Re: basic auth required on https but not required on http

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 2/20/13 1:40 PM, André Warnier wrote: > Andrew Winter wrote: >> On Wed, Feb 20, 2013 at 5:13 AM, André Warnier >> wrote: Okay, I have this resolved, now. I went with the FORM >> authentication method and created a servlet that will creat

Re: simple authentication question

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 2/20/13 4:20 PM, André Warnier wrote: > In relation to a couple of recent posts, I have a naive question : > > In a servlet, to retrieve the authenticated user-id (if any), I > use > > String userName = request.getRemoteUser(); > > Now,

[OT] Tomcat upgrade 7.0.35 -> 7.0.37, SSL/TLS handshake failure

2013-02-20 Thread Ognjen Blagojevic
Hi, I just wanted to report a problem with JSSE TLS/SSL handshake that became obvious only after I upgraded Tomcat from 7.0.35 to 7.0.37. Server: Tomcat 7.0.37, BIO Connector, Oracle JDK 1.7.0_xx (e.g. _09) Client: Java TLS/SSL client, e.g. [1], Oracle JDK 1.6.0_xx (e.g. _35) Exception is:

Re: simple authentication question

2013-02-20 Thread Mark Thomas
On 20/02/2013 21:20, André Warnier wrote: > Hi. > In relation to a couple of recent posts, I have a naive question : > > In a servlet, to retrieve the authenticated user-id (if any), I use > > String userName = request.getRemoteUser(); > > Now, suppose I wanted to create a servlet filter which (

simple authentication question

2013-02-20 Thread André Warnier
Hi. In relation to a couple of recent posts, I have a naive question : In a servlet, to retrieve the authenticated user-id (if any), I use String userName = request.getRemoteUser(); Now, suppose I wanted to create a servlet filter which (under certain conditions), would force the current reque

Re: GenericPrincipal . catalina 6.0.24

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Giulio, On 2/20/13 8:58 AM, Giulio Quaresima wrote: > I have a little [question] about the default Realm implementations > which comes with Tomcat. In particular, I refer to JAASRealm. > > I developed a JAAS LoginModule which populate the Subject

RE: Set context of web app to / tomcat7

2013-02-20 Thread Caldarale, Charles R
> From: Smith, Mitchell [mailto:mitchell.sm...@cwc.com] > Subject: Set context of web app to / tomcat7 > I am trying to set the context of the standard jira web app to / ; so my > url would be http://hostname:8080/ and this would load the jira application. Simply change the name of the webapp (.

Re: Set context of web app to / tomcat7

2013-02-20 Thread André Warnier
Smith, Mitchell wrote: Hi I am trying to set the context of the standard jira web app to / ; so my url would be http://hostname:8080/ and this would load the jira application. I have read the documentation, and found a couple of posts on this ( http://stackoverflow.com/questions/7276989/howto-s

Set context of web app to / tomcat7

2013-02-20 Thread Smith, Mitchell
Hi I am trying to set the context of the standard jira web app to / ; so my url would be http://hostname:8080/ and this would load the jira application. I have read the documentation, and found a couple of posts on this ( http://stackoverflow.com/questions/7276989/howto-set-the-context-path-of-a-

Re: No javax.servlet.error.query_string [servlet spec clarification]

2013-02-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 2/18/13 3:32 PM, Martin Grigorov wrote: > This is rather a question about Servlet specification. Is there a > reason why there is no javax.servlet.error.query_string ? That text does not appear anywhere in the Java Servlet Specification,

Re: basic auth required on https but not required on http

2013-02-20 Thread André Warnier
Andrew Winter wrote: On Wed, Feb 20, 2013 at 5:13 AM, André Warnier wrote: The standard modus operandi of this list is to not top-post (makes it more difficult to follow the logical flow of conversation). So I've copied your response and my further comments at end. Andrew Winter wrote: I

Re: basic auth required on https but not required on http

2013-02-20 Thread Andrew Winter
On Wed, Feb 20, 2013 at 5:13 AM, André Warnier wrote: > The standard modus operandi of this list is to not top-post (makes it more > difficult to follow the logical flow of conversation). > So I've copied your response and my further comments at end. > > >> Andrew Winter wrote: >>> >>> I work o

Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Daniel Mikusa
On Feb 20, 2013, at 3:52 AM, Zoran Avtarovski wrote: > Hi Guys, > > It's been a while but the nature of this problem means it may be a while > between crashes. But we just had a big one which hung the system and > required a reboot. Can you elaborate more on this? What OS are you running? What

Troubles with JNDI data source configuration in Tomcat6 - mentioning H2 and Jetty

2013-02-20 Thread Alexander Dümont
Hello, my name is Alexander Dümont and i have some troubles configuring a JNDI datasource for Tomcat6. Im sorry, if i can't find the right words, English is not my first language and this is my first shot asking others. I have two active configurations for the same java software project

GenericPrincipal - ERRATA

2013-02-20 Thread Giulio Quaresima
I am very sorry, this morning I got a ClassCastException GenericPrincipal > MyUserPrincipal, but now all works fine, and I don't know why. When I reproduce the problem I encountered earler, I will notice you. Bye

