Hi Christopher Schultz,
I understand that during a webapp reload, Tomcat will issue a 503 response.
The issue is that, I have named my war file as ROOT.war, so that, when I
access my tomcat default page using http://localhost:8080/ i get my
application's index page. This is how our out side serve
Thank you very much for your time and knowledge.
I am trying virtual hosting, If I get it, I will mail you.
Regarsd:
Sagri
On 5/18/07, Tim Lucia <[EMAIL PROTECTED]> wrote:
> -Original Message-
> From: Abdul Qayyum [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 18, 2007 3:54 AM
> To: T
It can be extended like any other java class. In reality - there are
probably 2 better solutions than extending (or replacing) the Default
Servlet.
1) Create a filter which does what you need then pass control to the
default servlet. (chain.doFilter())
2) Create your own default servlet but i
I'll second that one.
A basic filter that checks the request for .bak, .java, .whatever is
relatively easy and transparent (you don't have to change even one line
of your existing code). When you find one of those banned extensions,
just return a 403 (forbidden) or 404 (not found) on the resp
Jerome Benezech wrote:
> Thanks for the info, that would do great.
> Any link on documentation to configure tomcat that way
> ?
Would it have killed you to spend 30 seconds looking for this yourself?
http://tomcat.apache.org/tomcat-6.0-doc/security-manager-howto.html
Mark
--
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Johnny,
Johnny Kewl wrote:
> So this plebian is asking... wot does override actually mean??
>
> I do know that if one creates a servlet and say maps it as /*
> that will effectively block the default servlet is that wot
> override means?
Yes
I think that a new servlet to filter these files is not the proper
approach, and you should use a filter :)
- LG
On 5/18/07, Milanez, Marcus <[EMAIL PROTECTED]> wrote:
Is it possible to prevent the request os unwatned extensions, like
*.bak, *.java and so on, through web.xml file? My solution w
Read some tomcat docs where it said one can override the default servlet... and
then it gets a little cocky and says if you cant read the code... this is not
for you (pleb!)
So this plebian is asking... wot does override actually mean??
I do know that if one creates a servlet and say maps it a
On 5/18/07, Milanez, Marcus <[EMAIL PROTECTED]> wrote:
In fact I don't have this files in my server. The thing is, whenever I
invke URLs that matches /dwr/anyFile.java, I get a positive DWR answer,
as if I had such files in my server.
What do you mean by "positive answer"?
I just happened to
Well, I can't answer that.. I guess it is my fault. Bu anyway, it is not
*my* DWR (http://getahead.ltd.uk/dwr/) application... I wish it was! :D
-Mensagem original-
De: Caldarale, Charles R [mailto:[EMAIL PROTECTED]
Enviada em: sexta-feira, 18 de maio de 2007 17:11
Para: Tomcat Users Li
Just a footnote coz i suddenly realized wot may be happening
Because a browser may only support http 1.0... and or the content lengths
are not been set in the server... if you have progress scripts in your
page... you always have to check for divide by zero... which I imagine is
your proble
> From: Milanez, Marcus [mailto:[EMAIL PROTECTED]
> Subject: RES: Prevent unwanted requests
>
> In fact I don't have this files in my server. The thing is, whenever I
> invke URLs that matches /dwr/anyFile.java, I get a positive
> DWR answer,
> as if I had such files in my server.
Don't confuse
Hi Chuck,
In fact I don't have this files in my server. The thing is, whenever I
invke URLs that matches /dwr/anyFile.java, I get a positive DWR answer,
as if I had such files in my server. Whenever I run automated security
test tools like Paros Proxy, many issues regarding these problems are
poin
> From: Milanez, Marcus [mailto:[EMAIL PROTECTED]
> Subject: Prevent unwanted requests
>
> Is it possible to prevent the request os unwatned extensions, like
> *.bak, *.java and so on, through web.xml file?
The real question is: Why do have .java, etc., files in accessible
locations? If you kee
Is it possible to prevent the request os unwatned extensions, like
*.bak, *.java and so on, through web.xml file? My solution was creating
a servlet that gets mapped to this extensions, but I could realize that
it doesn't work along with DWR for example... The problem is that when
I invoke somethi
I havnt kept up http standards so this is a guess as usual ;)
In http 1.0 thats how the server told the browser that the transmission
was over it closed the connection.
