Re: FileUpload class not working with Tomcat 10.1

2024-05-03 Thread Mark Foley
On 4/23/24 18:44, Chuck Caldarale wrote: uploadfile uploadfile /schDistImportResults.jsp The first servlet is named “uploadfile”. On Apr 23, 2024, at 12:42, Mark Foley wrote: Now I need to add another program to the system that does file uploads. I created another

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-03 Thread Tom Delaney
Thanks for the reply Michael, I'm trying to achieve retrieving delegated credentials. I'm confused by the debug output because I'm being told that authentication succeeded but no indication of why I'm not receiving delegated credentials other than there are none.I have looked over the delegation

Re: Package URLs for Apache Tomcat distributions

2024-05-03 Thread von Loewenstein, Jan
Hi, I think in the end it boils down to something very simple (and probably very complicated from another perpsective ): Can the id of a piece of software be used to find vulnerabilities? In the context of this mailing list and the example you brought up with defaulting to pkg:maven, the

Re: Package URLs for Apache Tomcat distributions

2024-05-03 Thread Lars Francke
Just as an FYI that we established an official TG (Task Group) for PURL in yesterdays Ecma TC54 (CycloneDX) meeting: https://docs.google.com/document/d/1BkBd4PRhpP_u1WO_GueYB89vehT_HPKgFMMfbTuKWV4/edit#heading=h.si64e7edhupe This will take a bit to get set up but this may be something some people

Re: Package URLs for Apache Tomcat distributions

2024-05-03 Thread Arnout Engelen
Thanks for bringing this up! The topic of software (artifact) identification is indeed a tricky one. CPEs have long been the main contender, but are not great for the SBOM (and 'vulnerability scanning' based on SBOMs) use case because CPE allocations need through the NVD CPE team, and generally

Re: SPNEGO GSSCaller {UNKNOWN} No Delegated Creds

2024-05-03 Thread Michael Osipov
On 2024/05/02 19:20:59 Tom Delaney wrote: > Hi All, > > Sorry for the duplicate requests. The first one was accidentally flagged > for Google's new Confidential Mode which happened to be flagged. > I have a red hat 9.2 server hosting a web application on a single instance > of Apache Tomcat. This