Re: upgrading from 6.0.20 to 6.0.35

2011-12-08 Thread Pid *
On 9 Dec 2011, at 06:28, AngeloChen wrote: > hi, > how easy is to upgrade? can i use the server.xml in 6.0.20 without changes > in 6.0.35? thanks, Yes, but we still usually recommend starting afresh each time. It should relatively simple, just make a backup copy of each file you edit, first. NB

upgrading from 6.0.20 to 6.0.35

2011-12-08 Thread AngeloChen
hi, how easy is to upgrade? can i use the server.xml in 6.0.20 without changes in 6.0.35? thanks, angelo -- View this message in context: http://old.nabble.com/upgrading-from-6.0.20-to-6.0.35-tp32938729p32938729.html Sent from the Tomcat - User mailing list archive at Nabble.com. -

RE: Custom realm.authenticate() that would work with any realm - possible?

2011-12-08 Thread Caldarale, Charles R
> From: oh...@cox.net [mailto:oh...@cox.net] > Subject: Custom realm.authenticate() that would work with any realm - > possible? > I was wondering if there might, perhaps, be another way to do what > I'm trying to do (basically have an realm.authenticate() method that > doesn't require a passwo

Custom realm.authenticate() that would work with any realm - possible?

2011-12-08 Thread ohaya
Hi, This is a followup to an earlier thread, "Do any of the Tomcat LDAP-type realms support "no password" authentication?". As I mentioned in that earlier thread, I'm still new to Tomcat, and still trying to find my way around, and understand (somewhat) its security design, so apologies in

Re: Tomcat user roles

2011-12-08 Thread Bill Wang
Thanks to all for the explanation. I have a new question regarding the admin role. With default setup, if I login as admin, I can start,stop, undeploy and deploy the application. Now, because the admin password has been shared by team, and I can't not share it with team. So I plan to disable und

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Pid *
On 8 Dec 2011, at 23:41, Pid * wrote: > On 8 Dec 2011, at 16:50, Savitha Amelia wrote: > >> Hi, >> >> I have multiple applications hosted on my tomcat server which includes web >> services, web applications etc. >> >> To secure the web services, we made changes to server.xml ->connector >> eleme

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Pid *
On 8 Dec 2011, at 16:50, Savitha Amelia wrote: > Hi, > > I have multiple applications hosted on my tomcat server which includes web > services, web applications etc. > > To secure the web services, we made changes to server.xml ->connector > element and defined roles in tomcat-users.xml. > In the

Re: Session replication fails with "Member send is failing"

2011-12-08 Thread Filip Hanik - Dev Lists
On 12/7/2011 9:04 AM, Jürgen Link wrote: Caused by: org.apache.catalina.tribes.RemoteProcessException: Received a failedack:org.apache.catalina.tribes.transport.Constants.FAIL_ACK_DATA sure thing, this is actually telling the "sender" that an exception happened on the "receiver" end. Take a lo

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Savitha, On 12/8/11 3:01 PM, Savitha Akella wrote: > We are using tomcat version 7.0.11 You should upgrade if you have the chance. 7.0.23 is available and there have been many improvements including fixes for security-related bugs. > Here are the ch

Re: Re: Tomcat 7.0.23 won't start

2011-12-08 Thread Jacob Champlin
Chris, > Flame bait ignored. Your a better man than me :) I couldn't ignore the attack on my server.xml when I was working a bug. Jacob - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e

Re: RemoteIpFilter not working

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 12/8/11 3:52 PM, spr...@gmx.eu wrote: > I have set up the RemoteIpFilter (Tomcat 7.0.8) It's time to upgrade: 7.0.23 is available and includes significant improvements including security-related bug fixes. > in the webapps

RemoteIpFilter not working

2011-12-08 Thread spring
Hi, I have set up the RemoteIpFilter (Tomcat 7.0.8) in the webapps web.xml like this: RemoteIpFilter org.apache.catalina.filters.RemoteIpFilter RemoteIpFilter /* REQUEST The mapping is the first in the filter chain. But when I call

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Savitha Akella
Hi, We are using tomcat version 7.0.11 Here are the changes we made in server.xml: here is my tomcat-users.xml I have changed the web.xml of my web services to refer to the role configured in the tomcat-users.xml. Here is the web.xml: ClientCertificateRequired My

Re: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Xybrek, On 12/8/11 11:58 AM, Xybrek wrote: > Thanks. I know about placing the web app (like myRoot) under the > ROOT and it will work. However, there is another issue I that comes > when I do this, an issue with my GWT > (http://code.google.com/webtoo

Re: Tomcat 7.0.23 won't start

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jacob, On 12/8/11 10:04 AM, Jacob Champlin wrote: > Practical: This was my sandbox config file. I switch between 6 > different applications. I do this by switching server.xml files > when I switch projects. This keeps things minimal (not starting

Re: "VerifyError: ... Illegal constant pool index" when jspx invokes a tagx on Tomcat 7.0.16

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert, On 12/8/11 9:19 AM, Robert Winch wrote: > That is good information to know. We plan on updating to 7.0.23 > within the next few weeks. Be aware that there is a bug in 7.0.23 that causes a hang-on-startup if a webapp does not have a defined.

