Charlie,
On 9/10/24 16:12, charliedidon...@gmail.com wrote:
> On 10/09/2024 20:21, charliedidon...@gmail.com wrote:
>> I have war file in Tomcat 10.1 with a context.xml file included in
>> the META-INF folder.
>>
>> It's contents are
>>
>>
>&g
Charlie,
On 9/10/24 16:12, charliedidon...@gmail.com wrote:
On 10/09/2024 20:21, charliedidon...@gmail.com wrote:
I have war file in Tomcat 10.1 with a context.xml file included in the
META-INF folder.
It's contents are
I am getting 404s from my app and was wondering if this is
On 10/09/2024 20:21, charliedidon...@gmail.com wrote:
I have war file in Tomcat 10.1 with a context.xml file included in the
META-INF folder.
It's contents are
I am getting 404s from my app and was wondering if this is still supported
under 10.1 as it was under 9.0
Support is unch
I have war file in Tomcat 10.1 with a context.xml file included in the
META-INF folder.
It's contents are
I am getting 404s from my app and was wondering if this is still supported
under 10.1 as it was under 9.0
Hello,
On 5/30/24 10:12, firstName lastName wrote:
Renaming my context.xml to ROOT.xml (without changing the folder) fixed the
problem. Thanks for the help!
The best practice would be to put your context.xml file into your WAR
file's META-INF/context.xml path. That way, it will be dep
Renaming my context.xml to ROOT.xml (without changing the folder) fixed the
problem. Thanks for the help!
On Thu, May 30, 2024 at 8:42 AM David Rush wrote:
> I don't know about any docker-related differences, but
>
> I think that if you put a context config file under Catalina
file named context.xml into the .war file itself, under
META-INF directory.
David
On Thu, May 30, 2024 at 7:35 AM firstName lastName
wrote:
> I am trying to setup JNDI for tomcat with a java webapp. I am using the
> official tomcat docker image (version 10.1.24-jdk21-temurin-jammy).
> However,
I am trying to setup JNDI for tomcat with a java webapp. I am using the
official tomcat docker image (version 10.1.24-jdk21-temurin-jammy).
However, I'm a bit confused about where to put the context.xml file. I
tried putting it in /usr/local/tomcat/conf/Catalina/localhost/context.xml
but t
Yes and that is just what we are trying to do. On our dev servers all five
different applications share the same database.
So it would seem best to have the resource link in the context.xml and not
complicate things up by putting the database link in each web application's
web.xml.
The
On 29/03/2024 21:58, Christopher Schultz wrote:
Rick,
On 3/29/24 14:33, Rick Noel wrote:
Our application is really a suite of 5applications. And the
server.xml I am talking about is on our dev machine, where we want
to run all 5 apps on the one web server.
The context.xml has global
Rick,
On 3/29/24 14:33, Rick Noel wrote:
Our application is really a suite of 5applications. And the
server.xml I am talking about is on our dev machine, where we want
to run all 5 apps on the one web server.
The context.xml has global enviroiment variables (like mail server
related vars
Yeah I like the idea of using the Resourcelink in the context.xml and then
keep the defining of that datasource in the server.xml
Rick Noel
Systems Programmer | Westwood One
rn...@westwoodone.com
-Original Message-
From: Christopher Schultz
Sent: Friday, March 29, 2024 2:23 PM
To
Chris,
Our application is really a suite of 5applications. And the server.xml I am
talking about is on our dev machine, where we want to run all 5 apps on the one
web server.
The context.xml has global enviroiment variables (like mail server related
vars) that all the dev applications use
Rick,
On 3/29/24 14:05, Rick Noel wrote:
Chris,
I found I could use a ResourceLink element and put it in my context.xml file.
The name in that ResourceLink is the name of resource that I have fully defined
in my server.xml.
