Re: no authentication with mod_jk-1.2.24

Leif Neve wrote: Hello, I just upgraded from mod_jk-1.2.19 to 1.2.24 using the available Solaris binary. I didn't change any of the configuration files in the process. But now I can't access the Tomcat Manager via the connector since my browser no longer prompts me for username/password infor

New Problem to configure servlet on Tomcat

Hi, I've configured Servlet on Tomcat, and more problem I've resolved, but I've this problem: HTTP Status 500 - *type* Exception report *message* *description* _The server encountered an internal error () that preve

CVE-2007-3384: XSS in Tomcat cookies example

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2007-3384: XSS in Tomcat cookies example Severity: Low (Cross-site scripting) Vendor: The Apache Software Foundation Versions Affected: 3.3 to 3.3.2 Description: When reporting error messages, Tomcat does not filter user supplied data before di

Re: Tomcat with/without Tomcat native library

"Mladen Turk" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Petr Sumbera wrote: >> Hi Bill and all, >> >> not sure what is the right way for comparison between using and not using >> APR. I tried Apache ab tool like this: >> >> ab -c 4 -n 1 http://localhost:8080/favicon.ico >

Re: How do I use tomcat5w.exe with a service name other than Tomcat5?

Thank you Bill, for both the long and short of it. Ron Bill Barker-2 wrote: > > > "rmiller" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] >> >> I have multiple instances of Tomcat installed as services with different >> service names. The tomcat5w.exe utility seems to work on

no authentication with mod_jk-1.2.24

Hello, I just upgraded from mod_jk-1.2.19 to 1.2.24 using the available Solaris binary. I didn't change any of the configuration files in the process. But now I can't access the Tomcat Manager via the connector since my browser no longer prompts me for username/password information and so I ge

Re: Forwarding based on URI's in Tomcat

"Christopher Schultz" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Mon, > > Mon Cab wrote: >> /sexy* > > I believe that the pattern "/sexy*" does not match when the * matches > nothing. I think that * acts like + in a regu

Re: How do I use tomcat5w.exe with a service name other than Tomcat5?

"rmiller" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > I have multiple instances of Tomcat installed as services with different > service names. The tomcat5w.exe utility seems to work only with the > default > service name Tomcat5. I can't find any documentation on this utilit

Re: Forwarding based on URI's in Tomcat

On 8/1/07, Mon Cab <[EMAIL PROTECTED]> wrote: > and none of it seems to work. Honestly, this sounds like a job for UrlRewriteFilter -- Worth a look, anyway :-) -- Hassan Schroeder [EMAIL PROTECTED]

Re: Forwarding based on URI's in Tomcat

I tried action /mymodule/sexy* /mymodule/sexy /sexy* /sexy and none of it seems to work. --- Christopher Schultz <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Mon, > > Mon Cab wrote: > > /sexy* > > I believe that the pattern "/sexy*" does not

Re: Tomcat cluster serving ~50 lines of the page when a request hits a stopped webapp for the first time

I'll give it ago first thing tomorrow, well after a cup of tea :) On 8/1/07, Rainer Jung <[EMAIL PROTECTED]> wrote: > hi Ben, > > could you try the following patch for 1.2.24: > > http://people.apache.org/~rjung/mod_jk-dev/patches/fail-on-status.patch > > I guess you can build the module yourself

RE: [NOT SOLVED]Tomcat native library Not found in Solaris 9

Please give me some tips for compiling libtcnative on Solaris 9 without the dynamic dependence on libgcc_s.1.so. We ship tomcat with our product. On customer installations, we cannot assume that libgcc_s will be found in some standard location. I have searched a lot on the web. I am also trying

MAven-tomcat-plugin

Hi, Can you start two web applications using the same tomcat plugin. My tomcat-maven-plugin works for starting ONE web application. But when I specify two apps, it ignores the application which is not being built in the current directory but whose path I have given as follows in the

Re: Forwarding based on URI's in Tomcat

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mon, Mon Cab wrote: > /sexy* I believe that the pattern "/sexy*" does not match when the * matches nothing. I think that * acts like + in a regular expression. You might want: action /mymodule/sexy* /mymodule/sexy That is

Re: COMET - Delays in output

FelixG wrote: After looking at the TCP packets I can say this: The use of flush() in COMET *does* push data-packets immediately to the client, but it seems that the client (in my case a browser) doesn't recognize/display them until the outputstream is closed due to an ERROR/TIMEOUT or until I ca

