-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dave,
Dave wrote:
> Is there a solution for this scenario? the same security hole for
> cookie based session tracking? In our case, we have to use URL
> rewriting because sometimes a new session is needed when users click
> some links on pages.
>
>
Hi Martin,
Thanks for your help.
I looked at the two links you provided. But I do not understand how they can
solve the problem. I must be missing something.
For SSL, the URL still needs to have session id, for example,
https://www.xyz.com/returnPage.jsp;jsessionid=188727usdfkj
Hi Dave
http://www.securityfocus.com/infocus/1774
suggests either implementing with
SSL connector
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html
-or-
Encrypt each sessionid
If you dont have the former you'll definitely want to implement the latter..
heres an example
http://www.spiration.c
Hi, I am using URL rewriting for session tracking, ie, session id is on the
URL. After I login into a web application, if someone else knows my current
session id, he/she can access my account using the session id. It is ok because
it is difficult for others to guess my session id. But right no
Just by chance, could we see a sample url to one of your pages and a
sample internal link? It doesn't seem like this should be a big deal.
--David
Spencer Tickner wrote:
Hi Hassan,
I wish I could establish a convention for internal links..
Unfortunately it's not possible as we get co
On Dec 18, 2007 4:45 PM, Spencer Tickner <[EMAIL PROTECTED]> wrote:
> I wish I could establish a convention for internal links..
> Unfortunately it's not possible as we get content from a diverse
> editor base where our system may not be the primary delivery method.
Then you're hosed, I think :-)
Hi Hassan,
I wish I could establish a convention for internal links..
Unfortunately it's not possible as we get content from a diverse
editor base where our system may not be the primary delivery method.
Looking through our correspondence it would seem that I am trying to
address the problem when
markt-2 wrote:
>
> morlino wrote:
>> Now I am able to access the 4 managers via 4 different http connectors.
>> However, without looking at the port number in the browser location, or
>> knowing which applications are deployed under which instance it is very
>> difficult to distinguish which man
Hi Tomcat experts,
I have a war file deployed in a Tomcat server (Jakarta-tomcat 5.5.9) running
on a windows server 2003. Web server accesses MySQL server running on a
different box, also Windows server 2003.
The web app is fast if I configured network bridge mode (both Web server and
DB server
Hi Rapthor,
I'm having similar problem. Has your isue resolved? Can you share the
resolution?
Thanks
Thanh
Christopher Schultz-2 wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Rapthor,
>
> Rapthor wrote:
>> But after 1 day the same issue reappeared (response times of abou
On Dec 18, 2007 11:41 AM, Spencer Tickner <[EMAIL PROTECTED]> wrote:
> Once again thanks for the feedback,, the issue I would have with the
> solution above is that content (html, pdf, xml) is maintained by
> editors that I have no control over. They simply make their content
> look the way the wa
Overview of the problem:
* We have a client computer named C and a server running Tomcat 5.5.23
called S
* Every now and then, C makes a SINGLE https request to S
* For some reason, the Tomcat access logs on S will sometimes show the
https request TWICE
So, we're trying to figure out why we're
Hi Tomcat Team,
I am wondering what the request response time
represents in the tomcat logs. Is it the time between
the first and last network packets including the
packets? So in the OSI model is it the time measured
at layer 1?
If layer 1 then the time could be the latency time +
Tomcat contai
Hi Hassan,
Once again thanks for the feedback,, the issue I would have with the
solution above is that content (html, pdf, xml) is maintained by
editors that I have no control over. They simply make their content
look the way the want and then upload it to my application. I could
feasibly search o
On Dec 18, 2007 11:03 AM, Spencer Tickner <[EMAIL PROTECTED]> wrote:
> The files are "lost", as I'm firing the servlet in the
> {tomcat}\webapp\ServletDir\, that then reads a file "C:\somefile.htm"
> that in it has reference to C:\. somefile.htm is read and returned to the browser fine,, but the
>
> From: Christopher Schultz [mailto:[EMAIL PROTECTED]
> Subject: Re: Trying to Map a web application to "/" in tomcat 5.5
>
> You need to do the UNIX equivalent of 'rm -rf' which
> doesn't exist on a standard Windows XP or Vista install
Actually, it does:
rd /s /q [target]
- Chuck
THIS COMMU
Thanks, Hassan,, that gives me a start.
