application to windows -> linux

2008-09-13 Thread khaled
Hi ,
j' have developped a Web JSP application, with tomcat in Windows the
application  works well,
 then when i have to test in linux it  post error that tomcate does not find
my classes in /WEB-INF/classes/projet

at : 
how I can solve this problem
thank you !


Re: application to windows -> linux

2008-09-13 Thread Johnny Kewl


- Original Message - 
From: "khaled" <[EMAIL PROTECTED]>

To: 
Sent: Saturday, September 13, 2008 9:04 AM
Subject: application to windows -> linux



Hi ,
j' have developped a Web JSP application, with tomcat in Windows the
application  works well,
then when i have to test in linux it  post error that tomcate does not 
find

my classes in /WEB-INF/classes/projet

at : 
how I can solve this problem
thank you !


... I would look if its there... look at the actual unpacked war in TC 
webapps... look inside the war.

It seems like its not been packed...
It does imply that there is more to the project than just a JSP... a servlet 
and beans... so it maybe that its missing a Jar (lib) and TC is trying to 
find it everywhere.


My guess ;)
---
HARBOR : http://www.kewlstuff.co.za/index.htm
The most powerful application server on earth.
The only real POJO Application Server.
See it in Action : http://www.kewlstuff.co.za/cd_tut_swf/whatisejb1.htm
--- 



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Migrating to tomcat 6 gives formatted currency amounts problem

2008-09-13 Thread André Warnier

Johnny Kewl wrote:


If you do decide to look at this link...
http://java.sun.com/javase/technologies/core/basic/intl/faq.jsp#core-locale


The above link seems to be extremely informative, right on the spot for 
this thread.

Thanks.

Among other things, it points out that changing the "default locale" for 
the Tomcat JVM (as I am forced to do to make this servlet work properly) 
may be unsafe, see the "What is the default encoding?" paragraph.


André



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Migrating to tomcat 6 gives formatted currency amounts problem

2008-09-13 Thread André Warnier

Caldarale, Charles R wrote:

From: Christopher Schultz [mailto:[EMAIL PROTECTED]
Subject: Re: Migrating to tomcat 6 gives formatted currency
amounts problem

so, Java is still 16-bit Unicode in its char primitive,
but you can use ints to hold UTF-16 values using 21-bits?


The 21-bit values are represented by pairs of Java chars, the first from the 
UTF-16 high-surrogate range, the second from the low-surrogate range.  The 
21-bit code point can be accessed as an int by some of the java.lang.Character 
methods introduced in 1.5.


especially since java.lang.Character only takes a char as a
constructor parameter :(


Yes, I think all the new Character methods related to code points are static; 
there are corresponding instance methods in java.lang.String though.

There is some information about this in the link that Johnny pointed out 
 (excellent and very readable document in general (for a change)) :


http://java.sun.com/javase/technologies/core/basic/intl/faq.jsp#core-locale
paragraph : How is text represented in the Java platform?

And there is more here :

http://java.sun.com/j2se/1.5.0/docs/api/java/lang/Character.html#unicode

It's amazing what one finds, when one knows what one is looking for..

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: application to windows -> linux

2008-09-13 Thread Martin Gainty

did you verify your classes are located in WEB-INF/classes folder

e.g.
WEB-INF/classes/projet/Testuser.class

?
Martin
__ 
Disclaimer and confidentiality note 
Everything in this e-mail and any attachments relates to the official business 
of Sender. This transmission is of a confidential nature and Sender does not 
endorse distribution to any party other than intended recipient. Sender does 
not necessarily endorse content contained within this transmission. 


> Date: Sat, 13 Sep 2008 08:04:25 +0100
> From: [EMAIL PROTECTED]
> To: users@tomcat.apache.org
> Subject: application to windows -> linux
> 
> Hi ,
> j' have developped a Web JSP application, with tomcat in Windows the
> application  works well,
>  then when i have to test in linux it  post error that tomcate does not find
> my classes in /WEB-INF/classes/projet
> 
> at : 
> how I can solve this problem
> thank you !

_
Want to do more with Windows Live? Learn “10 hidden secrets” from Jamie.
http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008

Re: Disable java code execution <%blabla%> in jsp, but permits tags

2008-09-13 Thread H. Hall

kazukin6 wrote:

Plz Help !!
Is it possible to disable all java code execution within jsp page (by
security manager or something)
but allow custom tags to be executed?

The problem is that the users can change jsp files, and due to security
reasons we can allow them to use only tags 
  

Why are users allowed to change jsp files?

