Re: Periodic Immediate 408 on Supposedly Successful Login

2025-02-01 Thread Chuck Caldarale
nted locally. So all calls are http, > not https, if that makes a difference here. For several years on various > projects I work on, I'll get into a state where I get an immediate 408 (too > much time expired for login) when I submit a login. There is no time delay. > I clic

Periodic Immediate 408 on Supposedly Successful Login

2025-02-01 Thread Jerry Malcolm
much time expired for login) when I submit a login.  There is no time delay.  I click Sign-In to get the form, key the id/pw and select login, and get the response. Interestingly, if I submit an incorrect id/pw, I get the normal login failed response, not the 408.  Sometimes if I switch between F

Re: Tomcat doesn't allow me to login

2024-09-23 Thread Shekhar Dhotre
It’s resolved by allowing .* in context. XML . From: Christopher Schultz Sent: Monday, September 23, 2024 10:29:19 PM To: users@tomcat.apache.org Subject: Re: Tomcat doesn't allow me to login Please don't hikack threads. Also, don't run as root.

Re: Tomcat doesn't allow me to login

2024-09-23 Thread Christopher Schultz
Please don't hikack threads. Also, don't run as root. On 9/20/24 16:54, Shekhar Dhotre wrote: [root@mtthdoped51 ~]# $CATALINA_HOME/bin/startup.sh Using CATALINA_BASE:   /opt/tomcat/latest Using CATALINA_HOME:   /opt/tomcat/latest Using CATALINA_TMPDIR: /opt/tomcat/latest/temp Using JRE_HOME

RE: Tomcat doesn't allow me to login

2024-09-21 Thread Shekhar Dhotre
Dhotre Sent: 21 September 2024 12:45 To: Tomcat Users List Cc: Neel Dhotre Subject: RE: Tomcat doesn't allow me to login [root@mtthdoped51 ~]# vi /opt/tomcat/latest/conf/tomcat-users.xml [root@mtthdoped51 ~]# find / -name *users.xml -print /opt/tomcat/apache-tomcat-10.1.30/conf/tomcat-user

RE: Tomcat doesn't allow me to login

2024-09-21 Thread Shekhar Dhotre
d51 opt]# [cid:image001.png@01DB0C24.1EF3C610] [cid:image002.png@01DB0C24.1EF3C610] -Original Message- From: Simon Matter Sent: 21 September 2024 12:24 To: Tomcat Users List Subject: Re: Tomcat doesn't allow me to login Hi, > [root@mtthdoped51 ~]# $CATALINA_HOME/bin/startup.sh

Re: Tomcat doesn't allow me to login

2024-09-20 Thread Simon Matter
Hi, > [root@mtthdoped51 ~]# $CATALINA_HOME/bin/startup.sh > > Using CATALINA_BASE: /opt/tomcat/latest > > Using CATALINA_HOME: /opt/tomcat/latest > > Using CATALINA_TMPDIR: /opt/tomcat/latest/temp > > Using JRE_HOME: > /usr/lib/jvm/java-11-openjdk-11.0.24.0.8-2.el9.x86_64 > > Using CLASSPATH:

Re: Tomcat doesn't allow me to login

2024-09-20 Thread Shekhar Dhotre
It’s Redhat 9.4 /opt/tomcat . I’m trying to login via web interface . SD From: Stephanie Panah Sent: Saturday, September 21, 2024 5:14:50 AM To: Tomcat Users List Subject: Re: Tomcat doesn't allow me to login hi Shekhar, I do not know if you encountere

Re: Tomcat doesn't allow me to login

2024-09-20 Thread Stephanie Panah
hi Shekhar, I do not know if you encountered the same issue that I did. however, I had issues. The secret (if we have the same issue) is to "go into" the apache tomcat directory. just open into c:\program files\apache tomcat\ (whatever it is called) just go into the folder. then try to log in. good

Tomcat doesn't allow me to login

2024-09-20 Thread Shekhar Dhotre
[root@mtthdoped51 ~]# $CATALINA_HOME/bin/startup.sh Using CATALINA_BASE: /opt/tomcat/latest Using CATALINA_HOME: /opt/tomcat/latest Using CATALINA_TMPDIR: /opt/tomcat/latest/temp Using JRE_HOME:/usr/lib/jvm/java-11-openjdk-11.0.24.0.8-2.el9.x86_64 Using CLASSPATH: /opt/tomca

Re: Getting Two times login page issue.

