Re: Microsoft Edge (Chromium based) not prompting for logons

2020-09-15 Thread Dave Ford
On Mon, 2020-09-14 at 09:12 -0400, Christopher Schultz wrote: > Are you using HTTP or HTTPS? HTTPS. > TLDR: visit edge://policy in Edge and look for AuthSchemes. If the > value doesn't include "basic", add it and re-try. Yeah, that was it - I wasn't able to change our edge settings - that's loc

Microsoft Edge (Chromium based) not prompting for logons

2020-09-11 Thread Dave Ford
We've set up out Tomcat Manager to use LDAP for authentication - (note, this is not MS AD, but linux-based LDAP server). The OS our tomcat servers are running on is Linux and they're not intergrated with our AD domain in any way at all. Our users have been happily logging into the Tomcat manager a

Re: Fix for the Ghostcat vulnerability

2020-03-05 Thread Dave Ford
On Wed, 2020-03-04 at 13:19 -0500, Christopher Schultz wrote: > > > We're in the same position as you. External web servers talking > > to Tomcat servers on other boxes via AJP. > > Are those connections properly secured? That's not a tremendously helpful question. Which connections are you ta

Re: issue faced in tomcat 8.5.51

2020-03-04 Thread Dave Ford
On Fri, 2020-02-28 at 13:39 +, Rathore, Rajendra wrote: > Caused by: java.lang.IllegalArgumentException: The AJP Connector is > configured with secretRequired="true" but the secret attribute is > either null or "". This combination is not valid. Are you talking to this via an apache webserver

Re: Fix for the Ghostcat vulnerability

2020-03-04 Thread Dave Ford
On Wed, 2020-03-04 at 10:24 +0100, Jürgen Göres wrote: > > If it is, what is the recommended mitigation? We consider using the > "secret" feature (the filtering by request attributes is infeasible > for us), but that would be a bit of effort and we are in a hurry. > We're in the same position as

Minor version upgrades

2019-05-10 Thread Dave Ford
Hello, We've running many instances of Tomcat 8.5 on some dozens of linux servers. All of this is being managed by Puppet using the puppetforge tomcat module. The Puppet module that deploys tomcat simple checks to see if the NOTICE file is the correct place to determine whether or not it should

Minor version upgrading

2019-05-10 Thread Dave Ford
Hello, We've running many instances of Tomcat 8.5 on some dozens of linux servers. All of this is being managed by Puppet using the puppetforge tomcat module. The Puppet module that deploys tomcat simple checks to see if the NOTICE file is the correct place to determine whether or not it should

Re: Beginner help setting up test vertical cluster

2017-10-30 Thread Dave Ford
On Mon, 2017-10-30 at 09:15 -0400, Christopher Schultz wrote: > Dave, >  > Can you please post your and associated elements from > conf/server.xml -- minus any secrets that may have crept in there? > Also, what does your network look like? Any intermediates such as > load > balancers/firewalls? Wh

Beginner help setting up test vertical cluster

2017-10-30 Thread Dave Ford
Hello,  I should apologise in advance as I'm very new to Tomcat and, I'm sure, will be making some daft mistakes and silly errors. I hope this question and any that follow it aren't too dumb. I've recently started a new job and have inherited a half-finished tomcat cluster on solaris. While I'm