On Dec 18, 2007 11:03 AM, Spencer Tickner <[EMAIL PROTECTED]> wrote:
> The files are "lost", as I'm firing the servlet in the
> {tomcat}\webapp\ServletDir\, that then reads a file "C:\somefile.htm"
> that in it has reference to C:\. somefile.htm is read and
The files are "lost", as I'm firing the servlet in the
{tomcat}\webapp\ServletDir\, that then reads a file "C:\somefile.htm"
that in it has reference to wrote:
> Hi Hassan,
>
> Thanks for the response and sorry for the confusion.
>
> The Web-directory was badly named,, but I was refering to the
>
On Dec 18, 2007 10:50 AM, Spencer Tickner <[EMAIL PROTECTED]> wrote:
> The Web-directory was badly named,, but I was refering to the
> {tomcat}\webapp\ directory. When I was refering to Servlet Folder it
> would be {tomcat}\webapp\ServletDir\
Have you read the Servlet Spec? I think it would give
Hi Hassan,
Thanks for the response and sorry for the confusion.
The Web-directory was badly named,, but I was refering to the
{tomcat}\webapp\ directory. When I was refering to Servlet Folder it
would be {tomcat}\webapp\ServletDir\
Thanks,
Spencer
On Dec 18, 2007 10:42 AM, Hassan Schroeder <[
On Dec 18, 2007 9:56 AM, Spencer Tickner <[EMAIL PROTECTED]> wrote:
> I've set up a security servlet that will check permissions on various
> html, pdf, xml, etc, files.
> 1) I started with the content files out of the Web directory all
> together and kept the mapping in an xml file and then serv
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
Martin Gainty wrote:
> I was curious what happened if I followed stephen's advice
>
> environment: TC 5.5.17
You didn't mention a win32 environment, which has case-insensitive paths. :(
> %CATALINA_HOME%\webapps>del ROOT
> %CATALINA_HOME%\w
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Abel,
Abel MacAdam wrote:
> - Why should one connect Tomcat to Apache?
If you don't know, then you don't need to connect them: use Tomcat all
by itself in this case.
> - Should you connect Tomcat 6.0.14 to Apache 2.2.6?
Any version of Apache httpd
Hi List, thanks in advance for the help.
I'm fairly new to tomcat so I appologize for anything I say that may
be painfully obvious.
I've set up a security servlet that will check permissions on various
html, pdf, xml, etc, files. I've managed the security and caching and
filtering so this is not
Hi Rainer,
The quotation marks around the file paths did the trick. Now trying to enable
PHP on Apache!
Richard.
- Original Message
From: Rainer Jung <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Tuesday, December 18, 2007 5:03:33 PM
Subject: Re: apache and tomcat
BTW: this message
BTW: this message also indicates, that Apache httpd could load the
module into memory, so you are doing progress :)
Richard Dunne schrieb:
> I have added this to my http.conf
> LoadModule jk_module modules/mod_jk.so
> JkWorkersFile /workers.properties
> JkLogFile C:/Program Files/Apache Software
Richard Dunne schrieb:
> I have added this to my http.conf
> LoadModule jk_module modules/mod_jk.so
> JkWorkersFile /workers.properties
> JkLogFile C:/Program Files/Apache Software Foundation/Tomcat
> 6.0/logs/mod_jk.log
> JkLogLevel debug
> Alias /examples C:/Program Files/Apache Software Found
I have added this to my http.conf
LoadModule jk_module modules/mod_jk.so
JkWorkersFile /workers.properties
JkLogFile C:/Program Files/Apache Software Foundation/Tomcat
6.0/logs/mod_jk.log
JkLogLevel debug
Alias /examples C:/Program Files/Apache Software Foundation/Tomcat
6.0/webapps/examples
Jk
On Dec 18, 2007 8:27 AM, Luo Yong <[EMAIL PROTECTED]> wrote:
> In fact, I'm implementing a new web development framework. JSP tag
> must not be supported in the framework and the web page cannot contain
> any java code. so i must analyse the jsp page within a servlet and
> expand it with web compon
You only need to download one of the three files mod_jk-X.Y.Z.so from
the download. X.Y are either 1.3, 2.0 or 2.2, depending on the version
of httpd you want to use.
You put the one file into your modules directory of httpd. You might
want to rename to mod_jk.so if you like.
You add a LoadModule
In fact, I'm implementing a new web development framework. JSP tag
must not be supported in the framework and the web page cannot contain
any java code. so i must analyse the jsp page within a servlet and
expand it with web component attribute(like the Tapestry way). I want
to embed velocity suppor
If mod_jk is downloaded a .so as a shared file and placed in the modules dir,
where does the mod_jk-1.3.27.dll file come from. This is what I am missing.
Should it go in the Apache2 /lib directory?
Richard.