2024-01-19 Thread Christopher Schultz
Mohit, Please don't hijack threads. On 1/18/24 20:08, Chaudhary, Mohit wrote: Hello Team , We are facing a issue with the tomcat application login URL , where it is asking twice for login to the user , with first login it will redirect again to the login page , while reenterin

Re: Getting Two times login page issue.

2024-01-18 Thread Brian Wolfe
On Thu, Jan 18, 2024 at 8:08 PM Chaudhary, Mohit wrote: > Hello Team , > > We are facing a issue with the tomcat application login URL , where it is > asking twice for login to the user , with first login it will redirect > again to the login page , while reentering the credential

Getting Two times login page issue.

2024-01-18 Thread Chaudhary, Mohit
Hello Team , We are facing a issue with the tomcat application login URL , where it is asking twice for login to the user , with first login it will redirect again to the login page , while reentering the credentials again , it is successful ( with second attempt it is working ) and user will

troubles with form login, j_security_check

2023-10-11 Thread Linus Kamb
Recently, my web application has started having issues with the login process. I use Tomcat form authentication against a mysql database. That has been working fine for years. But recently, there has been an increase in odd behaviours, particularly getting stuck at the j_security_check page

Re: SAML SSO Login issue

2022-05-13 Thread Christopher Schultz
Harish, On 5/11/22 11:36, harish lal wrote: Facing SSO Login issue after upgrade from Tomcat 6.0.33 to Tomcat 7.0.62 We upgraded our application from Tomcat 6.0.33 to Tomcat 7.0.62 due to web socket dependency in Tomcat. After upgrade , while try to do SAML SSO login from application we are

Re: SAML SSO Login issue

2022-05-11 Thread Olaf Kock
On 11.05.22 17:36, harish lal wrote: > Facing SSO Login issue after upgrade from Tomcat 6.0.33 to Tomcat 7.0.62 > > We upgraded our application from Tomcat 6.0.33 to Tomcat 7.0.62 due to web > socket dependency in Tomcat. > After upgrade , while try to do SAML SSO login from app

SAML SSO Login issue

2022-05-11 Thread harish lal
Facing SSO Login issue after upgrade from Tomcat 6.0.33 to Tomcat 7.0.62 We upgraded our application from Tomcat 6.0.33 to Tomcat 7.0.62 due to web socket dependency in Tomcat. After upgrade , while try to do SAML SSO login from application we are facing below issue , "This page isn’t wo

Re: Tomcat Displaying Login Page before redirecting to https

2021-01-12 Thread Jerry Malcolm
Malcolm wrote: I have a standalone tomcat. TC is configured to redirect any port 80 requests to https/443.  It works fine on pages that aren't protected by web.xml security constraints.  However, if a page is protected, the login page appears while still in non-ssl http mode. For years, I&#

Re: Tomcat Displaying Login Page before redirecting to https

2021-01-11 Thread Mark Thomas
't protected by >>> web.xml security constraints.  However, if a page is protected, the >>> login page appears while still in non-ssl http mode. For years, I've had >>> httpd sitting in front of TC handling the ssl stuff.  So this is new >>> territory for us.

Re: Tomcat Displaying Login Page before redirecting to https

2021-01-11 Thread Jerry Malcolm
, the login page appears while still in non-ssl http mode. For years, I've had httpd sitting in front of TC handling the ssl stuff.  So this is new territory for us.  Have we got something misconfigured or perhaps out of order that is pushing the ssl redirect down in the process?  Suggestions? Ho

Re: Tomcat Displaying Login Page before redirecting to https

2021-01-11 Thread Mark Thomas
On 12/01/2021 00:00, Jerry Malcolm wrote: > I have a standalone tomcat. TC is configured to redirect any port 80 > requests to https/443.  It works fine on pages that aren't protected by > web.xml security constraints.  However, if a page is protected, the > login page appears w

Tomcat Displaying Login Page before redirecting to https

2021-01-11 Thread Jerry Malcolm
I have a standalone tomcat. TC is configured to redirect any port 80 requests to https/443.  It works fine on pages that aren't protected by web.xml security constraints.  However, if a page is protected, the login page appears while still in non-ssl http mode. For years, I've

