How to configure Jar scanner in context.xml

2011-04-13 Thread Guofeng Zhang
Hi, I do not find a concrete sample in the doc to demonstrate how to configure jar scanner in context.xml in tomcat 7. Could anyone give me a sample to configure the Jar scanner? I need the scanner only scan web-inf/lib and web-info/classes. I find that Tomcat scan all the jars it c

Re: [OT] servlet-specific error pages

2011-04-13 Thread Justin Randall
Hi Martin, What Chris is actually looking for is custom servlet specific error handling in addition to web application error handling (the later is what you have described below). In other words, 401 for Servlet X is directed to a different JSP than 401 for the entire web application. Regards

RE: [OT] servlet-specific error pages

2011-04-13 Thread Martin Gainty
in web.xml for your webapp map a custom jsp for each returned HTTP status code e.g: 401 /401.jsp 403 /403.jsp 404 /404.jsp Martin __ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité

RE: [OT] servlet-specific error pages

2011-04-13 Thread Justin Randall
Hi Chris, > Of course. I was wondering about other exceptions or errors that maybe I > cannot control from that code. Are you referring to internal exceptions within Tomcat's own code or simply unexpected exceptions within the servlet's implemented code? If it's the later you could always jus

Re: Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Afkham, On 4/13/2011 10:05 AM, Afkham Azeez wrote: > We are using Embedded Tomcat 7.0.11. It seems that with Embedded Tomcat, the > default is parent-first class loading, even though the default in the Tomcat > binary distribution is child-first. Yes

Re: Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Afkham Azeez
Was able to solve this using a bootstrap mechanism. http://frank.zinepal.com/embedded-tomcat-class-loading-trickery was helpful. Azeez On Wed, Apr 13, 2011 at 8:33 PM, Afkham Azeez wrote: > According to http://yzb.hit.edu.cn/docs/class-loader-howto.html, > everything in the system classpath wil

Re: Two Tomcat 7.0.11 installations in the same Linux instance, running both on port 80, without conflicts?

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian, On 4/12/2011 5:18 PM, Brian Braun wrote: > I'm improving my apps frecuently, so everytime I do it I need to upload a > new WAR file. When that happens, I face the leaking problem that so far I > haven't solved. What leaking problem? - -chris

Re: 'Parametrizing' context.xml?

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Laicreparc, On 4/13/2011 11:38 AM, Laicreparc wrote: > How can the variable (i.e. here BPVAL be set)? E.g. in server.xml? Did you read the post? It says how to set those values. > Is really in context.xml? Looks more like web.xml to > me. I think

Re: [OT cluster]Request to comment

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 János, On 4/13/2011 1:01 PM, János Löbb wrote: > My problems are starting with the requirement of removing a server from the > cluster and adding it back to the cluster without affecting the users. I > know just three ways to take a server out from

Re: Trying to find session.org.apache.catalina.filters.CSRF_NONCE

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mathew, On 4/13/2011 3:21 PM, Mathew Samuel wrote: > There's an JSP example line given, with respect to using CSRF > (Cross-site Request Forgery), that showed how one could access the > CSRF nonce and include it with a URL: > > < c:url var="url" valu

Re: Help with CsrfPreventionFilter

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mathew, On 4/12/2011 3:51 PM, Mathew Samuel wrote: > We don't make use of JSTL so I can't access it that way. > > We do use XSL that is run through a transform. And of course relevant > values are retrieved from the back end too. Depending on how to

Re: [OT] servlet-specific error pages

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin, On 4/13/2011 9:17 AM, Justin Randall wrote: > Hi Chris, > > I'm assuming the servlet is in control of generating all of the > errors you are implying? Yes and no: > For example, if the servlet doesn't load properly and a 404 would be > gene

Re: [OT] servlet-specific error pages

2011-04-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 János, On 4/13/2011 11:37 AM, János Löbb wrote: > I was thinking about this section in the FM 10.9.2: > > Error-page declarations using the exception-type element in > the deployment descriptor must be unique up to the class name of the > exception-

Trying to find session.org.apache.catalina.filters.CSRF_NONCE

2011-04-13 Thread Mathew Samuel
Hi, There's an JSP example line given, with respect to using CSRF (Cross-site Request Forgery), that showed how one could access the CSRF nonce and include it with a URL: < c:url var="url" value="/show" > < c:param name="id" value="0" / > < c:param name="org.apache.catalina.filters.CSRF_NONCE"