HH



--
H. Hall
ReedyRiver Group LLC
http://www.reedyriver.com


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: application to windows -> linux

2008-09-13 Thread khaled
yes my classes are  located in WEB-INF/classes folde

2008/9/13 Martin Gainty <[EMAIL PROTECTED]>

>
> did you verify your classes are located in WEB-INF/classes folder
>
> e.g.
> WEB-INF/classes/projet/Testuser.class
>
> ?
> Martin
> __ 
> Disclaimer and confidentiality note
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and Sender
> does not endorse distribution to any party other than intended recipient.
> Sender does not necessarily endorse content contained within this
> transmission.
>
>
> > Date: Sat, 13 Sep 2008 08:04:25 +0100
> > From: [EMAIL PROTECTED]
> > To: users@tomcat.apache.org
> > Subject: application to windows -> linux
> >
> > Hi ,
> > j' have developped a Web JSP application, with tomcat in Windows the
> > application  works well,
> >  then when i have to test in linux it  post error that tomcate does not
> find
> > my classes in /WEB-INF/classes/projet
> >
> > at : 
> > how I can solve this problem
> > thank you !
>
> _
> Want to do more with Windows Live? Learn "10 hidden secrets" from Jamie.
>
> http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008


Re: Disable java code execution <%blabla%> in jsp, but permits tags

2008-09-13 Thread kazukin6

We want them to be able to customize information they get from our system by
using custom tags


H. Hall wrote:
> 
> kazukin6 wrote:
>> Plz Help !!
>> Is it possible to disable all java code execution within jsp page (by
>> security manager or something)
>> but allow custom tags to be executed?
>>
>> The problem is that the users can change jsp files, and due to security
>> reasons we can allow them to use only tags 
>>   
> Why are users allowed to change jsp files?
> 
> HH
> 
> 
> 
> -- 
> H. Hall
> ReedyRiver Group LLC
> http://www.reedyriver.com
> 
> 
> -
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19471795.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: application to windows -> linux

2008-09-13 Thread Johnny Kewl

khaled,
Listen... you got to try help us here...
How are you deploying it... unpacked, from a war, thru manager

Are you dropping the same war into webapps on both systems?

And post the actual error logs...
Theres a big diff between noclassdef and noclassfound for example...
What are you getting... exactly

Make sure those directories are not in the system class path... if its 
noclassdef


From your IDE (on windows) or from tomcat manager... undeploy the webapp... 

then drop the war in... I think you may see the same error...

How are you confirming it works on windows... from the IDE?

Its highly unusual for a war to work on one and not the other... more likely 
a deployment issue?
Or from the sounds of things the class loaders are confused... dont help TC 
in classpaths.


More info needed ;)

- Original Message - 
From: "khaled" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Saturday, September 13, 2008 5:49 PM
Subject: Re: application to windows -> linux



yes my classes are  located in WEB-INF/classes folde

2008/9/13 Martin Gainty <[EMAIL PROTECTED]>



did you verify your classes are located in WEB-INF/classes folder

e.g.
WEB-INF/classes/projet/Testuser.class

?
Martin
__ 
Disclaimer and confidentiality note
Everything in this e-mail and any attachments relates to the official
business of Sender. This transmission is of a confidential nature and 
Sender

does not endorse distribution to any party other than intended recipient.
Sender does not necessarily endorse content contained within this
transmission.


> Date: Sat, 13 Sep 2008 08:04:25 +0100
> From: [EMAIL PROTECTED]
> To: users@tomcat.apache.org
> Subject: application to windows -> linux
>
> Hi ,
> j' have developped a Web JSP application, with tomcat in Windows the
> application  works well,
>  then when i have to test in linux it  post error that tomcate does not
find
> my classes in /WEB-INF/classes/projet
>
> at : 
> how I can solve this problem
> thank you !

---
HARBOR : http://www.kewlstuff.co.za/index.htm
The most powerful application server on earth.
The only real POJO Application Server.
See it in Action : http://www.kewlstuff.co.za/cd_tut_swf/whatisejb1.htm
--- 



-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



JNDI configuration in webapp/META-INF/context.xml

2008-09-13 Thread walterw

Hi all,

I have tried setting up JNDI for my web application inside the applicaton's
WAR file itself to no avail.  If I use the same configuration, but put it in
my server's context.xml, it works fine.

Here is the configuration I am using:
[code]



WEB-INF/web.xml
META-INF/context.xml


[/code]

The parameters specified dynamically via ${} are filtered via
maven-resources-plugin, so that is not an issue.  The issue is just with
this configuration placed inside my webapp, I can't get a JNDI connection,
but if it is in the server's context.xml, it works great.

