RE: [PATCH] change JDBCRealm to add flexibility in table layout

2002-03-07 Thread Jim Seach
--- "Ignacio J. Ortega" <[EMAIL PROTECTED]> wrote: > > De: Jim Seach [mailto:[EMAIL PROTECTED]] > > Enviado el: jueves 7 de marzo de 2002 18:08 > > > > > A new feature, but a suggestion rather than a request. Even if the > > client realm doesn

RE: [PATCH] change JDBCRealm to add flexibility in table layout

2002-03-07 Thread Jim Seach
--- "Ignacio J. Ortega" <[EMAIL PROTECTED]> wrote: > > De: Jim Seach [mailto:[EMAIL PROTECTED]] > > Enviado el: jueves 7 de marzo de 2002 16:38 > > > > > Ignacio, > > > > I apologize for not reading more closely. You didn't -1 it

RE: [PATCH] change JDBCRealm to add flexibility in table layout

2002-03-07 Thread Jim Seach
hash needs to be stored in the database rather than the actual password. I usually use custom authentication rather than using the container provided capabilities, but there may be times when this might be useful, so having well thought out and flexible components is always important! Thanks, Jim

RE: [PATCH] change JDBCRealm to add flexibility in table layout

2002-03-07 Thread Jim Seach
eems to me that true flexiblilty in our code would be to allow JDBCRealm to work with multiple database designs without requiring the addition of views or modification of table designs. Jim Seach --- "Ignacio J. Ortega" <[EMAIL PROTECTED]> wrote: > > De: John Gregg [mailto:[

RE: KPMG-2002003: Bea Weblogic DOS-device Denial of Service

2002-01-08 Thread Jim Seach
S-DOS device name string LPTSTR lpTargetPath, // query results buffer DWORD ucchMax // maximum size of buffer ); --- David Bullock <[EMAIL PROTECTED]> wrote: > What about an API to list DosDevices? Sorry if you already looked. > > cheers, > David. > > On Tue

RE: KPMG-2002003: Bea Weblogic DOS-device Denial of Service

2002-01-08 Thread Jim Seach
ones won't work in all cases. Hope this helps, Jim Seach --- Larry Isaacs <[EMAIL PROTECTED]> wrote: > I was too optimistic after testing only with Win98. I get the same > problem with Win2k. > > As you have probably already discovered, FileUtil.savePath() blocks > the

Re: New SSL HOWTOs

2001-08-16 Thread Jim Seach
--- Christopher Cain <[EMAIL PROTECTED]> wrote: > While creating the 3.3 version of my SSL HOWTO, I also polished off > the > wording here and there and added a TOC and section marks for easier > navigation. Attached are both the 3.3 and 4.0 versions of the file. > Consider this 4.0 version to su

Re: Addition of 'dirty' field to Session interface

2001-08-07 Thread Jim Seach
--- Vishy Kasar <[EMAIL PROTECTED]> wrote: > Hi, > > In order to support persistent failover, we have written our own > Store > class that writes session data to DB of our choice. We decided to use > maxIdleBackups as that will save the data periodically to disk > without > getting rid of it in

Re: [PROPOSAL] Standalone SSL

2001-08-03 Thread Jim Seach
--- [EMAIL PROTECTED] wrote: > On Tue, 31 Jul 2001, Jim Seach wrote: > > > What I meant was, in order to implement SSL, Tomcat must be able > to > > decrypt the keystore to retrieve the private key for the cert. A > > Tomcat extension or module could be develop

Re: [PROPOSAL] Standalone SSL

2001-07-31 Thread Jim Seach
--- Christopher Cain <[EMAIL PROTECTED]> wrote: > [SNIP] > Again, I haven't looked at the > Realm stuff and what-not, but I can't imagine the possible risk being > nearly as devestating. I'm not trying to toot my own horn or talk > about > how great I am, but security/crypto is my area of expe

Re: [PROPOSAL] Standalone SSL

2001-07-31 Thread Jim Seach
--- Christopher Cain <[EMAIL PROTECTED]> wrote: > > > The system would still have to have access to the private key, which > would have to be protected with some kind of PBE scheme, in which > case > you are right back to specifying a password in the config files. > > Aside from that, it's not

Re: [PROPOSAL] Standalone SSL

2001-07-31 Thread Jim Seach
--- "Pier P. Fumagalli" <[EMAIL PROTECTED]> wrote: > Jim Seach at [EMAIL PROTECTED] wrote: > > > > One of the possible custom solutons is to encrypt the > > other information with your public key, then use the > > private key to decrypt the other s

Re: [PROPOSAL] Standalone SSL

2001-07-31 Thread Jim Seach
--- Christopher Cain <[EMAIL PROTECTED]> wrote: > > In short, it is currently a needless exposure, and > certs are much more > important than most other resources. If I paid good > money for a real > cert signed by a CA, I would especially have a > comprehensive security > scheme in place to pro

Re: Non-web .jsp templates ?

2001-07-29 Thread Jim Seach
Why not user Velocity? It is already set up to do this, and even has an ant task (Texen) to help automate it. Jim --- Deacon Marcus <[EMAIL PROTECTED]> wrote: > Hi, > Our team was recently discussing potential usage of > .jsp pages as templates > for use with automatic mail generation and other