Re: Login appears only once : solved

2020-08-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Anwar, On 8/18/20 17:42, Anwar AliKhan wrote: > It came down to browser privacy and security settings. Cleared all > previous cookies and blocked third party cookies. Now Login appears > every time in Google chrome. None of that is

Re: Login appears only once

2020-08-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Anwar, On 8/18/20 14:45, Anwar AliKhan wrote: > I rebooted the machine , then the login box appeared . Obviously > this is not an ideal solution! Which machine did you reboot? The Tomcat server or your own client (browser)? Neither was nec

Re: Login appears only once : solved

2020-08-18 Thread Anwar AliKhan
It came down to browser privacy and security settings. Cleared all previous cookies and blocked third party cookies. Now Login appears every time in Google chrome. On Tue, 18 Aug 2020, 22:13 Anwar AliKhan, wrote: > I have rebooted. > Startup.sh > > Same tomcat-users.xml no o

Re: Login appears only once

2020-08-18 Thread Anwar AliKhan
I have rebooted. Startup.sh Same tomcat-users.xml no other changes . With manager button chrome going straight to 401. With Firefox manager button - login box appears works with username tomgui password tomcat as expected. On Tue, 18 Aug 2020, 21:55 Anwar AliKhan, wrote: > >

Re: Login appears only once

2020-08-18 Thread Anwar AliKhan
*With this tomcat-users.xml* *Test*curl -u tomcat:tomcat http://localhost:8080/host-manager/text/list *Result*: OK - Listed hosts [localhost]:[] I make same username and password for both admin-script & manager-gui *Test*curl -u tomcat:tomcat http://localhost:8080/host-manager/

Re: Login appears only once

2020-08-18 Thread Anwar AliKhan
for your cooperation. > > -Original Message- > From: Mark Thomas > Sent: Tuesday, August 18, 2020 1:57 PM > To: users@tomcat.apache.org > Subject: Re: Login appears only once > > On 18/08/2020 19:45, Anwar AliKhan wrote: > > I rebooted the machine , then the login bo

RE: Login appears only once

2020-08-18 Thread jonmcalexander
: Login appears only once On 18/08/2020 19:45, Anwar AliKhan wrote: > I rebooted the machine , then the login box appeared . > Obviously this is not an ideal solution! Did you close the browser between tests? Mark > On Tue, 18 Aug 2020, 19:07 Anwar AliKhan, wrote: > >> Hi

Re: Login appears only once

2020-08-18 Thread Mark Thomas
On 18/08/2020 19:45, Anwar AliKhan wrote: > I rebooted the machine , then the login box appeared . > Obviously this is not an ideal solution! Did you close the browser between tests? Mark > On Tue, 18 Aug 2020, 19:07 Anwar AliKhan, wrote: > >> Hi, >> I deployed an ap

Re: Login appears only once

2020-08-18 Thread Anwar AliKhan
I rebooted the machine , then the login box appeared . Obviously this is not an ideal solution! On Tue, 18 Aug 2020, 19:07 Anwar AliKhan, wrote: > Hi, > I deployed an app called tomee using the tomcat manager app. > > The first time I selected the app in the tomcat manager to

Login appears only once

2020-08-18 Thread Anwar AliKhan
Hi, I deployed an app called tomee using the tomcat manager app. The first time I selected the app in the tomcat manager to run it. a login appeared asking for username and password. I had not set it up. So it took me to the 403 page . Now I have set up tomee-admin user. I stopped restarted

Login Failure /manager.html

2019-07-24 Thread John Garmon
http://localhost:8080/manager/html I am trying to access the sever status or manager app screens. I am prompted by the page to input my credentials, and I input the ones I entered in tomcat-users.xml. The page never accepts them and I get 401. I looked at catlina.out and it is reading the .xml

Login Failure /manager.html

2019-07-24 Thread John Garmon
http://localhost:8080/manager/html I am trying to access the sever status or manager app screens. I am prompted by the page to input my credentials, and I input the ones I entered in tomcat-users.xml. The page never accepts them and I get 401. I looked at catlina.out and it is reading the .xml

Login Failure /manager.html

2019-07-24 Thread John Garmon
http://localhost:8080/manager/html I am trying to access the sever status or manager app screens. I am prompted by the page to input my credentials, and I input the ones I entered in tomcat-users.xml. The page never accepts them and I get 401. I looked at catlina.out and it is reading the .xml