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Savitha, On 12/8/11 11:49 AM, Savitha Akella wrote: > I have multiple applications hosted on my tomcat server which > includes web services, web applications etc. > > To secure the web services, we made changes to server.xml > ->connector element and

Re: AJP connection timeout setting/Tomcat 6 vs. 7 questions

2011-12-08 Thread Kari Scott
On Dec 6, 2011, at 2:25 PM, André Warnier wrote: > Kari Scott wrote: >> We are running Tomcat 6. 0.32 with jdk1.6.0_26 on Solaris 10, mod_ajp 1.3 >> and Apache 2.2.21 on all but one production server which is the same except >> for it's running Tomcat 7.0.21. >> I have some questions regard

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Daniel Mikusa
On Thu, 2011-12-08 at 08:49 -0800, Savitha Akella wrote: > Hi, > > I have multiple applications hosted on my tomcat server which includes web > services, web applications etc. > > To secure the web services, we made changes to server.xml ->connector What specifically did you change in server.xml

Re: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread Xybrek
On Friday, 09 December, 2011 01:18 AM, André Warnier wrote: Xybrek wrote: On Thursday, 08 December, 2011 09:37 PM, André Warnier wrote: Xybrek wrote: On 12/8/2011 9:19 PM, Xybrek wrote: On 12/8/2011 8:52 PM, Thom Hehl wrote: Simplest would be to set up an index.html in the root path that red

Re: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread André Warnier
Xybrek wrote: On Thursday, 08 December, 2011 09:37 PM, André Warnier wrote: Xybrek wrote: On 12/8/2011 9:19 PM, Xybrek wrote: On 12/8/2011 8:52 PM, Thom Hehl wrote: Simplest would be to set up an index.html in the root path that redirects to whatever you wish. You can find 500 hits on google

Re: "VerifyError: ... Illegal constant pool index" when jspx invokes a tagx on Tomcat 7.0.16

2011-12-08 Thread Robert Winch
On Thu, Dec 8, 2011 at 9:02 AM, Mark Thomas wrote: > On 08/12/2011 14:19, Robert Winch wrote: > > On Thu, Dec 8, 2011 at 4:29 AM, Pid wrote: > >> You say below that the compiled tags & JSP don't appear to have been > >> recompiled - either upgrade, or clear the work directory to ensure that > >>

Re: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread Xybrek
On Thursday, 08 December, 2011 09:37 PM, André Warnier wrote: Xybrek wrote: On 12/8/2011 9:19 PM, Xybrek wrote: On 12/8/2011 8:52 PM, Thom Hehl wrote: Simplest would be to set up an index.html in the root path that redirects to whatever you wish. You can find 500 hits on google about how to do

Securing only a single web application on Tomcat

2011-12-08 Thread Savitha Akella
Hi, I have multiple applications hosted on my tomcat server which includes web services, web applications etc. To secure the web services, we made changes to server.xml ->connector element and defined roles in tomcat-users.xml. In the web services, we made changes in the web.xml to add the securi

Re: SSL configuration on apache tomcat 6 - Oracle EL5

2011-12-08 Thread Daniel Mikusa
On Thu, 2011-12-08 at 08:22 -0800, Oladapo Moshood wrote: > After the re-installation of the whole Apache Tomcat Native Library, I > still get: > Ok, take a step back for a second... 1.) What were the results of "./configure ..."? If you could paste them in here, that would be helpful. 2.) Aft

Re: SSL configuration on apache tomcat 6 - Oracle EL5

2011-12-08 Thread Oladapo Moshood
After the re-installation of the whole Apache Tomcat Native Library, I still get: Dec 8, 2011 12:25:28 PM org.apache.catalina.core.AprLifecycleListener init INFO: Loaded APR based Apache Tomcat Native library 1.1.16. Dec 8, 2011 12:25:28 PM org.apache.catalina.core.AprLifecycleListener init INFO:

Re: Enable https for all application hosted in tomcat

2011-12-08 Thread Jesse Farinacci
Greetings, On Thu, Dec 8, 2011 at 8:05 AM, RenuKumar wrote: > I wonder if anyone have configured HTTPS on all their application in the > /webapps. Please share if you have any information pertaining to HTTPS in > tomcat http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html -Jesse -- There ar