Walter
-- 
View this message in context: 
http://www.nabble.com/JNDI-configuration-in-webapp-META-INF-context.xml-tp19474901p19474901.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Migrating to tomcat 6 gives formatted currency amounts problem

2008-09-13 Thread Johnny Kewl


- Original Message - 
From: "André Warnier" <[EMAIL PROTECTED]>

To: "Tomcat Users List" 
Sent: Saturday, September 13, 2008 2:01 PM
Subject: Re: Migrating to tomcat 6 gives formatted currency amounts problem



Johnny Kewl wrote:


If you do decide to look at this link...
http://java.sun.com/javase/technologies/core/basic/intl/faq.jsp#core-locale


The above link seems to be extremely informative, right on the spot for 
this thread.

Thanks.

Among other things, it points out that changing the "default locale" for 
the Tomcat JVM (as I am forced to do to make this servlet work properly) 
may be unsafe, see the "What is the default encoding?" paragraph.


André


Chuck knows his stuff...
I treat char sets as black box's, the things work or dont ;) pain in the 
butt... UTF8 just seems to work... pretty safe bet.
I'm not very scientific when it comes to this stuff... but I get the need 
for unicode...
America forgot about the rest of the world when they made ascii... and we 
been suffering ever since... ha ha

Diff perspective ;)

Chuck talks code points and all that good stuff... but I think that when 
they made double byte codes and microsoft did their thing and then Java 
tried to fix it for the rest of the world... that they must have made that 
original ascii a "subset" of other codes...


So I think... if a client is expecting ISO, or UTF and it is in fact ascii 
because of those locale issues... I dont think it will break down 
completely... it will still "get" that ascii... but german chars and all the 
rest, will just be ?... high chars as you call them will fail.


Its actually amazing how clever these guys are that moved US into a system 
that included the forgotten world ;) without breaking the whole thing...
Trouble is... us humans see the "fonts" and have to guess whats going on 
underneath...


Its not over... the opera browser already talks... and just wait for it... 
musical "mood" and emphasis will become a thing and then they going to need 
more bytes... so we can have singing sentences in 150 languages... and some 
clever guy is going to map the past into the future again...


When Gate's off spring have taken over the planet ;) Our kids will be 
saying... how come the my budgie sounds like a dog barking... in IE 306

Someone will say ...are you using EUTF256

Will be another long thread... its going to get worse ;)

---
HARBOR : http://www.kewlstuff.co.za/index.htm
The most powerful application server on earth.
The only real POJO Application Server.
See it in Action : http://www.kewlstuff.co.za/cd_tut_swf/whatisejb1.htm
---




-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Disable java code execution <%blabla%> in jsp, but permits tags

2008-09-13 Thread Martin Gainty

use ths struts if tag to conditionally disable the code
<%@ taglib prefix="s" uri="/struts-tags"%>


Will Not Be Executed


http://struts.apache.org/2.0.11.2/docs/if.html
datorită struts
Martin 
__ 
Disclaimer and confidentiality note 
Everything in this e-mail and any attachments relates to the official business 
of Sender. This transmission is of a confidential nature and Sender does not 
endorse distribution to any party other than intended recipient. Sender does 
not necessarily endorse content contained within this transmission. 


> Date: Sat, 13 Sep 2008 08:58:59 -0700
> From: [EMAIL PROTECTED]
> To: users@tomcat.apache.org
> Subject: Re: Disable java code execution <%blabla%> in jsp, but permits tags
> 
> 
> We want them to be able to customize information they get from our system by
> using custom tags
> 
> 
> H. Hall wrote:
> > 
> > kazukin6 wrote:
> >> Plz Help !!
> >> Is it possible to disable all java code execution within jsp page (by
> >> security manager or something)
> >> but allow custom tags to be executed?
> >>
> >> The problem is that the users can change jsp files, and due to security
> >> reasons we can allow them to use only tags 
> >>   
> > Why are users allowed to change jsp files?
> > 
> > HH
> > 
> > 
> > 
> > -- 
> > H. Hall
> > ReedyRiver Group LLC
> > http://www.reedyriver.com
> > 
> > 
> > -
> > To start a new topic, e-mail: users@tomcat.apache.org
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > 
> > 
> > 
> 
> -- 
> View this message in context: 
> http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19471795.html
> Sent from the Tomcat - User mailing list archive at Nabble.com.
> 
> 
> -
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

_
Get more out of the Web. Learn 10 hidden secrets of Windows Live.
http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008

RE: JNDI configuration in webapp/META-INF/context.xml

2008-09-13 Thread Martin Gainty

Walter:

check your META-INF/context.xml attribute useNaming="true"

http://tomcat.apache.org/tomcat-5.5-doc/config/context.html

HTH
Martin 
__ 
Disclaimer and confidentiality note 
Everything in this e-mail and any attachments relates to the official business 
of Sender. This transmission is of a confidential nature and Sender does not 
endorse distribution to any party other than intended recipient. Sender does 
not necessarily endorse content contained within this transmission. 


