The Apache Tomcat team announces the immediate availability of Apache
Tomcat 7.0.2 beta.
Apache Tomcat 7.0 includes new features over Apache Tomcat 6.0,
including support for the new Servlet 3.0, JSP 2.2 and EL 2.2
specifications, web application memory leak detection and prevention,
improved secu
Thank you so much for your response!! To answer your questions:
1. Yes, they are self-signed certificates.
2. Yes, I am dealing with only one client. I am using firefox.
Here is the tomcat.keystore entry: (i believe this will be my
ServerPrivateKey)
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Wesley,
On 8/19/2010 5:04 PM, Wesley Acheson wrote:
> Maybe its just be but I still don't see where uadc is declared or even
> imported.
...or even used.
I'm guessing that the bad code exists outside of this login servlet.
- -chris
-BEGIN PGP S
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yawar,
On 8/19/2010 3:27 PM, Yawar Saeed Khan/ITG/Karachi wrote:
> your comments on my current code tells me that this code is not bad,
> but I should check out tomcat's container managed logins... right?
This code seems to be doing more work than ne
- "Rainer Jung" wrote:
> On 19.08.2010 18:55, Igor Galić wrote:
> >> Use it as you like. As Rainer has hinted, the apache wiki would be
> a
> >> good place for documentation :)
> >
> > Excellent. Thank you very much, will do that.
>
> URL: http://wiki.apache.org/tomcat/ :)
Done: http://wik
On 19.8.2010 22:35, aravidu wrote:
I created the keystore and truststore too. keystore has a PrivateKeyEntry
and truststore has a trustedCertEntry.
Are those self-signed certificates?
Could you provide exact commands you used to create them?
I believe you must have one key pair for server, an
Did you finally figure out how to fix this issue? I am having the same issue
today..
Can you please help, if you happen to look at this? The only change is I am
using tomcat 6.0
Thanks much.
-A
Ron Perkins-2 wrote:
>
> Hi All,
>
> I have done the following to create a Trust Store for Tomcat
Maybe its just be but I still don't see where uadc is declared or even
imported.
On Thu, Aug 19, 2010 at 10:26 PM, Yawar Saeed Khan/ITG/Karachi <
yawar.sa...@mcb.com.pk> wrote:
> yea I did attach a .java file, anyways I am posting the code here;
>
> package org.mcb.services;
> import java.io.IOEx
yea I did attach a .java file, anyways I am posting the code here;
package org.mcb.services;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.htt
Hi All,
I am trying to setup mutual authentication for an app in tomcat/webapps/
folder.
I have done the following to create a Trust Store for Tomcat 6.0 to use:
I created the keystore and truststore too. keystore has a PrivateKeyEntry
and truststore has a trustedCertEntry.
Here is my server
On Thu, 19 Aug 2010 21:33:24 +0200, André Warnier wrote:
> li...@cgi-net.ch wrote:
>> Hi List,
>>
>> I'm running mod_jk on a apache 2.2.14 connecting to a second host,
>> running
>> tomcat 5 server with a third party application.
>> This application is configured to display some company internal
Client side validation is for convenience and user feedback. Server side
validation is still required. Nothing requires a user to use a browser, or to
not use extension like Fiddle or Tamper to play with the information once it's
passed your validation scripts.
. . . just my two cents.
/mde/
Sorry can't see it. Are you sure you attached it? you could use something
like pastebin if the mail list does accept attachments
On Thu, Aug 19, 2010 at 9:27 PM, Yawar Saeed Khan/ITG/Karachi <
yawar.sa...@mcb.com.pk> wrote:
> source code is attached;
>
> suggestions are welcome.
>
>
On Thu, 19 Aug 2010 21:35:40 +0200, wrote:
> On Thu, 19 Aug 2010 21:28:25 +0200, Rainer Jung
> wrote:
>> On 19.08.2010 21:17, li...@cgi-net.ch wrote:
>>> On Thu, 19 Aug 2010 20:57:57 +0200, Rainer
> Jung
>>> wrote:
On 19.08.2010 20:27, li...@cgi-net.ch wrote:
> Hi List,
>
> I'm r
On Thu, Aug 19, 2010 at 6:25 PM, Len Popp wrote:
> On Thu, Aug 19, 2010 at 12:01, Christopher Schultz
> wrote:
> > The servlet specification mandates this behavior. Tomcat simply must
> > support it. The spec says nothing of configurability, so Tomcat does not
> > provide any. Hence the need to
On Thu, 19 Aug 2010 21:28:25 +0200, Rainer Jung
wrote:
> On 19.08.2010 21:17, li...@cgi-net.ch wrote:
>> On Thu, 19 Aug 2010 20:57:57 +0200, Rainer
Jung
>> wrote:
>>> On 19.08.2010 20:27, li...@cgi-net.ch wrote:
Hi List,
I'm running mod_jk on a apache 2.2.14 connecting to a second h
thanks for your constructive comments, as I mentioned that "bad, bad, bad" code
is out. no longer in the application...
