Tomcat 5 and SSL

2007-10-09 Thread uberalles
I'm using Tomcat 5 on a Fedora Linux box. I originally created a self-signed certificate (for testing purposes) without the keystore entry (still new to this) and I have no idea where that file is. I ran a search for anything .keystore from root and nothing shows up. A keytool -list command shows

Re: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Andrei Tchijov
Thnx for reply! I thought that it should be possible. Was just looking for some pointers about which methods are important and which are not in Request/Response. On Oct 9, 2007, at 10:34 PM, Lilianne E. Blaze wrote: Hello, Consider using either Request / Response Wrappers subclassed and m

Re: OOME crushing tomcat

2007-10-09 Thread Mark Thomas
William Leung wrote: > I had face the same problem, OOME sometimes "kill" tomcat connector. > > I setup two connectors (HTTP and AJP), while one connector was "dead", the > other still "alive", and I could access manager/status from the "live" one > to watch the "dead" one's status. > > I think i

Re: OOME crushing tomcat

2007-10-09 Thread Mark Thomas
Leon Rosenberg wrote: > Any opinions, is that a bug in tomcat or is it inescapable after an OOME? OOME will kill Tomcat. I have seen it struggle on after an OOME but it always dies shortly afterwards. You need to get a profiler (I use YourKit) and find out what is using all the memory. Then: fix

Re: PKI

2007-10-09 Thread Mark Thomas
Edward Dowgiallo wrote: > Does anyone have a war file blank they are willing to share that is > correctly setup for PKI on Tomcat 5.5 or 6.0? This is less of a war issue and more of a certificate store and connector configuration issue. Try http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html M

Re: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Lilianne E. Blaze
Hello, Consider using either Request / Response Wrappers subclassed and modified so they simply return 0 / null / "" / ignore output, or google for "servlet api mock objects" or something similar. Ages ago I wrote something similar, where specified pages were called on webapp start / stop. Don't as

Re: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrei, Andrei Tchijov wrote: > There is no any "<% ... %>" in the audit jsp. Below is one simple > example of such file: > > <%@ include file="/common/all.include.jsp" %> > > > > > > Oh, I get it. You're using JSP to script Java, rat

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Semen Vadishev
Christopher, 2007/10/10, Christopher Schultz <[EMAIL PROTECTED]>: > Tomcat's built-in A&A requires that an unauthenticated user request a > protected resource (protected by a ). When this > happens, Tomcat intercepts the request internally and issues the > appropriate login request (HTTP AUTH, FO

RE: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Propes, Barry L
basic JSTL? -Original Message- From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 09, 2007 5:53 PM To: Tomcat Users List Subject: Re: Using RequestDispatcher.include() outside of Request/Response cycle. There is no any "<% ... %>" in the audit jsp. Below is one simple

Re: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Andrei Tchijov
There is no any "<% ... %>" in the audit jsp. Below is one simple example of such file: <%@ include file="/common/all.include.jsp" %> "audit" is a hashtable object in session. it has all information needed ( "event" - login|logout| , "userName", "sessionId" ). is a

Re: IIS6 and Tomcat 5.5

2007-10-09 Thread Martin Gainty
Which version tcnative.dll worked for IIS6? Thanks M - Original Message - From: <[EMAIL PROTECTED]> To: Sent: Tuesday, October 09, 2007 6:03 PM Subject: RE: IIS6 and Tomcat 5.5 Hey, I finally have my environment working. I dont seem to need the 5.0 isolation mode though. Thanks for

Re: Perl Permissions on Tomcat

2007-10-09 Thread Martin Gainty
I asked yesterday but didnt hear back..Are you implementing via CGIServlet? M-- - Original Message - From: "Li Ye Chen" <[EMAIL PROTECTED]> To: "Tomcat Users List" Sent: Tuesday, October 09, 2007 4:34 PM Subject: Re: Perl Permissions on Tomcat > Okay, I did some searching on the Interne

