Re: Authentication without Authorization ( JNDI Realm )

2009-12-02 Thread Robert Koberg
On Dec 2, 2009, at 6:01 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Chuck, > > On 12/2/2009 5:15 PM, Caldarale, Charles R wrote: >>> From: Christopher Schultz [mailto:ch...@christopherschultz.net] >>> Subject: Re: Authentication without Authorization ( J

Re: Tomcat 6 and Apache2 VS Tomcat 6 alone

2009-11-24 Thread Robert Koberg
On Nov 24, 2009, at 4:30 AM, Robert Koberg wrote: > > On Nov 24, 2009, at 4:12 AM, Pid wrote: > >> On 24/11/2009 11:57, Robert Koberg wrote: >>> >>> On Nov 24, 2009, at 3:09 AM, Peter Crowther wrote: >>> >>>> 2009/11/24 TheGrailer: &

Re: Tomcat 6 and Apache2 VS Tomcat 6 alone

2009-11-24 Thread Robert Koberg
On Nov 24, 2009, at 4:12 AM, Pid wrote: > On 24/11/2009 11:57, Robert Koberg wrote: >> >> On Nov 24, 2009, at 3:09 AM, Peter Crowther wrote: >> >>> 2009/11/24 TheGrailer: >>>> The most compellig argument from the "Apache2 and Tomcat 6&

Re: Tomcat 6 and Apache2 VS Tomcat 6 alone

2009-11-24 Thread Robert Koberg
On Nov 24, 2009, at 3:09 AM, Peter Crowther wrote: > 2009/11/24 TheGrailer : >> The most compellig argument from the "Apache2 and Tomcat 6"-friend was >> indeed the static content part. > > http://tomcat.markmail.org/message/il33wqqjb2dok6xz might be > illuminating - along with the discussion ar

Re: [OT] Hammers and nails (was Re: A question about log-rotationon "catalina.out")

2009-10-30 Thread Robert Koberg
On Oct 30, 2009, at 10:17 AM, Caldarale, Charles R wrote: From: Christopher Schultz [mailto:ch...@christopherschultz.net] Subject: Re: [OT] Hammers and nails (was Re: A question about log- rotationon "catalina.out") Here's one Java can't do (without significant help): Write a command-line (no

Re: Display of velocity template emails in clients that might not display HTML

2009-08-28 Thread Robert Koberg
Date: Fri, 28 Aug 2009 11:02:31 -0400 Subject: Display of velocity template emails in clients that might not display HTML From: pradnya.gawa...@gmail.com To: users@tomcat.apache.org Hi, This is my second post about Velocity as I am using the Velocity templates for the first time. I am usi

Re: How do you handle 'rewrite queries' ?

2009-08-05 Thread Robert Koberg
Don't know if this is an option, but you can use Jersey: https://jersey.dev.java.net/ and something like: @Path("/users/{username}") public class UserResource { @GET @Produces("text/xml") public String getUser(@PathParam("username") String userName) { ... } } On Aug 5, 20

Re: how to get realm name

2009-08-03 Thread Robert Koberg
On Aug 3, 2009, at 9:21 PM, Caldarale, Charles R wrote: From: Robert Koberg [mailto:r...@koberg.com] Subject: how to get realm name I have been looking through the code and API, but cannot find a way to get the realm name to perform the digest. Note that if you leave out the element, it

how to get realm name

2009-08-03 Thread Robert Koberg
Hi, I want to digest the users credentials the same way as Digest authentication: RealmBase.Digest(username + ":" + somehowGetRealm() + ":" + password, "MD5", "UTF-8"); I have been looking through the code and API, but cannot find a way to get the realm name to perform the digest. How

Re: Caching rendered page - reducing hits to the backend?

2009-06-01 Thread Robert Koberg
On Jun 1, 2009, at 8:08 AM, Leon Rosenberg wrote: On Mon, Jun 1, 2009 at 1:37 PM, Robert Koberg wrote: On Jun 1, 2009, at 7:12 AM, Tim Funk wrote: The key is making sure you have the ability to log how long differnt things take. (And the ability to turn them on or off) Otherwise you are

Re: Caching rendered page - reducing hits to the backend?

