RE: Concurrency question for servlets

2006-03-16 Thread Klotz Jr, Dennis
but memory leaks? Would be first time I met this issue, but you're never too old to learn :-) On 3/14/06, Klotz Jr, Dennis <[EMAIL PROTECTED]> wrote: > Hello. > > I hope everyone is having a great day! I hope you have a moment for a > quick question. > > I am fighting

Concurrency question for servlets

2006-03-14 Thread Klotz Jr, Dennis
Hello. I hope everyone is having a great day! I hope you have a moment for a quick question. I am fighting a memory leak problem and I want to try and rule in or out concurrency issues. So given: Servlet Code: - public enum XMSContextAttributes { applicationContext }; public void doGet (H

RE: basic question regarding BASIC and FORMS logins

2006-03-08 Thread Klotz Jr, Dennis
e previous session. --David Klotz Jr, Dennis wrote: >Greetings all, > >I'm trying to get my facts straight, and I'm hoping you will help. > >I am using forms based login right now and when the tomcat session times >out, the user has to login again. No surprise there

basic question regarding BASIC and FORMS logins

2006-03-08 Thread Klotz Jr, Dennis
Greetings all, I'm trying to get my facts straight, and I'm hoping you will help. I am using forms based login right now and when the tomcat session times out, the user has to login again. No surprise there. Now, some of our customers don't like this, so for them - can I use a BASIC login (wi

RE: Tomcat Crashes after 1000 sessions.

2006-03-07 Thread Klotz Jr, Dennis
Isn't this related to the max thread count setting in server.xml? I would also look into tuning your session expiration value. Perhaps having a logout button or javascript that will invalidate the session when they leave your page... Hope this helps. -Dennis -Original Message- From: [EMA

RE: Tomcat - Hibernate

2006-03-02 Thread Klotz Jr, Dennis
I'm jumping in the middle here so forgive me if this has already been covered. If you notice that your context.xml is not being deployed from your own META-INF directory, try putting the following in your server.xml : The deployXML="true" is the important part. I'm not certain if that defaults

RE: Help with detecting session timeout

2006-02-20 Thread Klotz Jr, Dennis
quest.getSession().isNew() and so on, public void service(HttpServletRequest req, HttpServletResponse resp) throws ServletException { if ( req.getSession(false) == null ) { resp.sendError(505, "No session available on the server"); return; } else { //exec

RE: scheme="https" not working?

2006-02-20 Thread Klotz Jr, Dennis
Do you have your port 80 connector forwarding set correctly? -Original Message- From: Dave Brondsema [mailto:[EMAIL PROTECTED] Sent: Monday, February 20, 2006 11:31 AM To: users@tomcat.apache.org Subject: scheme="https" not working? I'm using Tomcat 5.5.15 on Windows 2000. I have this c

RE: Help with detecting session timeout

2006-02-20 Thread Klotz Jr, Dennis
r(505,"Session has timed out"); return; } then in your applet, you can catch the 505, Filip Klotz Jr, Dennis wrote: > Greetings to all. > > I hope everyone had a great weekend. :) I've run into a problem that I > can't find any answers for and I am hope

Help with detecting session timeout

2006-02-20 Thread Klotz Jr, Dennis
Greetings to all. I hope everyone had a great weekend. :) I've run into a problem that I can't find any answers for and I am hopeful that one of you has the time to respond. Given: * Tomcat 5.5.15 * Applet using jvm 1.5 * An applet that has been sitting idle and tomcat has expired the session * U

Help with detecting session timeout

2006-02-18 Thread Klotz Jr, Dennis
Is there an easy way to detect that a session has timed out from within an applet? Regards, -Dennis - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: Best practice for detecting session expiration for applets?

2006-02-16 Thread Klotz Jr, Dennis
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve. java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:1 48) Any ideas are greatly appreciated. Thanks. -Dennis -Original Message- From: Klotz Jr, Dennis [mailto:[

Best practice for detecting session expiration for applets?

