Re: Tomcat URL redirect ?

2007-05-18 Thread Abdul Qayyum
Hi Christopher Schultz, I understand that during a webapp reload, Tomcat will issue a 503 response. The issue is that, I have named my war file as ROOT.war, so that, when I access my tomcat default page using http://localhost:8080/ i get my application's index page. This is how our out side serve

Re: displaying customized error page in tomcat 5.5.12

2007-05-18 Thread Abdul Qayyum
Thank you very much for your time and knowledge. I am trying virtual hosting, If I get it, I will mail you. Regarsd: Sagri On 5/18/07, Tim Lucia <[EMAIL PROTECTED]> wrote: > -Original Message- > From: Abdul Qayyum [mailto:[EMAIL PROTECTED] > Sent: Friday, May 18, 2007 3:54 AM > To: T

Re: Overriding Default Servlet?

2007-05-18 Thread Tim Funk
It can be extended like any other java class. In reality - there are probably 2 better solutions than extending (or replacing) the Default Servlet. 1) Create a filter which does what you need then pass control to the default servlet. (chain.doFilter()) 2) Create your own default servlet but i

Re: Prevent unwanted requests

2007-05-18 Thread David Smith
I'll second that one. A basic filter that checks the request for .bak, .java, .whatever is relatively easy and transparent (you don't have to change even one line of your existing code). When you find one of those banned extensions, just return a 403 (forbidden) or 404 (not found) on the resp

Re: UserDatabase & security

2007-05-18 Thread Mark Thomas
Jerome Benezech wrote: > Thanks for the info, that would do great. > Any link on documentation to configure tomcat that way > ? Would it have killed you to spend 30 seconds looking for this yourself? http://tomcat.apache.org/tomcat-6.0-doc/security-manager-howto.html Mark --

Re: Overriding Default Servlet?

2007-05-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johnny, Johnny Kewl wrote: > So this plebian is asking... wot does override actually mean?? > > I do know that if one creates a servlet and say maps it as /* > that will effectively block the default servlet is that wot > override means? Yes

Re: Prevent unwanted requests

2007-05-18 Thread Lucas Galfaso
I think that a new servlet to filter these files is not the proper approach, and you should use a filter :) - LG On 5/18/07, Milanez, Marcus <[EMAIL PROTECTED]> wrote: Is it possible to prevent the request os unwatned extensions, like *.bak, *.java and so on, through web.xml file? My solution w

Overriding Default Servlet?

2007-05-18 Thread Johnny Kewl
Read some tomcat docs where it said one can override the default servlet... and then it gets a little cocky and says if you cant read the code... this is not for you (pleb!) So this plebian is asking... wot does override actually mean?? I do know that if one creates a servlet and say maps it a

Re: Prevent unwanted requests

2007-05-18 Thread Hassan Schroeder
On 5/18/07, Milanez, Marcus <[EMAIL PROTECTED]> wrote: In fact I don't have this files in my server. The thing is, whenever I invke URLs that matches /dwr/anyFile.java, I get a positive DWR answer, as if I had such files in my server. What do you mean by "positive answer"? I just happened to

RES: Preventing unwanted requests

2007-05-18 Thread Milanez, Marcus
Well, I can't answer that.. I guess it is my fault. Bu anyway, it is not *my* DWR (http://getahead.ltd.uk/dwr/) application... I wish it was! :D -Mensagem original- De: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Enviada em: sexta-feira, 18 de maio de 2007 17:11 Para: Tomcat Users Li

Re: Connection:close request returns a response without any content-length or Transfer-Encoding: chunked

2007-05-18 Thread Johnny Kewl
Just a footnote coz i suddenly realized wot may be happening Because a browser may only support http 1.0... and or the content lengths are not been set in the server... if you have progress scripts in your page... you always have to check for divide by zero... which I imagine is your proble

RE: Prevent unwanted requests

2007-05-18 Thread Caldarale, Charles R
> From: Milanez, Marcus [mailto:[EMAIL PROTECTED] > Subject: RES: Prevent unwanted requests > > In fact I don't have this files in my server. The thing is, whenever I > invke URLs that matches /dwr/anyFile.java, I get a positive > DWR answer, > as if I had such files in my server. Don't confuse

