Re: Session lost when switching from https to http after upgrade to Tomcat 6

2008-08-03 Thread DIGLLOYD INC
I've been having the same issues others have been asking about. This discussion has been useful, but... ===> What is a viable workaround for switching to http from https once the user is authenticated? And is that idea unreasonable (see use case below). My main concern is that sending l

how to populate database with SHA hash for DIGEST

2008-08-17 Thread DIGLLOYD INC
lp is greatly appreciated. Lloyd Chambers http://diglloyd.com [Mac OS X 10.5.2 Intel, Tomcat 6.0.16] On Apr 22, 2008, at 9:37 AM, Mark Thomas wrote: DIGLLOYD INC wrote: Is the realm the specified in the in web.xml? (eg "Tomcat Manager Application") Yes. (link above) suggest

Re: how to populate database with SHA hash for DIGEST

2008-08-17 Thread DIGLLOYD INC
Answer: SHA just doesn't work. MD5 works fine. I presume this is because the browser has no idea what algorithm to use, and just always uses MD5. Lloyd On Aug 17, 2008, at 9:11 PM, DIGLLOYD INC wrote: How to produce the hashed password when using auth-method DIGEST ? Everything

Re: how to populate database with SHA hash for DIGEST

2008-08-18 Thread DIGLLOYD INC
the books I've seen on the subject (several) don't mention it either. Lloyd Lloyd Chambers http://diglloyd.com [Mac OS X 10.5.2 Intel, Tomcat 6.0.16] On Aug 18, 2008, at 7:40 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lloyd, DIGLLOYD INC wrote

Re: Why GlassFish

2008-08-28 Thread DIGLLOYD INC
Disclaimer: I am a Glassfish developer, working for Sun. So you can ignore whatever I say. :) I run Tomcat for my server (diglloyd.com), for specific reasons. Glassfish is a terrific product and so is Tomcat. Which is better depends on the goal, as with any product. Glassfish URL: htt

JDBCRealm.getRoles causes NullPointerException

2008-09-01 Thread DIGLLOYD INC
I'm running Tomcat 6.0.16 with DIGEST auth using: MySQL 5.0.51b + mysql-connector-java-5.1.6-bin.jar Things work well until complete failure: every few days, all authentication begins to fail. When this happens, nothing appears in catalina.out to indicate a problem, and unless I restart Tom

tomcat won't download large files -- out of memory error

2008-09-25 Thread DIGLLOYD INC
I have some large zip files I want to make available for download. When I try to download a 70MB file, tomcat is trying to cache these huge files (it seems). The result is that downloading them always fails. I *want* caching for most everything eg jpegs, html, etc and I've set tomcat to

Re: tomcat won't download large files -- out of memory error

2008-09-25 Thread DIGLLOYD INC
w? Lloyd On Sep 25, 2008, at 10:01 PM, DIGLLOYD INC wrote: I have some large zip files I want to make available for download. When I try to download a 70MB file, tomcat is trying to cache these huge files (it seems). The result is that downloading them always fails. I *want* cachin

Re: tomcat won't download large files -- out of memory error

2008-09-26 Thread DIGLLOYD INC
oyd Chambers http://diglloyd.com [Mac OS X 10.5.2 Intel, Tomcat 6.0.16] On Sep 26, 2008, at 4:07 AM, Mark Thomas wrote: DIGLLOYD INC wrote: I have some large zip files I want to make available for download. When I try to download a 70MB file, tomcat is trying to cache these huge files (it s

Re: tomcat won't download large files -- out of memory error

2008-09-26 Thread DIGLLOYD INC
Thanks Mark. How to force the 64-bit JVM to run? For now I'm using -Xmx2047M, which solves the immediate problem. Lloyd Chambers http://diglloyd.com [Mac OS X 10.5.5 Intel, Tomcat 6.0.16] On Sep 26, 2008, at 11:19 AM, Mark Thomas wrote: DIGLLOYD INC wrote: Thanks to multiple p

replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-23 Thread DIGLLOYD INC
I'm converting from an Apache http system. Thousands of my users have bookmarked http://diglloyd.com/diglloyd/blog.html With Apache, I symlinked blog.html to the current month's blog. Now with Tomcat, I see warnings that enabling symlinks is a security risk. What is the best way to make blog.h