2006-02-16 Thread Klotz Jr, Dennis
This might be off topic but I am hoping someone has the time to help me out. I recently moved from basic to forms based authentication and I am having some problems with session expiration and my applets. I serialize plain old java objects back and forth from my client applet to tomcat 5.5.15 and

RE: Assistance required

2006-02-16 Thread Klotz Jr, Dennis
Just in case you missed them, study the following links. There is a wealth of information here: http://tomcat.apache.org/faq/ and of course http://tomcat.apache.org/tomcat-5.5-doc/index.html -Original Message- From: Medha Parathasarathy [mailto:[EMAIL PROTECTED] Sent: Thursday, Februa

RE: context.xml my old friend (SOLVED)

2006-02-08 Thread Klotz Jr, Dennis
[mailto:[EMAIL PROTECTED] Sent: Tuesday, February 07, 2006 5:02 PM To: Tomcat Users List Subject: RE: context.xml my old friend > From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] > Subject: RE: context.xml my old friend > > When you did this, do you get a copy of the context.xml &

RE: context.xml my old friend

2006-02-07 Thread Klotz Jr, Dennis
Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 07, 2006 3:28 PM To: Tomcat Users List Subject: RE: context.xml my old friend > From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] > Subject: RE: context.xml my old friend > > So perhaps I need to file a bug on this

RE: context.xml my old friend

2006-02-07 Thread Klotz Jr, Dennis
Subject: RE: context.xml my old friend > From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] > Subject: RE: context.xml my old friend > > So perhaps I need to file a bug on this I don't think you'll get very far. I installed the probe application, turned off autoDeploy, and star

RE: context.xml my old friend

2006-02-07 Thread Klotz Jr, Dennis
: Tuesday, February 07, 2006 2:58 PM To: Tomcat Users List Subject: RE: context.xml my old friend > From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] > Subject: RE: context.xml my old friend > > I've turned off autoDeploy. That should not affect deployment of apps that are alrea

RE: context.xml my old friend

2006-02-07 Thread Klotz Jr, Dennis
http://issues.apache.org/bugzilla/show_bug.cgi?id=38351 George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 > -----Original Message- > From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] > Sent: Tuesday, February 07, 2006 12:04 PM > To: Tomcat

context.xml my old friend

2006-02-07 Thread Klotz Jr, Dennis
Sanity check please... (I seem to be saying that a lot -- hmm) I cannot get tomcat 5.5.15 to use: $CATALINA_HOME/webapp/Monitor/META-INF/context.xml If I take that same (unchanged) file, move and rename it to: $CATALINA_HOME/conf/Catalina/localhost/Monitor.xml It works fine. Here are the c

RE: JSP Servers

2006-02-04 Thread Klotz Jr, Dennis
This reminds me of walking into a forest and asking if there are any trees. (oh and yes I've done this myself many times :) ) -Dennis -Original Message- From: Phillip Mangwiro [mailto:[EMAIL PROTECTED] Sent: Saturday, February 04, 2006 12:33 PM To: Tomcat Users List Subject: JSP Server

RE: RE: context.xml

2006-02-01 Thread Klotz Jr, Dennis
Original Message- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 31, 2006 8:55 PM To: Tomcat Users List Subject: RE: RE: context.xml > From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] > Subject: RE: RE: context.xml > > I am hoping to find a place for a c

RE: RE: context.xml

2006-01-31 Thread Klotz Jr, Dennis
changes that they have made will stick around. Is there a way to do this that you know of? -Dennis -Original Message- From: Warren Pace [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 31, 2006 5:19 AM To: Tomcat Users List Subject: Re: RE: context.xml > > From: "Klotz

RE: context.xml

2006-01-30 Thread Klotz Jr, Dennis
Thanks Warren for the reply. Wouldn't that version of the file be deleted when I undeploy? -Dennis -Original Message- From: Warren Pace [mailto:[EMAIL PROTECTED] Sent: Monday, January 30, 2006 7:41 PM To: Tomcat Users List Subject: Re: context.xml > > From: "

context.xml

2006-01-30 Thread Klotz Jr, Dennis
I thought the name of the xml file located in : $CATALINA_HOME/conf/[enginename]/[hostname]/ had to match the name of your webapp directory. I just read some documentation for 5.5.9 that says otherwise. It mentions that under certain conditions it will be created for you. But I would like to ha

General context.xml question.

2006-01-27 Thread Klotz Jr, Dennis
Is it generally considered a bad idea to use $CATALINE_HOME/conf/[enginename]/[hostname]/[application name.xml] for site specific configuration parameters? -Dennis -Original Message- From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] Sent: Friday, January 27, 2006 1:11 PM To: Tomcat

Can I stop a context.xml from being deleted?

