Re: Tomcat access log reveals hack attempt: "HEAD /manager/html HTTP/1.0" 404

2013-04-21 Thread André Warnier
Esmond Pitt wrote: The hack attempts that started this thread aren't denial of service attacks at all. Who said that they were ? They are attempted penetration attempts which if successful lead to installation of a viral servlet. They were HEAD requests, which just indicate whether this UR

Re: two responses from one request - how is it possible ?

2013-04-21 Thread André Warnier
Jakub 1983 wrote: http://www.mulesoft.com/tomcat-connector states: Using the current arrangement, both Connectors will pass all requests to the same Engine, which will in turn pass all these requests to both of its contained web applications. This means that each request will potentially genera

RE: Tomcat access log reveals hack attempt: "HEAD /manager/html HTTP/1.0" 404

2013-04-21 Thread Esmond Pitt
The hack attempts that started this thread aren't denial of service attacks at all. They are attempted penetration attempts which if successful lead to installation of a viral servlet. The way I fixed them was to put an Apache HTTPD in front with a whitelist so that only known management IP address

RE: JSTL XML Basic Question

2013-04-21 Thread Martin Gainty
Jerry You'll need core taglib and xml taglib e.g. http://www.tutorialspoint.com/jsp/jstl_xml_out_tag.htm declaration:<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"; %> <%@ taglib prefix="x" uri="http://java.sun.com/jsp/jstl/xml"; %> use core taglib to set var: Padam

two responses from one request - how is it possible ?

2013-04-21 Thread Jakub 1983
http://www.mulesoft.com/tomcat-connector states: Using the current arrangement, both Connectors will pass all requests to the same Engine, which will in turn pass all these requests to both of its contained web applications. This means that each request will potentially generate two responses, on

Re: mod_jk errors errno=110 and errno=115

2013-04-21 Thread Philippe Bossu
Thank you Rainer, it was very helpful. Sorry for late answer. On Sun, Feb 17, 2013 at 12:02 PM, Rainer Jung wrote: > On 14.02.2013 14:17, Philippe Bossu wrote: > > We have a mod_jk in version 1.2.28 with Apache 2.16 fronting a Tomcat > > server in version 6 on JDK6. > > > > We are facing long re

Re: conf/Catalina/localhost/myWebApp.xml context file disappears

2013-04-21 Thread Jakub 1983
Mark, sorry I didn't reply so long, but my previous tomcat was messed with tests and many attempts, now I did everything from start with clean tomcat installation and confirm context xml disappears. steps to reproduce 1) make dir C:\tomcat_test 2) download apache-tomcat-7.0.39.zip and unpack it

Re: security-role-ref doesn't work

2013-04-21 Thread Jakub 1983
Mark, thank you very much for your clarification, regards Jakub ps anybody else interested in this topic can see here: http://docs.oracle.com/javaee/5/tutorial/doc/bncav.html http://docs.oracle.com/javaee/5/tutorial/doc/bncba.html#bncbb On Fri, Apr 19, 2013 at 11:30 PM, Mark Thomas wrote: >

mod_cluster session replication

2013-04-21 Thread Jakub 1983
Please confirm or deny my image/idea: mod_cluster is configured by it has nothing to do with session replication, session replication cannot be configured in tag, if we want session replication with ModClusterListener, we must add into - it gives us session replication in mod_cluster (in ad