RES: Prevent unwanted requests

2007-05-18 Thread Milanez, Marcus
Hi Chuck, In fact I don't have this files in my server. The thing is, whenever I invke URLs that matches /dwr/anyFile.java, I get a positive DWR answer, as if I had such files in my server. Whenever I run automated security test tools like Paros Proxy, many issues regarding these problems are poin

RE: Prevent unwanted requests

2007-05-18 Thread Caldarale, Charles R
> From: Milanez, Marcus [mailto:[EMAIL PROTECTED] > Subject: Prevent unwanted requests > > Is it possible to prevent the request os unwatned extensions, like > *.bak, *.java and so on, through web.xml file? The real question is: Why do have .java, etc., files in accessible locations? If you kee

Prevent unwanted requests

2007-05-18 Thread Milanez, Marcus
Is it possible to prevent the request os unwatned extensions, like *.bak, *.java and so on, through web.xml file? My solution was creating a servlet that gets mapped to this extensions, but I could realize that it doesn't work along with DWR for example... The problem is that when I invoke somethi

Re: Connection:close request returns a response without any content-length or Transfer-Encoding: chunked

2007-05-18 Thread Johnny Kewl
I havnt kept up http standards so this is a guess as usual ;) In http 1.0 thats how the server told the browser that the transmission was over it closed the connection. So if its defaulting to the old way slamming down the telephone... context length doesnt mean anything... s

[ANN] Apache Tomcat JK 1.2.23 Web Server Connector released

2007-05-18 Thread Rainer Jung
The Apache Tomcat team is pleased to announce the immediate availability of version 1.2.23 of the Apache Tomcat Connectors. It contains connectors, which allow a web server such as Apache HTTPD, Microsoft IIS and Sun Web Server to act as a front end to the Tomcat web application server. This ver

RE: Error trapping

2007-05-18 Thread Nelson, Tracy M.
getMethodName() *is* the utility routine. I intended to stick it in the base class for all of our business objects, so it would always be available. If you're going to use it extensively, you might want to put it in a utility class as a static method. Either way, you can just concatenate the retu

RE: I've been trying to unsubscribe from this list for years.

2007-05-18 Thread Propes, Barry L
it didn't work Either? -Original Message- From: Abdelmonaam Kallali [mailto:[EMAIL PROTECTED] Sent: Friday, May 18, 2007 1:45 PM To: 'Tomcat Users List' Subject: RE: I've been trying to unsubscribe from this list for years. It didn't work neither Abdelmonaam KALLALI Test Specialist Drag

Re: Error trapping

2007-05-18 Thread Martin Gainty
David-- http://java.sun.com/j2se/1.5.0/docs/api/ embed what you need by creating your own Exception class with the custom method in that class? Does this help? M-- This email message and any files transmitted with it contain confidential information intended only for the person(s) to whom this

Re: Error trapping

2007-05-18 Thread David kerber
So how do I use that getMethodName code? Can I make a utility routine that I can call from my catch block, and call it with the Exception object (so I can put the function call inline with the error report string), or do I have to embed the 3 functional lines of code into my catch block? D

RE: I've been trying to unsubscribe from this list for years.

2007-05-18 Thread Abdelmonaam Kallali
It didn't work neither Abdelmonaam KALLALI Test Specialist DragonWave Inc 411 Legget Dr Phone :613-599 9991 ext 275 -Original Message- From: tomcat [mailto:[EMAIL PROTECTED] Sent: Friday, May 18, 2007 7:29 AM To: Tomcat Users List Subject: Re: I've been trying to unsubscribe from this lis

RE: Error trapping

2007-05-18 Thread Nelson, Tracy M.
I actually have a note about this exact thing. Check here: http://randomcoolzip.blogspot.com/2006/02/hack-of-day.html | -Original Message- | From: David kerber [mailto:[EMAIL PROTECTED] | Sent: Friday, 18 May, 2007 12:47 | To: users@tomcat.apache.org | Subject: Error trapping | | In my p