Re: [OT cluster]Request to comment

2011-04-13 Thread Francis GALIEGUE
On Wed, Apr 13, 2011 at 19:01, János Löbb wrote: [...] > > The first 3 paragraphs are done.  I have two machines  with OSX 10.6.5, httpd > 2.2.17, mod_jk 1.2.31, tomcat 7.0.10. [...] > Just one thing: since you use Apache 2.2.x, why don't you use mod_proxy_ajp? -- Francis Galiegue ONE2TEAM Ing

[OT cluster]Request to comment

2011-04-13 Thread János Löbb
Hi, I have this write up regarding a tomcat cluster I have to set up: Clustering Information: Two or more servers with each having a tomcat instance installed. The cluster or proxy server will need to have load balancing. Session Replication between all the tomcat instances on all the servers

RE: Tomcat Windows Integrated Authentication fails with More than 1 Web Application

2011-04-13 Thread Avni, Itamar
OK. You can follow at http://social.msdn.microsoft.com/Forums/en-US/sqldataaccess/thread/c66d9782-f3e7-4317-b6e4-22e0446a63e0/. Itamar -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, April 13, 2011 4:13 PM To: Tomcat Users List Subject: Re: Tomcat

Tomcat Client Deployer: "Cannot resolve the name 'javaee:descriptionGroup' to a(n) 'group' component."

2011-04-13 Thread Ben Fox Moore
I'm trying to use the Tomcat Client Deployer to dynamically update my web app when the java source files are modified, but so far I can't even get the TCD to compile it. I've created the required 'deployer.properties' file with the following contents: webapp=/home/user/Desktop/TestProject/ > path

Re: 'Parametrizing' context.xml?

2011-04-13 Thread Laicreparc
How can the variable (i.e. here BPVAL be set)? E.g. in server.xml? Is really in context.xml? Looks more like web.xml to me. Bill Barker wrote: > > > "Mario Splivalo" wrote in message > news:4b27994e.5080...@megafon.hr... >> Bill Barker wrote: >>> "Mario Splivalo" wrote in message >>> news

Re: [OT] servlet-specific error pages

2011-04-13 Thread János Löbb
Chris, I was thinking about this section in the FM 10.9.2: Error-page declarations using the exception-type element in the deployment descriptor must be unique up to the class name of the exception-type. Similarly, error-page declarations using the status-code element must be unique in the de

Re: Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread Chris Dumoulin
In a discussion on Bug 50957 (https://issues.apache.org/bugzilla/show_bug.cgi?id=50957) Mark Thomas said the following: "Experience has shown that most instances of this type of error are triggered by application bugs rather than Tomcat bugs - usually in the form of retaining and re-using a refe

Re: Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Afkham Azeez
According to http://yzb.hit.edu.cn/docs/class-loader-howto.html, everything in the system classpath will be visible to webapps, and hence will override the classes in the webapps, I think. So, the solution would be to implement a bootstrap mechanism, just like org.apache.catalina.startup.Bootstrap,

Child-first classloading with Embedded Tomcat 7.0.11

2011-04-13 Thread Afkham Azeez
Hi, We are using Embedded Tomcat 7.0.11. It seems that with Embedded Tomcat, the default is parent-first class loading, even though the default in the Tomcat binary distribution is child-first. Is there a way to setup child-first class loading in Embedded Tomcat? Thanks Azeez

Re: Tomcat-oracle secure connection

2011-04-13 Thread Alex Kiernan
Why would you bother? If I'm on the machine and have enough privilege to snoop the traffic, I've enough privilege to disable/remove any encryption (or attach a debugger to the process, or just about anything else). On Mon, Apr 11, 2011 at 7:52 AM, ramram8 wrote: > > What if the webserver and the

RE: [OT] servlet-specific error pages

2011-04-13 Thread Justin Randall
Hi Chris, I'm assuming the servlet is in control of generating all of the errors you are implying? For example, if the servlet doesn't load properly and a 404 would be generated, the servlet would obviously not be in control of handling this exception and this would would have to make use of

Re: Tomcat Windows Integrated Authentication fails with More than 1 Web Application