your comments on my current code tells me that this code is not bad, but I
should check out tomcat's container managed logins... right?
plus I would like to mention that I h
li...@cgi-net.ch wrote:
Hi List,
I'm running mod_jk on a apache 2.2.14 connecting to a second host, running
tomcat 5 server with a third party application.
This application is configured to display some company internal
information when accessing the page directly without any subdirectory:
like:
source code is attached;
suggestions are welcome.
From: Wesley Acheson [mailto:wesley.ache...@gmail.com]
Sent: Fri 20-Aug-10 12:38 AM
To: Tomcat Users List
Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux
Okay I've a little tehory could you post the ent
On 19.08.2010 21:17, li...@cgi-net.ch wrote:
On Thu, 19 Aug 2010 20:57:57 +0200, Rainer Jung
wrote:
On 19.08.2010 20:27, li...@cgi-net.ch wrote:
Hi List,
I'm running mod_jk on a apache 2.2.14 connecting to a second host,
running
tomcat 5 server with a third party application.
This application
On Thu, 19 Aug 2010 20:57:57 +0200, Rainer Jung
wrote:
> On 19.08.2010 20:27, li...@cgi-net.ch wrote:
>> Hi List,
>>
>> I'm running mod_jk on a apache 2.2.14 connecting to a second host,
>> running
>> tomcat 5 server with a third party application.
>> This application is configured to display some
I now have one war that redeploys correctly (Cavs.war) and one that
does not redeploy (blview.war)
$ ls -l work/Catalina/localhost/
total 0
drwxrwx---+ 1 Administrators SYSTEM 0 2010-08-19 14:35 Cavs
drwxrwx---+ 1 Administrators SYSTEM 0 2010-08-19 14:01 blview (todays date)
$ ls -l webapps/
tot
On 19.08.2010 20:27, li...@cgi-net.ch wrote:
Hi List,
I'm running mod_jk on a apache 2.2.14 connecting to a second host, running
tomcat 5 server with a third party application.
This application is configured to display some company internal
information when accessing the page directly without an
Okay I've a little tehory could you post the entire code for loginmanager.
How is udac declared? If its a class variable then *ITS NOT THREAD SAFE*.
As a basic rule don't declare class variables in a servlet (There are
exceptions to this rule but you shouldn't under normal circumstances)
Hi List,
I'm running mod_jk on a apache 2.2.14 connecting to a second host, running
tomcat 5 server with a third party application.
This application is configured to display some company internal
information when accessing the page directly without any subdirectory:
like: http:///
A second applica
On 8/19/2010 11:28 AM, Yawar Saeed Khan/ITG/Karachi wrote:
> Chuck, what you say makes sense but I check the behavior on windows.
All that says to me is that your testing environment on Windows is inadequate.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MAT
On 19.08.2010 18:55, Igor Galić wrote:
Use it as you like. As Rainer has hinted, the apache wiki would be a
good place for documentation :)
Excellent. Thank you very much, will do that.
URL: http://wiki.apache.org/tomcat/ :)
---
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Estanislao,
On 8/16/2010 4:34 AM, Estanislao Gonzalez wrote:
> thanks a lot for your help! I've solved the matter but I have still some
> questions and some interesting findings I would like to share, so please
> continue reading this email :-)
Glad
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yawar,
On 8/19/2010 11:28 AM, Yawar Saeed Khan/ITG/Karachi wrote:
> Chuck, what you say makes sense but I check the behavior on windows.
> the problem is in Linux environment only. I would imagine that tomcat
> configuration might be different on both
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yawar,
I'm marking this as off-topic for /your/ request. I just have some
comments for you. Take them or leave them.
On 8/19/2010 11:53 AM, Yawar Saeed Khan/ITG/Karachi wrote:
> Ok, let me share my source code with you...