Sot the context.xml points to the fully define resource which is in
Rick,
On 3/29/24 11:56, Rick Noel wrote:
If have the resource defined in
CATALINA_BASE/conf/context.xml
And
CATALINA_BASE/conf/server.xml
You really shouldn't have anything custom in
CATALINA_BASE/conf/context.xml. That will affect every application
deployed on the server. Perhaps you
Chris,
I found I could use a ResourceLink element and put it in my context.xml file.
The name in that ResourceLink is the name of resource that I have fully defined
in my server.xml.
Sot the context.xml points to the fully define resource which is in my
server.xml
So snippet from my
If have the resource defined in
CATALINA_BASE/conf/context.xml
And
CATALINA_BASE/conf/server.xml
Rick Noel
Systems Programmer | Westwood One
rn...@westwoodone.com
-Original Message-
From: Christopher Schultz
Sent: Friday, March 29, 2024 11:47 AM
To: users@tomcat.apache.org
Subject
Rick,
On 3/29/24 09:48, Rick Noel wrote:
Can someone tell me why I need to have my database source defined in
both my context.xml and server.xml? I thought we are suppose to
define it in only one location?
It's definitely not a requirement to specify it in both places.
I can only log in
Hello,
Can someone tell me why I need to have my database source defined in both my
context.xml and server.xml?
I thought we are suppose to define it in only one location?
I can only log into my app if I have it defined in both my context.xml and
server.xml
Below is my database resource
üngliche Nachricht-
>> > Von: Kevin Huntly
>> > Gesendet: Samstag, 8. April 2023 19:40
>> > An: users@tomcat.apache.org
>> > Betreff: just wondering.. encryption in context.xml?
>> >
>> > is there currently a
For context.xml, you can do the following
make a java project with the following dependency
org.apache.tomcat
tomcat-dbcp
INSERT APPROPRIATE VERSION HERE
provided
Make a class that extends org.apache.tomcat.dbcp.dbcp.BasicDataSourceFactory
then you can transform the stored credential using
gt; wrote:
>
>> Hello,
>>
>>> -Ursprüngliche Nachricht-
>>> Von: Kevin Huntly
>>> Gesendet: Samstag, 8. April 2023 19:40
>>> An: users@tomcat.apache.org
>>> Betreff: just wondering.. encryption in context.xml?
>>>
>>> is ther
okay that's fair
On Sat, Apr 8, 2023, 14:31 Thomas Hoffmann (Speed4Trade GmbH)
wrote:
> Hello,
>
> > -Ursprüngliche Nachricht-
> > Von: Kevin Huntly
> > Gesendet: Samstag, 8. April 2023 19:40
> > An: users@tomcat.apache.org
> > Betreff: j
Hello,
> -Ursprüngliche Nachricht-
> Von: Kevin Huntly
> Gesendet: Samstag, 8. April 2023 19:40
> An: users@tomcat.apache.org
> Betreff: just wondering.. encryption in context.xml?
>
> is there currently a method for encrypting or otherwise obfuscating passwords
is there currently a method for encrypting or otherwise obfuscating
passwords (like for MySQL) in the context.mxl
Kevin Huntly
Email: kmhun...@gmail.com
Cell: 716/424-3311
-BEGIN GEEK CODE BLOCK-
Chris,
I think you misunderstood the requirement.
My reading of the OP request is that they want to add a standard
element to conf/context.xml so each web application uses
the same custom session manager implementation. They want to be able to
configure that session manager with at least
Kok Hoor,
On 10/1/22 10:20, Chew Kok Hoor wrote:
I would like to configure $CATALINA_BASE/conf/context.xml to set up
a Manager
Don't do this.
but would like to add the context name as one of the
parameters to the manager (keyPrefix).
It's much easier to copy webapps/manage
Hi all,
I would like to configure $CATALINA_BASE/conf/context.xml to set up
a Manager but would like to add the context name as one of the parameters
to the manager (keyPrefix).
Is there a variable or a list of variables I can use for this purpose?