So if its defaulting to the old way slamming down the telephone...
context length doesnt mean anything... s
The Apache Tomcat team is pleased to announce the immediate availability
of version 1.2.23 of the Apache Tomcat Connectors.
It contains connectors, which allow a web server such as Apache HTTPD,
Microsoft IIS and Sun Web Server to act as a front end to the Tomcat web
application server.
This ver
getMethodName() *is* the utility routine. I intended to stick it in the
base class for all of our business objects, so it would always be available.
If you're going to use it extensively, you might want to put it in a utility
class as a static method. Either way, you can just concatenate the retu
it didn't work Either?
-Original Message-
From: Abdelmonaam Kallali [mailto:[EMAIL PROTECTED]
Sent: Friday, May 18, 2007 1:45 PM
To: 'Tomcat Users List'
Subject: RE: I've been trying to unsubscribe from this list for years.
It didn't work neither
Abdelmonaam KALLALI
Test Specialist
Drag
David--
http://java.sun.com/j2se/1.5.0/docs/api/
embed what you need by creating your own Exception class with the custom
method in that class?
Does this help?
M--
This email message and any files transmitted with it contain confidential
information intended only for the person(s) to whom this
So how do I use that getMethodName code? Can I make a utility routine
that I can call from my catch block, and call it with the Exception
object (so I can put the function call inline with the error report
string), or do I have to embed the 3 functional lines of code into my
catch block?
D
It didn't work neither
Abdelmonaam KALLALI
Test Specialist
DragonWave Inc
411 Legget Dr
Phone :613-599 9991 ext 275
-Original Message-
From: tomcat [mailto:[EMAIL PROTECTED]
Sent: Friday, May 18, 2007 7:29 AM
To: Tomcat Users List
Subject: Re: I've been trying to unsubscribe from this lis
I actually have a note about this exact thing. Check here:
http://randomcoolzip.blogspot.com/2006/02/hack-of-day.html
| -Original Message-
| From: David kerber [mailto:[EMAIL PROTECTED]
| Sent: Friday, 18 May, 2007 12:47
| To: users@tomcat.apache.org
| Subject: Error trapping
|
| In my p
Joe Riopel wrote:
Can't you grab that from the stack trace?
http://java.sun.com/j2se/1.4.2/docs/api/java/lang/StackTraceElement.html
Looks like a possibility; I'll have to look into it. Thanks for the
suggestion.
D
-
To st
Can't you grab that from the stack trace?
http://java.sun.com/j2se/1.4.2/docs/api/java/lang/StackTraceElement.html
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional c
In my plain .java files, is there a way of programmatically grabbing
what method is executing? I already grab the class for logging in the
catch block, but can I find the method without going through too many
gyrations? Currently, I just hard-code the method name in the text that
I log along
Can anyone help me about that?
Regards,
Eric
Sorry, i forgot to mention I was working with JBoss 4.0.3 SP1, so I assume
Tomcat 5.5.9.
Here are some example to illustrate my case.
The first one i my problem.
Is that a fix bug? if so, In which version of TOmcat has it been fixed? It
seems to wor
Tomcat DOES return ETag headers with static resources, and DOES NOT
return the ETag with 304 responses. That seems wrong according to the
quoted part of the spec.
Here are the headers from a couple of Firefox requests for the same
file. Note the first response is a 200 with an ETag, the second is
And on a completely unrelated note, ask your sysadmin how to set up
server-side Outlook rules. They'll work in both your outlook client and
through your webmail.
> -Original Message-
> From: Keith Adams [mailto:[EMAIL PROTECTED]
> Sent: Thursday, May 17, 2007 9:33 PM
> To: [EMAIL PROTECT
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Abdul,
Abdul Qayyum wrote:
> Will this approach redirect the page to other when one is under
> reloading or upgration?
IIRC, during a webapp reload, Tomcat will issue a 503 response. You
might be able to catch this at the Tomcat level and display a c
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jerome,
Jerome Benezech wrote:
> OK so I would have several tomcat instances running on different
> ports. This is fine but how would that impact memory usag eon the
> server ?
The same impact as a single Tomcat starting multiple VMs (however /that/
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jacob,
Jacob Rhoden wrote:
> Jerome Benezech wrote:
>> In this case, which user would be authenticated in
>> LDAP ? If th user connecting to LDAP is 'tomcat', the
>> issue remains no ?