Re: Error trapping

2007-05-18 Thread David kerber
Joe Riopel wrote: Can't you grab that from the stack trace? http://java.sun.com/j2se/1.4.2/docs/api/java/lang/StackTraceElement.html Looks like a possibility; I'll have to look into it. Thanks for the suggestion. D - To st

Re: Error trapping

2007-05-18 Thread Joe Riopel
Can't you grab that from the stack trace? http://java.sun.com/j2se/1.4.2/docs/api/java/lang/StackTraceElement.html - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional c

Error trapping

2007-05-18 Thread David kerber
In my plain .java files, is there a way of programmatically grabbing what method is executing? I already grab the class for logging in the catch block, but can I find the method without going through too many gyrations? Currently, I just hard-code the method name in the text that I log along

Connection:close request returns a response without any content-length or Transfer-Encoding: chunked

2007-05-18 Thread Eric Deshayes
Can anyone help me about that? Regards, Eric Sorry, i forgot to mention I was working with JBoss 4.0.3 SP1, so I assume Tomcat 5.5.9. Here are some example to illustrate my case. The first one i my problem. Is that a fix bug? if so, In which version of TOmcat has it been fixed? It seems to wor

Re: Missing ETag in 304 Header

2007-05-18 Thread Len Popp
Tomcat DOES return ETag headers with static resources, and DOES NOT return the ETag with 304 responses. That seems wrong according to the quoted part of the spec. Here are the headers from a couple of Firefox requests for the same file. Note the first response is a 200 with an ETag, the second is

RE: I've been trying to unsubscribe from this list for years.

2007-05-18 Thread gb1071nx
And on a completely unrelated note, ask your sysadmin how to set up server-side Outlook rules. They'll work in both your outlook client and through your webmail. > -Original Message- > From: Keith Adams [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 17, 2007 9:33 PM > To: [EMAIL PROTECT

Re: Tomcat URL redirect ?

2007-05-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Abdul, Abdul Qayyum wrote: > Will this approach redirect the page to other when one is under > reloading or upgration? IIRC, during a webapp reload, Tomcat will issue a 503 response. You might be able to catch this at the Tomcat level and display a c

Re: Multiple JVM in Tomat

2007-05-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerome, Jerome Benezech wrote: > OK so I would have several tomcat instances running on different > ports. This is fine but how would that impact memory usag eon the > server ? The same impact as a single Tomcat starting multiple VMs (however /that/

Re: UserDatabase & security

2007-05-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jacob, Jacob Rhoden wrote: > Jerome Benezech wrote: >> In this case, which user would be authenticated in >> LDAP ? If th user connecting to LDAP is 'tomcat', the >> issue remains no ? >> > Not quite. You reconfigure tomcat to use LDAP to lookup pa

RE: Multiple JVM in Tomat

2007-05-18 Thread Jerome Benezech
OK so I would have several tomcat instances running on different ports. This is fine but how would that impact memory usag eon the server ? I guess every tomcat instance needs quiet a bit of initial memory. Then that means this amount of memory would be multiplied by the number of webapps... Also,

RE: Multiple JVM in Tomat

2007-05-18 Thread Peter Crowther
> From: Jerome Benezech [mailto:[EMAIL PROTECTED] > Do you have any documentation link on how to setup > tomcat to spawn a different JVM per webapp ? "By hand". See the documentation on setting up multiple instances - to my knowledge, there's no way of setting up Tomcat to spawn JVMs. Note that

Multiple JVM in Tomat

2007-05-18 Thread Jerome Benezech
Hi all, Do you have any documentation link on how to setup tomcat to spawn a different JVM per webapp ? Cheers, Jerome Jerome Benezech [EMAIL PROTECTED] - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-m

Re: UserDatabase & security

2007-05-18 Thread Jerome Benezech
Thanks for the info, that would do great. Any link on documentation to configure tomcat that way ? --- Mark Thomas <[EMAIL PROTECTED]> wrote: > Jerome Benezech wrote: > > Is there a way to ensure that only the root user > can > > read this file ? > > Not quite root only but it will meet your > r

RE: displaying customized error page in tomcat 5.5.12

2007-05-18 Thread Tim Lucia
> -Original Message- > From: Abdul Qayyum [mailto:[EMAIL PROTECTED] > Sent: Friday, May 18, 2007 3:54 AM > To: Tomcat Users List > Subject: Re: displaying customized error page in tomcat 5.5.12 > > You are right Tim, > How I came to know about this might explain why ! > > I changed my w

Re: I've been trying to unsubscribe from this list for years.

