RE: tomcat 7.0.22 - allowTrace="false" not working

2013-02-24 Thread Sachin
Thanks Konstantin. That did the trick. I've now added a filter to override response to OPTIONS request, to not have 'TRACE' in 'Allows' header. Now the tests shows expected results. Thanks all for your responses. Thanks & Regards Sachin -Original Message-

RE: tomcat 7.0.22 - allowTrace="false" not working

2013-02-23 Thread Sachin
Chris, I did the test with a html page, and the results are still the same. I guess I can't rely on that test, have to find an alternate way to test. Thanks & Regards Sachin -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Friday, Fe

RE: tomcat 7.0.22 - allowTrace="false" not working

2013-02-21 Thread Sachin
Yes Chris, It does access a JSP page. But even I was expecting to stop TRACE by specifically adding allowTrace="false". And as I've checked, tomcat 5 is giving me this behavior properly but not 7.0.22. Thanks & Regards Sachin -Original Message- From: Christopher

RE: tomcat 7.0.22 - allowTrace="false" not working

2013-02-19 Thread Sachin
tly, but not tomcat 7 with this approach. Thanks & Regards Sachin -Original Message- From: Sachin [mailto:sac...@nitman.co.in] Sent: Tuesday, February 19, 2013 8:14 AM To: 'Tomcat Users List' Subject: RE: tomcat 7.0.22 - allowTrace="false" not working Thank

RE: tomcat 7.0.22 - allowTrace="false" not working

2013-02-18 Thread Sachin
Thanks Mark n Nick. As far as I see from w3af documentation, they are looking into options to show the allowedMethods. (As Nick guessed) Mark, Can you suggest me an alternate way to prove that TRACE is not allowed on my webserver, if that's a possibly false positive. Thanks & Regar

RE: tomcat 7.0.22 - allowTrace="false" not working

2013-02-18 Thread Sachin
in the request with id 19. Thanks & Regards Sachin -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Monday, February 18, 2013 11:34 PM To: Tomcat Users List Subject: Re: tomcat 7.0.22 - allowTrace="false" not working On 18/02/2013 15:00, Sachin wrote

tomcat 7.0.22 - allowTrace="false" not working

2013-02-18 Thread Sachin
archives hosted on 4-5 sites and general web but could not find a working solution. Please help. Here is 'connector' (only 1) from my server.xml Thanks & Regards Sachin - To unsubscribe, e-mail:

Re: Basic Authentication Valve not hitting on Tomcat7.0.20

2012-02-16 Thread Sachin Mehrotra
cation context.xml like files. Thanks Sachin On 2/16/12, Pid wrote: > On 16/02/2012 12:30, Sachin Mehrotra wrote: >> Hi >> >> After upgrade from Tomcat 6 to Tomcat 7.0.20, our Basic Authentication >> valve is not hitting. It seems it is overlooking our implemen

Basic Authentication Valve not hitting on Tomcat7.0.20

2012-02-16 Thread Sachin Mehrotra
that was added to our Implementation of Baisc Authenticator. Plz help. -- With Regards Sachin Mehrotra - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Availability of Tomcat 5.5.34

2011-08-11 Thread Sachin Mankapure
Hi Jim, Is there any update on release date of 5.5.34? Thanks, -Sachin Jim Jagielski wrote: > > I am tempted to do a release next week... we seem to have enough > to warrant it. > > On Jul 21, 2011, at 5:57 AM, Sachin Mankapure wrote: > >> >> Thanks. I wan

Re: Availability of Tomcat 5.5.34

2011-07-21 Thread Sachin Mankapure
Thanks. I wanted to know *when* 5.5.34 will be available. I got the answer. Konstantin Kolinko wrote: > > 2011/7/20 msachin : >> >> Where can I get information about availability of Tomcat 5.3.34?  Thanks. > > Here: > http://tomcat.apache.org/download-55.cgi > http://tomcat.apache.org/whichv