Re: secured authentication / connection

OK... Thanks again to all of you for your time & attention ! Pierre 2007/8/1, Hassan Schroeder <[EMAIL PROTECTED]>: > > On 8/1/07, Pierre Goupil <[EMAIL PROTECTED]> wrote: > > > The real question is a bit more weird. If I try & connect to my server > on > > port 8443, but with just http protoc

Re: secured authentication / connection

On 8/1/07, Pierre Goupil <[EMAIL PROTECTED]> wrote: > The real question is a bit more weird. If I try & connect to my server on > port 8443, but with just http protocol (no encryption) Then you're doing something utterly meaningless, and the "file" you see is just the encrypted response from Tom

Re: secured authentication / connection

Hello, OK, I've done it : the SSL authentication of my tomcat server works pretty fine. I'm currently using port 8443, though. But this is not my question. The real question is a bit more weird. If I try & connect to my server on port 8443, but with just http protocol (no encryption), Tomcat resp

RE: Forwarding based on URI's in Tomcat

I would rather do this by configuring Tomcat, than doing it programatically if posible. --- "Asensio, Rodrigo" <[EMAIL PROTECTED]> wrote: > Are those 2 different webapps ? > If yes, you have to be aware of session data, diff webapps do not > share > by default the session data. > > But basica

Re: Forwarding based on URI's in Tomcat

I tried the following action *.do action /sexy* but got a 404 message: The requested resource (/mymodule/sexy) is not available. I also tried: action /mymodule/sexy* but I got the same error. --- David Delbecq <[EMAIL PROTECTED]> wrote:

RE: Forwarding based on URI's in Tomcat

Are those 2 different webapps ? If yes, you have to be aware of session data, diff webapps do not share by default the session data. But basically to do a client redirect you do this Response.sendRedirect("otherURl") >> this will change the url in the client browser To do a server redirect you

Re: Forwarding based on URI's in Tomcat

In your web.xml, you can map /foo and /bar to struts servlet. However, i think i remember the struts servlet does not like to be mapped at several location. (/foo, /bar and *.do) You could also write your own servlet, that your map to /foo and /bar and which take th request url and does an intern

How do I use tomcat5w.exe with a service name other than Tomcat5?

I have multiple instances of Tomcat installed as services with different service names. The tomcat5w.exe utility seems to work only with the default service name Tomcat5. I can't find any documentation on this utility. How do I pass another service name into the utility? Thanks, Ron -- View this

Forwarding based on URI's in Tomcat

I am trying to get tomcat to forward requests as follows www.mysite.com/foo to direct to the foo action www.mysite.com/bar to direct to bar action ie. bar.do Does anyone have any pointers on this? Sorry for the newbie question. __

Re: com.evermind.server.rmi package in Tomcat?

Right, true it's from Orion App Server that Oracle later acquired to make it their own app server. I'm not sure how this class is coming into being in my Apache Tomcat instance. From: "Hassan Schroeder" <[EMAIL PROTECTED]> Reply-To: "Tomcat Users List" To: "Tomcat Users List" Subject: Re:

Re: com.evermind.server.rmi package in Tomcat?

No there are no custom class loaders, nor are there any Oracle AS backend. From: Rainer Jung <[EMAIL PROTECTED]> Reply-To: "Tomcat Users List" To: Tomcat Users List Subject: Re: com.evermind.server.rmi package in Tomcat? Date: Wed, 01 Aug 2007 20:15:34 +0200 Maybe loaded by a custom class l

Re: Log4j errors on Tomcat6 startup

Hi Mark, your application doesn't need the log4j*.jar since they are provided by Tomcat 6 (unlike Tomcat 5.x). However, your application should have it's own log4j-configuration aka log4j.xml. This file is usually found in ${CATALINA_HOME}/webapps/${your_application}/WEB-INF/classes In this web-ap

Re: com.evermind.server.rmi package in Tomcat?

On 8/1/07, Neeraj Vora <[EMAIL PROTECTED]> wrote: > I have a very curious situation and I have been scratching my head. To > investigate occassional application hangs on Tomcat 5.5 running on Solaris > 10, I take Tomcat process thread dumps periodically and see many threads > stuck for a long time

Re: com.evermind.server.rmi package in Tomcat?