> Date: Sat, 13 Sep 2008 14:38:15 -0700
> From: [EMAIL PROTECTED]
> To: users@tomcat.apache.org
> Subject: JNDI configuration in webapp/META-INF/context.xml
> 
> 
> Hi all,
> 
> I have tried setting up JNDI for my web application inside the applicaton's
> WAR file itself to no avail.  If I use the same configuration, but put it in
> my server's context.xml, it works fine.
> 
> Here is the configuration I am using:
> [code]
> 
>   
> 
>   WEB-INF/web.xml
>   META-INF/context.xml
>type="javax.sql.DataSource"
>   driverClassName="${jdbc.driverClassName}" url="${jdbc.url}"
> username="${jdbc.username}"
>   password="${jdbc.password}" maxActive="100" maxIdle="30" 
> maxWait="1"
> />
> 
> [/code]
> 
> The parameters specified dynamically via ${} are filtered via
> maven-resources-plugin, so that is not an issue.  The issue is just with
> this configuration placed inside my webapp, I can't get a JNDI connection,
> but if it is in the server's context.xml, it works great.
> 
> Walter
> -- 
> View this message in context: 
> http://www.nabble.com/JNDI-configuration-in-webapp-META-INF-context.xml-tp19474901p19474901.html
> Sent from the Tomcat - User mailing list archive at Nabble.com.
> 
> 
> -
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

_
See how Windows connects the people, information, and fun that are part of your 
life.
http://clk.atdmt.com/MRT/go/msnnkwxp1020093175mrt/direct/01/

Question is answered. See Bill Barker-2 answer

2008-09-13 Thread kazukin6

Hi, Martin
Thanks for the answer
I see, what you mean, but the problem is slightly different

The matter is that our users can change jsp files whatever they like via
administrative interface, so we want to restrict the use of scriplets in
these jsp's because of possible abuses

Bill Barker-2 provided the comprehensive answer to this problem


mgainty wrote:
> 
> 
> use ths struts if tag to conditionally disable the code
> <%@ taglib prefix="s" uri="/struts-tags"%>
> 
> 
> Will Not Be Executed
> 
> 
> http://struts.apache.org/2.0.11.2/docs/if.html
> datorită struts
> Martin 
> __ 
> Disclaimer and confidentiality note 
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and
> Sender does not endorse distribution to any party other than intended
> recipient. Sender does not necessarily endorse content contained within
> this transmission. 
> 
> 
>> Date: Sat, 13 Sep 2008 08:58:59 -0700
>> From: [EMAIL PROTECTED]
>> To: users@tomcat.apache.org
>> Subject: Re: Disable java code execution <%blabla%> in jsp, but permits
>> tags
>> 
>> 
>> We want them to be able to customize information they get from our system
>> by
>> using custom tags
>> 
>> 
>> H. Hall wrote:
>> > 
>> > kazukin6 wrote:
>> >> Plz Help !!
>> >> Is it possible to disable all java code execution within jsp page (by
>> >> security manager or something)
>> >> but allow custom tags to be executed?
>> >>
>> >> The problem is that the users can change jsp files, and due to
>> security
>> >> reasons we can allow them to use only tags 
>> >>   
>> > Why are users allowed to change jsp files?
>> > 
>> > HH
>> > 
>> > 
>> > 
>> > -- 
>> > H. Hall
>> > ReedyRiver Group LLC
>> > http://www.reedyriver.com
>> > 
>> > 
>> > -
>> > To start a new topic, e-mail: users@tomcat.apache.org
>> > To unsubscribe, e-mail: [EMAIL PROTECTED]
>> > For additional commands, e-mail: [EMAIL PROTECTED]
>> > 
>> > 
>> > 
>> 
>> -- 
>> View this message in context:
>> http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19471795.html
>> Sent from the Tomcat - User mailing list archive at Nabble.com.
>> 
>> 
>> -
>> To start a new topic, e-mail: users@tomcat.apache.org
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>> 
> 
> _
> Get more out of the Web. Learn 10 hidden secrets of Windows Live.
> http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008
> 

-- 
View this message in context: 
http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19476209.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Question is answered. See Bill Barker-2 answer

2008-09-13 Thread Martin Gainty

that was a 30 second solution amongst 100 different solutions

so maybe you want to categorise the jsps and then enable / disable 
view/update/delete of the resources in those categories depending on the 
authenticated credentials of the user
for this scenario you might want to look at portals and or content-management 
system

i would start here
http://portals.apache.org/jetspeed-1/fusion.html

Martin
__ 
Disclaimer and confidentiality note 
Everything in this e-mail and any attachments relates to the official business 
of Sender. This transmission is of a confidential nature and Sender does not 
endorse distribution to any party other than intended recipient. Sender does 
not necessarily endorse content contained within this transmission. 