RE: Tomcat Feature List

2007-08-28 Thread Sachin Mehrotra
Not able to find out much from the JSRs, actually I looking for the feature list from HTTP Specification point of view means what are the features tomcat provide for the HTTP. Thanks, Sachin -Original Message- From: Leon Rosenberg [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 28, 2007

RE: Tomcat Feature List

2007-08-28 Thread Sachin Mehrotra
Hi, Yes, that's correct, I have searched the Net but somehow I am not able to find out this, also I had looked at the tomcat site but not able to find out, that's why I dropped a mail on this group. Thanks, Sachin -Original Message- From: Leon Rosenberg [mailto:[EMAIL PROTEC

Tomcat Feature List

2007-08-27 Thread Sachin Mehrotra
Hi, I want to go through the feature list for the Tomcat 5.x, Can you please mail me or point me to the location where I can find them. Thanks, Sachin

Re: tomcat Webapp security.

2007-01-23 Thread Sachin Patel
Thanks. I'll look it up. :) - Original Message From: Christopher Schultz <[EMAIL PROTECTED]> To: Tomcat Users List Sent: Tuesday, January 23, 2007 1:11:58 PM Subject: Re: tomcat Webapp security. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sachin, Sachin Patel wrote:

Re: tomcat Webapp security.

2007-01-23 Thread Sachin Patel
>Another option is to place your uploaded files in a particular >subdirectory and then configure the JSP servlet to ignore that >directory. Or probably more appropriately, configure that directory to >serve everything through the generic servlet that just does static content. This is exectly what

tomcat Webapp security.

2007-01-23 Thread Sachin Patel
I have a web application and a functionality to be able to upload files to one of the folders inside it and be able to access it using direct link URL. now I am wondering if someone uploads .jsp file, how would I stop tomcat from compiling and running that file when someone requests that same fi

Re: Avoiding requests when session is expired

2006-12-14 Thread Sachin Patel
try looking up for session listener. - Original Message From: "Asensio, Rodrigo" <[EMAIL PROTECTED]> To: Tomcat Users List Sent: Thursday, December 14, 2006 4:40:05 PM Subject: Avoiding requests when session is expired Hi guys, is there any way in tomcat to capture or be notified tha

Re: Tomcat 5.5.20 context configuration.

2006-12-14 Thread Sachin Patel
Subject: Re: Tomcat 5.5.20 context configuration. On 12/14/06, Sachin Patel <[EMAIL PROTECTED]> wrote: > Just want to know if it is really possible? In this case I don't have > problems renaming it.. Possible, but not recommended -- see the FM :-) > But in future if the cirumsta

Re: Tomcat 5.5.20 context configuration.

2006-12-14 Thread Sachin Patel
Schroeder <[EMAIL PROTECTED]> To: Tomcat Users List Sent: Thursday, December 14, 2006 2:50:16 PM Subject: Re: Tomcat 5.5.20 context configuration. On 12/14/06, Sachin Patel <[EMAIL PROTECTED]> wrote: > I have a directory webapps/ABC2 in tomcat 5.5.20 > I want to access it usi

Tomcat 5.5.20 context configuration.

2006-12-14 Thread Sachin Patel
I have a directory webapps/ABC2 in tomcat 5.5.20 I want to access it using http://localhost:8080/ABC instead of http://localhost:8080/ABC2 here is the problem I get. when I put ABC.xml in conf/catalina/localhost directory and start tomcat, I get following error. java.lang.IllegalArgumentExcep

Apache 1.3.19 and Tomcat 3.2

2006-04-27 Thread Sachin Lohar
> > Hi, > > I am using apache 1.3.19 and Tomcat 3.2. I am facing a strange problem. > When the application is running for around 15 days. It stops accepting the > request. When a user accesses the URL from browser, it takes lot of time. > Many times it times out. The authentication window also doe