Maybe loaded by a custom class loader over the net, e.g. from a backend (probably like an Oracle AS backend)? Neeraj Vora wrote: Hello, I have a very curious situation and I have been scratching my head. To investigate occassional application hangs on Tomcat 5.5 running on Solaris 10, I take

Re: Recovery from OutOfMemoryError?

On 01/08/2007, at 6:50 PM, Mark H. Wood wrote: Would you (or anyone) care to provide a link to where I can learn more about swatch? Everything I've turned up so far points to a wanna-be replacement for UTC called "internet time" promoted by a watchmaker. http://swatch.sourceforge.net/ http:/

com.evermind.server.rmi package in Tomcat?

Hello, I have a very curious situation and I have been scratching my head. To investigate occassional application hangs on Tomcat 5.5 running on Solaris 10, I take Tomcat process thread dumps periodically and see many threads stuck for a long time like as follows. I looked left and right into

Varuna Seneviratna wants to chat

--- Varuna Seneviratna wants to stay in better touch using some of Google's coolest new products. If you already have Gmail or Google Talk, visit: http://mail.google.com/mail/b-276484242e-604e6f3a67-d4f60a21e46d0f1d You'll need t

RE: Using manager to deploy with path="/123/456/789"

On Wed, 2007-08-01 at 11:09 -0500, Caldarale, Charles R wrote: > > From: Derek Alexander [mailto:[EMAIL PROTECTED] > > Subject: Using manager to deploy with path="/123/456/789" > > > > I want to use the manager to deploy an app with the context > > path like /123/456/789 > > Can't say I know ho

Re: Recovery from OutOfMemoryError?

Would you (or anyone) care to provide a link to where I can learn more about swatch? Everything I've turned up so far points to a wanna-be replacement for UTC called "internet time" promoted by a watchmaker. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software ve

RE: Using manager to deploy with path="/123/456/789"

> From: Derek Alexander [mailto:[EMAIL PROTECTED] > Subject: Using manager to deploy with path="/123/456/789" > > I want to use the manager to deploy an app with the context > path like /123/456/789 Can't say I know how to do it with the manager app, although it may be possible. What you need

RE: Tomcat 5.5 configuration

> From: Susan Richards [mailto:[EMAIL PROTECTED] > Subject: Re: Tomcat 5.5 configuration > > "Under each appBase directory, install the appropriate > webapp as ROOT.war or in the ROOT directory I guess that wasn't clear enough. An expanded webapp (one not packaged in a .war file) that you want

Re: Tomcat cluster serving ~50 lines of the page when a request hits a stopped webapp for the first time

hi Ben, could you try the following patch for 1.2.24: http://people.apache.org/~rjung/mod_jk-dev/patches/fail-on-status.patch I guess you can build the module yourself (it's easy: configure --with-apxs=PATHTOAPXS; make; make install). Now simply download the source of 1.2.24 and use the patch

Using manager to deploy with path="/123/456/789"

Hi, I want to use the manager to deploy an app with the context path like /123/456/789 If I use the manager path="/123/456/789" war="file:789.war" it doesn't work. At the client end (ant) I'm seeing: FAIL - Failed to deploy application at context path /123/456/789 In the logs on server, there

Re: Tomcat 5.5 configuration

Chuck said this: "Under each appBase directory, install the appropriate webapp as ROOT.war or in the ROOT directory (case sensitive naming)." I changed my server.xml to this: When I open the URL http://test-infoline.matc.edu, I still go right to the manager. What am I doing wrong? >>> "H

Re: BasicDataSourceFactory.class where? (Tomcat 5.5, RHEL)

... or at least post your question on a Redhat or jPackage list. We're not known for being all warm and fuzzy toward the tomcat rpm install packages. They've done things to tomcat in the process of packaging I know I wouldn't recommend. --David Caldarale, Charles R wrote: From: Juergen Nic

RE: BasicDataSourceFactory.class where? (Tomcat 5.5, RHEL)

> From: Juergen Nickelsen [mailto:[EMAIL PROTECTED] > Subject: BasicDataSourceFactory.class where? (Tomcat 5.5, RHEL) > > for an application I am testing, I have my first contact with Tomcat, > version 5.5.23 on RHEL 4 update 5, as installed from the package > tomcat5-5.5.23-0jpp_4rh.3. I'd st