>
> my index.jsp page has a
> Use it as you like. As Rainer has hinted, the apache wiki would be a
> good place for documentation :)
Excellent. Thank you very much, will do that.
i
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additiona
On Thu, Aug 19, 2010 at 12:01, Christopher Schultz
wrote:
> The servlet specification mandates this behavior. Tomcat simply must
> support it. The spec says nothing of configurability, so Tomcat does not
> provide any. Hence the need to write a filter to achieve your desired
> behavior.
That's no
Konstantin, it seems that I will have to use
HttpServletResponse.encodeRedirectURL( ) in every hyperlink ? will that solve
my sessions problem?
From: Konstantin Kolinko [mailto:knst.koli...@gmail.com]
Sent: Thu 19-Aug-10 10:00 PM
To: Tomcat Users List
Subject: R
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Wesley,
On 8/19/2010 3:57 AM, Wesley Acheson wrote:
> We disabled both accepting of URL sessionId's and the session encoding
> URLs. Our application has worked well since with no problems. In fact
> better as we can cache certain pages in their entiri
2010/8/19 Yawar Saeed Khan/ITG/Karachi :
> Ok, let me share my source code with you...
>
> HttpSession session = request.getSession(true);
> response.sendRedirect("main.jsp"); //logged-in page
See documentation on HttpServletResponse.encodeRedirectURL( ) method.
I
Am Mittwoch, den 18.08.2010, 20:45 + schrieb Igor Galić:
> > org.apache.catalina.realm.JNDIRealm.getUserByPattern(JNDIRealm.java:1269)
> > This means, that you specified userPattern='...' in your realm
> > configuration. And you since your pattern looks like
> > '(uid={0})(...)' it is probably
Am Donnerstag, den 19.08.2010, 09:36 +0200 schrieb Rainer Jung:
> On 18.08.2010 22:45, Igor Galić wrote:
> >
> >> org.apache.catalina.realm.JNDIRealm.getUserByPattern(JNDIRealm.java:1269)
> >> This means, that you specified userPattern='...' in your realm
> >> configuration. And you since your patt
Ok, let me share my source code with you...
my index.jsp page has a html form which submits the form data to a servlet
called loginmanager.
this is the code inside doPost function;
try {
userbean user = new userbean(); // usebean is a class the has
setter and getter funct
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Pid,
On 8/19/2010 3:25 AM, Pid wrote:
> On 19/08/2010 04:50, Christopher Schultz wrote:
>> The difference is probably that in other installations you haven't
>> deployed both applications to the root ("/") context path. You never did
>> tell us how yo
Chuck, what you say makes sense but I check the behavior on windows. the
problem is in Linux environment only. I would imagine that tomcat configuration
might be different on both machines, but have no clue abt configuring tomcat.
(maybe session cache issue?) I just installed tomcat 6.0.26 on bo
My project-name is "Server" - but I guess that your answer still is
correct. Thanks!
Den 19-08-2010 05:06, Christopher Schultz skrev:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mr. Andersen,
On 8/18/2010 7:16 AM, K A wrote:
user open part
/Server/user/*
use
On 19/08/2010 13:32, Scott Hamilton wrote:
> Sorry to pull the thread back to my original problem, but I have one
> more question here.
>
> So far it looks like there's no way to prevent JSESSIONIDs from being
> injected into URLs that Tomcat might encode unless you implement a
> servlet filter to
On 19/08/2010 14:02, Caldarale, Charles R wrote:
> Yawar Saeed Khan/ITG/Karachi wrote:
>>
>> I have developed a web application using jsp and servlets with
>> oracle database.
>>
>> The application is working fine on windows,
>
> Or at least running on that platform hasn't uncovered the latent bu
Hello everybody.
We have an application which was developed using comet and gwt and it
was build over the tomcat 6.0.16 code. It was working very well and as
according to the documentation, we are closing all the come events when
we reach the event type ERROR and END. The application has never
On Thu, Aug 19, 2010 at 9:11 AM, Caldarale, Charles R
wrote:
>> From: Sean McEligot [mailto:seanmc...@gmail.com]
>> Subject: Re: war not redeploying
>>
>> I probably just saw another Valve commented out there (comet) and
>> added this one in the same place. Where should it go?
>
> Normally, one ju
Any interest in the code moving to the ASF incubator?
On Aug 16, 2010, at 4:06 PM, Networked wrote:
>
>
> Myself and Peary Chiu have created a lightweight utility for
> administering Tomcat from the command line in our copious amounts of
> free time on the weekends.
> This is a very rough utili
> From: Sean McEligot [mailto:seanmc...@gmail.com]
> Subject: Re: war not redeploying
>
> I probably just saw another Valve commented out there (comet) and
> added this one in the same place. Where should it go?