2009-06-01 Thread Robert Koberg
On Jun 1, 2009, at 7:12 AM, Tim Funk wrote: Worrying is good. Making sure you have metrics is better. You can cache lots of different items such as - stuff from the database - parts of a rendered page - the entire page - any combination of above But it really depends on where the bottlenecks

Re: .html pages as .jsp pages

2009-05-14 Thread Robert Koberg
On May 14, 2009, at 5:37 PM, Dola Woolfe wrote: Exactly right. I produce my static content programmatically. Many pages are too complex to be generated otherwise. Also, I get to write java not html. When I want to change a font, I do it in one place not 1000 places. well, that should be don

Re: .html pages as .jsp pages

2009-05-14 Thread Robert Koberg
On May 14, 2009, at 4:25 PM, Hassan Schroeder wrote: On Thu, May 14, 2009 at 1:22 PM, Robert Koberg wrote: To the OP, once you have taken down the JSPs, perhaps you could use something like Ant's globmapper to change the extension No, as already pointed out, just add the *.html mappi

Re: .html pages as .jsp pages

2009-05-14 Thread Robert Koberg
On May 14, 2009, at 4:02 PM, André Warnier wrote: Ken Bowen wrote: The point of dynamic jsp pages is to dynamically create pages on the fly based on information from the user. What's the point of using jsp to "dynamically" create pages offline that you only serve statically? Why not just

Re: GlobalNamingResources outside of server.xml

2009-04-22 Thread Robert Koberg
d for many different types referenced file resolution. For example below, your local catalog would define: And of course, catalogs can reference other catalogs, which can reference other catalogs... best, -Rob On Apr 22, 2009, at 5:41 AM, Robert Koberg wrote: On Apr 22, 2009, at 4:25

Re: GlobalNamingResources outside of server.xml

2009-04-22 Thread Robert Koberg
On Apr 22, 2009, at 4:25 AM, André Warnier wrote: Allright, but I'm afraid this is still somewhat flying over my head, what we me not being /either/ a Java expert, /nor/ a Tomcat expert, / nor/ an XML expert. (What am I then doing on this list, one might ask). So, since everyone but me

Re: GlobalNamingResources outside of server.xml

2009-04-21 Thread Robert Koberg
On Apr 21, 2009, at 7:02 PM, André Warnier wrote: André Warnier wrote: Mark Thomas wrote: André Warnier wrote: Mark Thomas wrote: Anthony J. Biacco wrote: I did end up trying it and it did work, I just didn't know if it was something that's frowned upon, or would for whatever reason was

Re: Lazy Virtual Hosting?

2009-03-12 Thread Robert Koberg
On Mar 12, 2009, at 12:18 PM, Mark Thomas wrote: Gregor Schneider wrote: Mark, I guess I didn't phrase properly since you seem to have misunderstood me: I want a *separation* of the hosts. Alias, as I understand it, helps to run multiple domains within the same IP-adress. I thought the

Re: RemoteAddrValve and RemoteHostValve

2009-02-27 Thread Robert Koberg
On Feb 27, 2009, at 9:28 PM, Zak Mc Kracken wrote: Hi all, I'd like to filter incoming requests with this criterion: if it's www.somewhere.com -> OK else if it's 1.2.3.4 -> OK else -> KO Is it possible to do that by combining RemoteHostValve and RemoteAddrValve? How? I simply tried to write

Re: Authenticating Users

2009-02-22 Thread Robert Koberg
(function() { var doLogin = function() { var uname = doc.byId("name").toLowerCase(); var passw = doc.byId("password").toLowerCase(); //var digest = sha1.digest(uname + ":My Realm:" + passw); xhr.send(...); } return { login: function() { doLogin(); return false

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-06 Thread Robert Koberg
On Feb 6, 2009, at 4:45 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dave, Dave Pawson wrote: Only one aspect of security Rob. As needed I'll look at others later. Can you suggest alternatives to achieve what I want, rather than something else? Instead of