2006-01-27 Thread Klotz Jr, Dennis
Hopefully this is an easy question... I'm trying to stop the file $CATALINE_HOME/conf/[enginename]/[hostname]/Monitor.xml from being deleted whenever someone undeploys our Monitor web app. Is this in the realm of possibilities? -Dennis Klotz -

RE: Authenticating LDAP users without their input - doable?

2006-01-18 Thread Klotz Jr, Dennis
Keep in mind that it is using base64 encoding which realistically, is the same as clear text passwords... I wouldn't use this in a corporate environment for that reason. Anyone who has access to your Ethernet traffic and ethereal can easily figure out the passwords. -Dennis -Original Message

strange problem with extra sessions being created

2006-01-17 Thread Klotz Jr, Dennis
Hello. This has got to be one of the strangest problems I've ever come across and I'm running out of ideas. I have two different keystore.ks files. One causes problems, the other does not. Please read on... I have configured tomcat to use SSL with a self-signed certificate. One version of the key

Need help finding...

2005-12-13 Thread Klotz Jr, Dennis
Given the following: A Tomcat 5.5.9 server. Login authentication via "org.apache.catalina.realm.DataSourceRealm" realm. Is there a third party tool either open source or commercial that provides basic login level services such as: Limit the number of login attempts. Limit the number of m

FW: web.xml question (SOLVED)

2005-12-02 Thread Klotz Jr, Dennis
, if the user typed http:// then only the form data is transmitted via https and everything else is http. If the user typed https:// then it stays that way throughout. This works fine with 5.5.9. Let me know if you need more details or see a flaw. -Dennis -Original Message- From: Klot

RE: web.xml question

2005-11-29 Thread Klotz Jr, Dennis
ll need to place the entire webapp in SSL. There is no clean way to use declarative statements to force the login to be SSL and the rest of the webapp be nonssl. -Tim Klotz Jr, Dennis wrote: > Hello all. I hope your day is going well. > > I need your help. > > I cannot get a

web.xml question

2005-11-29 Thread Klotz Jr, Dennis
Hello all. I hope your day is going well. I need your help. I cannot get a forms based login page to use SSL when I think I've setup the web.xml correctly. Why doesn't my login.jsp use HTTPS when tomcat is invoking it for authorization? (more details at the bottom) Here are the relevant sectio

RE: SSO question

2005-11-11 Thread Klotz Jr, Dennis
>-Original Message- >From: Peter Crowther [mailto:[EMAIL PROTECTED] >Sent: Friday, November 11, 2005 4:20 AM >To: Tomcat Users List >Subject: RE: SSO question > >> From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] >> Is it possible using LDAP, whether it

SSO question

2005-11-10 Thread Klotz Jr, Dennis
Short version: Can a person use LDAP + JAAS (or third party) to inform a LDAP server when the user logs out? Long version: Is it possible using LDAP, whether it is using custom JAAS code or a third party product such as Vintela's VSJ (http://www.vintela.com/products/vsj/), to do the following:

RE: Config problem: AAA and LDAP

2005-11-08 Thread Klotz Jr, Dennis
What are your security constraints within your web.xml? -Dennis -Original Message- From: Graham Leggett [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 08, 2005 4:20 PM To: users@tomcat.apache.org Subject: Config problem: AAA and LDAP Hi all, I have just created a simple webapp hoste

Vote for this java RFE

2005-11-08 Thread Klotz Jr, Dennis
I have been investigating ways of improving the load times of our web applets and with the help of a Sun developer the following RFE has been created: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6346341 I ask that you please consider voting for it (getting an account is easy and so f

RE: Jsvc vs tomcat shutdown -force

2005-11-01 Thread Klotz Jr, Dennis
Now this is under Suse 9.2 linux, so keep that in mind ;) Create a file such as tomcat5 in /etc/init.d with the contents: #!/bin/sh # # Startup script for the tomcat 5 Server # # chkconfig: 345 92 8 # description: tomcat is a jsp and servlet Web server. It is used to serve \ # HT

RE: server.xml JNDIRealm question

2005-10-31 Thread Klotz Jr, Dennis
omcat Users List Subject: Re: server.xml JNDIRealm question From: "Klotz Jr, Dennis" <[EMAIL PROTECTED]> > I've added : > -Djavax.security.auth.useSubjectCredsOnly=false > To my Catalina options environment variable in Catalina.bat. > Now I get the error: > java.l

