tomcat-7.0.35-windows-x86 ON 64 bit UNIX

2013-02-25 Thread dkumar
Hi, I have downloaded apache-tomcat-7.0.35-windows-x86.zip and runiing it on 64 bit UNIX machine and it is working fine. Is it OK to run x86 setup on 64 bit UNIX machine? Please reply. Server version: Apache Tomcat/7.0.35 Server built: Jan 10 2013 10:52:49 Server number: 7.0.35.0 OS Name:

Re: Tomcat wont allow me to create files

2013-02-25 Thread Elias Kopsiaftis
Hi Ben, I didnt mention that but I did check that write permissions were on. Currently I dont have a log4j configuration. I am just trying to get it to work. On Mon, Feb 25, 2013 at 8:39 PM, Ben Stringer wrote: > > > On 26/02/2013, at 12:14 PM, Elias Kopsiaftis wrote: > > > I am running a weba

Re: Tomcat wont allow me to create files

2013-02-25 Thread Ben Stringer
On 26/02/2013, at 12:14 PM, Elias Kopsiaftis wrote: > I am running a webapp on Tomcat 7 and I am using log4j for logging. > However, log4j cannot create a log file and Im getting a permission denied > error in the catalina.out file. I am runnning on linux, and made sure that > the current worki

Re: Nessus scan claims vulnerability in Tomcat 6

2013-02-25 Thread Mark Thomas
On 25/02/2013 08:42, Robert Klemme wrote: Hi there, I have been confronted with a Nessus scan result which claims vulnerability to exploit "TLS CRIME". Plugin 62565 allegedly has found this and the report states: "The remote service has one of two configurations that are known to be required fo

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Howard W. Smith, Jr.
On Feb 25, 2013 5:41 PM, "Caldarale, Charles R" wrote: > > > From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] > > Subject: Re: JAVA_OPTS catalina.bat vs tomcat7w.exe > > > can you please clarify 'the server is open to abuse from pretty much anyone > > who can reach it'? > > The key phras

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Caldarale, Charles R
> From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] > Subject: Re: JAVA_OPTS catalina.bat vs tomcat7w.exe > can you please clarify 'the server is open to abuse from pretty much anyone > who can reach it'? The key phrase is "anyone who can reach it". If everyone within your firewall is

Re: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Howard W. Smith, Jr.
On Mon, Feb 25, 2013 at 3:08 PM, Howard W. Smith, Jr. < smithh032...@gmail.com> wrote: > > can you please clarify 'the server is open to abuse from pretty much > anyone who can reach it'? can you refer to me a blog or an article that > discusses app abuse via jmx? i have hardware firewall in place

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
>-Original Message- >From: Howard W. Smith, Jr. [mailto:smithh032...@gmail.com] >Subject: Re: JAVA_OPTS catalina.bat vs tomcat7w.exe > >Chuck, I have similar settings, and so far, so good (no abuse/attack), and I >recently re-added jmx settings in tomcat7w.exe for my app...just to routinely

Re: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Howard W. Smith, Jr.
On Mon, Feb 25, 2013 at 2:42 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] > > Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe > > > -Dcom.sun.management.jmxremote=true > > -Dcom.sun.management.jmxremote.port

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Caldarale, Charles R
> From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] > Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe > If running Tomcat 7.0.37 as a windows service, and using the tomcat7w.exe > to set the options, are these wrong? > -Dcatalina.base=C:\ApacheTomcat\apache-tomcat-7.0.37 > -

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
>-Original Message- >From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] >Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe > >If running Tomcat 7.0.37 as a windows service, and using the tomcat7w.exe to >set the options, are these wrong? > >Java Options: >-Dcatalina.base=

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
>-Original Message- >From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] >Subject: RE: JAVA_OPTS catalina.bat vs tomcat7w.exe > >> From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] >> Subject: JAVA_OPTS catalina.bat vs tomcat7w.exe > >> What is the difference bet

RE: JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Caldarale, Charles R
> From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] > Subject: JAVA_OPTS catalina.bat vs tomcat7w.exe > What is the difference between setting Java_OPTS in catalina.bat vs using > the tomcat7w.exe with -D options in the Java Tab if you installed Tomcat > as a windows service? T

JAVA_OPTS catalina.bat vs tomcat7w.exe

2013-02-25 Thread Leo Donahue - RDSA IT
If I've asked this question before, my apologies. What is the difference between setting Java_OPTS in catalina.bat vs using the tomcat7w.exe with -D options in the Java Tab if you installed Tomcat as a windows service? Leo

Nessus scan claims vulnerability in Tomcat 6

2013-02-25 Thread Robert Klemme
Hi there, I have been confronted with a Nessus scan result which claims vulnerability to exploit "TLS CRIME". Plugin 62565 allegedly has found this and the report states: "The remote service has one of two configurations that are known to be required for the CRIME attack: - SSL / TLS compression

[ANN] Apache Tomcat Maven plugin 2.1

2013-02-25 Thread Olivier Lamy
Hi, The Apache Tomcat is pleased to announce the release of the 2.1 version. This plugin can used to run your war project inside an embeded Apache Tomcat and to deploy your project to a running Apache Tomcat instance. Documentation available: http://tomcat.apache.org/maven-plugin-2.1/index.html

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Ognjen Blagojevic
André, On 25.2.2013 14:53, André Warnier wrote: Yes, but as soon as Tomcat would try to write to (or read from) that connection, it would immediately get an error, no ? So to say that in the meantime "tomcat keeps on trying" one of these connections doesn't seem to fit, or ? In regular situat