> Date: Sat, 13 Sep 2008 17:32:29 -0700
> From: [EMAIL PROTECTED]
> To: users@tomcat.apache.org
> Subject: Question is answered. See Bill Barker-2 answer
> 
> 
> Hi, Martin
> Thanks for the answer
> I see, what you mean, but the problem is slightly different
> 
> The matter is that our users can change jsp files whatever they like via
> administrative interface, so we want to restrict the use of scriplets in
> these jsp's because of possible abuses
> 
> Bill Barker-2 provided the comprehensive answer to this problem
> 
> 
> mgainty wrote:
> > 
> > 
> > use ths struts if tag to conditionally disable the code
> > <%@ taglib prefix="s" uri="/struts-tags"%>
> > 
> > 
> > Will Not Be Executed
> > 
> > 
> > http://struts.apache.org/2.0.11.2/docs/if.html
> > datorită struts
> > Martin 
> > __ 
> > Disclaimer and confidentiality note 
> > Everything in this e-mail and any attachments relates to the official
> > business of Sender. This transmission is of a confidential nature and
> > Sender does not endorse distribution to any party other than intended
> > recipient. Sender does not necessarily endorse content contained within
> > this transmission. 
> > 
> > 
> >> Date: Sat, 13 Sep 2008 08:58:59 -0700
> >> From: [EMAIL PROTECTED]
> >> To: users@tomcat.apache.org
> >> Subject: Re: Disable java code execution <%blabla%> in jsp, but permits
> >> tags
> >> 
> >> 
> >> We want them to be able to customize information they get from our system
> >> by
> >> using custom tags
> >> 
> >> 
> >> H. Hall wrote:
> >> > 
> >> > kazukin6 wrote:
> >> >> Plz Help !!
> >> >> Is it possible to disable all java code execution within jsp page (by
> >> >> security manager or something)
> >> >> but allow custom tags to be executed?
> >> >>
> >> >> The problem is that the users can change jsp files, and due to
> >> security
> >> >> reasons we can allow them to use only tags 
> >> >>   
> >> > Why are users allowed to change jsp files?
> >> > 
> >> > HH
> >> > 
> >> > 
> >> > 
> >> > -- 
> >> > H. Hall
> >> > ReedyRiver Group LLC
> >> > http://www.reedyriver.com
> >> > 
> >> > 
> >> > -
> >> > To start a new topic, e-mail: users@tomcat.apache.org
> >> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> > For additional commands, e-mail: [EMAIL PROTECTED]
> >> > 
> >> > 
> >> > 
> >> 
> >> -- 
> >> View this message in context:
> >> http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19471795.html
> >> Sent from the Tomcat - User mailing list archive at Nabble.com.
> >> 
> >> 
> >> -
> >> To start a new topic, e-mail: users@tomcat.apache.org
> >> To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> For additional commands, e-mail: [EMAIL PROTECTED]
> >> 
> > 
> > _
> > Get more out of the Web. Learn 10 hidden secrets of Windows Live.
> > http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008
> > 
> 
> -- 
> View this message in context: 
> http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19476209.html
> Sent from the Tomcat - User mailing list archive at Nabble.com.
> 
> 
> -
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

_
See how Windows connects the people, information, and fun that are part of your 
life.
http://clk.atdmt.com/MRT/go/msnnkwxp1020093175mrt/direct/01/

RE: JNDI configuration in webapp/META-INF/context.xml

2008-09-13 Thread walterw

Hi,

Thanks for your reply, but I am still getting the same error.

[code]
Caused by: org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot create
JDBC driver of class '' for connect URL 'null'
at
org.apache.tomcat.dbcp.dbcp.BasicDataSource.createDataSource(BasicDataSource.java:1150)
at
org.apache.tomcat.dbcp.dbcp.BasicDataSource.getConnection(BasicDataSource.java:880)
at
org.springframework.orm.hibernate3.LocalDataSourceConnectionProvider.getConnection(LocalDataSourceConnectionProvider.java:82)
at
org.hibernate.jdbc.ConnectionManager.openConnection(ConnectionManager.java:423)
... 69 more
Caused by: java.lang.NullPointerException
at sun.jdbc.odbc.JdbcOdbcDriver.getProtocol(JdbcOdbcDriver.java:507)
at sun.jdbc.odbc.JdbcOdbcDriver.knownURL(JdbcOdbcDriver.java:476)
at sun.jdbc.odbc.JdbcOdbcDriver.acceptsURL(JdbcOdbcDriver.java:307)
at java.sql.DriverManager.getDriver(DriverManager.java:253)
at
org.apache.tomcat.dbcp.dbcp.BasicDataSource.createDataSource(BasicDataSource.java:1143)
... 72 more
[/code]