- Original Message
From: Rainer Jung <[EMAIL PROTECTED]>
To: Tomcat Users L
Richard Dunne schrieb:
> I downloaded mod_jk-apache-1.3.27.so from
Note: 1.3.27. For Apache 2.0.x you need to use the file
mod_jk-apache-2.0.59.so, for 2.2.x the file mod_jk-apache-2.2.4.so.
Apache httpd version 1.3.x, 2.0.x and 2.2.x need different module files.
> http://www.apache.org/dist/tomc
I downloaded mod_jk-apache-1.3.27.so from
http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win32/jk-1.2.25/
as suggested. Renamed the file mod_jk.so and copied the file to my Apache2
modules directory. When I rebooted and tried to start the server I got a
message saying
c:/Pro
When deploying a WAR file whose code uses information stored in classpath
configuration resources, where should you store these configuration files if
outside of the WAR file?
If you want to keep these configuration files outside of the WAR file to
make for easier deployment in multiple environme
Richard Dunne schrieb:
> I'm looking to download the binaries from here
> http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win32/jk-1.2.25/.
> Just so I'm reading instructions correctly,
> mod_jk-apache-2.2.4.so should be copied and then renamed mod_jk.so
> mod_jk-apache-2.2.4.so.a
Thanks!
Len Popp wrote:
On Dec 17, 2007 2:52 PM, Richard Reyes <[EMAIL PROTECTED]> wrote:
Hi Len,
Please see inline...
Len Popp wrote:
There are a couple of ways to handle this.
1. Replicate the uploaded images to all the Tomcat servers. This isn't
hard if the image directories can
Hi all,
The next version of mod_jk is approaching its release. A code snapshot
(revision 605168) is available at:
http://people.apache.org/~rjung/mod_jk-dev/
It is in the same format as a release download, so easy to build.
Under the same URL you can find the updated documentation.
It would be
AbelMacAdam schrieb:
> You where right, the line containing JkWorkersFile generated an error:
> Syntax error on line 499 of C:/wamp/bin/apache/apache2.2.6/conf/httpd.conf:
> JkWorkersFile takes one argument, the name of a worker file for the Tomcat
> servlet containers
> I changed the JkWorkersFil
I'm looking to download the binaries from here
http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win32/jk-1.2.25/.
Just so I'm reading instructions correctly,
mod_jk-apache-2.2.4.so should be copied and then renamed mod_jk.so
mod_jk-apache-2.2.4.so.asc should be copied and then rena
Rainer Jung-3 wrote:
>
>>> Which version of mod_jk are you using?
>> ==> 2.2.6
>
> No that's the httpd version. JK version should be 1.2.something.
>
You are right, it is 1.2.25.
The default file normally doesn't get used. It's kind of template from
> which you can regenerate an original con
> From: Martin Gainty [mailto:[EMAIL PROTECTED]
> Subject: Re: apache and tomcat
>
> After resolving that..Take a look at installing mod_jk
> http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html
Please don't look at documentation for a version of Tomcat that's over
five years old. The curr
Don't have Linux on my machine, although thats my next job. Have a PackardBell
EasyNote that I am trying to partition so I can install Fedora. One job at a
time though.
- Original Message
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Tuesday, December 18,
Abel
After resolving that..Take a look at installing mod_jk
http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html
Martin--
- Original Message -
From: "AbelMacAdam" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, December 18, 2007 8:47 AM
Subject: Re: apache and tomcat
>
>
>
> Richard Dunne
good point.. try to determine if tc is running before trying to start it
again
netstat -a | grep PortNumber
M--
- Original Message -
Wrom: TZRCLBDXRQBGJSNBOHMKHJYFMYXOEAIJ
To: "Tomcat Users List"
Sent: Tuesday, December 18, 2007 8:44 AM
Subject: Re: apache and tomcat
> Which is complai
One way is to implement a transform
In other words java embedded in as jsp which parses files of a known format
(such as xml) which then transforms the results to html
Be mindful that you will need the input as well formed xml and a stylesheet
to identify display characteristics
http://www.oreilly.
Ok things are looking brighter, I have the Apache server is good,
http://localhost is showing the Apache page, and Tomcat homepage is showing on
http://localhost:8080. Now, hopefully all I need to do is configure Apache for
PHP5!
- Original Message
From: AbelMacAdam <[EMAIL PROTECTED
Richard Dunne wrote:
>
> Thanks. I have installed Apache 2 httpd server on port 80 as recommened
> by installation, but I cannot start server as it sems to be in use. I
> have Tomcat on port 8080. Any idea how to get around this?
>
> Richard.
