Re: Expression Language in JSP and JasperException

2007-02-20 Thread Eric Haszlakiewicz
On Tue, Feb 20, 2007 at 03:23:32PM -0500, David Smith wrote: > Ok forgive me now, but this is getting confusing. Where does > result come into this picture? Were you expecting actionBean to be an > instance of a different class? You aren't offering a lot to go on here. That's what it sou

Re: Web spiders - disabling jsessionid

2006-12-03 Thread Eric Haszlakiewicz
On Fri, Dec 01, 2006 at 04:50:02PM -0500, Christopher Schultz wrote: > Mikolaj Rydzewski wrote: > > Caldarale, Charles R wrote: > >> That contradicts what Len said about his site: > >> > >> "On my site (as on many others) you can browse the site without a > >> session, but if you want to log in (to

Re: StandartSession.accessCount bug?

2006-10-31 Thread Eric Haszlakiewicz
On Tue, Oct 31, 2006 at 08:38:37AM -0500, Christopher Schultz wrote: > Also, did your +50ns figure mean that the /overhead/ was +50ns, or that > waiting for the "other" thread to release the lock (which would include > execution of the method itself) took 50ms longer. Since those threads > cannot r

Re: permission on server.xml

2006-10-29 Thread Eric Haszlakiewicz
On Sun, Oct 29, 2006 at 02:33:31PM -0600, Caldarale, Charles R wrote: > > > > I mean with a jsp code you can see/write file can a user > > write outside the webapps defined in the server.xml? > > Certainly code in a .jsp or servlet can read or write anywhere that > Tomcat's userid is allowed to

Re: Apache with Windows 98

2006-10-28 Thread Eric Haszlakiewicz
On Fri, Oct 27, 2006 at 02:21:06PM +0800, Eric wrote: > i wanna avoid this problem too but i am a student now having my internship > to do my Final Year Project. so there is no choice because i got a PC that > is running on Windows98. so what to do. i have to live with it and find > solutions to wo

Re: Platform list

2006-09-25 Thread Eric Haszlakiewicz
On Mon, Sep 25, 2006 at 01:19:58PM -0500, Caldarale, Charles R wrote: > > From: David Kerber [mailto:[EMAIL PROTECTED] > > Subject: Platform list > > > > I just looked, but couldn't find the list of supported platforms for > > tomcat 5.5.x. I'm specifically looking to see if it will run ok on a

Re: Putting tomcat on Mainframe running z/OS

2006-09-11 Thread Eric Haszlakiewicz
On Mon, Sep 11, 2006 at 02:26:24PM -0700, Kevin Mullin wrote: > >Does anyone have experience in porting tomcat (I'm using version >5.5.17) to a mainframe system that is running z/OS operating system >software? I'd appreciate getting any kind of 'heads up' information. >

Re: configuration setting to disable URL sessions?

2006-09-09 Thread Eric Haszlakiewicz
On Thu, Sep 07, 2006 at 06:33:41PM -0400, Chetan Sabnis wrote: > Is there a way to disable the Tomcat server (5.5) from accepting > sessions that are sent in the URL using jsessionid? This would be > useful in preventing certain session fixation attacks. Basically, I > would want sessions to be a

Re: Retrieve certain session data inside a servlet

2006-06-02 Thread Eric Haszlakiewicz
On Fri, Jun 02, 2006 at 11:15:03AM +0200, Carlos Alonso Vega wrote: > Bob, > > Thanks for the reply. My problem is that the session info I need is not > of the session that makes the request. I need to check other sessions in > the same context. I can use the request because it is in the same

Re: How to hide the keystorePass at the server.xml

2006-05-31 Thread Eric Haszlakiewicz
On Tue, May 30, 2006 at 04:46:42PM -0700, David Wall wrote: > A possible sounding solution would be to have tomcat start in a > protected mode that requires an admin connect and enter a password > before TC would allow the webapps to load. But even this would require > that TC be configured to

Re: Easy Tomcat Linux/Unix Platform

2006-05-01 Thread Eric Haszlakiewicz
On Sun, Apr 30, 2006 at 10:03:49AM -0400, Mark Thomas wrote: > When starting a new thread (ie sending a message to the list about a > new topic) please do not reply to an existing message and change the > subject line. To many of the list archiving services and mail clients > used by list subscribe

Re: Changing tomcat's group

2006-04-27 Thread Eric Haszlakiewicz
On Thu, Apr 27, 2006 at 04:55:40PM -0400, Aria Bamdad wrote: > I have several applications running in different directories. Each > application is owned by a different linux owner/group. In order for > Tomcat to be able to read these files to serve them, the Tomcat has > as it's secondary groups,

Re: is there a possibility to define the startup order for webapps?

2006-04-24 Thread Eric Haszlakiewicz
On Mon, Apr 24, 2006 at 11:20:54AM -0400, David Smith wrote: > This question comes up every so often and the answer is always no. The > webapp load order cannot be relied upon. In your case, might I suggest > the database webapp be run on a separate instance of tomcat? Can the > connection be d

Re: Form login UTF-8 username problem

2006-03-06 Thread Eric Haszlakiewicz
>> Daniel Blumenthal <[EMAIL PROTECTED]> wrote: >> As a security concern, you might not want to allow full UTF-8 usernames. >> There are a number of invisible characters (from the soft hyphen to various >> connector characters) which people can use to spoof other users' names. On Sun, Mar 05, 20

Re: JSP with use beans calls do not work

2006-02-27 Thread Eric Haszlakiewicz
On Sat, Feb 25, 2006 at 05:04:18PM -0300, Claudio Veas wrote: >> Hello list, I m really new to tomcat ,I have the following problem >> recently >> I tried to resume my practices on JSP on my tomcat server but I seem >to >> have >> a problem and I do not know what it is. Ever

Re: turning off sessions

2006-02-09 Thread Eric Haszlakiewicz
On Wed, Feb 08, 2006 at 12:14:36AM +0100, Ed wrote: > Yep, JSPs automatically create sessions (part of the JSP spec certainly). > > To turn session off > put <%@ page session="false" %> in your JSP. > > Beware, that web frameworks such as struts may also create sessions for > other purposes (eg,