As using environment or java defined
07/11/2021 15:15, Mark Thomas wrote:
On 07/11/2021 10:44, Greg Huber wrote:
Hello,
I am testing CookieProcessor for SameSite stuff.
In my dev environment, I use ROOT.xml with
workDir="/home/me/project/work" />
I have a context.xml file in META-INF but it seems to ignore it. Wh
On 07/11/2021 10:44, Greg Huber wrote:
Hello,
I am testing CookieProcessor for SameSite stuff.
In my dev environment, I use ROOT.xml with
workDir="/home/me/project/work" />
I have a context.xml file in META-INF but it seems to ignore it. When I
deploy via a war it is picked u
Hello,
I am testing CookieProcessor for SameSite stuff.
In my dev environment, I use ROOT.xml with
workDir="/home/me/project/work" />
I have a context.xml file in META-INF but it seems to ignore it. When I
deploy via a war it is picked up OK.
webapp/META-INF/context.xml
w
exercise.
Ok, but the question is: Why can Weblogic encrypt the password and Tomcat can't?
https://docs.oracle.com/middleware/1213/wls/JDBCA/ds_security.htm#JDBCA477
context.xml:
...
password="passwordfile=secret.txt;NRFCIWRNFUGUWRMWUOGRXGRHOWRZFGWHFEO" />
...
secret.
Email.
> > ‐‐‐ Original Message ‐‐‐
> > On Monday, 7 de June de 2021 11:42, Mark Thomas ma...@apache.org wrote:
> >
> > > On 07/06/2021 09:56, xcorpius wrote:
> > >
> > > > Hello again!
> > > > Checking the documentation ... Tomc
rote:
On 07/06/2021 09:56, xcorpius wrote:
Hello again!
Checking the documentation ... Tomcat can create an encrypted password with the
"digest.sh" tool for application passwords.
But you cannot create an encrypted password for the DB in the context.xml file.
The only solution withou
1 09:56, xcorpius wrote:
>
> > Hello again!
> > Checking the documentation ... Tomcat can create an encrypted password with
> > the "digest.sh" tool for application passwords.
> > But you cannot create an encrypted password for the DB in the context.xml
> >
encrypted password with
> > the "digest.sh" tool for application passwords.
> > But you cannot create an encrypted password for the DB in the context.xml
> > file. The only solution without adding anything is to give restrictive
> > permissions to the context.x
On 07/06/2021 09:56, xcorpius wrote:
Hello again!
Checking the documentation ... Tomcat can create an encrypted password with the
"digest.sh" tool for application passwords.
But you cannot create an encrypted password for the DB in the context.xml file.
The only solution with
pted password with
> > the "digest.sh" tool for application passwords.
> > But you cannot create an encrypted password for the DB in the context.xml
> > file. The only solution without adding anything is to give restrictive
> > permissions to the context.xml file.
>
On 07.06.21 10:56, xcorpius wrote:
> Hello again!
>
> Checking the documentation ... Tomcat can create an encrypted password with
> the "digest.sh" tool for application passwords.
>
> But you cannot create an encrypted password for the DB in the context.xml
>
Hello again!
Checking the documentation ... Tomcat can create an encrypted password with the
"digest.sh" tool for application passwords.
But you cannot create an encrypted password for the DB in the context.xml file.
The only solution without adding anything is to give restrictive p
ately by reply e-mail and delete this message. Thank you for
> your cooperation.
