> From: Michael McCutcheon [mailto:michael.mccutch...@att.net]
> Subject: Re: [SECURITY] Tomcat 7 ignores @ServletSecurity annotations
> On 3/2/2011 8:49 AM, Mark Thomas wrote:
> > If code changes are required to address this, they will be included in
> > the next release of Tomcat 7, 7.0.10. The
> From: Tony Anecito [mailto:adanec...@yahoo.com]
> Subject: Re: [OT] IIS7/isapi/tomcat performance
> On page 4 of the following port guide:
> http://public.dhe.ibm.com/software/dw/jdk/64bitporting/64BitJavaPortingGuide.pdf
> It states:For Windows, on 32-bit systems, integers, longs and
> point
On the wiki Java long is 64-bits not sure what a Long is. So IBM is thinking
C,C++ a long is 32bits which is what the paper meant.
So I as wrong.
Regards,
-Tony
- Original Message
From: Tony Anecito
To: Tomcat Users List
Sent: Wed, March 2, 2011 9:15:09 PM
Subject: Re: [OT] IIS7/is
On 3/2/2011 8:49 AM, Mark Thomas wrote:
As reported on the users list [1], both Tomcat 7.0.8 and the latest
Tomcat 7 code from svn appear to ignore @ServletSecurity annotations.
Assuming this issue is confirmed, it may lead to authentication bypass
and information disclosure.
The exact details a
Actually according to the IBM porting guide longs are different byte lengths
depending upon what frame of reference they are speaking to.
On page 4 of the following port guide:
http://public.dhe.ibm.com/software/dw/jdk/64bitporting/64BitJavaPortingGuide.pdf
It states:For Windows, on 32-bit syste
Hi, Filip,
Is there a recommended way to clean up after the pool? I am getting the
following error message and I wonder if I need to add some code to prevent
memory leak.
2011-03-02 22:20:20,786 ERROR [http-8081-1]
org.apache.catalina.loader.WebappClassLoader - The web application [/…]
appear
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chuck,
On 3/1/2011 6:09 PM, Caldarale, Charles R wrote:
>> From: Christopher Schultz [mailto:ch...@christopherschultz.net]
>> Subject: Re: [OT] IIS7/isapi/tomcat performance
>
>> I don't understand why communicating a 64-bit value over a
>> 64-bit
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tony,
On 3/1/2011 6:27 PM, Tony Anecito wrote:
> I believe the effect of compression is relative. In other words for a big
> program with lots of 64-bit pointers and 64-bit longs it is helps but for
> small
> programs it does not.
A long in Java i
On 2 March 2011 15:56, jvr wrote:
> My question:
>
> If I'm not using JK Connector is mandatory configure tomcat as stand-alone
> server?
>
> or, although I'm not using JK Connector I could consider Apache like the
> primary web server?
>
> If you are not *somehow* forwarding requests from your p
Hi Charles,
thank you for your reply. Based on your answer I tried to remove docBase
attribute
in ROOT.xml and it started to work ! :-)
The thing why it didn't come to my mind before is the fact that I thought
docBase attribute was mandatory attribute, as long as it's marked bold in
Tomcat'
Hello all...
We have some tomcat instances that we'd like to identify by querying the
v$session.program field the oracle database they connect to. We found examples
that work when using the thin client, but when using the OCI driver it stops
working. Does anyone know of resource configuration e
Hi All,
We have been using Tomcat version 6.0.29 to deploy our webapp and everything
works great. In our development environment we can deploy/undeploy our web
app multiple times without getting any errors in Tomcat.
Recently we switched to Tomcat 7.0.8 and every time we redeploy our
application
I do not know what the "My bad" limit per day is but I am sure you are fine. :]
-Tony
- Original Message
From: David kerber
To: Tomcat Users List
Sent: Wed, March 2, 2011 10:20:57 AM
Subject: Re: IIS7/isapi/tomcat performance
On 3/2/2011 12:03 PM, Tony Anecito wrote:
> As stated in
On 3/2/2011 12:03 PM, Tony Anecito wrote:
As stated in my message I was using the -server option for the server jvm.
-Tony
My bad; I missed that.
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional
On 02/03/2011 17:02, Tony Anecito wrote:
> Hi Guys,
>
> Just to distract you from 32-bit vs 64-bit conversation Glashfish 3.1 was
> released yesterday and its performance is the best I have seen for a J2EE
> servlet container. They reported a 30% + improvement in almost every area and
> a
> le
On 3/2/2011 11:31 AM, ganu MailList wrote:
I use a WAR package on tomcat to create a web service, this WAR package
call JNI dll to do something.
Now I want to debug this WAR package and JNI dll,How can I do it ?
Visual Studio support debug JNI dll ?
Are you debugging the .war, or the
As stated in my message I was using the -server option for the server jvm.
-Tony
- Original Message
From: David kerber
To: Tomcat Users List
Sent: Tue, March 1, 2011 2:23:45 PM
Subject: Re: IIS7/isapi/tomcat performance
On 3/1/2011 4:07 PM, Tony Anecito wrote:
> Thanks Chris I will
Hi Guys,
Just to distract you from 32-bit vs 64-bit conversation Glashfish 3.1 was
released yesterday and its performance is the best I have seen for a J2EE
servlet container. They reported a 30% + improvement in almost every area and a
less than 4 seconds startup that's even better than Tomcat
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
As reported on the users list [1], both Tomcat 7.0.8 and the latest
Tomcat 7 code from svn appear to ignore @ServletSecurity annotations.