>>
> Not quite. You reconfigure tomcat to use LDAP to lookup pa
OK so I would have several tomcat instances running on
different ports. This is fine but how would that
impact memory usag eon the server ? I guess every
tomcat instance needs quiet a bit of initial memory.
Then that means this amount of memory would be
multiplied by the number of webapps...
Also,
> From: Jerome Benezech [mailto:[EMAIL PROTECTED]
> Do you have any documentation link on how to setup
> tomcat to spawn a different JVM per webapp ?
"By hand". See the documentation on setting up multiple instances - to
my knowledge, there's no way of setting up Tomcat to spawn JVMs. Note
that
Hi all,
Do you have any documentation link on how to setup
tomcat to spawn a different JVM per webapp ?
Cheers,
Jerome
Jerome Benezech
[EMAIL PROTECTED]
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-m
Thanks for the info, that would do great.
Any link on documentation to configure tomcat that way
?
--- Mark Thomas <[EMAIL PROTECTED]> wrote:
> Jerome Benezech wrote:
> > Is there a way to ensure that only the root user
> can
> > read this file ?
>
> Not quite root only but it will meet your
> r
> -Original Message-
> From: Abdul Qayyum [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 18, 2007 3:54 AM
> To: Tomcat Users List
> Subject: Re: displaying customized error page in tomcat 5.5.12
>
> You are right Tim,
> How I came to know about this might explain why !
>
> I changed my w
At 11:48 PM 5/17/2007, you wrote:
When you send an email to [EMAIL PROTECTED] add the word
Unsubscribe to the email's subject and body, that worked for me when I
was trying to switch my e-mails.
I think it sends you an additional e-mail to confirm unsubscription,
reply to that one as well.
The
tomcat wrote:
> [error] ajp_service::jk_ajp_common.c (1659): Client connection
> aborted or network problems
Could there be a firewall that is dropping the connection for some reason?
> Any further comments or suggestions would be kindly appreciated.
That it works on your local network but not r
Jerome Benezech wrote:
> Is there a way to ensure that only the root user can
> read this file ?
Not quite root only but it will meet your requirement...
Run Tomcat under a security manager. That way, webapps don't have
access to files outside the docBase without explicit permissions being
define
Hello All,
I have a server that is not too heavily trafficked (yet!) that, to
the user appears to hang on pages. This appears to be happening
most often to users outside my network, as it has not been
encountered by our developers unless they are working from home.
I am not seeing any ne
Hi
Will this approach redirect the page to other when one is under reloading or
upgration?
The situation is that, we want to send a customised error page when our
website is under upgration. It will approximately take 1 hour for uploading
a new war file on our server. During this time I want to
Nice didnt know Resin did that...
I think the answer is you cant do it from XML configs... but maybe a guru
will correct me... hopefully ;)
Its probably about 20 lines of code though I do that sort of stuff in a
servlet.
ie in Tomcat you can map urls to a servlet... and then let the se
Hi Jerome...
Dont think its possible with tomcat doesnt have an encrypted password
store.
But I think you right... its part of a more general issue... namely that the
server as a user, is a power user, and has to be able to get at resources on
the machine... so you got this power user guard
You are right Tim,
How I came to know about this might explain why !
I changed my war file to ROOT.war as this is situation in our website's
tomcat.
Now when I go to localhost:8080/ my application is displayed properly
something like localhost:8080/eApp gives the custom 404 page I designed and
pl
Hello,
I need to do in Tomcat 6 the equivalent of these Resin 2 directives :
Thank you.
Right, stupid comment Will see if we can do with
LDAP or maybe just putting digested passwords would be
ok.
Thanks for your help
Jerome
--- Jacob Rhoden <[EMAIL PROTECTED]> wrote:
> Jerome Benezech wrote:
> >> As far as I am aware you cannot resolve this
> problem
> >> except by switching
>
Hi,
the spec says that a 304 response MUST include header
- ETag and/or Content-Location, if the header would have been sent
in a 200 response to the same request
Does Tomcat send an ETag header in a 200 response when it serves static
content?
If not (and I assume that it doesn't), I re
Jerome Benezech wrote:
As far as I am aware you cannot resolve this problem
except by switching
to LDAP for your authentication. (Although I would
be happy to be
corrected!)
In this case, which user would be authenticated in
LDAP ? If th user connecting to LDAP is 'tomcat', the
issue rem
49 matches
Mail list logo