>
> > -Original Message-
> > From: xcorpius xcorp...@protonmail.com.INVALID
> > Sent: Monday, April 26, 2021 8:36 AM
> > To: users@tomcat.apache.org
> > Subject: Re: Question about en
pius
Sent: Monday, April 26, 2021 8:36 AM
To: users@tomcat.apache.org
Subject: Re: Question about encrypting database passwords in the
context.xml file - Tomcat 9
Thanks Olaf
Mensaje original
On 26 abr. 2021 14:02, Olaf Kock escribió:
On 26.04.21 13:10, xcorpius wrot
ase passwords in the
> context.xml file - Tomcat 9
>
> Thanks Olaf
>
> Mensaje original
> On 26 abr. 2021 14:02, Olaf Kock escribió:
>
> > On 26.04.21 13:10, xcorpius wrote:
> >> Hi,
> >>
> >> I wanted to ask abo
Thanks Olaf
Mensaje original
On 26 abr. 2021 14:02, Olaf Kock escribió:
> On 26.04.21 13:10, xcorpius wrote:
>> Hi,
>>
>> I wanted to ask about how to encrypt database passwords in the context.xml
>> file in Tomcat 9.
>>
> Hi,
&g
On 26.04.21 13:10, xcorpius wrote:
> Hi,
>
> I wanted to ask about how to encrypt database passwords in the context.xml
> file in Tomcat 9.
>
Hi,
please check this article:
https://cwiki.apache.org/confluence/display/TOMCAT/Password
It covers the topic once and f
Hi,
I wanted to ask about how to encrypt database passwords in the context.xml file
in Tomcat 9.
Thank you very much to all.
Xcorpius.
s fairly readable, but most everything you need to read is in the
Javadoc.
TL/DR: at heart I’m struggling with the proper initialization and
consumption of the dbpc2 datasource which I add programmatically and
might consider using the context.xml version.
Unless there is a particularly good r
e code for the Tomcat class
It's fairly readable, but most everything you need to read is in the
Javadoc.
TL/DR: at heart I’m struggling with the proper initialization and
consumption of the dbpc2 datasource which I add programmatically and
might consider using the context.xml version
datasource which I add programmatically and
might consider using the context.xml version.
Unless there is a particularly good reason not to use it, I would
recommend using META-INF/context.xml. There are some really great
reasons not to do that. For example, if you want to fetch your DBC
context.xml version. A litany of small issues:
My @Resource(name, type) Datasource ds” doesn’t take (I have several more
attempts planned)
Is that failure logged?
Is context.lookup() expensive?
Is there any configuration available only in xml?
DriverManager is working fine but it that the best access to
Rob,
On 12/2/20 13:31, Rob Sargent wrote:
I'm old and easily confused: does an embedded tomcat server read (any)
context.xml file? I find conflicting answers /out there./
Using tomcat 9.0.40
embeddedTomcat =new Tomcat();
embeddedTomcat.setPort(tomca
typo: should read "none of which are named in the web.xml" (not "which
are NOT" as below)
On 12/2/20 11:31 AM, Rob Sargent wrote:
I'm old and easily confused: does an embedded tomcat server read (any)
context.xml file? I find conflicting answers /out ther
I'm old and easily confused: does an embedded tomcat server read (any)
context.xml file? I find conflicting answers /out there./
Using tomcat 9.0.40
embeddedTomcat =new Tomcat();
embeddedTomcat.setPort(tomcatPort);
embeddedTomcat.enableNaming();
embeddedTomcat.getConnector();
jet: Add custom Authenticator in context.xml
Date: Sat, 4 Jul 2020 20:54:17 +0200
Hi,
a while ago I did write a little POC of how to add a
customauthenticator scheme to tomcat.
this is what I did come up with:
https://github.com/thomasmey/BearerTokenAuthenticator
It's rather complicated solution!I
p with:
>> https://github.com/thomasmey/BearerTokenAuthenticator
>>
>> It's rather complicated solution!
>> Is there an more easy solution to add a custom authenticator scheme
>to a Context/context.xml?
>
>How about:
>
>1. Extract the Authenticators.properties file from cat
ted solution!
> Is there an more easy solution to add a custom authenticator scheme to a
> Context/context.xml?
How about:
1. Extract the Authenticators.properties file from catalina.jar
(or from source)
2. Edit it to reference the custom Authenticator
3. Place it at $CATALINA_BASE/lib/
to a
Context/context.xml?