[code]



WEB-INF/web.xml
META-INF/context.xml


[/code]

I tried putting useNaming in the resource element as well as the context
element, but all to no avail.  It looks like this configuration is not doing
anything.  This file is supposed to be placed in
servlet.war/META-INF/context.xml in which the servlet.war is the actual
file.  Could it also go in /WEB-INF/classes/META-INF/context.xml?

I tried both places, but nothing changed.

Please let me know what else to try.

Thanks,
Walter

mgainty wrote:
> 
> 
> Walter:
> 
> check your META-INF/context.xml attribute useNaming="true"
> 
> http://tomcat.apache.org/tomcat-5.5-doc/config/context.html
> 
> HTH
> Martin 
> __ 
> Disclaimer and confidentiality note 
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and
> Sender does not endorse distribution to any party other than intended
> recipient. Sender does not necessarily endorse content contained within
> this transmission. 
> 
> 
>> Date: Sat, 13 Sep 2008 14:38:15 -0700
>> From: [EMAIL PROTECTED]
>> To: users@tomcat.apache.org
>> Subject: JNDI configuration in webapp/META-INF/context.xml
>> 
>> 
>> Hi all,
>> 
>> I have tried setting up JNDI for my web application inside the
>> applicaton's
>> WAR file itself to no avail.  If I use the same configuration, but put it
>> in
>> my server's context.xml, it works fine.
>> 
>> Here is the configuration I am using:
>> [code]
>> 
>>  
>> 
>>  WEB-INF/web.xml
>>  META-INF/context.xml
>>  > type="javax.sql.DataSource"
>>  driverClassName="${jdbc.driverClassName}" url="${jdbc.url}"
>> username="${jdbc.username}"
>>  password="${jdbc.password}" maxActive="100" maxIdle="30"
>> maxWait="1"
>> />
>> 
>> [/code]
>> 
>> The parameters specified dynamically via ${} are filtered via
>> maven-resources-plugin, so that is not an issue.  The issue is just with
>> this configuration placed inside my webapp, I can't get a JNDI
>> connection,
>> but if it is in the server's context.xml, it works great.
>> 
>> Walter
>> -- 
>> View this message in context:
>> http://www.nabble.com/JNDI-configuration-in-webapp-META-INF-context.xml-tp19474901p19474901.html
>> Sent from the Tomcat - User mailing list archive at Nabble.com.
>> 
>> 
>> -
>> To start a new topic, e-mail: users@tomcat.apache.org
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>> 
> 
> _
> See how Windows connects the people, information, and fun that are part of
> your life.
> http://clk.atdmt.com/MRT/go/msnnkwxp1020093175mrt/direct/01/
> 

-- 
View this message in context: 
http://www.nabble.com/JNDI-configuration-in-webapp-META-INF-context.xml-tp19474901p19476389.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Question is answered. See Bill Barker-2 answer

2008-09-13 Thread kazukin6

Martin, thanks for a guide! I took a look at the Jetspeed (and portlet
specifications too) and it seems pretty intresting. I'll definetely study
it. The only thing that scares me that spec-s
(http://www.jcp.org/aboutJava/communityprocess/review/jsr168/)  wasnt
updated since 2003

And yes, you really got it. Our system indeed is a portal and CMS and
something else too. And it somehow resembles the functions the Portal API
has. At this moment we're developing CRM part based on it. We already have a
whole bunch of portal functionality (it doesnt have any XML config cause
it's highly dynamic and config is stored in DB) and very specific security
system, tuned to our specific features, and at this point I'm not sure we'll
be able to seamlessly integrate any second-party solution into this
architecture. 