Re: Tomcat 7.0.23 won't start

2011-12-08 Thread Jacob Champlin
> Add a Realm definition or wait until 7.0.24. There's a bug in 7.0.23. I am waiting for 7.0.24. > I'm wincing as I ask: is there a particular reason that you're defining > the Context in server.xml - it's been strongly recommended to not do > that for quite a while. Okay, I will byte. Practi

Re: "VerifyError: ... Illegal constant pool index" when jspx invokes a tagx on Tomcat 7.0.16

2011-12-08 Thread Mark Thomas
On 08/12/2011 14:19, Robert Winch wrote: > On Thu, Dec 8, 2011 at 4:29 AM, Pid wrote: >> You say below that the compiled tags & JSP don't appear to have been >> recompiled - either upgrade, or clear the work directory to ensure that >> they have been. >> > > I'm not sure I understand. Is there a

Re: "VerifyError: ... Illegal constant pool index" when jspx invokes a tagx on Tomcat 7.0.16

2011-12-08 Thread Robert Winch
On Thu, Dec 8, 2011 at 4:29 AM, Pid wrote: > On 07/12/2011 17:32, Robert Winch wrote: > > > 3) I have looked for any jars included in the war that might contain the > > wrong JspTag or PageContext. I tried to do an open type in Eclipse on > both > > classes and found jsp-api and servlet-api both

Re: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread André Warnier
Xybrek wrote: On 12/8/2011 9:19 PM, Xybrek wrote: On 12/8/2011 8:52 PM, Thom Hehl wrote: Simplest would be to set up an index.html in the root path that redirects to whatever you wish. You can find 500 hits on google about how to do an HTML redirect. -Original Message- From: Xybrek [ma

Re: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread Xybrek
On 12/8/2011 9:19 PM, Xybrek wrote: On 12/8/2011 8:52 PM, Thom Hehl wrote: Simplest would be to set up an index.html in the root path that redirects to whatever you wish. You can find 500 hits on google about how to do an HTML redirect. -Original Message- From: Xybrek [mailto:xyb...@gma

Re: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread Xybrek
On 12/8/2011 8:52 PM, Thom Hehl wrote: Simplest would be to set up an index.html in the root path that redirects to whatever you wish. You can find 500 hits on google about how to do an HTML redirect. -Original Message- From: Xybrek [mailto:xyb...@gmail.com] Sent: Thursday, December 08,

Enable https for all application hosted in tomcat

2011-12-08 Thread RenuKumar
Hi I wonder if anyone have configured HTTPS on all their application in the /webapps. Please share if you have any information pertaining to HTTPS in tomcat Thanks Michael - To unsubscribe, e-mail: users-unsubscr...@tomcat

RE: How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread Thom Hehl
Simplest would be to set up an index.html in the root path that redirects to whatever you wish. You can find 500 hits on google about how to do an HTML redirect. -Original Message- From: Xybrek [mailto:xyb...@gmail.com] Sent: Thursday, December 08, 2011 3:07 AM To: users@tomcat.apache.org

How to forward all kind of request from ROOT to another subdirectory?

2011-12-08 Thread Xybrek
Hello, I need to forward all kind of request from the ROOT, i.e http://localhost:8080/ to http://localhost:8080/myRoot Is it possible, do I need to create a redirect servlet? However, I think tomcat can be configured to behave that way? -

Tomcat JMX/RMI: How server interface is choosen?

2011-12-08 Thread Ilya Kazakevich
I enable JMX server and JMX Registry in tomcat using Client connects to 10001 and tomcat returns its address and port 10002, right? But if I have several addresses on the interface tomcat returns the first one. Is it tomcat or RMI issue? How can I set interface and/or ip address to be returned

Re: MVC or Model2 with Tomcat

2011-12-08 Thread Blaxton
From: Pid * To: Tomcat Users List Sent: Thursday, December 8, 2011 12:25:35 PM Subject: Re: MVC or Model2 with Tomcat On 8 Dec 2011, at 06:08, Blaxton wrote: > > > > > > From: Blaxton > To: Tomcat Users List > Sent: Tue

Re: "VerifyError: ... Illegal constant pool index" when jspx invokes a tagx on Tomcat 7.0.16

2011-12-08 Thread Pid
On 07/12/2011 17:32, Robert Winch wrote: > We have a web application that was consistently getting a VerifyError > whenever a jsp invoked a custom tagx. The jsp is a SiteMesh decorator that > uses a custom tagx to display a Spring Security Authentication object. The > issue was resolved by restarti

Re: MVC or Model2 with Tomcat

2011-12-08 Thread Pid *
On 8 Dec 2011, at 06:08, Blaxton wrote: > > > > > > From: Blaxton > To: Tomcat Users List > Sent: Tuesday, December 6, 2011 9:19:00 PM > Subject: Re: MVC or Model2 with Tomcat > > > > > > > > From: Pid * > To: Tomcat Users List