Re: Tomcat 5.5 configuration

On 8/1/07, Susan Richards <[EMAIL PROTECTED]> wrote: > Thanks. When I use the Tomcat Manager to deploy the war files, it puts them > under webapps, not under ROOT. Can I change this? ? No, that's where they're supposed to go. Why would you want to change that? -- Hassan Schroeder ---

Re: Tomcat cluster serving ~50 lines of the page when a request hits a stopped webapp for the first time

Sure for stable operation, but what if the machine reboots, tomcat starts up and your webapp doesn't for some reason. This situation could occur then. Many thanks for your help with this one. Regards Ben On 8/1/07, Rainer Jung <[EMAIL PROTECTED]> wrote: > Hi Ben, > > I think I understand the pr

BasicDataSourceFactory.class where? (Tomcat 5.5, RHEL)

Hello, for an application I am testing, I have my first contact with Tomcat, version 5.5.23 on RHEL 4 update 5, as installed from the package tomcat5-5.5.23-0jpp_4rh.3. What shall I say? It does not work yet. :-/ The main problem seems to be that Tomcat complains on startup about a missing

Re: Tomcat cluster serving ~50 lines of the page when a request hits a stopped webapp for the first time

Hi Ben, I think I understand the problem now, and it is a jk bug. For stable operation you should really use the disable/stop feature. Nevertheless I'm starting thinking about how to fix this in a good way. The bug has to do with the new "fail on status" feature you use. It is not very old,

Re: Permissions

A an applet. That certainly changes the question a LOT. Applet execution being on the client system won't be influenced by the server's security manager. My advice stands when attempting to run a security manager on the server and making connections from the servlet code to the db.

RE: Tomcat 5.5 configuration

Thanks. When I use the Tomcat Manager to deploy the war files, it puts them under webapps, not under ROOT. Can I change this? >>> "Caldarale, Charles R" <[EMAIL PROTECTED]> 7/31/2007 10:20 PM >>> > From: Susan Richards [mailto:[EMAIL PROTECTED] > Subject: Tomcat 5.5 configuration > > In Tomca

Re: RE: Permissions

Hello Martin and David, thank you for your suggestions. My problem is more complicated. I've implemented a java applet that is stored in the ROOT directory. The html-file to show the applet is This applet looks and works almost perfect except that it calls the MySQL bridge (mysql-connector

RE: Recovery from OutOfMemoryError?

> From: Christopher Schultz [mailto:[EMAIL PROTECTED] > Subject: Re: Recovery from OutOfMemoryError? > > > (Sorry for not responding sooner. Went out to dinner and to see the > > Spider Pig movie :-) > > Nice. ;) The pig completely disappeared half way through the movie, but there are rumors i

Re: Vista woes....

Date sent: Wed, 01 Aug 2007 08:46:48 -0400 From: Martin Gainty <[EMAIL PROTECTED]> Subject:Re: Vista woes To: Tomcat Users List Send reply to: Tomcat Users List Send reply to: Martin Gainty <[EMAIL PROTECTED]

RE: Log4j errors on Tomcat6 startup

Thanks Juha, But if we remove log4j from WEB-INF\lib we can't separate the messages from the different webapps, we just end up with one log file. Also we don't get any further errors reported. The Tomcat 6 docs talks about setting up common logging and then goes on to say: "Your web applications

Re: Tomcat with/without Tomcat native library

Petr Sumbera wrote: Hi Bill and all, not sure what is the right way for comparison between using and not using APR. I tried Apache ab tool like this: ab -c 4 -n 1 http://localhost:8080/favicon.ico And I don't see any difference. Actually it might be little bit slower with APR. The file

Re: Recovery from OutOfMemoryError?

On 01/08/2007, at 3:44 PM, Christopher Schultz wrote: I'm guessing he's running a webapp, and that one of the request worker threads got an OOME. Most webapp requests are idempotent (or should be), and those that aren't are generally wrapped around database or other transactions. Assuming I'

RE: Recovery from OutOfMemoryError?