Re: A pool question

2013-02-25 Thread Daniel Mikusa
On Feb 25, 2013, at 3:52 AM, Jukka Ruohonen wrote: > Hello. > > A question related to pools. Background: a big application in which it is > preferable to enforce different roles for different databases and tables. > This implies that there are different user names and passwords for different > c

Re: Webapp reload corrupts Tomcat

2013-02-25 Thread Daniel Mikusa
On Feb 24, 2013, at 9:27 PM, Kirill Ilyukhin wrote: > > On 25.02.2013 2:10, Daniel Mikusa wrote: >> On Feb 24, 2013, at 11:48 AM, Kirill Ilyukhin wrote: >> >>> On Feb 22, 2013, at 22:32 , Daniel Mikusa wrote: >>> On Feb 22, 2013, at 12:09 AM, Kirill Ilyukhin wrote: > Hi! >

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread André Warnier
Ognjen Blagojevic wrote: André, On 25.2.2013 10:34, André Warnier wrote: So, on the face of it, there seems to be a contradiction between you saying on the one hand that the LDAP server closes the connection, and on the other hand that netstat shows the connection still being active. TCP conn

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Ognjen Blagojevic
André, On 25.2.2013 10:34, André Warnier wrote: So, on the face of it, there seems to be a contradiction between you saying on the one hand that the LDAP server closes the connection, and on the other hand that netstat shows the connection still being active. TCP connection is established unti

Re: Tomcat(7.0.35) vulnerability or issues

2013-02-25 Thread Ognjen Blagojevic
dkumar, On 25.2.2013 10:02, dku...@ccilindia.co.in wrote: We are upgrading the tomcat from version 6.0.18 to 7.0.35 Operating System Version : HP-UX 11.31 Please inform us if there are any known issues or any vulnerability on latest tomcat version of 7.0.35. 1. Good you are upgrading, 6.0.1

Re: Does windows authentication works on Tomcat under Linux.

2013-02-25 Thread Denis
It will be helpful for those who don't have time to try-and-fail. On 2/25/2013 2:10 PM, Mark Thomas wrote: On 25/02/2013 10:48, André Warnier wrote: Denis wrote: Hello, I want to use Tomcat's Windows Authentication

Re: Does windows authentication works on Tomcat under Linux.

2013-02-25 Thread Mark Thomas
On 25/02/2013 10:48, André Warnier wrote: Denis wrote: Hello, I want to use Tomcat's Windows Authentication feature to have a reliable domain user name via HTTPServletRequest.getRemoteUser() within my se

Re: Does windows authentication works on Tomcat under Linux.

2013-02-25 Thread André Warnier
Denis wrote: Hello, I want to use Tomcat's Windows Authentication feature to have a reliable domain user name via HTTPServletRequest.getRemoteUser() within my servlet. Questions: 1) Is Tomca

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Tanmoy Chatterjee
As I said, we do not have much visibility / access on the LDAP side to do a deep dive. Neither am I a networking expert but some more info on what actually happens (application - netstat log) when I say...tomcat(or JVM as you say) keeps on trying the 'broken' connection.. tcp0 81 ::f

Does windows authentication works on Tomcat under Linux.

2013-02-25 Thread Denis
Hello, I want to use Tomcat's Windows Authentication feature to have a reliable domain user name via HTTPServletRequest.getRemoteUser() within my servlet. Questions: 1) Is Tomcat's Windows au

Re: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread André Warnier
Tanmoy Chatterjee wrote: We are not using openldap but eDirectory. Unfortunately we do not have access to the ldap configurations...only information we have is that after about 2 mins of idle connection, ldap drops the same from its side. Bit if we see in app server side using netstat, we can

Re: tomcat7 & tomcat6 session replication

2013-02-25 Thread Son Nguyen Xuan
thanks for your answer >It might work in some circumstances. do you mean it will work with some modification?? do you have any suggestion for those modification? thank you very much 2013/2/25 Mark Thomas > On 25/02/2013 04:24, Son Nguyen Xuan wrote: > > I want to know how can I have the sessio

Re: tomcat7 & tomcat6 session replication

2013-02-25 Thread Mark Thomas
On 25/02/2013 04:24, Son Nguyen Xuan wrote: > I want to know how can I have the session replication working between > tomcat6 & tomcat7 under JRE7 That is not supported. It might work in some circumstances. Mark - To unsubscrib

RE: Question regarding JNDIRealm - tomcat 6.0.35

2013-02-25 Thread Tanmoy Chatterjee
We are not using openldap but eDirectory. Unfortunately we do not have access to the ldap configurations...only information we have is that after about 2 mins of idle connection, ldap drops the same from its side. Bit if we see in app server side using netstat, we can still see the same connecti

Tomcat(7.0.35) vulnerability or issues

2013-02-25 Thread dkumar
Dear All, We are upgrading the tomcat from version 6.0.18 to 7.0.35 Operating System Version : HP-UX 11.31 Please inform us if there are any known issues or any vulnerability on latest tomcat version of 7.0.35. Thanks and Regards Deepak Kumar "Disclaimer and confidentiality clause - This me

Tomcat6 j_security_check any parameter / sessions variable on failure?

2013-02-25 Thread Tanmoy Chatterjee
Hello, Tech Stack: Tomcat: 6.0.35 Java: 1.6.0_18 OS: RHEL 5.3 I am using j_security_check (JNDIRealm - LDAP authentication). On failure I am sending the user to a common error.jsp in the application. On successful authentication of-course the page requested is displayed.

A pool question

2013-02-25 Thread Jukka Ruohonen
Hello. A question related to pools. Background: a big application in which it is preferable to enforce different roles for different databases and tables. This implies that there are different user names and passwords for different connections. As I understand, there are two options for connectio