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-06 Thread Robert Koberg
On Feb 6, 2009, at 10:20 AM, Dave Pawson wrote: 2009/2/6 Caldarale, Charles R : From: Dave Pawson [mailto:dave.paw...@gmail.com] Subject: Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type? I'm coming down in favour of a valve, rather than a filter, to make it

Re: A question about excluding URL patterns from filters

2009-02-05 Thread Robert Koberg
On Feb 6, 2009, at 12:24 AM, Anand HS wrote: However, I believe there must be a more 'elegant' way to exclude a url pattern through configuration than adding/modifying more code. :) Could you shed more ideas on this. ? Move it? ---

Re: No URL rewriting when cookies are disabled

2009-02-05 Thread Robert Koberg
Hi, Pimping the JSP XML syntax and XSL... :) If, by any chance your JSPs are using XML syntax (or well-formed or can be well-formed), you can use XSL to transform all of your links to be encoded for cookie-less users. For example, the following JSP: http://java.sun.com/JSP/Page"; xmlns:c=

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-05 Thread Robert Koberg
On Feb 5, 2009, at 1:36 PM, Dave Pawson wrote: 2009/2/5 Caldarale, Charles R : From: Dave Pawson [mailto:dave.paw...@gmail.com] Subject: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type? I want to 'reject' (if that's the right word) any http get with mime type !=

Re: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type?

2009-02-05 Thread Robert Koberg
On Feb 5, 2009, at 1:28 PM, Caldarale, Charles R wrote: From: Dave Pawson [mailto:dave.paw...@gmail.com] Subject: TC6 ${CATALINA_HOME}/conf/web.xml Is this the place to constrain the mime type? I want to 'reject' (if that's the right word) any http get with mime type != application/xml The c

Re: Encrypting database resouce password

2008-11-13 Thread Robert Koberg
On Nov 13, 2008, at 12:31 PM, Christopher Schultz wrote: Kevin Nash wrote: I have a data resource defined in the server.xml and I wish to [encrypt the] database password. This question comes up occasionally. Things to consider: 1. If you encrypt the password in context.xml, where will you

Re: Encrypting database resouce password

2008-11-13 Thread Robert Koberg
We use: http://www.jasypt.org/ best, -Rob On Nov 13, 2008, at 11:35 AM, Kevin Nash wrote: Hello, I'm using apache-tomcat-5.5.26, Oracle 10.2.0.3, java version "1.5.0_14" I have a data resource defined in the server.xml and I wish to create a digest of the database password. type="

Re: Monitoring Tomcat availability in a load balanced capacity

2008-11-12 Thread Robert Koberg
Ooops, sorry. I meant this to go to someone else... On Nov 12, 2008, at 5:06 PM, Robert Koberg wrote: You mentioned you just upgraded your MS SQL. Is it possible that the default encoding changed? It should be using UTF-8. Can you check that? On Nov 12, 2008, at 4:48 PM, André Warnier

Re: Monitoring Tomcat availability in a load balanced capacity

2008-11-12 Thread Robert Koberg
You mentioned you just upgraded your MS SQL. Is it possible that the default encoding changed? It should be using UTF-8. Can you check that? On Nov 12, 2008, at 4:48 PM, André Warnier wrote: Adam Gordon wrote: See my reply to Hassan. I think setting up a proxy would be overkill, and besid

mod_proxy_http v. mod_jk, was Re: Data Truncated when proxied from Apache

2008-10-15 Thread Robert Koberg
On Oct 15, 2008, at 5:44 PM, Filip Hanik - Dev Lists wrote: use mod_proxy_http or mod_jk, I have seen a few posts recommending mod_proxy_http a little bit over mod_jk. Why is that? I used mod_jk recently simply because it was on the tomcat site. I just assumed it was the default/best op

restricted use JSP impl

2008-10-04 Thread Robert Koberg
Hi, Is there an implementation of JSP that only allows execution of java code as provided by taglibs and EL? In other words, something that will not allow declarations or scriptlets. thanks, -Rob - To start a new topic, e-