RE: server.xml JNDIRealm question

2005-10-31 Thread Klotz Jr, Dennis
Ok I've made progress, whether it is backwards or not, I don't know yet. I've added : -Djavax.security.auth.useSubjectCredsOnly=false To my Catalina options environment variable in Catalina.bat. Now I get the error: java.lang.SecurityException: Unable to locate a login configuration a

RE: Jsvc vs tomcat shutdown -force

2005-10-31 Thread Klotz Jr, Dennis
I've used jsvc to have tomcat start as root and then switch to tomcat user. This way I can have tomcat run on port 80 on a linux box. -Dennis -Original Message- From: Matteo Turra [mailto:[EMAIL PROTECTED] Sent: Monday, October 31, 2005 12:11 PM To: users@tomcat.apache.org Subject: Jsvc

server.xml JNDIRealm question

2005-10-31 Thread Klotz Jr, Dennis
The quick question: Where do I place the cache file generated by kinit? The long explanation: Oh the fun and joy of getting JNDIRealm to work! I am attempting to use authentication="GSSAPI" against Active Directory and I can't figure out how to setup Kerberos. I'm getting the error: GSSExcept

Help getting authentication="GSSAPI" Kerberos working with JNDIRealm

2005-10-28 Thread Klotz Jr, Dennis
Greetings, I could use some help with getting tomcat to use Kerberos against Active Directory. I have been using Ethereal to sniff the packets going back and forth from tomcat and I verified that with a normal server.xml entry (remove the authentication attribute keyword from below), it uses 'sim

RE: Trying to use a filter to redirect to a servlet

2005-10-27 Thread Klotz Jr, Dennis
Thanks for your time and help. -Dennis -Original Message- From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Thursday, October 27, 2005 11:48 AM To: Tomcat Users List Subject: Re: Trying to use a filter to redirect to a servlet You can't run a filter against j_security_check -Tim

Trying to use a filter to redirect to a servlet

2005-10-27 Thread Klotz Jr, Dennis
What I'm trying to do is once a user is authorized on my server, using FORM based authorization, I want a different servlet (other than what the user might have originally requested) to be called before any web page is shown to the user. The servlet helps manage a user's account and I need to le

RE: can I run tomcat on port 80 without running as root

2005-10-26 Thread Klotz Jr, Dennis
Just a quick reply. Do a google on jsvc. I use it on our linux box to do exactly what you are asking. You can find the tar ball in the bin directory of tomcat. -Dennis -Original Message- From: Kam Lung Leung [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 26, 2005 3:00 PM To: Tomcat

RE: Please help. My self-signed client cert got rejected by tomcat server.

2005-10-18 Thread Klotz Jr, Dennis
It might help if you provide the conf/server.xml entry you are trying to configure and the command line arguments for the self-signing. The debug information will be located in the logs directory. -Dennis -Original Message- From: Sara Hugh [mailto:[EMAIL PROTECTED] Sent: Tuesday, Octobe

RE: can JNDIRealm connectionPassword be encrypted?

2005-10-17 Thread Klotz Jr, Dennis
EMAIL PROTECTED] Sent: Monday, October 17, 2005 4:56 AM To: Tomcat Users List Subject: Re: can JNDIRealm connectionPassword be encrypted? Klotz Jr, Dennis a écrit : >David, > >Thanks for the reply. > >Maybe this will help. The user name and password are stored as plain text &

RE: can JNDIRealm connectionPassword be encrypted?

2005-10-14 Thread Klotz Jr, Dennis
, October 14, 2005 5:47 PM To: Tomcat Users List Subject: RE: can JNDIRealm connectionPassword be encrypted? > From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] > Subject: RE: can JNDIRealm connectionPassword be encrypted? > > To me and my co-workers that login still represents a large > s

RE: can JNDIRealm connectionPassword be encrypted?

2005-10-14 Thread Klotz Jr, Dennis
mprovement. So am curious to know the interest of storing md5 pass in connectionPassword. Regards, David Delbecq Le Vendredi 14 Octobre 2005 17:12, Klotz Jr, Dennis a écrit : >Greetings, > > > >I have a working JNDIRealm setup that connects with our local Active &

can JNDIRealm connectionPassword be encrypted?

2005-10-14 Thread Klotz Jr, Dennis
Greetings, I have a working JNDIRealm setup that connects with our local Active Directory using the following Realm statement: ldap://23.82.0.101:389"; alternateURL="ldap://23.82.0.100:389"; referrals="follow" userBase="OU=BedfordRecipients,DC=co