Re: How do LockOutRealms work ?

I can't see what would be the risks with being able to explain "This account is locked for X minutes"... I experienced situations where the user calls the first level service desk and a ticket goes all its way to someone who can read the server logs and understand the issue... Not exactly opti

Re: Designating a home page while using Realms

Can you provide a link to the Servlet Spec the to which section you are referring to. On Sun, Aug 30, 2015 at 9:55 PM, Mark Thomas wrote: > On 29/08/2015 22:26, Sreyan Chakravarty wrote: > > Okay I have just started to use Realms and container managed > authentication > > and I am confused about

Re: How do LockOutRealms work ?

In your opinion would a security framework help in doing this ? Like Apache Shiro ? On Sun, Aug 30, 2015 at 9:51 PM, Mark Thomas wrote: > On 29/08/2015 21:51, Sreyan Chakravarty wrote: > > Is there any way I can tell the user that what number of login attempt he > > is on ? While using the LockO

Re: HTTP 400 with Form based authentication

I don't understand where did I request the login page directly ? I just put as index.jsp and and the error page as index.jsp?error=true. So where is my error ? On Sun, Aug 30, 2015 at 9:54 PM, Mark Thomas wrote: > On 29/08/2015 22:16, Sreyan Chakravarty wrote: > > Okay this is my first try at

Embedded Tomcat 7.0.59 Some vhost are not get Started Properly

Hi, I'm having an intermittent issue relate to tomcat vhost. I'm using embedded tomcat version 7.0.59 and I have my own deployers as well. In some of my virtualhosts apps are get deployed after the server get startup. This happens only in some vhosts (not all vhosts) The actual issue is that I'm

RE: Webapp killing entire Tomcat process

> From: Jerry Malcolm [mailto:techst...@malcolms.com] > Subject: Webapp killing entire Tomcat process > But in my opinion, no matter what happens in the code, TC shouldn't > completely die, correct? Nope, it's all one process, and any thread can take it out. Running with a security manager re

Webapp killing entire Tomcat process

I am running TC 8.0.24. It's been stable ever since I installed it. I have been making changes/enhancements to a web app that has been in production for many years. I have now encountered a situation when I request a certain page, the entire Tomcat process dies. Literally, the Windows servi

Re: Can filters be loaded more than once?

Thanks for the help, Chris. I did note that some of the webapp web.xml files didn't include the async option. I've decided for now we'll use Tomcat's conf/web.xml to set this basic filter and let our webapps not have to think about it. On 8/28/15 12:27 PM, Christopher Schultz wrote: -BE

Re: Designating a home page while using Realms

On 29/08/2015 22:26, Sreyan Chakravarty wrote: > Okay I have just started to use Realms and container managed authentication > and I am confused about as how to specify a home page. Go and read the Servlet spec for how FORM authentication works. Then read the section on how to specify security co

Re: HTTP 400 with Form based authentication

On 29/08/2015 22:16, Sreyan Chakravarty wrote: > Okay this is my first try at container based authentication using Realms in > Tomcat. And things have gone wrong. Here is my login page -: > My web.xml security configuration is -: > > > > TECHERS > /teacher/suc

Re: How do LockOutRealms work ?

On 29/08/2015 21:51, Sreyan Chakravarty wrote: > Is there any way I can tell the user that what number of login attempt he > is on ? While using the LockOutRealm any way to display his login attempt > on an html or jsp page ? With the LockOutRealm as currently written, no. If you extend it and wr