Normally, one just uncomments the existing AccessLogValve in conf/server.xml.
- Chu
Ben Souther wrote:
On Thu, 2010-08-19 at 12:45 +0200, André Warnier wrote:
Yawar Saeed Khan/ITG/Karachi wrote:
Hi,
I have developed a web application using jsp and servlets with oracle
database.
and with Tomcat also ?
Look in the subject line. :)
Ok, I overlooked the subject line (*).
On Thu, Aug 19, 2010 at 3:41 AM, Pid wrote:
> On 18/08/2010 20:04, Sean McEligot wrote:
>>> > By the way, please create or edit your
>>> > webapp's META-INF/context.xml, not the default one.
>> I've reset context.xml back to default except jdbc resources and access
>> logging.
>>
>
> How are y
> From: 魏超 [mailto:nnever...@gmail.com]
> Subject: Problem ReverseAjax.dwr on Tomcat7.0.0
>
> Tomcat: Tomcat 7.0.0 32-bit
Please test again on 7.0.2. Many, many bugs have been fixed between 7.0.0 and
7.0.2, so the issue you're having may have already been addressed.
- Chuck
THIS COMMUNICAT
Yawar Saeed Khan/ITG/Karachi wrote:
>
> I have developed a web application using jsp and servlets with
> oracle database.
>
> The application is working fine on windows,
Or at least running on that platform hasn't uncovered the latent bugs in your
webapp.
> but the problem arises when we deploy
On Wed, Aug 18, 2010 at 3:57 PM, Mark Eggers wrote:
> Are you starting and stopping Tomcat under Cygwin? I've seen some interesting
> file locking problems (as well as the "terminate batch job?" question) when
> running Windows applications under Cygwin.
>
> How are you deploying your web applicat
Sorry to pull the thread back to my original problem, but I have one
more question here.
So far it looks like there's no way to prevent JSESSIONIDs from being
injected into URLs that Tomcat might encode unless you implement a
servlet filter to override that behavior.
My follow-up question is this
On Thu, 2010-08-19 at 12:45 +0200, André Warnier wrote:
> Yawar Saeed Khan/ITG/Karachi wrote:
> > Hi,
> >
> >
> > I have developed a web application using jsp and servlets with oracle
> > database.
> >
> and with Tomcat also ?
Look in the subject line. :)
> >
> >
> >
> > The application
Wesley Acheson wrote:
Pardon I knew that, I must have been having an off day. Yes what I said is
wrong.
And you are having another, it seems. Isn't this the wrong list for that ?
Oh well, there are just weeks like that..
-
To
Pardon I knew that, I must have been having an off day. Yes what I said is
wrong.
On Thu, Aug 19, 2010 at 12:46 PM, Bobby Jack wrote:
> --- On Wed, 8/18/10, Wesley Acheson wrote:
>
> No-one spotted the deliberate mistake? ;)
>
> > 4 values: are Top, bottom, left and right.
>
> should be
>
> 4 v
Yawar Saeed Khan/ITG/Karachi wrote:
Hi,
I have developed a web application using jsp and servlets with oracle
database.
and with Tomcat also ?
The application is working fine on windows,
Windows version, JVM version, tomcat version ?
but the problem arises when
we deploy it on Linux
Hi,
I have developed a web application using jsp and servlets with oracle
database.
The application is working fine on windows, but the problem arises when
we deploy it on Linux(64bit), we get session issues in the application.
The session variables get mixed up and we can see previously lo
On 19/08/2010 08:36, Rainer Jung wrote:
> On 18.08.2010 22:45, Igor Galić wrote:
>>
> Felix: would you like to contribute your code? I didn't read it in
> detail but I guess it is very generic and would be a nice addon to the
> standard JNDIRealm?
+1
LDAP/JNDI seems tricky for a lot of people, t
Thanks folks, I submitted the issue as a bug:
https://issues.apache.org/bugzilla/show_bug.cgi?id=49779
Hans
2010/8/19 Christopher Schultz :
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Pid/Hans,
>
> On 8/16/2010 5:53 AM, Pid wrote:
>> On 16/08/2010 09:52, Hans Wahn wrote:
>>> I'd like
Dear Weic,
I think the issue more belongs to DWR-Users Mailing List than here. Some
relevant information that might help:
Tomcat 7 uses Servlet 3.0. To avoid certain types of cross-site scripting
attacks, Servlet 3.0 supports HttpOnly cookies. HttpOnly cookies are not
exposed to the client-sid
魏超 wrote:
> *System:* Windows7
> *Tomcat: *Tomcat 7.0.0 32-bit Windows zip( Simply unzip it, do nothing on
> configure file)
> *DWR:* DWR2
>
> Firstly sorry for my English.(I'm not good at it[?])