RE: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Propes, Barry L
is the bottom line that he (Semen's) wanting certain areas protected by a role, and other areas protected/accessible only by another role? Or is he looking for authentication at every protected juncture? -Original Message- From: Christopher Schultz [mailto:[EMAIL PROTECTED] Sent: Tuesday

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Semen, Semen Vadishev wrote: > Well, have you ever configured path based authentication for Subversion > Server? Oh, you're using WebDAV. :( > So if there is no element in > web.xml, Tomcat doesn't provide authorization, right? Correct. It will no

RE: IIS6 and Tomcat 5.5

2007-10-09 Thread Dave.Buttrick
Hey, I finally have my environment working. I dont seem to need the 5.0 isolation mode though. Thanks for your help! David Buttrick > -Original Message- > From: Charlie Wingate [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 09, 2007 12:42 PM > To: Tomcat Users List > Subject: RE:

Re: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrei, Andrei Tchijov wrote: > I would love to let JSP application developers to stay in one language > environment (JSP). And as soon as pretty much all but auditing could be > done in JSP (especially with JSTL), I feel that it will be nice (and >

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Semen Vadishev
Christopher, thank you for your great help, 2007/10/10, Christopher Schultz <[EMAIL PROTECTED]>: > >> ...why you want your own servlets to do the authorization instead > >> of the container (or securityfilter)? > > > > This is the main question. Today we decided to do nothing new with > > authent

Re: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Andrei Tchijov
I would love to let JSP application developers to stay in one language environment (JSP). And as soon as pretty much all but auditing could be done in JSP (especially with JSTL), I feel that it will be nice (and appropriate) to let people to code audit functionality using JSP as well. And

Re: Perl Permissions on Tomcat

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Li, Li Ye Chen wrote: > Hi, I'm trying to run a Perl script on Tomcat 5.5.8 -- I've managed > to successfully run read-only Perl script, but the script I'm trying > to run connects to the database and needs to write to the local hard > drive. Whenever

Re: Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrei, Andrei Tchijov wrote: > I can (and do) add session listener, so it is not a problem to detect > that session timed out. The problem is how to invoke my audit JSP > page. Why not just do your audits right in the session listener? JSPs are not

Using RequestDispatcher.include() outside of Request/Response cycle.

2007-10-09 Thread Andrei Tchijov
Hi, I have a valve which detects some events in life-cycle of a web application ( like successful login/failed login/logout ) and invokes some configurable JSP page to let it perform some audit auctions ( like putting records in the table which trace access to application ). It works fi

Re: Perl Permissions on Tomcat

2007-10-09 Thread Li Ye Chen
Okay, I did some searching on the Internet and found that according to current config in my Tomcat, it's not even running SecurityManager (the -Djava...securitymanager argument is not available in the Java tab of the Configuration screen. And it is still not working, so I'm not sure what is goi

RE: Perl Permissions on Tomcat

2007-10-09 Thread Caldarale, Charles R
> From: Li Ye Chen [mailto:[EMAIL PROTECTED] > Subject: Re: Perl Permissions on Tomcat > > I'm running Tomcat on Windows XP, and in my Configuration -> > Startup menu, the entry for the Arguments text box is > "start", with no other string You're looking in the wrong place. Look at the "Java

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Semen, Semen Vadishev wrote: > Christopher, > > 2007/10/9, Christopher Schultz <[EMAIL PROTECTED]>: You cannot do this with Tomcat's authentication mechanism. You will have to provide an alternative implementation. I recommend looking

Dynamic logging configuration updates in Tomcat

2007-10-09 Thread Adam Gordon
Hi- We have a web application in which we'd like to get dynamic logging working. By dynamic logging, I mean live changes to the webapps' logging.properties file are read and applied without having to restart Tomcat. We have all the code written and running but it appears to not work exactly

Re: Perl Permissions on Tomcat

2007-10-09 Thread Li Ye Chen
I'm running Tomcat on Windows XP, and in my Configuration -> Startup menu, the entry for the Arguments text box is "start", with no other string (nothing that says "-security"). Does that mean I'm currently running without SecurityManager? -Original Message- > Date: Mon Oct 08 12:03:37