>
Tomcat and Apache do not bite each other. Yo
Which is complaining of a port in use -- tomcat or a httpd? Can you
post the message your are getting?
These two don't typically use the same ports by default. It may be
tomcat is installed as a service and already running when you try to
start it.
--David
--David
Richard Dunne wrote:
I have installed Apache server on port 80 as per installation recommened.
Problem is port seems to be in use. Tomcat 6 is on port 8080, does this affect
the Apache server in any way?
Richard.
- Original Message
From: David Smith <[EMAIL PROTECTED]>
To: Tomcat Users List
Sent: Tuesd
Thanks. I have installed Apache 2 httpd server on port 80 as recommened by
installation, but I cannot start server as it sems to be in use. I have Tomcat
on port 8080. Any idea how to get around this?
Richard.
- Original Message
From: AbelMacAdam <[EMAIL PROTECTED]>
To: users@tomca
AbelMacAdam schrieb:
>>> My httpd.conf contains the following entries:
>>> LoadModule jk_module modules/mod_jk.so
>>> AddModulemod_jk.c
>>> JkWorkersFileC:/Program Files/Apache Software Foundation/Tomcat
>>> 6.0/conf/workers.properties
>>> JkLogFileC:/wamp/logs/mod_jk.log
Richard Dunne wrote:
>
> Can someone please explain the fundamental difference between Httpd and
> Tomcat? I installed Tomcat 6, but it doesn't seem to be liking PHP a
> whole lot. Do I need to un-install Tomcat 6 and install Apache 2 on its
> own? Just a bit confused as I am trying to get Apa
You're right -- Apache Tomcat doesn't handle PHP especially well. It's
designed to handle and execute code in java web applications built to
the servlet spec very well though.
Think of Apache Httpd as a general web server -- it serves content very
well and with the right modules can hand off
On Dec 18, 2007 4:36 AM, Luo Yong <[EMAIL PROTECTED]> wrote:
> Is there any way to produce HTML from a JSP file?
JSPs produce HTML by default :-)
And usually a servlet is used to populate values for a JSP -- the "View"
in MVC -- rather than the other way around.
FWIW,
--
Hassan Schroeder ---
How about servletContext.getRequestDispatcher( path ).include( req, resp
)? Seems like it should do what you are asking.
--David
Luo Yong wrote:
Hi all.
Is there any way to produce HTML from a JSP file?
I'm wrting a servlet which can get the HTML result of a JSP file in
the same container.
Hi Rainer,
Rainer Jung-3 wrote:
>
>> My httpd.conf contains the following entries:
>> LoadModule jk_module modules/mod_jk.so
>> AddModulemod_jk.c
>> JkWorkersFileC:/Program Files/Apache Software Foundation/Tomcat
>> 6.0/conf/workers.properties
>> JkLogFileC:/wamp/log
Hi all.
Is there any way to produce HTML from a JSP file?
I'm wrting a servlet which can get the HTML result of a JSP file in
the same container.
Is there any class or method can do this?
Thanks.
Sorry for that my English is poor.
--
Can someone please explain the fundamental difference between Httpd and Tomcat?
I installed Tomcat 6, but it doesn't seem to be liking PHP a whole lot. Do I
need to un-install Tomcat 6 and install Apache 2 on its own? Just a bit
confused as I am trying to get Apache and PHP5 working together.
You could try the profiler thats built into netbeans...
On Tue, 2007-12-18 at 10:29 +, Stefano Martines wrote:
> Does anybody knows about a tool so that you can analyze and trace in detail
> the memory allocation of your application objects, classes etc?
>
> thank you
> Stefano
>
>
> -
Does anybody knows about a tool so that you can analyze and trace in detail
the memory allocation of your application objects, classes etc?
thank you
Stefano
- Original Message
From: Bill Clarke-Fields <[EMAIL PROTECTED]>
To: users@tomcat.apache.org
Sent: Monday, December 17, 2007 5:
Hi Abel,
AbelMacAdam schrieb:
> Hi,
>
> Yesterday I tried to integrate Tomcat (6.0.14) in my Apache (2.2.6). I saw a
> document about how to do it, but had not have the time to test it (really).
> But the appache_error.log states:
> [Tue Dec 18 08:54:35 2007] [warn] No JkLogFile defined in httpd.
Hi,
Yesterday I tried to integrate Tomcat (6.0.14) in my Apache (2.2.6). I saw a
document about how to do it, but had not have the time to test it (really).
But the appache_error.log states:
[Tue Dec 18 08:54:35 2007] [warn] No JkLogFile defined in httpd.conf. Using
default C:/wamp/bin/apache/apa
63 matches
Mail list logo