Have to Login Twice to Enter the Application Main Page

2019-07-24 Thread Hua, Gary - Saint Louis, MO - Contractor
Tomcat Experts: I deployed my web application TOPS in to our DEV web server. I start the web server 9.0.13, and enter the application URL,, the login screen show up. I entered the LoginID/Password and click the "Login" button, the log on the catalina.out is: 2

RE: Login failing on Manager

2019-07-01 Thread Victor WILLART
Hi, Once I was stuck at the login pop up from Tomcat Manager too, and the problem was the credentials being encrypted by the server. I have no clue if you have this too but you can check in your server.xml file if there is a "digest" attribute inside your "realm" element.

Re: Login failing on Manager

2019-06-30 Thread Jerry Malcolm
naged security.  Logging on using any of my own webapps is rock-solid on all of the vHosts and has worked for years.  But if I go to the Tomcat manager app on any of the vHosts without being logged in, manager presents its own login popup as I would expect.  But it will not accept my id/pw.  If I go

Login failing on Manager

2019-06-24 Thread Jerry Malcolm
n any of the vHosts without being logged in, manager presents its own login popup as I would expect.  But it will not accept my id/pw.  If I go back to my main webapp on that vHost and login there, THEN go to manager, it works fine. Yesterday I upgraded to the latest JSPWiki on all of the

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bo, On 12/18/18 00:49, Bo wrote: > here is screenshot > > I just tried again still no working > > > https://i.imgur.com/8bQH2YB.png Your XML is invalid and can't be loaded. The log file should confirm this. Unfortunately, Notepad++ makes it look

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-18 Thread Mark Thomas
y it themselves >>> i listed the steps to duplicate this already >>> its 100 percent generic >>> >>> tomcat is horribly broken and buggy >>> it wont even allow me to login >> >> When things go wrong it is usually a good idea to assume that you have> m

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-18 Thread Bo
/12/2018 12:55, Bo wrote: >> i tested every possible combination. >> >> anyone can try it themselves >> i listed the steps to duplicate this already >> its 100 percent generic >> >> tomcat is horribly broken and buggy >> it wont even allow me to login

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-18 Thread Mark Thomas
On 18/12/2018 12:55, Bo wrote: > i tested every possible combination. > > anyone can try it themselves > i listed the steps to duplicate this already > its 100 percent generic > > tomcat is horribly broken and buggy > it wont even allow me to login When things go wrong i

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-18 Thread Bo
i tested every possible combination. anyone can try it themselves i listed the steps to duplicate this already its 100 percent generic tomcat is horribly broken and buggy it wont even allow me to login On Tue, Dec 18, 2018, at 1:00 AM, Bob Hall wrote: > Bo, > On Monday, December 17, 2

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-17 Thread Bob Hall
og, god, and role1. - a Tomcat login page with username admin Did you try logging in with username god or adding a user with username admin? - Bob

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-17 Thread Bo
7.0.92-windows-x86.zip and put it in the > > root of a custom web app that I have and then I use the > > service.bat install to trigger the services install, this is on > > windows server so I start it up in services.msc > > > > I can go to localhost fine, but it won

Re: why can't i login to tomcat7 status page from clean install zip

2018-12-17 Thread Christopher Schultz
tomcat-7.0.92-windows-x86.zip and put it in the > root of a custom web app that I have and then I use the > service.bat install to trigger the services install, this is on > windows server so I start it up in services.msc > > I can go to localhost fine, but it won't let me l

why can't i login to tomcat7 status page from clean install zip

2018-12-17 Thread Bo
c I can go to localhost fine, but it won't let me login I checked the tomcat user xml file a trillion times to triple check to make sure I have it right, but no matter what, even after multiple restarts, it won't even let me login to the status page! 401 Unauthorized You are n

Re: Tomcat JNDI Authentication - No Login

2018-10-10 Thread Christopher Schultz
essful > enabling this function. The current behaviour is that > http://localhost:8080/sample does not throw a login prompt. > > I can only assume it is caused by my Apache Tomcat code snippet > configuration is all wrong. I am running version Apache > Tomcat/7.0.91 on Redhat

Tomcat JNDI Authentication - No Login

2018-10-09 Thread Lee Broom
I now reach out to the apache community for assistance because I have been unsuccessful enabling this function. The current behaviour is that http://localhost:8080/sample does not throw a login prompt. I can only assume it is caused by my Apache Tomcat code snippet configuration is all wrong.