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Semen Vadishev
Christopher, 2007/10/9, Christopher Schultz <[EMAIL PROTECTED]>: > > >> You cannot do this with Tomcat's authentication mechanism. You will > >> have to provide an alternative implementation. I recommend looking > >> st securityfilter ( http://securityfilter.sourceforge.net ). > > > > Well, secur

Re: OOME crushing tomcat

2007-10-09 Thread William Leung
I had face the same problem, OOME sometimes "kill" tomcat connector. I setup two connectors (HTTP and AJP), while one connector was "dead", the other still "alive", and I could access manager/status from the "live" one to watch the "dead" one's status. I think it is tomcat's bug Leon Rosenberg

RE: IIS6 and Tomcat 5.5

2007-10-09 Thread Charlie Wingate
Hi David, Depending on the Runtime and the Dll version(s) you are using this wont work at all. The Isapi you should be using was released in late july and the latest runtime works with it. The runtime is found in the TC bin and is called tcnative.dll. Essentially, grab the latest version

RE: IIS6 and Tomcat 5.5

2007-10-09 Thread Dave.Buttrick
Thanks for the responses. When isapi_redirect says that he's forwarding the request URI - is that not where I'm supposed to see the request for /jakarta/isapi_redirect.dll My understanding is that you see the request itself hits IIS, then it get processed by the filter, then if appropriate, the f

RE: IIS6 and Tomcat 5.5

2007-10-09 Thread Charlie Wingate
My Bad you did put in the workermap and propfiles. Follow the isolation mode in IIS path. ~Charlie The significant problems we have cannot be solved at the same level of thinking with which we created them. - Albert Einstein -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: IIS6 and Tomcat 5.5

2007-10-09 Thread Charlie Wingate
Hi Dave, A couple things about this post... 1st Read at least the introduction @ the following link http://www.catb.org/~esr/faqs/smart-questions.html 2nd I am assuming you are trying to serve the front end of a Tomcat installation with IIS using the ISAPI redirector. What

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Semen, Semen Vadishev wrote: > Christopher, thanks for reply. > > 2007/10/9, Christopher Schultz <[EMAIL PROTECTED]>: > >> You cannot do this with Tomcat's authentication mechanism. You will >> have to provide an alternative implementation. I recomm

RE: Very Long Full GC after Inactivity

2007-10-09 Thread Bill Clarke-Fields
Peter, Thanks! This is a very good idea. I know that there are some virus scans and other processes running at night. I will do some monitoring to determine if paging is the problem. If it turns out to be so, is there anything I can do to force it to not page out the JVM heap? Thanks again, -

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Semen Vadishev
Christopher, thanks for reply. 2007/10/9, Christopher Schultz <[EMAIL PROTECTED]>: > > You cannot do this with Tomcat's authentication mechanism. You will have > to provide an alternative implementation. I recommend looking st > securityfilter ( http://securityfilter.sourceforge.net ). Well, s

Re: Problem with session

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex, Alex79 wrote: > You mentionned a session listener, can you point me out to a tutorial on how > to do it? Easy: write a class that implements javax.servlet.http.HttpSesionListener and then enable it in your web.xml file like this:

RE: Problem with session

2007-10-09 Thread Caldarale, Charles R
> From: Alex79 [mailto:[EMAIL PROTECTED] > Subject: RE: Problem with session > > You mentionned a session listener, can you point me out to a > tutorial on how to do it? See section 10 of the Servlet spec. > Are there any generic session listener that I could use out > of the box? There's one

RE: Tomcat 5.23: caching of css files?

2007-10-09 Thread Angelo Chen
Hi Peter, following your advice, i set the production server to have the same time zone as my development machine, the problem goes away! Thanks. A.C. Peter Crowther wrote: > >> From: Angelo Chen [mailto:[EMAIL PROTECTED] >> 1. shut down tomcat >> 2. delete war and related directory >> 3. cop

RE: Where can I find the thread main?