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
s like it should work. --David DIGLLOYD INC wrote: I'm converting from an Apache http system. Thousands of my users have bookmarked http://diglloyd.com/diglloyd/blog.html With Apache, I symlinked blog.html to the current month's blog. Now with Tomcat, I see warnings that enabling s

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
at 6:48 AM, Hassan Schroeder wrote: On Sun, Mar 23, 2008 at 10:50 PM, DIGLLOYD INC <[EMAIL PROTECTED]> wrote: What is the best way to make blog.html => 2008-03-blog.html ? (eg if March 2008 is the current blog) I'd write a simple Filter that gets the current blog location from a

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
.html to the jsp servlet for jsp processing. I haven't tried it, but it seems like it should work. --David DIGLLOYD INC wrote: I'm converting from an Apache http system. Thousands of my users have bookmarked http://diglloyd.com/diglloyd/blog.html With Apache, I symlinked blog.

Re: PHP problem

2008-03-24 Thread DIGLLOYD INC
I don't know the answer, but how does one use PHP with Tomcat? (Thanks, if you have time for a pointer, I hadn't see docs on this). On Mar 24, 2008, at 7:23 AM, Jonathan Mast wrote: Can someone tell me why one project that uses PHP will work in tomcat, but another that also uses PHP won't?

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
web.xml file. The servlet spec is an excellent resource for this kind of stuff: http://jcp.org/aboutJava/communityprocess/final/jsr154/index.html It has docs for the classes/interfaces in javax.servlet as well as docs on what's valid in the web.xml file. --David DIGLLOYD INC wrote

Re: PHP problem

2008-03-24 Thread DIGLLOYD INC
Thank you--no plans to run PHP right now, actually I'd rather avoid it. But it's on my list of "might do something useful at some point". Lloyd Chambers http://diglloyd.com [Mac OS X 10.5.2 Intel, Tomcat 6.0.16] On Mar 24, 2008, at 8:00 AM, Pid wrote: DIGLLOYD INC wro

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
ined. Note the separate mapping> element. There can be more than one of these to map a servlet to different paths. --David DIGLLOYD INC wrote: David, I'm new to programming Servlets/JSP, I didn't realize a mapping> could just specify a an not specify a servlet class

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
e servlet spec is an excellent resource for this kind of stuff: http://jcp.org/aboutJava/communityprocess/final/jsr154/index.html It has docs for the classes/interfaces in javax.servlet as well as docs on what's valid in the web.xml file. --David DIGLLOYD INC wrote: David, I'm n

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
On Mar 24, 2008, at 10:58 AM, Caldarale, Charles R wrote: From: DIGLLOYD INC [mailto:[EMAIL PROTECTED] Subject: Re: replacement for symbolic links to files (Apache httpd to Tomcat) jsp /diglloyd/blog.html Take out the "/diglloyd", leaving "/blog.ht

Re: replacement for symbolic links to files (Apache httpd to Tomcat)

2008-03-24 Thread DIGLLOYD INC
2008-03-blog.html" %> On Mar 24, 2008, at 11:30 AM, Caldarale, Charles R wrote: From: DIGLLOYD INC [mailto:[EMAIL PROTECTED] Subject: Re: replacement for symbolic links to files (Apache httpd to Tomcat) Wouldn't "/blog.html" refer to http://diglloyd.com/blog.html ? That wo

Tomcat 6 DIGEST auth

2008-04-22 Thread DIGLLOYD INC
I've read this doc: http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html#Digested%20Passwords But I cannot get it to authenticate. I'm putting the digested password for myusers into tomcat-users.xml as directed. One problem is that it's not at all clear what the realm is-- Is the realm

hackers sending long URLs to probe site?

2008-04-24 Thread DIGLLOYD INC
I've have to use a "deny" in a RemoteAddrValve to solve the following problem-- A normal URL for my site might be: http://diglloyd.com/diglloyd/free/Eagles/Eagles.html eg /diglloyd/free/Eagles/Eagles.html (check it out if you want to see some unusual eagle photos) But I see tons of 404 error

simple way to rewrite simple URL portion

2008-04-24 Thread DIGLLOYD INC
I'm looking for a very very basic URL-rewriting filter--simple text substitution. I suppose I can write my own since the functionality I need is so limited, but I was hoping there was something built-in in Tomcat. For past reasons, I get requests that include the path "bike/free". Right

Re: Can we slow down the speed of servlet response ?