2011-04-13 Thread André Warnier
Avni, Itamar wrote: Hi all, I'm using Tomcat 5.5.23 on a Windows server 2003 (64 bit). Tomcat runs as a window service, using an Active Directory account. DB is configured to Windows Authentication mode alone. Tomcat contains 2 web applications. The DLL's (sqljdbc_auth.dll) location is the valu

Tomcat Windows Integrated Authentication fails with More than 1 Web Application

2011-04-13 Thread Avni, Itamar
Hi all, I'm using Tomcat 5.5.23 on a Windows server 2003 (64 bit). Tomcat runs as a window service, using an Active Directory account. DB is configured to Windows Authentication mode alone. Tomcat contains 2 web applications. The DLL's (sqljdbc_auth.dll) location is the value of Tomcat's -Djava.

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Mladen Turk
On 04/13/2011 02:29 PM, Jaroslav Fikker wrote: So that is the probelm in compilation of APR? LOL. Nope. It's in your java cause you have 64-bit OS, right? Regards -- ^TM - To unsubscribe, e-mail: users-unsubscr...@tomcat.

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Jaroslav Fikker
Hi Konstantin, You are right - my java is 32bit. So that is the probelm in compilation of APR? JF __ > Od: "Konstantin Kolinko" > Komu: Tomcat Users List > Datum: 13.04.2011 14:15 > Předmět: Re: Problem with Apache Portable Runtime (A

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Konstantin Kolinko
"/lib64/*" -- is your Java 64-bit as well? I guess yours is 32-bit, because version.sh printed Architecture: x86 2011/4/13 Jaroslav Fikker : > > Hi, > > There is output of ldd command: > > ldd /opt/tomcat_6_0/lib/libtcnative-1.so >        linux-vdso.so.1 =>  (0x7fff4a5d9000) >        libssl

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Jaroslav Fikker
Hi, There is output of ldd command: ldd /opt/tomcat_6_0/lib/libtcnative-1.so linux-vdso.so.1 => (0x7fff4a5d9000) libssl.so.6 => /lib64/libssl.so.6 (0x2ad6f40ad000) libcrypto.so.6 => /lib64/libcrypto.so.6 (0x2ad6f42fa000) libapr-1.so.0 => /usr/lib64/li

Re: Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread Chris Dumoulin
Actually, I saw that notice and tried Tomcat 7.0.12, but saw the same behaviour. I should have mentioned that before. So, I think this is a different issue. - Chris On April 13, 2011 07:27:51 am André Warnier wrote: > Hi. > > An earlier message to this list [[SECURITY] CVE-2011-1475 Apache Tomc

Re: Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread André Warnier
Hi. An earlier message to this list [[SECURITY] CVE-2011-1475 Apache Tomcat information disclosure] /may/ have something to do with this. (It talks only about the HTTP connector, but also about content mixup with async requests, so maybe there is a link) Chris Dumoulin wrote: I'm seeing an i

Problem with merged responses - possibly a reused Response or OutputBuffer

2011-04-13 Thread Chris Dumoulin
I'm seeing an intermittent problem with my webapp where a request is sent and the response contains 8184 bytes from some other response followed by the correct response. The setup being used is Nginx 0.8.54 reverse proxying to Tomcat 7.0.11. AJP is the protocol between Nginx and Tomcat. The we

Re: How to hide tomcat console when installed as service

2011-04-13 Thread Amit k
Had a look at this information before too. I think, writing a service, using this information, to check for tomcat service and to check for console and ultimately hiding it seems the way now. Anyways, thanks for reminding me. Only thing wanted to know if is there any way, like making any change in

Re: [OT] servlet-specific error pages

2011-04-13 Thread Francis GALIEGUE
On Wed, Apr 13, 2011 at 00:17, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > János, > > On 4/12/2011 4:56 PM, János Löbb wrote: >> Look the 10.9 Error Handling in the 3.0 specifications.  It is maya >> to me but you might find what you are looking for. > > Being

Re: Problem with Apache Portable Runtime (APR) based Native library for Tomcat

2011-04-13 Thread Mladen Turk
On 04/13/2011 07:14 AM, Jaroslav Fikker wrote: Hi, I also create /opt/tomcat_6_0/bin/setenv.sh file with this content: LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$CATALINA_HOME/lib export LD_LIBRARY_PATH But when I start server with startup.sh script I can find next warning incatalina.out file (but Tom