2007-10-09 Thread Caldarale, Charles R
> From: Jaime Almeida [mailto:[EMAIL PROTECTED] > Subject: Where can I find the thread main? > > Yesterday you've told me that all java applications need one > thread main. Not need - have. > I have one main class - BD.java, where I define all the > functions needed by the web application to

Re: Where can I find the thread main?

2007-10-09 Thread Joshua Fielek
Very briefly, the Java Main thread for Tomcat is created when Tomcat is launched. Tomcat creates threads that then execute your servlets and associated code. I'm certain that other folks will point you at more complete documentation on the way Tomcat works within the JVM. Thanks, J Jaime Al

PKI

2007-10-09 Thread Edward Dowgiallo
Does anyone have a war file blank they are willing to share that is correctly setup for PKI on Tomcat 5.5 or 6.0? Ed - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

RE: Problem with session

2007-10-09 Thread Alex79
Hi Chuck, I tried it out with a maxKeepAliveRequests="-1" in my main connector (the one on port 8080) without any success. I also verified that there is no call to an invalidate() method (only invalidateObject() but not on the session). You mentionned a session listener, can you point me out to

IIS6 and Tomcat 5.5

2007-10-09 Thread Dave.Buttrick
The only thing that I can see missing from my setup is that when I make a request for a URL served by the isapi_redirector, I dont see a corresponding get for /jakarta/isapi_redirector.dll from IIS. I have green lights everywhere, I have the logging turned up on the filter, and I'm seeing that req

Re: Running webapp not listed in the manager

2007-10-09 Thread Hassan Schroeder
On 10/9/07, Claude Brisson <[EMAIL PROTECTED]> wrote: > and the manager on another virtual host ... > but the manager doesn't list the foo webapp > What am I doing wrong? The manager is host-specific; configure one per virtual host. HTH, -- Hassan Schroeder [EMAIL

Re: Question about renaming myapp.war to ROOT.war

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ken, Ken Bowen wrote: > -- when the app is running from webapps/myapp, one gets > request.getContextPath() = "/myapp" > > -- when the app is running from webapps/ROOT, the value of > request.getContextPath() is the empty string. This is expected

Re: Where can I find the thread main?

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jaime, Jaime Almeida wrote: > Yesterday you've told me that all java applications need one thread main. > I have one main class - BD.java, where I define all the functions needed > by the web application to work. Er, is this a helper class or somethi

Re: Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Semen, Semen Vadishev wrote: > But behavior I need is: 1. If Tomcat gets request with no user > information data (username/password) it should pass it to servlet and > then servlet after handling request's URI according to pba config > file may send S

Re: [OT] applets in webapps

2007-10-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kristian, Kristian Rink wrote: > Unfortunately(?), the .jsp > is never called directly but rather forward()ed to from within a > servlet mapped to some specific URL. Are you trying to use relative URLs for your codebase? Try using a fully-qualified U

Question about renaming myapp.war to ROOT.war

2007-10-09 Thread Ken Bowen
Hi All, Renaming myapp.war to ROOT.war (as recommended) in order to make myapp the default application has worked fine. However, I've seen one bit of odd behavior as follows. If request is the incoming HttpServletRequest, then: -- when the app is running from webapps/myapp, one gets reque

Re: Where can I find the thread main?

2007-10-09 Thread Pierre Goupil
Hello, If I understand you well, you are looking for a way of telling Tomcat where your main() METHOD is, right? But you don't need it : http://www.stardeveloper.com/articles/display.html?article=2001061901&page=1 HTH, Pierre -- "Deux choses ne se peuvent cacher : l'ivresse et l'amour." (Ant

Running webapp not listed in the manager

2007-10-09 Thread Claude Brisson
Hi, I'm using tomcat 6.0.10. I deployed a webapp on a first virtual host using : and the manager on another virtual host using :

Re: Tomcat 5.23: caching of css files?