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Cédric Couralet
2013/2/20 Tanmoy Chatterjee : > Thanks Cédric, I will try this and let you know. > Once Ldap closes the connection from it's end, tomcat indeed keeps on trying > and finally establishes a new connectionbut the time spent in retrying > is too high (more than 4-5 minutes) and in that time...us

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Tanmoy Chatterjee
Thanks Cédric, I will try this and let you know. Once Ldap closes the connection from it's end, tomcat indeed keeps on trying and finally establishes a new connectionbut the time spent in retrying is too high (more than 4-5 minutes) and in that time...user cannot loginthe login page jus

RE: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
I solved my problem, I changed my web.xml to the following: PartNos /TNR/* GET POST admin secureconn CONFIDENTIAL converter-api

Re: Tomcat Client Authentication

2013-02-20 Thread Cédric Couralet
2013/2/20 : > Hello Cedric, > >>And look at the first line which could be Owner or Subject (I only have a >>french version at the moment which says Propriétaire:) > > (I created another Client-Cert) > I did it and it shows me: CN=User03, OU=Any, O=Company, L=City, ST=Something, > C=DE > > So I w

AW: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello Cedric, >And look at the first line which could be Owner or Subject (I only have a >french version at the moment which says Propriétaire:) (I created another Client-Cert) I did it and it shows me: CN=User03, OU=Any, O=Company, L=City, ST=Something, C=DE So I wrote: But still I get a 4

Re: Tomcat Client Authentication

2013-02-20 Thread Cédric Couralet
2013/2/20 : > Hello Mark, > > thank you for the quick answer! Could you explain, how I can change how to > derive the user name from the cert? I don't have a DN in my certificate (Only > E, CN, OU, O, L, S, C). This would be very great. > Hello, The different E, CN,... are elements which compos

AW: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello Mark, thank you for the quick answer! Could you explain, how I can change how to derive the user name from the cert? I don't have a DN in my certificate (Only E, CN, OU, O, L, S, C). This would be very great. Mit freundlichen Grüßen, Maximilian Schmidt -

Re: Tomcat Client Authentication

2013-02-20 Thread Mark Thomas
On 20/02/2013 12:01, maximilian-schm...@telekom.de wrote: And this is my tomcat-users.xml ("Maximilian Schmidt" is the CN of my client-certificate): By default, you have to use the DN not the CN. See X509UsernameRetrieverClassName in http://tomcat.apache.org/tom

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Cédric Couralet
2013/2/20 Tanmoy Chatterjee : > Hello Cédric, > The reason I want to do is as follows: > I am facing the problem already expressed in > https://issues.apache.org/bugzilla/show_bug.cgi?id=33774 > I see that the bug status shows as Fixed, however I still get the same Issue > on the Stack mentioned

Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Edson Richter
AFAIK, as best practice is recommended that if you have dedicated server, let -Xms as close as possible to -Xmx to avoid extra effort in releasing memory. I remember to read this information as recommended by Oracle (JRockit) and IBM (WebSphere) documentation (unfortunately, I don't have the

Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello dear Tomcat Users and Developers, I'm want my tomcat to use Client Authentication to check access of different users. I created all certs (HTTPS works) but if I connect with a Client and send my Client Cert I always get a 403 Error. I don't think it'S a problem of certificates but of the

Re: basic auth required on https but not required on http

2013-02-20 Thread Andrew Winter
On Feb 20, 2013 5:13 AM, "André Warnier" wrote: > > The standard modus operandi of this list is to not top-post (makes it more difficult to follow the logical flow of conversation). > So I've copied your response and my further comments at end. > > >> >>> Andrew Winter wrote: >>> I work on an

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Tanmoy Chatterjee
Hello Cédric, The reason I want to do is as follows: I am facing the problem already expressed in https://issues.apache.org/bugzilla/show_bug.cgi?id=33774 I see that the bug status shows as Fixed, however I still get the same Issue on the Stack mentioned earlier. Hence what I have done is that I

Re: basic auth required on https but not required on http

2013-02-20 Thread André Warnier
The standard modus operandi of this list is to not top-post (makes it more difficult to follow the logical flow of conversation). So I've copied your response and my further comments at end. Andrew Winter wrote: I work on an intranet type application. While on the local network calls are m

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-20 Thread Cédric Couralet
2013/2/19 Tanmoy Chatterjee : > Hello, > Technical Stack: Apache Tomcat v 6.0.35 > OS : RHEL 5.3 64 bits > java version "1.6.0_18" 32 bits > > I am using Realm className="org.apache.catalina.realm.JNDIRealm" for > connecting to LDAP. > > Is there any configuration to prevent the default connection

Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Zoran Avtarovski
Also, I forgot to add the details of the memory histogram: Heap Classes: 3,999, Instances: 6,333,516, Kilo-Bytes: 592,665 Class Size (Kb) % size Instances % instances int[]243,29641151,0842 char[]153,148251,699,59426 java.lang.String36,70861,174,68318 byte[]29,6505120,3661 java.lang.Ob

Re: Help in diagnosing server unresponsiveness

2013-02-20 Thread Zoran Avtarovski
Hi Guys, It's been a while but the nature of this problem means it may be a while between crashes. But we just had a big one which hung the system and required a reboot. I have changed the tomcat options as follows inline with all the advice and material I read to be as follows: -server -Xms1460