RE: [Seriously OT] Help in diagnosing server unresponsiveness

2013-02-09 Thread Terence M. Bandoian
On 2/6/2013 9:26 AM, Jeffrey Janner wrote: IMO, developer performance trumps runtime performance most of the time. >So, if you can create a more maintainable system in less time by using >EJB (or whatever), then you go ahead and do it: servers are cheap, >while developer time is expensive. > >- -

Cannot run Web Services on Tomcat 7 (7.0.34) due to JaxWS libraries

2013-02-09 Thread Enrique Vignau
We cannot run ws because of the jaxws libraries. After several days trying different approaches we think the problem is we need to add the jaxws libraries and also add the listeners. We also discovered that the metro version might be affecting. We tried adding the jaxws libraries but no results. We

RE: JMS in a Tomcat Environment

2013-02-09 Thread Terence M. Bandoian
On 1/30/2013 3:27 PM, Jeff Sturm wrote: -Original Message- From: Williams, Nick [mailto:nicholas.willi...@ul.com] Sent: Wednesday, January 30, 2013 2:06 PM I'm curious. I know that, being open source, the Tomcat project generally welcomes volunteers who want to contribute features or im

Re: deploy application in new service in tomcat

2013-02-09 Thread Pid
On 07/02/2013 13:03, Anil Goyal -X (anigoyal - Aricent Technologies at Cisco) wrote: > Hi, > > I am creating a new service in tomcat (7.0.20) with service name > 'catalina_new' and appBase='webapps' by doing some changes in server.xml. > I am keeping the appBase same as that for default service '

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-09 Thread Pid
On 08/02/2013 15:05, Mark Thomas wrote: > On 08/02/2013 14:34, Caldarale, Charles R wrote: >>> From: dku...@ccilindia.co.in [mailto:dku...@ccilindia.co.in] >>> Subject: How to limit the number of renegotiations for a single TLS >>> / SSL connection >> >>> We are using - Tomcat Version - 6.0.18 >>

Re: AJAX Authentification

2013-02-09 Thread Johannes Meyer
I built a solution, that is working for me. The Servlet is doing a login, copies the the authentication-data to the session and responds with JSON-Data. The problem with this solution is, that I have to access a private member by using reflections, because the StandardSession-Object is hidden with

Re: AJAX Authentification

2013-02-09 Thread Jimmy Johnson
I had the same requirements and ended up using Spring security. Although spring security is no set up for ajax itself, you can make a filter that catches all ajax context after it goes through the security class filters. Take a look here : http://static.springsource.org/spring-security/site/

Re: Sharing session attributes across multiple webapps

2013-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 2/9/13 7:48 AM, chris derham wrote: > >> I simply need a temporary string that is set during the session >> in one app to still be able to be displayed when the user goes to >> another app. > > > >> Am I missing something obvious here?

Re: Sharing session attributes across multiple webapps

2013-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 2/9/13 12:04 AM, Jerry Malcolm wrote: > I need to set and read a session attribute across multiple webapps. > I have googled this and have read many answers. The general > consensus is that setting crossContext="true" and/or setting > sin

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Deepak, On 2/9/13 4:05 AM, dku...@ccilindia.co.in wrote: > we have not specified any specific connector protocol in the > connector tag, is that mean we are using native APR connector, and > if it is so, then as renegotiation is not permitted in APR

Re: AJAX Authentification

2013-02-09 Thread André Warnier
Johannes Meyer wrote: Hello all, I'm developing a web application with asynchronous techniques (ExtJS). The most pages are secured with a "security-constraint", so the user has to log in at first. The users gets prompted a login dialog and can type in his username and password. The data will

Re: Need to Specify keystorePass on Command Line

2013-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 2/8/13 5:03 PM, Harris, Jeffrey E. wrote: > For our implementation, it does not matter whether another process > can read the startup parameters - as long as the password is not > stored in a file and disappears when the Tomcat's host

Re: Sharing session attributes across multiple webapps

2013-02-09 Thread chris derham
> I simply need a temporary string that is set during the session in > one app to still be able to be displayed when the user goes to another > app. > Am I missing something obvious here? Couldn't you try a cookie? Chris -

Re: How to limit the number of renegotiations for a single TLS / SSL connection

2013-02-09 Thread dkumar
Hello All, @ Mark we have not specified any specific connector protocol in the connector tag, is that mean we are using native APR connector, and if it is so, then as renegotiation is not permitted in APR why VA tool says renegotiation DoS vulnerability, and it would be of great help if you ex