mgainty wrote:
> 
> 
> that was a 30 second solution amongst 100 different solutions
> 
> so maybe you want to categorise the jsps and then enable / disable
> view/update/delete of the resources in those categories depending on
> the authenticated credentials of the user
> for this scenario you might want to look at portals and or
> content-management system
> 
> i would start here
> http://portals.apache.org/jetspeed-1/fusion.html
> 
> Martin
> __ 
> Disclaimer and confidentiality note 
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and
> Sender does not endorse distribution to any party other than intended
> recipient. Sender does not necessarily endorse content contained within
> this transmission. 
> 
> 
>> Date: Sat, 13 Sep 2008 17:32:29 -0700
>> From: [EMAIL PROTECTED]
>> To: users@tomcat.apache.org
>> Subject: Question is answered. See Bill Barker-2 answer
>> 
>> 
>> Hi, Martin
>> Thanks for the answer
>> I see, what you mean, but the problem is slightly different
>> 
>> The matter is that our users can change jsp files whatever they like via
>> administrative interface, so we want to restrict the use of scriplets in
>> these jsp's because of possible abuses
>> 
>> Bill Barker-2 provided the comprehensive answer to this problem
>> 
>> 
>> mgainty wrote:
>> > 
>> > 
>> > use ths struts if tag to conditionally disable the code
>> > <%@ taglib prefix="s" uri="/struts-tags"%>
>> > 
>> > 
>> > Will Not Be Executed
>> > 
>> > 
>> > http://struts.apache.org/2.0.11.2/docs/if.html
>> > datorită struts
>> > Martin 
>> > __ 
>> > Disclaimer and confidentiality note 
>> > Everything in this e-mail and any attachments relates to the official
>> > business of Sender. This transmission is of a confidential nature and
>> > Sender does not endorse distribution to any party other than intended
>> > recipient. Sender does not necessarily endorse content contained within
>> > this transmission. 
>> > 
>> > 
>> >> Date: Sat, 13 Sep 2008 08:58:59 -0700
>> >> From: [EMAIL PROTECTED]
>> >> To: users@tomcat.apache.org
>> >> Subject: Re: Disable java code execution <%blabla%> in jsp, but
>> permits
>> >> tags
>> >> 
>> >> 
>> >> We want them to be able to customize information they get from our
>> system
>> >> by
>> >> using custom tags
>> >> 
>> >> 
>> >> H. Hall wrote:
>> >> > 
>> >> > kazukin6 wrote:
>> >> >> Plz Help !!
>> >> >> Is it possible to disable all java code execution within jsp page
>> (by
>> >> >> security manager or something)
>> >> >> but allow custom tags to be executed?
>> >> >>
>> >> >> The problem is that the users can change jsp files, and due to
>> >> security
>> >> >> reasons we can allow them to use only tags 
>> >> >>   
>> >> > Why are users allowed to change jsp files?
>> >> > 
>> >> > HH
>> >> > 
>> >> > 
>> >> > 
>> >> > -- 
>> >> > H. Hall
>> >> > ReedyRiver Group LLC
>> >> > http://www.reedyriver.com
>> >> > 
>> >> > 
>> >> >
>> -
>> >> > To start a new topic, e-mail: users@tomcat.apache.org
>> >> > To unsubscribe, e-mail: [EMAIL PROTECTED]
>> >> > For additional commands, e-mail: [EMAIL PROTECTED]
>> >> > 
>> >> > 
>> >> > 
>> >> 
>> >> -- 
>> >> View this message in context:
>> >>
>> http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19471795.html
>> >> Sent from the Tomcat - User mailing list archive at Nabble.com.
>> >> 
>> >> 
>> >> -
>> >> To start a new topic, e-mail: users@tomcat.apache.org
>> >> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> >> For additional commands, e-mail: [EMAIL PROTECTED]
>> >> 
>> > 
>> > _
>> > Get more out of the Web. Learn 10 hidden secrets of Windows Live.
>> >
>> http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_domore_092008
>> > 
>> 
>> -- 
>> View this messag

RE: Question is answered. See Bill Barker-2 answer (update)

2008-09-13 Thread kazukin6

And yes, for us it' not possible to give users to change only parts of jsp's
and deny execution of these parts based on some credential assessments
executed during some  tags


