RE: /manage/text/list fails in 9.0.31, works in 9.0.27

2020-02-27 Thread Vishal Agrawal
Hello Chris, I uninstalled existing tomcat and cleaned up /opt/tomcat folder before installing 9.0.31 or 9.0.27. Thanks, Vishal -Original Message- From: Christopher Schultz Sent: Thursday, February 27, 2020 3:57 PM To: users@tomcat.apache.org Subject: Re: /manage/text/list fails in 9.

Re: /manage/text/list fails in 9.0.31, works in 9.0.27

2020-02-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Vishal, On 2/26/20 13:56, Vishal Agrawal wrote: > Hello, > > I have manager endpoint enabled in my tomcat install. > > When I list the manager endoing in tomcat 9.0.31, I get a 401 > Unauthorized error - > > curl -u tomcat:secret http://127.0.0.1:80

RE: /manager/text/list fails in 9.0.31, works in 9.0.27

2020-02-27 Thread Vishal Agrawal
Hello Enrico, I build an RPM from source file (https://archive.apache.org/dist/tomcat/tomcat-9/v%{version}/bin/apache-tomcat-%{version}.tar.gz) with manager application enabled. In both tests I had installed the RPM fresh and generated the hash of password using /opt/tomcat/bin/digest.sh file

Re: /manager/text/list fails in 9.0.31, works in 9.0.27

2020-02-27 Thread Enrico Olivelli
I am investingating this issue with NetBeans and Tomcat 9.0.31 https://issues.apache.org/jira/browse/NETBEANS-3917 This problem report MAY be related, NetBeans is not able to list applications or to access the /manager/text API. It works well with 9.0.30. I will be back with news if it is a Tomca

Re: Client cert auth on demand

2020-02-27 Thread Martynas Jusevičius
Tomcat is deep within the Docker image configured with a single connector and a single ROOT webapp, so it's easier to deploy a second container than to add a second connector or context :) Thanks for your help. On Thu, Feb 27, 2020 at 11:36 AM Mark Thomas wrote: > > On 27/02/2020 10:28, Martyna

Re: Client cert auth on demand

2020-02-27 Thread Mark Thomas
On 27/02/2020 10:28, Martynas Jusevičius wrote: > Yes, that could be an option. Or, since we're on Docker, a second > instance of the webapp on a different port would be easier. > > But we would need to add some URL rewriting proxy before that > connector to strip that port number to make the weba

Re: Client cert auth on demand

2020-02-27 Thread Martynas Jusevičius
Yes, that could be an option. Or, since we're on Docker, a second instance of the webapp on a different port would be easier. But we would need to add some URL rewriting proxy before that connector to strip that port number to make the webapp see the canonical URLs. That should be doable with ngin

Re: Client cert auth on demand

2020-02-27 Thread Mark Thomas
On 27/02/2020 09:58, Martynas Jusevičius wrote: > Hi list, > > I'm using a Docker image based on tomcat:8.0-jre8. It serves as an > end-user facing webapp but also as a REST API which authenticates > using client certificates. The same URLs serve both purposes, however > only administrators are us

Client cert auth on demand

2020-02-27 Thread Martynas Jusevičius
Hi list, I'm using a Docker image based on tomcat:8.0-jre8. It serves as an end-user facing webapp but also as a REST API which authenticates using client certificates. The same URLs serve both purposes, however only administrators are using the API. The Connector is configured using clientAuth="

Re: /manager/text/list fails in 9.0.31, works in 9.0.27

2020-02-27 Thread Mark Thomas
On 26/02/2020 18:57, Vishal Agrawal wrote: > Hello, > > I have manager endpoint enabled in my tomcat install. > > When I list the manager endoing in tomcat 9.0.31, I get a 401 Unauthorized > error - > > curl -u tomcat:secret http://127.0.0.1:8080/manager/text/list > > "http://www.w3.org/TR/ht