Re: 8.5.24 not able to get to the screen for login info

2018-05-21 Thread Sri Linux
Yes I hve double checked and compared with the server which is wolring as expected. Thanks Sree On Monday, May 21, 2018, Igal @ Lucee.org wrote: > On 5/21/2018 3:46 PM, Sri Linux wrote: > >> Few servers give 403 access denined error when i click on webapss or >> server >> status >> > > Do you

Re: 8.5.24 not able to get to the screen for login info

2018-05-21 Thread Igal @ Lucee.org
On 5/21/2018 3:46 PM, Sri Linux wrote: Few servers give 403 access denined error when i click on webapss or server status Do you require authentication for those applications? If so, make sure that you've set that up properly in the new installation, e.g. in conf/tomcat-users.xml or whatever

8.5.24 not able to get to the screen for login info

2018-05-21 Thread Sri Linux
Hi all We have upgraded our application from 8.0.38 to 8.5.24 Few servers work as expected Few servers give 403 access denined error when i click on webapss or server status Everything works fine with application launching and stuff I have followed troubleshooting steps as provided in stack tr

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-25 Thread Mark Thomas
On 24/01/18 22:45, Robert J. Carr wrote: > Hi Mark, Konstantin- > > I looked in on that defect ticket and it appears you found and fixed a > problem. Great! But I also noticed you said the same problems were > happening for you in 8 and 8.5 and even happening in the same version of 8 > I was

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-24 Thread Robert J. Carr
On Tue, Jan 23, 2018 at 1:03 PM, Robert J. Carr wrote: > On Tue, Jan 23, 2018 at 9:54 AM, Konstantin Kolinko < > knst.koli...@gmail.com> wrote: > >> 2018-01-22 11:25 GMT+03:00 Robert J. Carr : >> > Hi Mark, everyone- >> > >> > I've constructed a sample app of ~5 files. The code is bundled in the

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-23 Thread Robert J. Carr
On Tue, Jan 23, 2018 at 9:54 AM, Konstantin Kolinko wrote: > 2018-01-22 11:25 GMT+03:00 Robert J. Carr : > > Hi Mark, everyone- > > > > I've constructed a sample app of ~5 files. The code is bundled in the > jar > > file in the WEB-INF/lib directory. Here's a public url for the > application >

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-23 Thread Konstantin Kolinko
2018-01-22 11:25 GMT+03:00 Robert J. Carr : > Hi Mark, everyone- > > I've constructed a sample app of ~5 files. The code is bundled in the jar > file in the WEB-INF/lib directory. Here's a public url for the application > (test.war; 8K): > > > https://drive.google.com/file/d/1mZRXrm90F4WN3mizqoqr

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-22 Thread Robert J. Carr
he problem in tomcat 8.5.24 (for me): 1) make a user available with the role "testrole" (I just user tomcat-users) 2) startup tomcat, copy the war file into webapps 3) go to the application homepage, index.jsp should auto load 4) enter username and password and login; it should ch

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-19 Thread Robert J. Carr
re a lot of details; I'll try to be as clear as > > possible) > > > > I've been setting up a simple application in tomcat 8.0 where some > > resources are protected but others aren't. I want to login using AJAX > > instead of FORM or BASIC so I don't

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-19 Thread Robert J. Carr
In my last (long) email I described how adding a BASIC login-config changes things and the roles are no longer getting stripped when using login() (even when never triggering a basic prompt). I figured I'd use this as a workaround until I figure out what is really going wrong. However, now

Re: roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-19 Thread Mark Thomas
On 18/01/18 22:03, Robert J. Carr wrote: > (Bear with me as there are a lot of details; I'll try to be as clear as > possible) > > I've been setting up a simple application in tomcat 8.0 where some > resources are protected but others aren't. I want to login using A

roles stripped when using login() in tomcat 8.5 but not 8.0

2018-01-18 Thread Robert J. Carr
(Bear with me as there are a lot of details; I'll try to be as clear as possible) I've been setting up a simple application in tomcat 8.0 where some resources are protected but others aren't. I want to login using AJAX instead of FORM or BASIC so I don't have any login-co

