Re: multi-tenant web app

2013-04-18 Thread Rainer Frey
On 18.04.2013, at 15:37, Jeffrey Janner wrote: >> Here's a real world example of doing this, by JFRog regarding their >> Artifactory SAAS. Spoiler: the crucial point is putting as many >> dependencies as possible into the shared classloader (where "possible" >> is not as easy as it sounds: >> >>

Re: Tomcat 7.0 & spring web applcaiton context - Fedora 17

2013-04-18 Thread Mark Eggers
On 4/18/2013 8:20 PM, Khurram Raza wrote: -Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com] Sent: Thursday, April 18, 2013 9:55 PM To: users@tomcat.apache.org Subject: Re: Tomcat 7.0 & spring web applcaiton context - Fedora 17 On 4/18/2013 6:35 PM, Khurram Raza wrote:

RE: Tomcat 7.0 & spring web applcaiton context - Fedora 17

2013-04-18 Thread Khurram Raza
-Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com] Sent: Thursday, April 18, 2013 9:55 PM To: users@tomcat.apache.org Subject: Re: Tomcat 7.0 & spring web applcaiton context - Fedora 17 On 4/18/2013 6:35 PM, Khurram Raza wrote: > Hi, > > > > After spending days I am wri

Re: Access-log ordering

2013-04-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 4/18/13 6:30 PM, Mark Thomas wrote: > On 18/04/2013 22:58, Christopher Schultz wrote: >> So, this is my due diligence to determine if, in addition to the >> mountain of evidence we otherwise have, Tomcat does in fact log >> requests in th

Re: Tomcat 7.0 & spring web applcaiton context - Fedora 17

2013-04-18 Thread Mark Eggers
On 4/18/2013 6:35 PM, Khurram Raza wrote: Hi, After spending days I am writing my problem on this forum. The problem is when I undeploy a webapp or shutdown tomcat, spring WebApplicationContext is closed and spring singleton beans destroyed before webapp Servlet's destroy() method is called. T

security-role-ref doesn't work

2013-04-18 Thread Jakub 1983
my tomcat users: following code fails: Sample Application Require users to authenticate *.jsp POST GET adminLocal NONE adminLocal admin adminLocal if I change security-ro

Tomcat 7.0 & spring web applcaiton context - Fedora 17

2013-04-18 Thread Khurram Raza
Hi, After spending days I am writing my problem on this forum. The problem is when I undeploy a webapp or shutdown tomcat, spring WebApplicationContext is closed and spring singleton beans destroyed before webapp Servlet's destroy() method is called. This leads me to 'java.lang.IllegalStateExce

Re: conf/Catalina/localhost/myWebApp.xml context file disappears

2013-04-18 Thread Mark Thomas
On 17/04/2013 23:46, Jakub 1983 wrote: > I call ant task > > > > > application is called jdbc.war, and I create jdbc.xml in > conf/Catalina/localhost/ after I deploy war and previous jdbc.xml > disappears - I create it on running tomcat. When exactly do you create jdbc.xml? Can

Re: Access-log ordering

2013-04-18 Thread Mark Thomas
On 18/04/2013 22:58, Christopher Schultz wrote: > So, this is my due diligence to determine if, in addition to the > mountain of evidence we otherwise have, Tomcat does in fact log > requests in the order in which they are received. Tomcat logs requests in the order they complete (so it can log th

Re: Errors when trying to configure SSL for Apache Tomcat 7

2013-04-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 4/17/13 4:10 PM, James Snider wrote: > I have reinstalled Apache Tomcat with the tcnative library and I > am not receiving the SSL certificate errors as seen earlier. Good. > But I am now receiving the following errors upon startup: Not

Re: in web.xml

2013-04-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jakub, On 4/17/13 9:22 PM, Jakub 1983 wrote: > can I define database connection only in web.xml, without using > context.xml files ? > > can I pass database url, login and password into ? > > when I define database conn in context.xml, resource-r

Access-log ordering

2013-04-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I suspect I already know the answer to this, but I wanted to double-check. Requests are logged to the access log in the order in which they were accepted from the connector, right? Or, if they can't be guaranteed to be de-queued-and-dispatched

Re: Form Authentication

2013-04-18 Thread Barbara Newton
Thank you for your reply. I figured it out...someone had put a security constrain on "/" which meant everything ended up passing through the form authenticator. Once I removed the constraint everything started working. So yay for me. = Th

Re: Form Authentication

2013-04-18 Thread Cédric Couralet
Hello, Without knowing how are your security-constraint, and where are the css file, I don't think anyone could help you. Did you try as a last measure to force css file to pass through the authentification, something as : *.css (probably not a valid security-constraint, just to give the idea)

Form Authentication

2013-04-18 Thread Barbara Newton
This is driving me crazy! I have configured from authentication in my web.xml with a number of security constraints. None of the constraints map to any CSS files. However, when I bring up the application the CSS files are hitting the authentication. Since my form has styling this is a problem o

Re: Tomcat access log reveals hack attempt: "HEAD /manager/html HTTP/1.0" 404

2013-04-18 Thread André Warnier
chris derham wrote: Hi. Long and thoughtful post. Thanks. just hope it helps move the discussion forward Say you have a botnet composed of 100 bots, and you want (collectively) to have them scan 100,000 hosts in total, each one for 30 known "buggy" URLs. These 30 URLs are unrelated to eachoth