Re: Etags vs Week Etags

2008-09-11 Thread Robert Koberg
On Sep 11, 2008, at 11:44 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert, Robert Koberg wrote: On Sep 11, 2008, at 10:36 AM, Christopher Schultz wrote: Huh? The DefaultServlet handles XSLT? Which version of TC is that in? There is XSL for directory

Re: Etags vs Week Etags

2008-09-11 Thread Robert Koberg
On Sep 11, 2008, at 10:36 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johnny, Johnny Kewl wrote: For example if you want XSLT in tomcat, first impression is its xerces (Jumping without reading previous posts) You first impression is wrong :) Xerces is an

Re: [ANN] Apache Tomcat 5.5.27 released

2008-09-08 Thread Robert Koberg
On Sep 8, 2008, at 1:59 PM, Mark Thomas wrote: Robert Koberg wrote: Hi, Regarding: https://issues.apache.org/bugzilla/show_bug.cgi?id=45015 Have things like the follwoing been tested: < input value="${"boo" foo's}" /> < input value='${"boo"

Re: [ANN] Apache Tomcat 5.5.27 released

2008-09-08 Thread Robert Koberg
Hi, Regarding: https://issues.apache.org/bugzilla/show_bug.cgi?id=45015 Have things like the follwoing been tested: < input value="${"boo" foo's}" /> < input value='${"boo"}' /> < input value='${"boo"} "foo"' /> I guess I am more concerned about version 6x. Has this fix been applied to v6x?

Re: Why GlassFish

2008-08-28 Thread Robert Koberg
On Aug 28, 2008, at 9:31 AM, sam wun wrote: Hi, Just a quick question, I found that Tomcat is quite capable with servlet application, but lack of EJB support. Is GlassFish designed to fill the gaps to support EJB application only? As Pythagoras said, just say no to beans. Than

Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: enabling/disabling a servlet filter conditionally

2008-08-01 Thread Robert Koberg
Hola Juan, Have a great vacation! On Fri, 2008-08-01 at 22:54 +0200, [EMAIL PROTECTED] wrote: > Hola, > > Estaré ausente de la oficina por vacaciones hasta el 20 de agosto. > > Para cualquier tema urgente por favor enviar el correo a la dirección [EMAIL > PROTECTED] > > Muchas gracias, > >

Re: Embedding custom metadata in a jsp page; access generated Class via reflection?

2008-07-29 Thread Robert Koberg
Since you have a well-formed (XML) jsp and well-formed XML metadata, you could run an (pre-runtime) XSL transformation that combines the two however you need. In other words, instead of combining known metadata at runtime, pre-generate the JSPX in some prior stage. With JSP 2.0, EL and the standard

Re: mod_jk: docBase and appBase -- 'ROOT' taken out

2008-07-17 Thread Robert Koberg
On Thu, 2008-07-17 at 22:47 -0500, Charles Caldarale wrote: > On Jul 17, 2008, at 21:56, Robert Koberg <[EMAIL PROTECTED]> wrote: > > > > > The problem: even though I specifiy > > 'docBase="/home/app/wwwapps/ROOT/members"' > > Which is comp

mod_jk: docBase and appBase -- 'ROOT' taken out

2008-07-17 Thread Robert Koberg
Hi, Redhat ES 5 jdk1.6.0_07 tomcat 6.0.16 tomcat-connectors-1.2.26-src (built on the machine) tomcat-native-1.1.14-src (built on the machine) After getting the connector working for httpd without SSL I am trying to get it working with SSL. A strange warning occurs followed by the severe error. O