Re: Getting HttpServletRequest in Login Module

2016-06-03 Thread Mark Thomas
On 03/06/2016 05:23, saurabh.su...@rbs.com.INVALID wrote: > I want it to get the IP address in the Login module. > > In JBoss 6 i got so: > > > 1.private String getIP() throws PolicyContextException { > 2. HttpServletRequest request

Getting HttpServletRequest in Login Module

2016-06-02 Thread Saurabh.Suman
I want it to get the IP address in the Login module. In JBoss 6 i got so: 1.private String getIP() throws PolicyContextException { 2. HttpServletRequest request = (HttpServletRequest) PolicyContext.getContext("javax.servlet.http.HttpServletRequest"); 3.

Re: How to acess HttpServletRequest in Jaas login module in Tomcat

2016-05-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Saurabh, On 5/25/16 10:33 PM, saurabh.su...@rbs.com.INVALID wrote: > I am already extending JAASCallbackHandler and getting Name and > password through that. How can we get HTTLServletRequest through > JAASCallbackHandler? I'm interested in a simil

RE: How to acess HttpServletRequest in Jaas login module in Tomcat

2016-05-25 Thread Saurabh.Suman
pace Complex Sector 21, Gurgaon, Haryana, 122002, India Office: +91 124 6195699 | Mobile: +91 375289 -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, May 18, 2016 1:14 PM To: Tomcat Users List Subject: Re: How to acess HttpServletRequest in Jaas login mo

Re: How to acess HttpServletRequest in Jaas login module in Tomcat

2016-05-18 Thread Mark Thomas
On 18/05/2016 03:56, saurabh.su...@rbs.com.INVALID wrote: > Hello experts > > How to acess HttpServletRequest in Jaas login module in Tomcat? In Jboss we > can get it through > > > HttpServletRequest request = > (HttpServletRequest)

How to acess HttpServletRequest in Jaas login module in Tomcat

2016-05-17 Thread Saurabh.Suman
Hello experts How to acess HttpServletRequest in Jaas login module in Tomcat? In Jboss we can get it through HttpServletRequest request = (HttpServletRequest)PolicyContext.getContext("javax.servlet.http.HttpServletRequest") But it's not working in Tomcat since Jacc is not supp

Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-17 Thread Bernhard Lenz
, username and password are also stored in the session between the login page submit and redirect to the authenticated target page (in the same web app). I managed to get a "rough" POC working where before the login redirect a "login token cookie" is set (similar to the sso cook

Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-04 Thread Bernhard Lenz
Hi Mark. Unfortunately CAS doesn't support Tomcat 8 or 9 and the documentation is often outdated and sometimes messy. I feel Tomcat is so close to perfect with its SingleSignOn valve and Realms that supporting a global login page is just the dot on the I. I'm new to the apache proc

Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-04 Thread Mark Thomas
Also the database >> realms with configurable table and column names and hashing of passwords >> are exactly what is needed to develop state of the art web sites. >> >> In my career I've almost exclusively come across (or worked on) web sites >> which consist

Re: Should tomcat form login offer redirects to login page besides forward?

2016-02-04 Thread Bernhard Lenz
gt; realms with configurable table and column names and hashing of passwords > are exactly what is needed to develop state of the art web sites. > > In my career I've almost exclusively come across (or worked on) web sites > which consist of multiple war modules protected by a single

Should tomcat form login offer redirects to login page besides forward?

2016-01-27 Thread Bernhard Lenz
ar modules protected by a single site wide login page. Examples are myprofile.war for a customer to update his information, and admin.war for internal users to administer the site, etc etc. All wars are typically protected by a single login page which matches the style of the web page. However it appears t

Re: configuring login for static content and Servlets

2015-10-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bill, On 10/5/15 3:21 PM, Bill Ross wrote: > Is it possible to set up a site so that you have to log in to > access the site at all, either the static content or the servlet > interface? I have in mind 10-100 users. It seems a simple setup > like .h

