Re: Ways to identify poorly designed client aplications sending request to Tomcat !

2017-03-31 Thread Utkarsh Dave
Hi Chris, Thanks for the response. On Fri, Mar 31, 2017 at 10:16 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Utkarsh, > > On 3/30/17 3:34 PM, Utkarsh Dave wrote: > > What makes you say that? > > What makes me say what? >

RE: changing tomcat default password

2017-03-31 Thread Caldarale, Charles R
> From: Theresa Whitney [mailto:theresa.whit...@nisd.net] > Subject: changing tomcat default password > I am trying to address a security vulnerability notification for several > servers. We have tomcat6 installed. Right there is your biggest security problem - Tomcat 6 has reached end of life

changing tomcat default password

2017-03-31 Thread Theresa Whitney
I am trying to address a security vulnerability notification for several servers. We have tomcat6 installed. The notification indicates that I need to change the default passwords in the admin-users.xml file. When I view the file it looks like everything is commented out. And there are several

Re: how to access HTTPServletRequest in RealmBase

2017-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 3/30/17 3:41 PM, André Warnier (tomcat) wrote: > On 30.03.2017 20:10, Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Konstantin, >> >> On 3/30/17 4:19 AM, Konstantin Kolinko wrote: >>> 2017-03-30

Re: Ways to identify poorly designed client aplications sending request to Tomcat !

2017-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Utkarsh, On 3/30/17 3:34 PM, Utkarsh Dave wrote: > What makes you say that? What makes me say what? > Past cases, I saw where implementation or not using the JSESSION > was making the connection over and over again for multiple > transactions Of

Re: Setting up HTTP/2 with no SSL connector ?

2017-03-31 Thread Laurent Perez
Yes I was under the false impression that Chrome did support h2c ; it does not, as you pointed. HTTP/2 works fine now. Thanks On Thu, Mar 30, 2017 at 10:46 PM, Mark Thomas wrote: > On 30 March 2017 20:53:06 BST, Laurent Perez > wrote: > >Thank you

Re: Intercepting WebSocket ping messages

2017-03-31 Thread Mark Thomas
On 31/03/17 15:03, Robert Lewis wrote: > We have a Server <-> Client connection. The client periodically sends pings > to the server, and Tomcat will respond with a sendPong() on a container > thread, but the same instance of WsRemoteEndpointImplServer we are actively > sending writes on.

Re: A problem of accessing an application

2017-03-31 Thread M. Osama Alghwell
Thanks for reply. Actually I did all, and the log is clear, of course when Tomcat starts and I checked the log stating the deploying starts and finishes in few milliseconds. I also tried to name the file with the complete path using #, as mentioned in the document (the file name is

Re: Intercepting WebSocket ping messages

2017-03-31 Thread Robert Lewis
We have a Server <-> Client connection. The client periodically sends pings to the server, and Tomcat will respond with a sendPong() on a container thread, but the same instance of WsRemoteEndpointImplServer we are actively sending writes on. WsRemoteEndpointImplServer.doWrite() does not seem

Re: A problem of accessing an application

2017-03-31 Thread Mark Thomas
On 31/03/17 14:42, M. Osama Alghwell wrote: > docBase="E:\MyOrg\OrgAPP\Field" > > This will cause the service to not work (I did it and after changing I do > restart for the service) which meand Tomcat won't start To quote my previous response: ... if that doesn't work provide the appropriate

Re: A problem of accessing an application

2017-03-31 Thread Olaf Kock
Am 31.03.2017 um 15:42 schrieb M. Osama Alghwell: > docBase="E:\MyOrg\OrgAPP\Field" > > This will cause the service to not work (I did it and after changing I do > restart for the service) which meand Tomcat won't start Whatever you set as a docbase, it must be a fully deployable web application

Re: A problem of accessing an application

2017-03-31 Thread M. Osama Alghwell
docBase="E:\MyOrg\OrgAPP\Field" This will cause the service to not work (I did it and after changing I do restart for the service) which meand Tomcat won't start On Fri, Mar 31, 2017 at 2:59 PM, Mark Thomas wrote: > On 31/03/17 13:36, M. Osama Alghwell wrote: > > I installed

[ANN] Apache Tomcat 8.5.13 available

2017-03-31 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.13. Tomcat 8.x users should normally be using 8.5.x releases in preference to 8.0.x releases. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression

Re: Intercepting WebSocket ping messages

2017-03-31 Thread Mark Thomas
On 30/03/17 21:13, Robert Lewis wrote: > Is there a way to intercept a ping message to send a pong? The API doesn't support this. > I need to do this synchronize sends to the endpoint. Could you clarify your requirement? Tomcat should handle pong messages automatically for you (as required by

Re: A problem of accessing an application

2017-03-31 Thread Mark Thomas
On 31/03/17 13:36, M. Osama Alghwell wrote: > I installed Tomcat 8 and application on Windows 2012 server. The structure > is as follows: > Driver --> E: > A main drictory named --> MyOrg > Two directories under MyOrg --> OrgAPP & OrgServer > > Under OrgAPP another directory named --> Field >

A problem of accessing an application

2017-03-31 Thread M. Osama Alghwell
I installed Tomcat 8 and application on Windows 2012 server. The structure is as follows: Driver --> E: A main drictory named --> MyOrg Two directories under MyOrg --> OrgAPP & OrgServer Under OrgAPP another directory named --> Field Under Field all the directories for the application including

[ANN] Apache Tomcat 9.0.0.M19 available

2017-03-31 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.0.M19. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.0.M19 is a