Mfg
thomas
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
ply e-mail and delete this message. Thank you for
your cooperation.
-Original Message-
From: Pesonen, Harri
Sent: Monday, June 29, 2020 10:10 AM
To: Tomcat Users List
Subject: RE: How to encrypt db password in tomcat context.xml
I have implemented a Tomcat vault as well, it is basica
Message-
From: jonmcalexan...@wellsfargo.com.INVALID
Sent: maanantai 29. kesäkuuta 2020 17.25
To: users@tomcat.apache.org
Subject: RE: How to encrypt db password in tomcat context.xml
-Original Message-
From: Rémy Maucherat
Sent: Monday, June 29, 2020 1:58 AM
To: Tomcat Users List
-Original Message-
From: Rémy Maucherat
Sent: Monday, June 29, 2020 1:58 AM
To: Tomcat Users List
Subject: Re: How to encrypt db password in tomcat context.xml
On Mon, Jun 29, 2020 at 8:03 AM Carsten Klein wrote:
> Hi Jürgen and Olaf,
>
> I can really understand Jürgen
code
> > and provide a way to have passwords in the configs encrypted with that
> > nice password.
> >
> >> Use properties replacement so that in the xml config you have
> >> ${db.password} and in conf/catalina.properties you put the password
> >> there.
>
xml config you have
${db.password} and in conf/catalina.properties you put the password
there.
So one could have samething like db.pass=3des: in
catalina.properties
Greetings, Juergen
Am So., 28. Juni 2020 um 21:19 Uhr schrieb Olaf Kock :
On 28.06.20 19:50, Jürgen Weber wrote:
>>>&
e password there.
So one could have samething like db.pass=3des: in
catalina.properties
Greetings, Juergen
Am So., 28. Juni 2020 um 21:19 Uhr schrieb Olaf Kock :
>
>
> On 28.06.20 19:50, Jürgen Weber wrote:
> >>>> I would like to know how to encrypt and decrypt the database
On 28.06.20 19:50, Jürgen Weber wrote:
>>>> I would like to know how to encrypt and decrypt the database password in
>>>> context.xml when the application is running which also allow me to change
>>>> the db password for the purpose of security.
>> h
Tomcat,
> >
> > I would like to know how to encrypt and decrypt the database password in
> > context.xml when the application is running which also allow me to change
> > the db password for the purpose of security.
>
>
> https://
On 26.06.20 15:05, FANG YAP wrote:
> Hi Tomcat,
>
> I would like to know how to encrypt and decrypt the database password in
> context.xml when the application is running which also allow me to change
> the db password for the purpose of security.
https://cwiki.apache.org/con
Hi Tomcat,
I would like to know how to encrypt and decrypt the database password in
context.xml when the application is running which also allow me to change
the db password for the purpose of security.
Database driver is Oracle
JDK: 1.8.0_251
Tomcat Version: 8.5.55
Appreciate ya help.
Rgs
On 11/06/2020 16:09, S Abirami wrote:
> Hi Mark,
>
> We don't have concern regarding the restart of tomcat for the changes in
> context.xml. As our web application is mainly used to launch only the
> standalone application.
> I have updated Cookieprocessor entry u
Hi Mark,
We don't have concern regarding the restart of tomcat for the changes in
context.xml. As our web application is mainly used to launch only the
standalone application.
I have updated Cookieprocessor entry under the context tag in server.xml
specific to the application context pat
in server.xml as
they only way to change them us to restart Tomcat.
> Here ,we mentioned the
>deployOnStartUp as false.
>Hence, I have created META-INF directory under the App_folder and
>created the context.xml and MANIFEST.MF files.
That won't work. The Context element in s
server.xml .Here ,we mentioned the
deployOnStartUp as false.
