That di

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Francis GALIEGUE
On Thu, Dec 1, 2011 at 12:29, Casper Wandahl Schmidt wrote: [...] > > That didn't quite help me understand, because how can the OS map from ie. > 0-4GB to 4-8GB (the window is moved) when it can only use a 32bit register > to tell the machine where to look in the psysical memory, that is where my

RE: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Casper Wandahl Schmidt
-Original Message- From: Ronald Klop (Mailing List) [mailto:ronald-mailingl...@base.nl] Sent: 1. december 2011 12:06 To: Tomcat Users List Subject: Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform Op donderdag, 1 december 2011 09:39 schreef Casper Wandahl

Re: [OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Ronald Klop (Mailing List)
Op donderdag, 1 december 2011 09:39 schreef Casper Wandahl Schmidt : See below. I hope MS Outlook does some decent indend so my response is clear -.- -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 30. november 2011 18:51 To: Tomcat

Re: Changing session timeout for a webapp via JMX or internal Tomcat API?

2011-12-01 Thread Pid
On 30/11/2011 11:14, Ellecer Valencia wrote: > Thanks Igor. I made a mistake though. I actually meant "modifying web.xml > and restarting the webapp." > > We want to find a way to change session timeouts - even for existing > sessions - without doing a restart of the webapp. I don't see an obvi

Re: Connection has been abanded

2011-12-01 Thread Pid
On 30/11/2011 21:15, János Löbb wrote: > Hi, > > IT is Mac OSX 10.6.8 > java -version > java version "1.6.0_20" > Java(TM) SE Runtime Environment (build 1.6.0_20-b02-279-10M3065) > Java HotSpot(TM) 64-Bit Server VM (build 16.3-b01-279, mixed mode) > tomcat is 7.0.21 > database is Sybase ASE 15

Re: Logging

2011-12-01 Thread Pid
On 30/11/2011 23:14, Christopher Schultz wrote: > Thom, > > On 11/30/11 1:04 PM, Thom Hehl wrote: >> I'm using VI to reading the log file. I running a Windows RDP. > > Are you using 'vi' in a way that allows it to get updates from the > file? I'm no 'vi' expert, but I'm sure it reads the entire f

Re: Tomcat 7 + exception while adding cookies

2011-12-01 Thread Pid
On 01/12/2011 04:38, Debraj Mallick wrote: > hi Christopher, > > my tomcat version is : 7.0.14 > working on Window7 with JDK 1.6 Can you try again with at least 7.0.21? p > On Thu, Dec 1, 2011 at 4:45 AM, Christopher Schultz < > ch...@christopherschultz.net> wrote: > > Debraj, > > On 11/30/

Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?

2011-12-01 Thread André Warnier
oh...@cox.net wrote: Hi, I'm new here, and hope that someone can help. I was wondering if any of the LDAP-type realms (e.g., JNDIRealm, etc.) support an authentication mode where no password or credentials are required? In other words, where just a userID/username is presented, and if that u

[OT]RE: Maximum memory that can be assigned to Tomcat on windows platform

2011-12-01 Thread Casper Wandahl Schmidt
See below. I hope MS Outlook does some decent indend so my response is clear -.- -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 30. november 2011 18:51 To: Tomcat Users List Subject: Re: Maximum memory that can be assigned to Tomcat on windows pla