Re: secure cookies

2013-07-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 7/29/13 4:09 PM, Jeffrey Janner wrote: > Thanks for the verification, Mark. I was under the impression > you'd only want to [set secure="true"] if you were already > front-ending the site with something that was doing the SSL for you >

Re: Controlling permissions when creating directories

2013-07-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Scott, On 7/29/13 8:36 PM, Scott Derrick wrote: > I am using tomcat7, on centOS6 > > The app crates a folder, uploads a file to the folder, processes > the file and then provides a download link to the resulting file. > All this works fine on a to

Controlling permissions when creating directories

2013-07-29 Thread sderrick
I am using tomcat7, on centOS6 The app crates a folder, uploads a file to the folder, processes the file and then provides a download link to the resulting file. All this works fine on a tomcat7 server running on my desktop machine. Running tomcat7 on the server, its broke. I create the folder

Controlling permissions when creating directories

2013-07-29 Thread Scott Derrick
I am using tomcat7, on centOS6 The app crates a folder, uploads a file to the folder, processes the file and then provides a download link to the resulting file. All this works fine on a tomcat7 server running on my desktop machine. Running tomcat7 on the server, its broke. I create the folder

Re: "The Apache Tomcat Connector - Webserver HowTo" documentation for Apache Httpd 2.4.x and Tomcat 7

2013-07-29 Thread Rainer Jung
On 29.07.2013 22:36, Christopher Schultz wrote: > Rainer, > > On 7/29/13 1:22 PM, Rainer Jung wrote: >> On 29.07.2013 17:26, Nicholas Williams wrote: >>> On Mon, Jul 29, 2013 at 10:18 AM, Christopher Schultz >>> wrote: > > If it's a resources limitation, I have a publicly-accessible >

Re: secure cookies

2013-07-29 Thread Mark Thomas
On 29/07/2013 22:09, Jeffrey Janner wrote: >> -Original Message- >> From: Mark Thomas [mailto:ma...@apache.org] >> Sent: Monday, July 29, 2013 2:54 PM >> To: Tomcat Users List >> Subject: Re: secure cookies >> >> On 29/07/2013 21:31, Jeffrey Janner wrote: >>> From: Jeffrey Janner [mailto:je

Re: "The Apache Tomcat Connector - Webserver HowTo" documentation for Apache Httpd 2.4.x and Tomcat 7

2013-07-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 7/29/13 1:22 PM, Rainer Jung wrote: > On 29.07.2013 17:26, Nicholas Williams wrote: >> On Mon, Jul 29, 2013 at 10:18 AM, Christopher Schultz >> wrote: > If it's a resources limitation, I have a publicly-accessible TeamCity s

RE: secure cookies

2013-07-29 Thread Jeffrey Janner
> -Original Message- > From: Mark Thomas [mailto:ma...@apache.org] > Sent: Monday, July 29, 2013 2:54 PM > To: Tomcat Users List > Subject: Re: secure cookies > > On 29/07/2013 21:31, Jeffrey Janner wrote: > > From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > > Sent: Monday, July

Re: secure cookies

2013-07-29 Thread Mark Thomas
On 29/07/2013 21:31, Jeffrey Janner wrote: > From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] > Sent: Monday, July 29, 2013 2:29 PM > To: 'Tomcat Users List' > Subject: secure cookies > > Have a client that is wanting us to implement the following in web.xml: > > > true >

RE: secure cookies

2013-07-29 Thread Jeffrey Janner
From: Jeffrey Janner [mailto:jeffrey.jan...@polydyne.com] Sent: Monday, July 29, 2013 2:29 PM To: 'Tomcat Users List' Subject: secure cookies Have a client that is wanting us to implement the following in web.xml: true true But from what I can tell, that's only availabl

secure cookies

2013-07-29 Thread Jeffrey Janner
Have a client that is wanting us to implement the following in web.xml: true true But from what I can tell, that's only available in 7+ and we are running at 6.latest with plans to upgrade. Found a site that says I can accomplish the same in 6 by setting useHttpOnly="t

RE: Authentication from a REST service

2013-07-29 Thread Caldarale, Charles R
> From: Martin O'Shea [mailto:app...@dsl.pipex.com] > Subject: RE: Authentication from a REST service > Sorry Chris, I'm not sure what I'm looking for here. Can you elaborate? Don't top-post; it makes the conversation impossible to follow. Step 1: read the security section of the Servlet spec.