Hence, I have created META-INF directory under the App_folder and created the
context.xml and MANIFEST.MF files.
Regarding logs, I could see only the below messages
WARNING: Match [Server/Service/Engine/Host/Context] failed to set
On 11/06/2020 12:46, S Abirami wrote:
> Hi Mark,
>
> The below is the content of the context.xml
>
>
>
>
>
That looks OK.
What Tomcat version are you using?
What do the logs say when the application is deployed? That will tell
you where it is being deployed from
Hi Mark,
The below is the content of the context.xml
Regards,
Abirami.S
-Original Message-
From: Mark Thomas
Sent: Thursday, June 11, 2020 5:12 PM
To: users@tomcat.apache.org
Subject: Re: context.xml under META-INF was not working
On 11/06/2020 11:42, S Abirami wrote:
> Hi
On 11/06/2020 11:42, S Abirami wrote:
> Hi All,
>
> I want to configure SameSite attribute to the specific web-application.
> For that, I have updated the context.xml of specific web application located
> in /META-INF/context.xml
>
>
>
>
> It is not worki
Hi All,
I want to configure SameSite attribute to the specific web-application.
For that, I have updated the context.xml of specific web application located in
/META-INF/context.xml
It is not working. Only the changes in global context.xml is working. Please
guide to solve the issue
Hi Mark Thomas,
Thanks a lot for the information.
Answers for your question
In which context.xml file? The global one, the host one or a web application
specific one?
I have changed in global context.xml which is located in conf/context.xml.
Regards,
Abirami.S
-Original Message-
From
Hi Luis,
Thanks for the information.
My question is mainly whether the changes in context.xml will impact the web
application, which is not deployed in the Tomcat.
From Mark reply, I understood that the changes in context.xml will impact the
web application even though it is not deployed in
On 09/06/2020 06:59, S Abirami wrote:
> Hi Team,
>
> In our product to address security vulnerability in context.xml, we have
> introduced following entry
>
>
In which context.xml file? The global one, the host one or a web
application specific one?
> After intro
mcat/util/http/LegacyCookieProcessor.java
El mar., 9 jun. 2020 a las 7:59, S Abirami ()
escribió:
> Hi Team,
>
> In our product to address security vulnerability in context.xml, we
> have introduced following entry
>
>
>
>
> After introducing the above line, I no
Hi Team,
In our product to address security vulnerability in context.xml, we have
introduced following entry
After introducing the above line, I noticed few rest service which is not
deployed in that Tomcat also getting impact.
Deployment Details
Deployed :RHEL
Tomcat
o customize ErrorReportValve by setting showReport="false"
> > showServerInfo="false".
> >
> > Below is the META-INF/context.xml -
> >
> > > showReport="false" showServerInfo="false" />
> >
> >
> > It works f
On 20/12/2018 06:44, Melvin wrote:
> Hello All,
>
> Just came across a problem today. Hope someone will clarify it.
>
> Tomcat 9.0.13.
> I wanted to customize ErrorReportValve by setting showReport="false"
> showServerInfo="false".
>
> Below
Ryan Palmer,
CATALINA_BASE/conf/Catalina/localhost/ directory is empty. Also, I haven't
given any context in server.xml either.
Regards,
Melvin A
On Thu, Dec 20, 2018 at 1:53 PM Ryan Palmer wrote:
> Melvin,
>
> Do you have any context.xml for this context in the
> CATALINA_B
Melvin,
Do you have any context.xml for this context in the
CATALINA_BASE/conf/Catalina/localhost/ directory? It may be overriding your
META-INF/context.xml
-Ryan
On Dec 19, 2018, at 10:45 PM, Melvin
mailto:melvind...@gmail.com>> wrote:
Hello All,
Just came across a problem today
Hello All,
Just came across a problem today. Hope someone will clarify it.
Tomcat 9.0.13.
I wanted to customize ErrorReportValve by setting showReport="false"
showServerInfo="false".
