Information re: authenticate() Limits

2006-03-09 Thread Marsh David W Maj AFIT/ENG
I'm looking at the authenticate methods (package org.apache.catalina.realm.JDBCRealm and JAASRealm, for example) and wonder what sort of limitations are intended for this code. Are there restrictions regarding which packages can have instances of these classes and/or call "special" methods that h

RE: Building Tomcat

2006-01-31 Thread Marsh David W Maj AFIT/ENG
First time building it, I assume? I had problems as well. Hopefully this helps. __ Make sure you: download/unzip the source code from http://tomcat.apache.org/download-55.cgi (this'll be in your ${tomcat-source} directory), install Subversion via http://subversion.tigris.or

build.xml Change Required?

2006-01-25 Thread Marsh David W Maj AFIT/ENG
Note for whoever creates the build.xml scripts: This is my first time building the system from source. After downloading and unzipping (to my XP box) the source code from http://tomcat.apache.org/download-55.cgi, installing Subversion via http://subversion.tigris.org/project_packages.html, and fo

RE: Build Problems

2006-01-24 Thread Marsh David W Maj AFIT/ENG
M To: Tomcat Developers List Subject: Re: Build Problems Hi David, in order to build tomcat from svn, you need svn installed and on the path. Thanks, Keith Marsh David W Maj AFIT/ENG wrote: > java.io.IOException: CreateProcess: svn checkout http://svn.apache.org/repos/asf//tomcat/current/tc5.5

Build Problems

2006-01-24 Thread Marsh David W Maj AFIT/ENG
<> I'm ready to poke around the code and, following the build directions (and many variations!) at http://tomcat.apache.org/tomcat-5.5-doc/building.html, am still unable to get the code downloaded and compiled. I'm on an XP box behind a firewall. The verbose log is attached. Assistance greatly

RE: Security Assurance

2006-01-10 Thread Marsh David W Maj AFIT/ENG
Mladen Turk wrote: > Marsh David W Maj AFIT/ENG wrote: > > Tomcat Developers, > > > > While I understand that the libraries and extensions used by Tomcat > > *should* provide that assurance, what would happen if someone > > inadvertently wrote some code th

Security Assurance

2006-01-10 Thread Marsh David W Maj AFIT/ENG
Tomcat Developers, I'm early in some research focusing on software analyses, specifically those related to data security. As a part of this work I'd like to show through the theory and application that there is in fact no way for protected information to "leak" out from that code designated to ha