> From: Christopher Schultz [mailto:[EMAIL PROTECTED] > Subject: Re: Recovery from OutOfMemoryError? > > I generally think of this as "failure return" as simply allowing the > exception to propagate. That can work, but since OOMEs don't require "throws" declarations on methods, it's usually bett

Re: Recovery from OutOfMemoryError?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:[EMAIL PROTECTED] >> Subject: Re: Recovery from OutOfMemoryError? > > (Sorry for not responding sooner. Went out to dinner and to see the > Spider Pig movie :-) Nice. ;) >> A

RE: Permissions

Good Morning Alexander in $CATALINA_HOME/conf/catalina.policy your environment is currently pointing to 127.0.0.1:8080 You will need to change this to 137.250.38.190:8080 I would suggest that you implement local (127.0.0.1) first then re-implement on other servers e.g. 137.250.38.190 HTH/ Mar

Re: Tomcat with/without Tomcat native library

Hi Bill and all, not sure what is the right way for comparison between using and not using APR. I tried Apache ab tool like this: ab -c 4 -n 1 http://localhost:8080/favicon.ico And I don't see any difference. Actually it might be little bit slower with APR. The file size is 21630, so it

RE: how to setting up SSL for a specific page

> From: is_maximum [mailto:[EMAIL PROTECTED] > Subject: RE: how to setting up SSL for a specific page > > I need only login page to be secured not all the pages after that This is a harder problem, since switching back to HTTP after authenticating via HTTPS opens a security hole. However, you m

How to have some webapps use IIS security and some not?

Hi, This is a nasty problem but I hope someone out there has figured it out. We have been using tomcat 5.5.17, IIS 6, and JK2 happily for about a year now. Up to this point, we have not used IIS directory security to pass the NT username to tomcat. Some of our webapps have no security require

Re: Recovery from OutOfMemoryError?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, Caldarale, Charles R wrote: >> From: Christopher Schultz [mailto:[EMAIL PROTECTED] >> Subject: Re: Recovery from OutOfMemoryError? >> >> Are you suggesting that all methods should be written as a >> loops around attempts to do real work, catc

Re: Vista woes....

Sometimes the environment is so mucked I start tomcat $CATALINA_HOME/bin/java -jar bootstrap.jar I agree with chuck that spurious jars in your CLASSPATH will obfuscate your objective I find its helpful to understand when your jars get loaded (more specifically by which CLASSPATH) http://tomcat.

Re: How to do this

Varuna- Your analysis that the poster is angry needs to be adjusted What Gregor is speaking of is that many of us on this list provide advice for free Those of us (who are not independently wealthy) have an immediate need to find a way to acquire compensation for working proposals Since free ad

Re: Permissions

Looks like the path to your jar file is wrong. grant codeBase "file:${catalina.home}/webapps/ROOT/WEB-INF/lib/mysql-connector-java-3.1.14-bin.jar" { permission java.security.AllPermission; } or to pull an example from the catalina.policy file distributed with tomcat: grant codeBase "jar:fi

RE: Confusion about tomcat security bulletin

Rainer, OK, I see now. Thank you very much! Best regards, Cheng Jianhua -Original Message- From: Rainer Jung [mailto:[EMAIL PROTECTED] Sent: 2007年8月1日 16:35 To: Tomcat Users List Subject: Re: Confusion about tomcat security bulletin 5.0.HEAD is the most actual, non-released version

Re: Confusion about tomcat security bulletin

5.0.HEAD is the most actual, non-released version of the 5.0 code branch. So this means, the problem will be fixed in any new 5.0 release. Currently there are no plans do do a new 5.0 release. So if security is a real concern for you, you should upgrade to at least 5.5 (which shouldn't be a bi

Confusion about tomcat security bulletin

Dear All, Our company have an application use tomcat 5.0.27 and can't upgrade the version. I'm very concern about the security issue relate to this version. Now I have some confusion about tomcat security bulletin http://tomcat.apache.org/security-5.html

Permissions

Hello! I'm working with tomcat 5.5.9 on Windows XP. I'm experiencing a strange problem with paths and permissions. I start "catalina.bat start -security" and assume that the catalina would read permissions from the catalina.policy file in the conf directory. I grant permissions to the mysql-co

Re: COMET - Delays in output

After looking at the TCP packets I can say this: The use of flush() in COMET *does* push data-packets immediately to the client, but it seems that the client (in my case a browser) doesn't recognize/display them until the outputstream is closed due to an ERROR/TIMEOUT or until I call close() manu

RE: how to setting up SSL for a specific page

Caldarale, Charles R wrote: > > Read section 12 of the servlet spec. Use a in conjunction > with the that covers only the login page. > > - Chuck Thank you Charles, I've read the servlet spec, but my problem is I specified /login.jsp as url-pattern in deployment descriptor and before the