RE: configuring login for static content and Servlets

2015-10-05 Thread Caldarale, Charles R
> From: Bill Ross [mailto:r...@cgl.ucsf.edu] > Subject: configuring login for static content and Servlets > Is it possible to set up a site so that you have to log in to access the site > at all, > either the static content or the servlet interface? Read the "Specifying

configuring login for static content and Servlets

2015-10-05 Thread Bill Ross
Is it possible to set up a site so that you have to log in to access the site at all, either the static content or the servlet interface? I have in mind 10-100 users. It seems a simple setup like .htaccess (httpd only?) would be perfect if it existed and covered static and servlet. Is this doabl

Re: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-23 Thread Konstantin Kolinko
2015-07-23 11:32 GMT+03:00 Rahul Kumar Singh : > Dear Christopher, > > On further debugging, I found out the difference is seen between 6.0.32 (same > behavior as in 6.0.28 reported earlier) and 6.0.33 (same as in 7.0.54 > reported earlier ) I could not figure out which change ( as mentioned in l

RE: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-23 Thread Rahul Kumar Singh
4. Start tomcat 5. Run client wget to execute the login.jsp 6. View access log file entry -Original Message- From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] Sent: Tuesday, July 21, 2015 5:32 PM To: Tomcat Users List Subject: Re: Tomcat 7 (7.0.54) Login URL

RE: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-23 Thread Rahul Kumar Singh
4. Start tomcat 5. Run client wget to execute the login.jsp 6. View access log file entry -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, July 21, 2015 8:47 PM To: Tomcat Users List Subject: Re: Tomcat 7 (7.0.

Re: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-21 Thread Christopher Schultz
.0.28). It is received in tomcat > 7(V7.0.54). What is reason for the different behavior? I'm not sure why the change in behavior, but when a client requests a protected resource, the container has to redirect that client to the login page. Before the redirect, a session is created to

Re: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-21 Thread Konstantin Kolinko
2015-07-21 14:38 GMT+03:00 Rahul Kumar Singh : > Hello Tomcat Team, > > “;jsessionid=C1A67FB90E1300DF14EE027A3634A34B” passed in URL > "localhost:8080/login. jsp;jsessionid=C1A67FB90E1300DF14EE027A3634A34B" > is not received in tomcat 6(V6.0.28) . It is received in tom

RE: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID. | why there is different behaviour in Tomcat 6 and Tomcat 7

2015-07-21 Thread Rahul Kumar Singh
Hello Tomcat Team, “;jsessionid=C1A67FB90E1300DF14EE027A3634A34B” passed in URL "localhost:8080/login. jsp;jsessionid=C1A67FB90E1300DF14EE027A3634A34B" is not received in tomcat 6(V6.0.28) . It is received in tomcat 7(V7.0.54) . What is reason for the different behavior? I

Re: Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID.

2015-06-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rahul, On 6/23/15 8:46 AM, Rahul Kumar Singh wrote: > Hello Tomcat team, > > In Tomcat7.0.54 We have observe that Login URL is Appended with > JSESSIONID parameter in our Web Application Example: > /framework/login.ac

Tomcat 7 (7.0.54) Login URL is Passing with JSESSION ID.

2015-06-23 Thread Rahul Kumar Singh
Hello Tomcat team, In Tomcat7.0.54 We have observe that Login URL is Appended with JSESSIONID parameter in our Web Application Example: /framework/login.action;jsessionid=098D3C84B56FF2A2A25E88E4F059A20B System Configuration (WINDOW7+IE-8) Due to this session authentication get failed. But

Re: Multiple login/home pages within a tomcat app

2015-04-08 Thread Neill Lima
Andre, Excellent reply given the context. I would add the following: Given a webapp paradigm why would you need two different login pages to different resources? Usually what is done is change what the logged user sees/is able to see. For example: Scenario 1: WHEN a administrator logs in to

Re: Multiple login/home pages within a tomcat app

2015-04-08 Thread André Warnier
Olayemi Olatunji wrote: Hello Guys, I’m sort of a newbie to this but I need to know if its achievable. I want to create multiple login pages within a single web app e.g www.tomcat.org/login1, /login2 How can I achieve this? Hi. Since you claim to be a newbie at this, I'll t

Multiple login/home pages within a tomcat app

2015-04-08 Thread Olayemi Olatunji
Hello Guys, I’m sort of a newbie to this but I need to know if its achievable. I want to create multiple login pages within a single web app e.g www.tomcat.org/login1, /login2 How can I achieve this? *Regards,* *Olayemi Olatunji* *Learning Consultant* [image: cid:image004.png