2007-10-09 Thread Lyallex
Did you clear your browser cache ? If you access the application via different adresses AFAIK the browser sees identical files as being different due to those different addresses (FQDN versus IP address). I had similar problems that dissapeared after I cleared out the browser cache It's just a t

RE: Tomcat 5.23: caching of css files?

2007-10-09 Thread Peter Crowther
> From: Angelo Chen [mailto:[EMAIL PROTECTED] > 1. shut down tomcat > 2. delete war and related directory > 3. copy new war file > 4. start tomcat > > with all above, I'm still getting pages styled with old css > file, it will go away after several hours. kind of strange. Is that a browser issu

Where can I find the thread main?

2007-10-09 Thread Jaime Almeida
Hello. Yesterday you've told me that all java applications need one thread main. I have one main class - BD.java, where I define all the functions needed by the web application to work. So, I probabily have some problem with the link of my project to that main class, isn't it? How can I define

RE: Tomcat 5.23: caching of css files?

2007-10-09 Thread Angelo Chen
Hi Charles, this is what I did: 1. shut down tomcat 2. delete war and related directory 3. copy new war file 4. start tomcat with all above, I'm still getting pages styled with old css file, it will go away after several hours. kind of strange. A.C. Caldarale, Charles R wrote: > >> From: Ang

Anonymous access with Tomcat Authentication configured.

2007-10-09 Thread Semen Vadishev
Hi, I'm developing servlet using servlet API 2.3 on Tomact application server, now my task is to implement path based authentication (pba) with the following Tomcat configuration: auth-method= BASIC Realm className="org.apache.catalina.realm.MemoryRealm" But behavior I need is: 1. If Tomcat gets

RE: Tomcat 5.23: caching of css files?

2007-10-09 Thread Caldarale, Charles R
> From: Angelo Chen [mailto:[EMAIL PROTECTED] > Subject: Tomcat 5.23: caching of css files? > > I have tomcat 5.23 in ubuntu 7.04, if I update the war file > and access it thru domain name, the css file is not updated > even i clear everything in my browser I haven't tried it, but you may have

Re: [OT] applets in webapps

2007-10-09 Thread Kristian Rink
David; first off, thanks loads for your hints; much appreciated. :) Am Tue, 09 Oct 2007 05:54:16 -0400 schrieb David Smith <[EMAIL PROTECTED]>: > Let's say the servlet serving up your applet and resources is mapped > to /appletRes in your webapp. The jsp could then access > ${request.contextPa

Tomcat 5.23: caching of css files?

2007-10-09 Thread Angelo Chen
Hi, I have tomcat 5.23 in ubuntu 7.04, if I update the war file and access it thru domain name, the css file is not updated even i clear everything in my browser, if I use the IP to access, the new css file is in effect, does tomcat 5.23 cache those css files? anyway to clear it? Thanks. A.C. --

Re: [OT] applets in webapps

2007-10-09 Thread David Smith
Keep in mind the applet is client side code and has to be available to the client. To that end have you thought about a companion servlet that accepts requests and returns applets and other resources? Then jsp code would just reference the mapped servlet in what it offers up to the client. L

[OT] applets in webapps

2007-10-09 Thread Kristian Rink
Folks, slightly OT: can someone provide me with a few good pointers and/or hints how to correctly integrate a Java applet into a JEE based web application? More specifically, my problem is something like that: I do have a .jsp containing code to show an applet. Both applet .class and some other

RE: Very Long Full GC after Inactivity

2007-10-09 Thread Peter Crowther
> From: Bill Clarke-Fields [mailto:[EMAIL PROTECTED] > We are running an application on Tomcat 5.0.28 with Java > 1.4.2. The usage > of the application is very cyclical. It is used heavily > during the day, and > lightly at night. During peak daytime hours, a full garbage > collection > take

RE: Connection Pool and Connections

2007-10-09 Thread Peng Tuck Kwok
If I recall correctly close from a datasource (not a SQLConnection) will return the connection to the pool for reuse. In the later this will close the connection to the database. To answer your question I'm pretty sure any statement executed within the connection from the datasource will go to