2007-05-18 Thread tomcat
At 11:48 PM 5/17/2007, you wrote: When you send an email to [EMAIL PROTECTED] add the word Unsubscribe to the email's subject and body, that worked for me when I was trying to switch my e-mails. I think it sends you an additional e-mail to confirm unsubscription, reply to that one as well. The

Re: Suspected mod_jk connection problems

2007-05-18 Thread Mark Thomas
tomcat wrote: > [error] ajp_service::jk_ajp_common.c (1659): Client connection > aborted or network problems Could there be a firewall that is dropping the connection for some reason? > Any further comments or suggestions would be kindly appreciated. That it works on your local network but not r

Re: UserDatabase & security

2007-05-18 Thread Mark Thomas
Jerome Benezech wrote: > Is there a way to ensure that only the root user can > read this file ? Not quite root only but it will meet your requirement... Run Tomcat under a security manager. That way, webapps don't have access to files outside the docBase without explicit permissions being define

Re: Suspected mod_jk connection problems

2007-05-18 Thread tomcat
Hello All, I have a server that is not too heavily trafficked (yet!) that, to the user appears to hang on pages. This appears to be happening most often to users outside my network, as it has not been encountered by our developers unless they are working from home. I am not seeing any ne

Re: Tomcat URL redirect ?

2007-05-18 Thread Abdul Qayyum
Hi Will this approach redirect the page to other when one is under reloading or upgration? The situation is that, we want to send a customised error page when our website is under upgration. It will approximately take 1 hour for uploading a new war file on our server. During this time I want to

Re: path mapping on tomcat

2007-05-18 Thread Johnny Kewl
Nice didnt know Resin did that... I think the answer is you cant do it from XML configs... but maybe a guru will correct me... hopefully ;) Its probably about 20 lines of code though I do that sort of stuff in a servlet. ie in Tomcat you can map urls to a servlet... and then let the se

Re: UserDatabase & security

2007-05-18 Thread Johnny Kewl
Hi Jerome... Dont think its possible with tomcat doesnt have an encrypted password store. But I think you right... its part of a more general issue... namely that the server as a user, is a power user, and has to be able to get at resources on the machine... so you got this power user guard

Re: displaying customized error page in tomcat 5.5.12

2007-05-18 Thread Abdul Qayyum
You are right Tim, How I came to know about this might explain why ! I changed my war file to ROOT.war as this is situation in our website's tomcat. Now when I go to localhost:8080/ my application is displayed properly something like localhost:8080/eApp gives the custom 404 page I designed and pl

path mapping on tomcat

2007-05-18 Thread Manca Davide
Hello, I need to do in Tomcat 6 the equivalent of these Resin 2 directives : Thank you.

Re: UserDatabase & security

2007-05-18 Thread Jerome Benezech
Right, stupid comment Will see if we can do with LDAP or maybe just putting digested passwords would be ok. Thanks for your help Jerome --- Jacob Rhoden <[EMAIL PROTECTED]> wrote: > Jerome Benezech wrote: > >> As far as I am aware you cannot resolve this > problem > >> except by switching >

RE: Missing ETag in 304 Header

2007-05-18 Thread Reich, Matthias
Hi, the spec says that a 304 response MUST include header - ETag and/or Content-Location, if the header would have been sent in a 200 response to the same request Does Tomcat send an ETag header in a 200 response when it serves static content? If not (and I assume that it doesn't), I re

Re: UserDatabase & security

2007-05-18 Thread Jacob Rhoden
Jerome Benezech wrote: As far as I am aware you cannot resolve this problem except by switching to LDAP for your authentication. (Although I would be happy to be corrected!) In this case, which user would be authenticated in LDAP ? If th user connecting to LDAP is 'tomcat', the issue rem