kazukin6 wrote:
> 
> Martin, thanks for a guide! I took a look at the Jetspeed (and portlet
> specifications too) and it seems pretty intresting. I'll definetely study
> it. The only thing that scares me that spec-s
> (http://www.jcp.org/aboutJava/communityprocess/review/jsr168/)  wasnt
> updated since 2003
> 
> And yes, you really got it. Our system indeed is a portal and CMS and
> something else too. And it somehow resembles the functions the Portal API
> has. At this moment we're developing CRM part based on it. We already have
> a whole bunch of portal functionality (it doesnt have any XML config cause
> it's highly dynamic and config is stored in DB) and very specific security
> system, tuned to our specific features, and at this point I'm not sure
> we'll be able to seamlessly integrate any second-party solution into this
> architecture. 
> 
> 
> 
> mgainty wrote:
>> 
>> 
>> that was a 30 second solution amongst 100 different solutions
>> 
>> so maybe you want to categorise the jsps and then enable / disable
>> view/update/delete of the resources in those categories depending on
>> the authenticated credentials of the user
>> for this scenario you might want to look at portals and or
>> content-management system
>> 
>> i would start here
>> http://portals.apache.org/jetspeed-1/fusion.html
>> 
>> Martin
>> __ 
>> Disclaimer and confidentiality note 
>> Everything in this e-mail and any attachments relates to the official
>> business of Sender. This transmission is of a confidential nature and
>> Sender does not endorse distribution to any party other than intended
>> recipient. Sender does not necessarily endorse content contained within
>> this transmission. 
>> 
>> 
>>> Date: Sat, 13 Sep 2008 17:32:29 -0700
>>> From: [EMAIL PROTECTED]
>>> To: users@tomcat.apache.org
>>> Subject: Question is answered. See Bill Barker-2 answer
>>> 
>>> 
>>> Hi, Martin
>>> Thanks for the answer
>>> I see, what you mean, but the problem is slightly different
>>> 
>>> The matter is that our users can change jsp files whatever they like via
>>> administrative interface, so we want to restrict the use of scriplets in
>>> these jsp's because of possible abuses
>>> 
>>> Bill Barker-2 provided the comprehensive answer to this problem
>>> 
>>> 
>>> mgainty wrote:
>>> > 
>>> > 
>>> > use ths struts if tag to conditionally disable the code
>>> > <%@ taglib prefix="s" uri="/struts-tags"%>
>>> > 
>>> > 
>>> > Will Not Be Executed
>>> > 
>>> > 
>>> > http://struts.apache.org/2.0.11.2/docs/if.html
>>> > datorită struts
>>> > Martin 
>>> > __ 
>>> > Disclaimer and confidentiality note 
>>> > Everything in this e-mail and any attachments relates to the official
>>> > business of Sender. This transmission is of a confidential nature and
>>> > Sender does not endorse distribution to any party other than intended
>>> > recipient. Sender does not necessarily endorse content contained
>>> within
>>> > this transmission. 
>>> > 
>>> > 
>>> >> Date: Sat, 13 Sep 2008 08:58:59 -0700
>>> >> From: [EMAIL PROTECTED]
>>> >> To: users@tomcat.apache.org
>>> >> Subject: Re: Disable java code execution <%blabla%> in jsp, but
>>> permits
>>> >> tags
>>> >> 
>>> >> 
>>> >> We want them to be able to customize information they get from our
>>> system
>>> >> by
>>> >> using custom tags
>>> >> 
>>> >> 
>>> >> H. Hall wrote:
>>> >> > 
>>> >> > kazukin6 wrote:
>>> >> >> Plz Help !!
>>> >> >> Is it possible to disable all java code execution within jsp page
>>> (by
>>> >> >> security manager or something)
>>> >> >> but allow custom tags to be executed?
>>> >> >>
>>> >> >> The problem is that the users can change jsp files, and due to
>>> >> security
>>> >> >> reasons we can allow them to use only tags 
>>> >> >>   
>>> >> > Why are users allowed to change jsp files?
>>> >> > 
>>> >> > HH
>>> >> > 
>>> >> > 
>>> >> > 
>>> >> > -- 
>>> >> > H. Hall
>>> >> > ReedyRiver Group LLC
>>> >> > http://www.reedyriver.com
>>> >> > 
>>> >> > 
>>> >> >
>>> -
>>> >> > To start a new topic, e-mail: users@tomcat.apache.org
>>> >> > To unsubscribe, e-mail: [EMAIL PROTECTED]
>>> >> > For additional commands, e-mail: [EMAIL PROTECTED]
>>> >> > 
>>> >> > 
>>> >> > 
>>> >> 
>>> >> -- 
>>> >> View this message in context:
>>> >>
>>> http://www.nabble.com/Disable-java-code-execution-%3C-blabla-%3E-in-jsp%2C-but-permits-tags-tp19415053p19471795.html
>>> >> Sent from the Tomcat - User mailing list archive at Nabble.com.
>>> >> 
>>> >> 
>>> >> -
>>> >> To start a new topic, e-mail: users@tomcat.apache.org
>>> >> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>> >> For additional commands, e-

number of worker threads in Tomcat 6

2008-09-13 Thread Madhav
Hi,
I want to know the values of maxThreads, minSpareThreads parameters as well
as the number of 'available' worker threads inside a servlet in Tomcat 6.

I tried googling with -- find worker threads in Tomcat-- and similar phrases
but was not able to get the above info. Could anyone help me ?

Thanks,
-Madhav


Unable to start tomacat....

2008-09-13 Thread Pankaj Jain
I am unable to start the tomcat .
Whenever i click on start button it shows me some steps but after that it
remain stop.
Plz help me