Re: Tomcat shutdown password complexity

2020-05-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roger, On 5/9/20 20:45, Roger Marquis wrote: > calder wrote: >> We've never had occasion to use the password, because we disable >> shutdown (the better option). > > Never did understand this Tomcat oddity. What other application > is configured by

Re: Tomcat shutdown password complexity

2020-05-10 Thread Konstantin Kolinko
вс, 10 мая 2020 г. в 22:20, Mark Thomas : > > On May 10, 2020 11:31:02 AM UTC, calder wrote: > > > > >I asked the DevOps person about the error - turns out it was a > >SAXParseException when using the & char in the string. > > That is standard XML. You have to escape reserved characters in the XM

Re: Tomcat shutdown password complexity

2020-05-10 Thread Mark Thomas
On May 10, 2020 11:31:02 AM UTC, calder wrote: >I asked the DevOps person about the error - turns out it was a >SAXParseException when using the & char in the string. That is standard XML. You have to escape resevered characters in the XML. > He vaguely >remembers a shell issue with the bang

Re: Tomcat shutdown password complexity

2020-05-10 Thread calder
On Sat, May 9, 2020 at 5:09 PM Christopher Schultz wrote: > On 5/9/20 00:36, calder wrote: > > On Fri, May 8, 2020 at 9:07 PM calder [snip] > > Keep in mind - some characters won't work like & or ( or ) - at > > least on Unix-style OSes as the shell may want to interpret them. > > What makes you

Re: Tomcat shutdown password complexity

2020-05-09 Thread Roger Marquis
calder wrote: We've never had occasion to use the password, because we disable shutdown (the better option). Never did understand this Tomcat oddity. What other application is configured by default to open a tcp socket just to receive a shutdown command? Then there the default password, both

Re: Tomcat shutdown password complexity

2020-05-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Calder, On 5/9/20 00:36, calder wrote: > On Fri, May 8, 2020 at 9:07 PM calder > wrote: >> >> On Fri, May 8, 2020, 19:20 Robert Hicks >> wrote: >>> >>> I am trying to find what the password complexity can be. I've >>> looked at several hardening g

Re: Tomcat shutdown password complexity

2020-05-08 Thread calder
On Fri, May 8, 2020 at 9:07 PM calder wrote: > > On Fri, May 8, 2020, 19:20 Robert Hicks wrote: >> >> I am trying to find what the password complexity can be. I've looked at >> several hardening guides and they are all "WordsLikeThis". Does the >> shutdown password take symbols and numbers or at

Re: Tomcat shutdown password complexity

2020-05-08 Thread calder
On Fri, May 8, 2020, 19:20 Robert Hicks wrote: > I am trying to find what the password complexity can be. I've looked at > several hardening guides and they are all "WordsLikeThis". Does the > shutdown password take symbols and numbers or at least hyphenated words? > We've never had occasion to