Re: "The Apache Tomcat Connector - Webserver HowTo" documentation for Apache Httpd 2.4.x and Tomcat 7

2013-07-29 Thread Rainer Jung
On 29.07.2013 17:26, Nicholas Williams wrote: > On Mon, Jul 29, 2013 at 10:18 AM, Christopher Schultz > wrote: >>> If it's a resources limitation, I have a publicly-accessible >>> TeamCity server with an unlimited OpenSource license hosting >>> Windows 7, Mac OS X SLeopard/Lion/MLion, Debian, Red

RE: Authentication from a REST service

2013-07-29 Thread Martin O'Shea
Sorry Chris, I'm not sure what I'm looking for here. Can you elaborate? -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 29 Jul 2013 17 21 To: Tomcat Users List Subject: Re: Authentication from a REST service -BEGIN PGP SIGNED MESSAGE- Hash

Re: Authentication from a REST service

2013-07-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Martin, On 7/28/13 10:40 AM, Martin O'Shea wrote: > Have you an example at all? > > At the moment, I've simply rigged a simple authentication method of > my own . Have you a code example of container-provided > authentication system, or could you r

Re: mod deflate compressions not working with loadbalancer

2013-07-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Visioner, On 7/29/13 10:18 AM, Visioner Sadak wrote: > I have an apache http server and 3 tomcat servers connected in > cluster > > i used to do mod deflate when i had no cluster with just one > worker1 like JkMount /test/* worker1 all gzip compres

Re: "The Apache Tomcat Connector - Webserver HowTo" documentation for Apache Httpd 2.4.x and Tomcat 7

2013-07-29 Thread Nicholas Williams
On Mon, Jul 29, 2013 at 10:18 AM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Nick, > > On 7/29/13 8:59 AM, Nick Williams wrote: >> On Jul 25, 2013, at 10:59 AM, Rainer Jung wrote: >> >>> On 25.07.2013 17:14, srinivas yelamanchili wrote: Hi, I installed

Re: "The Apache Tomcat Connector - Webserver HowTo" documentation for Apache Httpd 2.4.x and Tomcat 7

2013-07-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nick, On 7/29/13 8:59 AM, Nick Williams wrote: > On Jul 25, 2013, at 10:59 AM, Rainer Jung wrote: > >> On 25.07.2013 17:14, srinivas yelamanchili wrote: >>> Hi, I installed Apache Httpd 2.4.6 and Tomcat 7.0.42 from >>> source code (.tar.gz) on Redh

mod deflate compressions not working with loadbalancer

2013-07-29 Thread Visioner Sadak
I have an apache http server and 3 tomcat servers connected in cluster i used to do mod deflate when i had no cluster with just one worker1 like JkMount /test/* worker1 all gzip compressions were working fine but when i loadbalance with 3 workers compressions dont workJkMount /test/* loadbala

Re: Tomcat cluster problems regarding multicast

2013-07-29 Thread Mark Thomas
On 29/07/2013 12:27, Willem Fibbe - Realworks BV wrote: > I'm hoping someone can provide some suggestions to identify the exact problem > (and the solution:)). This is one of those things (like SSL) where several things all need to be lined up or nothing works and debugging it is tricky. The bes

Re: "The Apache Tomcat Connector - Webserver HowTo" documentation for Apache Httpd 2.4.x and Tomcat 7

2013-07-29 Thread Nick Williams
On Jul 25, 2013, at 10:59 AM, Rainer Jung wrote: > On 25.07.2013 17:14, srinivas yelamanchili wrote: >> Hi, >> I installed Apache Httpd 2.4.6 and Tomcat 7.0.42 from source code (.tar.gz) >> on Redhat Linux and looking for documentation to enable AJP and connect >> Tomcat with Httpd using AJP/AP

Tomcat cluster problems regarding multicast

2013-07-29 Thread Willem Fibbe - Realworks BV
Hi, We have a Tomcat Cluster consisting of 2 servers that replicate their sessions with the following configuration in server.xml (directly under ): ... ... When I do a 'tcpdump host 228.0.0.7' on both servers, I see t

Re: Apache Tomcat Connector - configuration

2013-07-29 Thread Rainer Jung
On 29.07.2013 03:49, srinivas yelamanchili wrote: > Hi, > I am trying to configure Apache httpd talk to Tomcat > > From the documentation at > http://tomcat.apache.org/connectors-doc/webserver_howto/apache.html > > 1. Under 'Using Tomcat auto-configure' we have this line > "creating your workers.