Assuming this issue is confirmed, it may lead to authentication bypass
and information disclosure.
The exact deta
On 02/03/2011 14:53, Michael McCutcheon wrote:
> However, I downloaded the Servlet 3.0 spec and used the exact examples
> from the security chapter, and it still seems to ignore the annotations
> completely:
>
> I copied these right from the spec:
>
> @ServletSecurity(@HttpConstraint(transportGua
I use a WAR package on tomcat to create a web service, this WAR package
call JNI dll to do something.
Now I want to debug this WAR package and JNI dll,How can I do it ?
Visual Studio support debug JNI dll ?
> From: Rodrigo Asensio [mailto:rasen...@gmail.com]
> Subject: Re: weird memory
> Now... what do you recommend to start tomcat in port 80
> in linux and what if I have to do a cluster deployment
> of tomcat+myapps.
You've got multiple, unrelated questions in there, that you shouldn't be asking
I'm asking to the guy who built the package. Now... what do you recommend to
start tomcat in port 80 in linux and what if I have to do a cluster
deployment of tomcat+myapps. What do you suggest ?
thank you
Rodrigo
---
http://www.rodrigo
Ignore that half complete message. One of mac's annoying keyboard shortcuts
sent that for me :) (don't ask me how, I really don't know how it happened)
On 2/23/2011 4:18 PM, Joel wrote:
> >>> sackett-research-lab2b:~ joel$ sudo find /opt/Tomcat -type f -exec \
> grep "function2.basiceng.umr.edu" "{}" \;
>
> Oops: I forgot the "-l" switch on grep... it's not giving you any file
> names :)
sackett-research-lab2b:~ joel$ sudo find /opt/Tomca
Sorry,
But maybe I'm not doing the correct question.
On SSL Configuration HOW-TO of Tomcat documentation:
SSL and Tomcat
It is important to note that configuring Tomcat to take advantage of secure
sockets is usually only necessary when running it as a stand-alone web
server. When running Tomcat
On 3/2/2011 4:12 AM, Mark Thomas wrote:
On 02/03/2011 06:54, Michael McCutcheon wrote:
I'm using Tomcat 7.0.8.
I have a servlet with a doGet method that has a @DenyAll annotation
applied to it.
However, when I run the servlet, it seems to make no difference, and
doGet is still called.
It was
> From: jo...@centrum.cz [mailto:jo...@centrum.cz]
> Subject: How to setup webapp specific parameter for virtual host in Tomcat?
>unpackWARs="true" autoDeploy="true">
>
>
>
>
The docBase is incorrect, and the path is missing. However, you really
shouldn't be putting elements in se
> From: jvr [mailto:jvr...@gmail.com]
> Subject: RE: Tomcat and SSL
> Then I don't have to configure tomcat with SSL
> Configuration HOW-TO as stand-alone web server
If you're intending to have Tomcat service SSL requests, then you do have to
configure it to for such. Note that the configurat
> From: Martin Gainty [mailto:mgai...@hotmail.com]
> Subject: RE: How to setup webapp specific parameter for virtual host in
> Tomcat?
> docBase
> The value of this field must NOT be set when the Context is
> configured using a META-INF/context.xml file
> as it will be inferred by the a
docBase
The value of this field must NOT be set when the Context is
configured using a META-INF/context.xml file
as it will be
inferred by the automatic deployment process.
Martin
__
Verzicht und Vertraulichkeitanmerkung/Note de déni
Hi everybody,
I would like to have this setup in Tomcat:
1. virtual host
2. webapp resides directly in ROOT and is autoDeployed
3. I need to pass some specific webapp parameter in Tomcat configuration
(outside war)
1st I have this scenario:
and ROOT.war in directory $CATALINA_BASE/vhosts/my
On 02/03/2011 06:54, Michael McCutcheon wrote:
> I'm using Tomcat 7.0.8.
>
> I have a servlet with a doGet method that has a @DenyAll annotation
> applied to it.
>
> However, when I run the servlet, it seems to make no difference, and
> doGet is still called.
>
> It was my understanding that @De
I make a correction for code written previously:
...
URL urlServlet = new
URL("https://www.domain.net:8443/applservlet/greeting";);
connection = urlServlet.openConnection();
...
Then I don't have to configure tomcat with SSL Configuration HOW-TO as
stand-alone web server, although
On 02/03/2011 10:59, jvr wrote:
> If I go to
> http://www. domain.net:4848/applservlet/greeting
> with the browser I could see the servlet.
>
> But If I go to
> https://www. domain.net:8443/applservlet/greeting
> I'm being redirected to PLESK.
Then there is an issue with your hosting environment
Hi,
It's my first time using tomcat
I'm trying to make, applet-servlet communication via SSL. I can do it via
http but, at the moment of trying via SSL, I'm receiving an IOException:
Couldn't open a URLConnection, error:
https://www.domain.net/applservlet/greeting
I'm connecting to the
On 02/03/2011 10:06, Ognjen Blagojevic wrote:
> On 2.3.2011 7:56, Daniel Baktiar wrote:
>> if i want to contribute to the documentation of tomcat, where should i
>> start?
>> i saw a lot of "contributions are welcomed", "patches are welcomed", but
>> cannot find the end of thread: the "where to sta
On 2.3.2011 7:56, Daniel Baktiar wrote:
if i want to contribute to the documentation of tomcat, where should i
start?
i saw a lot of "contributions are welcomed", "patches are welcomed", but
cannot find the end of thread: the "where to start"
1. Checkout Tomcat (http://svn.apache.org/repos/
38 matches
Mail list logo