2008-04-24 Thread DIGLLOYD INC
Han, I think you're barking up the wrong tree here--use a Mock Object (a dummy) to stub out your app so it thinks it's calling the Servlet. After you've tested your app working, then revert to actually sending the request to Tomcat. If the Servlet provides real data that must come from t

Re: simple way to rewrite simple URL portion

2008-04-24 Thread DIGLLOYD INC
HA1 Lloyd, DIGLLOYD INC wrote: | I'm looking for a very very basic URL-rewriting filter--simple text | substitution. I suppose I can write my own since the functionality I | need is so limited, but I was hoping there was something built-in in | Tomcat. Not built-in, but definitely exists: ht

Re: hackers sending long URLs to probe site?

2008-04-24 Thread DIGLLOYD INC
oyd On Apr 24, 2008, at 10:12 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lloyd, For future reference, please don't "hijack" a thread. You replied to another message on the list to ask this one. In the future, please create a brand new message.

Re: simple way to rewrite simple URL portion

2008-04-25 Thread DIGLLOYD INC
oyd On Apr 24, 2008, at 10:57 AM, Ken Bowen wrote: Take a look at http://tuckey.org/urlrewrite/ I found it very easy to use for exactly the kind of problem you described. P.S. Your eagles are great. On Apr 24, 2008, at 12:53 PM, DIGLLOYD INC wrote: I'm looking for a very very basic

simple JSP redirect to another page -- how to deal with relative URLs

2008-04-25 Thread DIGLLOYD INC
I previously asked about remapping URLs and got some helpful responses. In a nutshell, this was recommended: http://tuckey.org/urlrewrite/ Looks very good for some purposes. But I also want to solve a much simpler problem-- I have a very large amount of static content (articles), with each

Re: simple JSP redirect to another page -- how to deal with relative URLs

2008-04-25 Thread DIGLLOYD INC
of the JSP. eg: /foo/bar/index.jsp /foo/some-page.html index.jsp contains This doesn't work; a link "images/foo.jpg" in some-page.html ends up being /foo/bar/images/foo.jpg instead of /foo/images/foo.jpg. Lloyd On Apr 25, 2008, at 12:40 PM, David kerber wrote: DIGLLO

Re: simple JSP redirect to another page -- how to deal with relative URLs

2008-04-25 Thread DIGLLOYD INC
oeder wrote: On Fri, Apr 25, 2008 at 1:00 PM, DIGLLOYD INC <[EMAIL PROTECTED]> wrote: The problem is that the jsp include directives: - include an html page that is *not* in the same directory as the jsp page; I've never -- and that's a long time, web-wise :-) -- liked relat

Re: simple JSP redirect to another page -- how to deal with relative URLs

2008-04-25 Thread DIGLLOYD INC
for my stated issue, keeping in mind that doing so is case-by-case, not a nice regexp pattern. Lloyd On Apr 25, 2008, at 1:05 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lloyd, DIGLLOYD INC wrote: | My pages all use relative links eg "..", "./&

Re: simple JSP redirect to another page -- how to deal with relative URLs

2008-04-25 Thread DIGLLOYD INC
d it would find article1.html in the article1 folder. --David DIGLLOYD INC wrote: I previously asked about remapping URLs and got some helpful responses. In a nutshell, this was recommended: http://tuckey.org/urlrewrite/ Looks very good for some purposes. But I also want to solve a much simpl

Re: simple JSP redirect to another page -- how to deal with relative URLs

2008-04-27 Thread DIGLLOYD INC
ly have and it would find article1.html in the article1 folder. --David DIGLLOYD INC wrote: I previously asked about remapping URLs and got some helpful responses. In a nutshell, this was recommended: http://tuckey.org/urlrewrite/ Looks very good for some purposes. But I also want to solve a muc

Re: simple JSP redirect to another page -- how to deal with relative URLs

2008-04-27 Thread DIGLLOYD INC
aders/ (I'm not sure if I should stick "index.html" in the "to" URL) Lloyd On Apr 27, 2008, at 1:13 PM, DIGLLOYD INC wrote: David, I want to redirect perhaps a dozen links in directories that have a main page accessed something like: /stuff/start-page.html In thin

Re: Large HTML file not getting compressed despite compressionenabled

2008-04-28 Thread DIGLLOYD INC
Well, I'm not using APR, just the default connector. And I cannot get Tomcat to ever compress an HTML or text file of any size. It's as if it completely ignores the setting. I've tried small medium and large html and text files, and it doesn't matte whether I set compression to "on",

Re: hackers sending long URLs to probe site?