Re: multi-tenant web app

2013-04-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jamie, On 4/18/13 6:42 AM, Jamie wrote: > Chris / Tomcat Users > >> This can already be done with the common or shared classloaders >> (which were removed by default because nobody could make head or >> tail of how to use them properly). They can b

Re: Apache HTTPD + Tomcat restarts

2013-04-18 Thread Shanti Suresh
Hi André, Hi all, On Mon, Apr 15, 2013 at 7:02 PM, André Warnier wrote: > > Well, you wrote that you wanted to know our thoughts. Yes or No would not > have been an appropriate response to that, so we elaborated a bit. > ;-) > > > Yes, true. Thank you! I am a bit unsure what's going on. So

Re: server.xml shutdown port command string

2013-04-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 4/17/13 11:34 PM, Caldarale, Charles R wrote: >> From: Leo Donahue - RDSA IT [mailto:leodona...@mail.maricopa.gov] >> Subject: RE: server.xml shutdown port command string > >> If I am the only person deploying web apps (that I have >> de

RE: Tomcat security vulnerability/ or security config issue

2013-04-18 Thread Caldarale, Charles R
> From: David kerber [mailto:dcker...@verizon.net] > Subject: Re: Tomcat security vulnerability/ or security config issue > If things are configured properly, web users won't be able to see > anything outside your app hierarchy, so something clearly isn't set up > properly. This has little to

RE: multi-tenant web app

2013-04-18 Thread Jeffrey Janner
> -Original Message- > From: Rainer Frey [mailto:rainer.f...@inxmail.de] > Sent: Thursday, April 18, 2013 12:51 AM > To: Tomcat Users List > Subject: Re: multi-tenant web app > > > On 12.04.2013, at 13:08, Jamie wrote: > > > Greetings! > > > > I would like some advice with regards to de

Re: Tomcat security vulnerability/ or security config issue

2013-04-18 Thread David kerber
If things are configured properly, web users won't be able to see anything outside your app hierarchy, so something clearly isn't set up properly. On 4/18/2013 9:14 AM, Wen Liu wrote: Howdy, I have a issue with Tomcat security, please find the spec below: Server version: Apache Tomcat/6.0.

Re: problems with import in jsp file

2013-04-18 Thread caio lima
Hi, my index.jsp is inside webapps/ROOT i have the same folder structure in my local machine and it works. 2013/4/18 Konstantin Kolinko > 2013/4/18 caio lima : > > hi, > > sorry for my english. > > i just publish my web site made with java, jsp, and i'm stuck with a > > problem. > > > > my "

Re: Tomcat security vulnerability/ or security config issue

2013-04-18 Thread Mark Thomas
On 18/04/2013 14:14, Wen Liu wrote: > > > Howdy, > > I have a issue with Tomcat security, please find the spec below: > > Server version: Apache Tomcat/6.0.35 > Server built: Nov 28 2011 11:20:06 > Server number: 6.0.35.0 > OS Name:SunOS > OS Version: 5.10 > Architecture: x86 >

Tomcat security vulnerability/ or security config issue

2013-04-18 Thread Wen Liu
Howdy, I have a issue with Tomcat security, please find the spec below: Server version: Apache Tomcat/6.0.35 Server built: Nov 28 2011 11:20:06 Server number: 6.0.35.0 OS Name:SunOS OS Version: 5.10 Architecture: x86 JVM Version:1.6.0_33-b03 JVM Vendor: Sun Microsystems

Re: context.xml.Resource and web.xml.resource-ref

2013-04-18 Thread Mark Thomas
On 17/04/2013 23:40, Jakub 1983 wrote: > what are differences/similarities and dependencies between >from context.xml and > > > from web.xml ? http://tomcat.apache.org/tomcat-7.0-doc/jndi-resources-howto.html Mark - To un

Re: multi-tenant web app

2013-04-18 Thread Jamie
Chris / Tomcat Users >This can already be done with the common or shared classloaders (which >were removed by default because nobody could make head or tail of how >to use them properly). They can be trivially re-enabled using >conf/catalina.properties. I found some vague references to this in T

Re: explanation of resource-ref in web.xml

2013-04-18 Thread Jakub 1983
Konstantin, thx for your reply. Do you know name of such a tool and application server which offers configuration of database connection on basis of web.xml.resource-ref ? regards Jakub On Thu, Apr 18, 2013 at 11:05 AM, Konstantin Kolinko wrote: > 2013/4/18 Jakub 1983 : > > I have tried googl

Re: problems with import in jsp file

2013-04-18 Thread Konstantin Kolinko
2013/4/18 caio lima : > hi, > sorry for my english. > i just publish my web site made with java, jsp, and i'm stuck with a > problem. > > my ".class" files is in the directory "WEB-INF/classes/..." > and i have the class Diversos in > "WEB-INF/classes/ferramentas/Diversos.class" > > when i use a im

Re: explanation of resource-ref in web.xml

2013-04-18 Thread Konstantin Kolinko
2013/4/18 Jakub 1983 : > I have tried google, but this links don't explain me, eg 4 states > > > jdbc/primaryDB > jdbc/PrimaryDBInTheContainer > > I have already tried it, and it doesn't work. > > In my opinion is useless under tomcat, > > or better said, it has only informative value, at lea

Re: explanation of resource-ref in web.xml

2013-04-18 Thread Jakub 1983
I have tried google, but this links don't explain me, eg 4 states jdbc/primaryDB jdbc/PrimaryDBInTheContainer I have already tried it, and it doesn't work. In my opinion is useless under tomcat, or better said, it has only informative value, at least in case of database connection. On