No problem, 魏超, we're even worse in .. ?
>
> I'm working on a project build on Appfuse. And we add
2010/8/12 Thomas Treitlinger :
> Hello,
>
> I have a number of JSP pages which use the JSTL core library to set a
> request attribute like this:
> FOO-VALUE
>
> The JSPs then forward to a Servlet like this:
>
>
> The Servlet later invokes
> String s = (String) request.getAttribute("foo")
>
Maybe
*System:* Windows7
*Tomcat: *Tomcat 7.0.0 32-bit Windows zip( Simply unzip it, do nothing on
configure file)
*DWR:* DWR2
Firstly sorry for my English.(I'm not good at it[?])
I'm working on a project build on Appfuse. And we add DWR reverseAjax into
it. You know, it works well on Tomat6. But whe
On 18/08/2010 20:04, Sean McEligot wrote:
>> > By the way, please create or edit your
>> > webapp's META-INF/context.xml, not the default one.
> I've reset context.xml back to default except jdbc resources and access
> logging.
>
How are you configuring access logging in conf/context.xml?
An
Pid wrote:
...
After a cursory look through the server.xml, (cursory because of the
trauma of wading through comments), I note:
The OP made reference to the jvmRoute="jvmAlfresco1", so I think we need
to understand what's going on there to find a resolution.
I saw that too, but I believe th
I was going to write this off list because its off topic, but maybe
the information is useful.
On Thu, Aug 19, 2010 at 5:19 AM, Christopher Schultz
wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Wesley,
>
> On 8/17/2010 6:05 PM, Wesley Acheson wrote:
>> I know of no better way to fi
Christopher Schultz wrote:
You'd be amazed how fast a
reproducable bug can be fixed ;)
Particularly if it can also be repeated or duplicated.
;-)
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional co
On 19.08.2010 09:25, Pid wrote:
On 19/08/2010 04:50, Christopher Schultz wrote:
Robin,
On 8/18/2010 5:57 PM, Robin Diederen wrote:
That's interesting to say the least.
I agree with André's assessment: you have a cookie collision. See below
for hints for removing the conflict.
Without cooki
On 18/08/2010 16:38, Konstantin Kolinko wrote:
> 2010/8/18 Pid :
>> On 18/08/2010 16:09, Amir Wasim wrote:
>>> org.eclipse.jdt.internal.compiler.classfmt.ClassFormatException
>>> at
>>> org.eclipse.jdt.internal.compiler.classfmt.ClassFileReader.(ClassFileReader.java:342)
>>> at
>>
On 18/08/2010 21:51, Ron Wheeler wrote:
>
> *C:\Program Files\apache-tomcat-6.0.29\bin>echo %JAVA_HOME%*
> *C:\Program Files\Java\jdk1.6.0_17\bin*
and
> C:\Documents and Settings\Jon>java -version
> java version "1.6.0_21"
Spot the difference between these two things.
Then, uninstall Tomcat a
On 18.08.2010 22:45, Igor Galić wrote:
org.apache.catalina.realm.JNDIRealm.getUserByPattern(JNDIRealm.java:1269)
This means, that you specified userPattern='...' in your realm
configuration. And you since your pattern looks like
'(uid={0})(...)' it is probably wrong. You have specified
userSear
To add the obvious: Use your browser to have a look at your JSESSIONID
cookies (and any other cookies of the same name used by both apps) after
loging in to LifeRay and after loging in to Alfresco. Write down domain
and path properties and see whether they conflict (whether one of the
cookies f
On 18.08.2010 20:41, laredotornado wrote:
Hi,
I'm using Tomcat 6.0.26, Java 1.6 on Linux kernel 2.6.18-164.11.1.el5. I'm
trying to figure out if there if we can figure out how much of our allocated
heap memory is actually being used. Grateful for any thoughts you might
have, - Dave
Caution
On 19/08/2010 04:50, Christopher Schultz wrote:
> Robin,
>
> On 8/18/2010 5:57 PM, Robin Diederen wrote:
>> That's interesting to say the least.
>
> I agree with André's assessment: you have a cookie collision. See below
> for hints for removing the conflict.
>
>> Without cookies enabled, I can'
75 matches
Mail list logo