2008-04-30 Thread DIGLLOYD INC
It's certainly something nefarious...one of my paths contains "diglloyd/free", and I see URLs containing 100 or 200 of that string repeated... On Apr 30, 2008, at 1:58 PM, David Delbecq wrote: DIGLLOYD INC a écrit : Christopher, Thank you. This is helpful. Sorry abou

authenticated but not authorized -- blank page

2008-05-02 Thread DIGLLOYD INC
I have a webapp 'guest', with two subfolders 'guest1' and 'guest2'. These are protected by security constraints. /guest/guest1 has a security constraint requiring role 'guest1' /guest/guest2 has a security constraint requiring role 'guest2' Users 'guest1' and 'guest2' map to roles of the sam

Re: authenticated but not authorized -- blank page

2008-05-02 Thread DIGLLOYD INC
: DIGLLOYD INC [mailto:[EMAIL PROTECTED] Subject: authenticated but not authorized -- blank page I have a webapp 'guest', with two subfolders 'guest1' and 'guest2'. Really? Because that's not what's in your security constraints: /_guest1_/* /_guest

Re: authenticated but not authorized -- blank page

2008-05-02 Thread DIGLLOYD INC
: From: DIGLLOYD INC [mailto:[EMAIL PROTECTED] Subject: authenticated but not authorized -- blank page I have a webapp 'guest', with two subfolders 'guest1' and 'guest2'. Really? Because that's not what's in your security constraints: /_guest1_/*

Re: authenticated but not authorized -- blank page

2008-05-04 Thread DIGLLOYD INC
A role-name-key is specified to allow the references from the security-role-refs. Lloyd On May 4, 2008, at 5:58 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lloyd, DIGLLOYD INC wrote: | | guest1 |

DigestAuthenticator failure: java.sql.SQLException: Operation not allowed after ResultSet closed

2009-07-30 Thread DIGLLOYD INC
How can I resolve this issue? It takes Tomcat own on a regular basis, locking out legitimate users. Looks like JDBCRealm has some kind of bug. Thanks! Jul 29, 2009 1:46:41 PM org.apache.catalina.realm.JDBCRealm getRoles SEVERE: Exception performing authentication java.sql.SQLException: Ope

Re: DigestAuthenticator failure: java.sql.SQLException: Operation not allowed after ResultSet closed

2009-07-31 Thread DIGLLOYD INC
Thank you, looks like 6.0.19 should fix it, I've upgraded to that. Lloyd Lloyd Chambers http://diglloyd.com http://macperformanceguide.com/ [Mac OS X 10.5.2 Intel, Tomcat 6.0.16] On Jul 30, 2009, at 10:28 AM, Konstantin Kolinko wrote: 2009/7/30 DIGLLOYD INC : How can I resolve this

Re: DigestAuthenticator failure: java.sql.SQLException: Operation not allowed after ResultSet closed

2009-07-31 Thread DIGLLOYD INC
Chris, Thank you. Any snippet on the right way to to the Realm/Resource thing? It's been so long I don't remember the right way Lloyd On Jul 30, 2009, at 12:13 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Diglloyd, On 7/30/2009 1:28 PM, Konstantin Kolinko

Re: DigestAuthenticator failure: java.sql.SQLException: Operation not allowed after ResultSet closed

2009-08-03 Thread DIGLLOYD INC
, DIGLLOYD INC wrote: Thank you. Any snippet on the right way to to the Realm/Resource thing? It's been so long I don't remember the right way Simple: just put this in your WEB-INF/context.xml file: Obviously, fill-in the appropriate values above. You should also have in your web.xml