Re: mod_jk not connecting

2008-07-17 Thread Robert Koberg
n't do anything with SetHandler. I should have responded earlier. It turns out I needed: NameVirtualHost *:80 and then adding directives to virtual hosts worked fine. And I could use JkMount and did not need SetHandler, etc. Now on to SSL for one of them... thanks, -Rob > >

mod_jk not connecting

2008-07-17 Thread Robert Koberg
Hi, I am trying to get httpd and tomcat to work together and not having much luck. Redhat ES 5 jdk1.6.0_07 tomcat 6.0.16 tomcat-connectors-1.2.26-src (built on the machine) tomcat-native-1.1.14-src (built on the machine) If I put mod_jk directives inside a (httpd.conf) virtual host I can't seem

Re: [OT] Parsing xs:dateTime values

2008-05-15 Thread Robert Koberg
whoops and thanks :) On Thu, 2008-05-15 at 12:27 -0400, [EMAIL PROTECTED] wrote: > One cautionary observation about the use of shared SimpleDateFormat > instances: they are not threadsafe. > While it seems like a good idea to create these for various formats and > hold them as class static or

Re: [OT] Parsing xs:dateTime values

2008-05-15 Thread Robert Koberg
Hi, You don't need regexp. Do you mean something like: private static final String ISO8601_DATEFORMAT = "-MM-dd'T'HH:mm:ss"; private static final java.text.SimpleDateFormat ISO8601 = new java.text.SimpleDateFormat( ISO8601_DATEFORMAT, java.util.Locale.US); public static final D

RE: logging catalina.out and localhost-##.log - don't append

2008-05-09 Thread Robert Koberg
On Fri, 2008-05-09 at 13:27 -0500, Caldarale, Charles R wrote: > > From: Robert Koberg [mailto:[EMAIL PROTECTED] > > Subject: logging catalina.out and localhost-##.log - don't append > > > > What do you need to do to get tomcat to create a fresh > > catalina.o

logging catalina.out and localhost-##.log - don't append

2008-05-09 Thread Robert Koberg
What do you need to do to get tomcat to create a fresh catalina.out and localhost.log file for every restart? For development, I don't want those log files to append or roll for each new day. thanks, -Rob - To start a new topi

Re: Hot deploy deletes my context file...

2008-05-02 Thread Robert Koberg
On Fri, 2008-05-02 at 12:31 -0400, Mark H. Wood wrote: > On Fri, May 02, 2008 at 05:32:58AM -0700, Michael Burbidge wrote: > > By experimenting from the shell copying files I can see what Tomcat is > > doing. I think that it deletes associated contexts whenever an application > > is undeployed by

Re: Bending Jasper to My Will

2008-04-21 Thread Robert Koberg
On Mon, 2008-04-21 at 19:16 -0700, Andy Clark wrote: > Notice that the JSP/tag files that compose the > response are a mixture of the default ones and the > custom ones that the skin overrides. Skin authors > should not have to make complete copies of the > default skin tree in order to edit only

Re: Cookie-less session tracking - whats are the downsides

2008-04-17 Thread Robert Koberg
On Thu, 2008-04-17 at 09:38 -0400, Christopher Schultz wrote: > The only runtime bottleneck is the time required to add > ";jsessionid=123456789" to your outgoing URLs, which is to say "pretty > much nothing". The engineering bottleneck is that you have to run all > your URLs through HttpServletRe

jsp hack or better solution ??

2008-03-29 Thread Robert Koberg
Hi, (using 6.0.16) I want to create a jsp that is able to be seen in a browser without using tomcat (a simple HTMLish preview) in addition to using (rendering) it with tomcat. The kicker is I *need* the JSP to be well-formed XML. The problems are elements that contain HTML attributes held over

TC6: Saxon (actually AElfred) anywhere on classpath causes failure to start

2007-09-15 Thread Robert Koberg
Hi, Even if Saxon (v 6.5.3) is in, e.g. $TC/webapps/webapp/WEB-INF/lib/saxon.jar, tomcat fails to start. It sees AElfred as the XML parser and gives a Digester exception. Does anybody have saxon.jar in tomcat 6 working? If so, how? thanks, -Rob -