Below is the META-INF/context.xml -
It works fine for any internal server error pr
: Tomcat Users List
Objet : RE: Default context.xml with parallel deployment
Thank you very much Mark for your answer.
I will look into the xml entities, I did not know about this feature.
I was wondering if a feature like having a "myapplication.xml.default" could be
a good idea to
d'origine-
De : Mark Thomas [mailto:ma...@apache.org]
Envoyé : jeudi 8 novembre 2018 23:37
À : users@tomcat.apache.org
Objet : Re: Default context.xml with parallel deployment
On 08/11/2018 20:45, Gilles SCHLIENGER wrote:
> Hi everyone,
>
> We are using Tomcat 9.0.8.
>
of the application.
Thanks a lot again
Regards
Gilles
-Message d'origine-
De : Jäkel, Guido [mailto:g.jae...@dnb.de]
Envoyé : vendredi 9 novembre 2018 08:22
À : 'users@tomcat.apache.org'
Objet : RE: Default context.xml with parallel deployment
Dear Giles,
what aspects do
Thursday, November 08, 2018 9:46 PM
>To: users@tomcat.apache.org
>Subject: Default context.xml with parallel deployment
>
>Hi everyone,
>
>We are using Tomcat 9.0.8.
>
>We are using xml context files in
>$CATALINA_BASE/conf/[enginename]/[hostname]/ to store the database co
for all versions
>
> It seems we could use a file called « context.xml.default » but the
> properties would be also available to other applications, which we don't want.
>
> Is there a way to have a context.xml file available to all versions of the
> same application or a
to other applications, which we don't want.
Is there a way to have a context.xml file available to all versions of the same
application or any other way to do it ?
Thanks a lot in advance !
Regards
Gilles
/itsusralsp06829:5432/spectra"
> points to a postgre db in another host.
> We tried to modify the maxActive parameter. The other parameters were left
> untouched.
>
>
> This is what the property was in the original context.xml
>
> > > type="javax.sql.DataSource
Hello,
The jdbc url "url="jdbc:postgresql://itsusralsp06829:5432/spectra" points to a
postgre db in another host.
We tried to modify the maxActive parameter. The other parameters were left
untouched.
This is what the property was in the original context.xml
> type=&qu
:
> Hello,
>
> We were facing a "pool error timeout waiting for idle object" issue.
> To replicate that in lower environments and perform tests, we tried to
> make changes to the contex.xml file located under the conf directory of
> tomcat.
> The path is /apps/apac
Hello,
We were facing a "pool error timeout waiting for idle object" issue.
To replicate that in lower environments and perform tests, we tried to make
changes to the contex.xml file located under the conf directory of tomcat.
The path is /apps/apache-tomcat-7.0.67/conf/contex
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Mark,
On 1/23/18 9:04 AM, Mark H. Wood wrote:
> Well, there are several layers of problems here, with different
> ways of addressing them.
>
> Command lines are available using 'ps', so any secrets written on
> the command line are visible to anyon
not just put the db username and password
> into your application's META-INF/context.xml file where they belong?
>
> > One idea, in order to support injecting Environment Variables would
> > be to support a syntax of
> >
> > ${env.DB_USER}
> >
> > w
gt; encrypt the sensitive information.
Use sane file permissions?
While you are at it, why not just put the db username and password
into your application's META-INF/context.xml file where they belong?
> One idea, in order to support injecting Environment Variables would
> be to su
ser-id under which the server runs
>>> (and
>>> of course whoever can create such a file).
>>> And if someone not authorized to do so, has access to that file, then you
>>> have bigger problems than just with the server software.
>>>
>>>
>>
Well, there are several layers of problems here, with different ways
of addressing them.
Command lines are available using 'ps', so any secrets written on the
command line are visible to anyone able to get a session on that host,
for the duration of the command. There's no way around this that I
1 - 100 of 1018 matches
Mail list logo