Re: login issue

2015-02-18 Thread James McEvoy
TY! On Wednesday, February 18, 2015, John D. Ament wrote: > Of course I copied the wrong one... > > http://tomcat.apache.org/xml"; > xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; > xsi:schemaLocation="http://tomcat.apache.org/xml > tomcat-users.xsd" >

Re: login issue

2015-02-18 Thread John D. Ament
Of course I copied the wrong one... http://tomcat.apache.org/xml"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="http://tomcat.apache.org/xml tomcat-users.xsd" version="1.0"> On Wed Feb 18 2015 at 12:48:3

Re: login issue

2015-02-18 Thread John D. Ament
Thanks for providing! The attribute name on the user is "roles" not "role" You should only define a user once and give them multiple roles. Your file should then look like this: http://tomcat.apache.org/xml"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";

Re: login issue

2015-02-18 Thread James McEvoy
l version='1.0' encoding='utf-8'?> On Wed, Feb 18, 2015 at 7:17 AM, James McEvoy wrote: > Will do. > > > On Wednesday, February 18, 2015, Terence M. Bandoian > wrote: > >> On 2/17/2015 9:51 AM, James McEvoy wrote: >> >>> Checked logs, added admin and manager to all n

Re: login issue

2015-02-18 Thread James McEvoy
Will do. On Wednesday, February 18, 2015, Terence M. Bandoian wrote: > On 2/17/2015 9:51 AM, James McEvoy wrote: > >> Checked logs, added admin and manager to all needed files and added url so >> it's ok for tomcat to use and still rejected when Logging in. >> Stumped. I started and stopped it e

Re: login issue

2015-02-17 Thread Terence M. Bandoian
On 2/17/2015 9:51 AM, James McEvoy wrote: Checked logs, added admin and manager to all needed files and added url so it's ok for tomcat to use and still rejected when Logging in. Stumped. I started and stopped it etc. Hi, James- You might try posting the new contents of tomcat-users.xml (with

Re: login issue

2015-02-17 Thread James McEvoy
Checked logs, added admin and manager to all needed files and added url so it's ok for tomcat to use and still rejected when Logging in. Stumped. I started and stopped it etc. On Tuesday, February 17, 2015, James McEvoy wrote: > Ok if will check all > > On Tuesday, February 17, 2015, John D. Ame

Re: login issue

2015-02-17 Thread James McEvoy
Ok if will check all On Tuesday, February 17, 2015, John D. Ament wrote: > Check your logs for why. Don't forget to include the manager-gui role in > the list of roles. > > John > > On Tue Feb 17 2015 at 8:15:45 AM James McEvoy > > wrote: > > > ok it wont take the shutdown command. > > > > On

Re: login issue

2015-02-17 Thread John D. Ament
Check your logs for why. Don't forget to include the manager-gui role in the list of roles. John On Tue Feb 17 2015 at 8:15:45 AM James McEvoy wrote: > ok it wont take the shutdown command. > > On Tue, Feb 17, 2015 at 6:59 AM, James McEvoy > wrote: > > > couldnt screenshot so i just copied an

Re: login issue

2015-02-17 Thread James McEvoy
ok it wont take the shutdown command. On Tue, Feb 17, 2015 at 6:59 AM, James McEvoy wrote: > couldnt screenshot so i just copied and pasted. > > > > > > > > > > > >

Re: login issue

2015-02-17 Thread James McEvoy
Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to You under the Apache License, Version 2.0 (the "Licens

Re: login issue

2015-02-17 Thread John D. Ament
And also make sure you bounce tomcat after updating the tomcat-users.xml file. It is not read dynamically, it is read on start up. John On Tue Feb 17 2015 at 7:23:34 AM Mark Thomas wrote: > On 17/02/2015 12:17, James McEvoy wrote: > > Mark > > I did that one before and it didn't work either. I

Re: login issue

2015-02-17 Thread Mark Thomas
On 17/02/2015 12:17, James McEvoy wrote: > Mark > I did that one before and it didn't work either. I even tried admin-gui The manager-gui role isn't in the file you quoted below. It should be. Add it and then show us the new version of the file. Did you restart Tomcat after you edited tomcat-user

  1   2   3   4   5   6   7   8   >