RE: i am looking for professional tomcat support for enterprise

2007-07-17 Thread Robert Koberg
is anybody looking in on this thread with incredulity? jeebus help me On Tue, 2007-07-17 at 11:40 -0700, Fargusson.Alan wrote: > That could be fun. I tried to move a couple of small servlets from WAS to > Tomcat. I found that Tomcat does not understand EAR files, so I had to use > WAR files

Re: Problem with XSL stylesheet not being applied when XML served through Tomcat

2007-06-13 Thread Robert Koberg
On Wed, 2007-06-13 at 13:00 +0200, Markus Schönhaber wrote: > > Another comment targeted @ the OP: IMO XSL transformations should be > done on the server side, not on the client side. Doing it on the client > side may be OK if you have a very specific user base and you can be sure > that their cli

Re: ampersand (&) handling in jspx - any workaround?

2007-02-14 Thread Robert Koberg
On Wed, 14 Feb 2007 15:05:02 -0500, Christopher Schultz <[EMAIL PROTECTED]> wrote: Stefan wrote: but where do I need a single "&" in the generated XML. That's forbidden a causes the problems. Can You come up a use case? Oh, I'm not saying that it's a good idea. I actually agree that emittin

Re: ampersand (&) handling in jspx - any workaround?

2007-02-14 Thread Robert Koberg
On Wed, 14 Feb 2007 12:24:43 -0500, Leon Rosenberg <[EMAIL PROTECTED]> wrote: correct me if i wrong, but isn't & forbidden in xml anyway? you're wrong. Leon On 2/14/07, Stefan <[EMAIL PROTECTED]> wrote: Hello, for sure, the problem is well known. jspx pages turn the "&" in simple "&" wh

the best reason to use tomcat over apache?

2006-09-17 Thread Robert Koberg
http://youtube.com/watch?v=eTKL8MNH95Q - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: BOOBIES!

2006-07-23 Thread Robert Koberg
Wow... how do some people make it through the day without exploding from some terrible insult. I can't believe this thread subject has turned into such a big deal. I deleted the first 5 or so because I thought it was spam. Then I saw names responding which I recognized. I really don't unders

extending Embedded (basically copying Catalina) - Address already in use: JVM_Bind:80

2006-06-15 Thread Robert Koberg
Hi, I want to use a standard startup the same way startup.sh -> catalina.sh -> Bootstrap -> Catalina handles it. I want to make the (standard)server available to a custom manager in the main webapp. I want to be able to start up a Context when a user enters a project in my webapp (i.e. I don

custom error page and working around a mozilla bug

2006-05-03 Thread Robert Koberg
There is a bug in mozilla when using client side XSLT: https://bugzilla.mozilla.org/show_bug.cgi?id=334179 Basically, the problem is that mozilla ends a response when it sees a redirect or forward. Since I am using client side XSL to transform XML, I get an error when, say, a 404 happens bec

Re: static server implementation?

2005-10-27 Thread Robert Koberg
Steve Kirk wrote: Have you considered that you can remove much of the dynamic config from conf\web.xml so that there is no default servlet or other dynamic behaviour in any webapp unless you explictly configure it so in the webapp's own web.xml? Right, but say an evil user creates a WEB-INF/web

Re: static server implementation?

2005-10-27 Thread Robert Koberg
Caldarale, Charles R wrote: From: Robert Koberg [mailto:[EMAIL PROTECTED] Subject: Re: static server implementation? If you have a need for many virtual hosts, but do not need or want any ability for dynamic activity it would make sense to have a limited version of a tomcat host/context. I

Re: static server implementation?

2005-10-27 Thread Robert Koberg
Caldarale, Charles R wrote: From: John Laughton [mailto:[EMAIL PROTECTED] Subject: Re: static server implementation? I ended up created a second context in tomcat that allows access to the static content (ie. large jpegs) I'm confused. Why wasn't Tomcat's default servlet sufficient? It's

static server implementation?

2005-10-27 Thread Robert Koberg
Hi, Is there an implementation floating around of org.apache.catalina.Host and org.apache.catalina.Context that is very basic, perhaps only serving static resources? thanks, -Rob - To unsubscribe, e-mail: [EMAIL PROTECTED] F