Re: Tomcat j_security_check skips authentication after timeout?

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rop, On 12/21/12 4:01 PM, rop wrote: > I got the responsibility of maintaining a legacy web-application > running on Tomcat 5.5.36 and using the *j_security_check* feature > for user-authentication. Obligatory warning: Tomcat 5.5.x is no longer supp

Tomcat j_security_check skips authentication after timeout?

2012-12-21 Thread rop
I got the responsibility of maintaining a legacy web-application running on Tomcat 5.5.36 and using the *j_security_check* feature for user-authentication. One problem scenario I am looking into: When you first start the browser and logon to the application, everything works OK The applicati

Re: jvmRoute with multiple AJP Connectors for one Engine

2012-12-21 Thread Robert Anderson
Chris, This strategy is working well, we have some statistics and controls that are easier to implement and maintain if we keep separate connectors. Currently, we have only two Tomcats, each one with 40 applications (focus in justice, virtual processes) deployed on it and processing 160 req/sec.

Re: Reporting a revoked certificate

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cédric, On 12/21/12 9:34 AM, Cédric Couralet wrote: >>> >> Thanks Dan - which access log should I look at? all of the >> tomcat logs don't show anything. I've got it configured with APR >> & TCNATIVE >> > > Hello, > > I'm not sure you could ge

Re: jvmRoute with multiple AJP Connectors for one Engine

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Robert, On 12/20/12 8:39 PM, Robert Anderson wrote: > Now, the "trick": ... Include > conf.d/mod_jk.mounts ... > > ... Include conf.d/mod_jk_sec.mounts ... > Oh, of course. It's still not necessary unless you have some other kind of options t

Re: Tomcat 7.0.33 just stops without any errors...

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 12/20/12 6:16 PM, Tony Anecito wrote: > Thanks I did a search through all folder for those types of files > and none found. > > I am thinking it ran out of a resource. > > I will keep trying. Anything in the Window event log? - -chris -

Re: Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
On Fri, Dec 21, 2012 at 10:30 AM, Daniel Mikusa wrote: > On Dec 21, 2012, at 9:28 AM, Will Nordmeyer wrote: > >> On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa wrote: >>> On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: >>> At long last, I have tomcat configured, I have revoked certificate

Re: Reporting a revoked certificate

2012-12-21 Thread Daniel Mikusa
On Dec 21, 2012, at 9:28 AM, Will Nordmeyer wrote: > On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa wrote: >> On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: >> >>> At long last, I have tomcat configured, I have revoked certificates to >>> test with… >> >> Nice! >> >>> my question today...

Re: Reporting a revoked certificate

2012-12-21 Thread Mark Thomas
On 21/12/2012 14:51, Martin Gainty wrote: > > things to check Don't bother. This is yet more irrelevant nonsense from Martin. Mark > > 1)are you implementing mod_ssl or any ssl modules in apache > 2)if not mod_ssl are you implementing ssl in Tomcat bio-connector > > 3)if not mod_ssl are you

Re: Reporting a revoked certificate

2012-12-21 Thread Mark Thomas
On 21/12/2012 13:35, Daniel Mikusa wrote: > On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: > >> At long last, I have tomcat configured, I have revoked certificates >> to test with… > > Nice! > >> my question today... >> >> When I try using a revoked certificate, I get the lovely and >> mea

RE: Reporting a revoked certificate

2012-12-21 Thread Martin Gainty
things to check 1)are you implementing mod_ssl or any ssl modules in apache 2)if not mod_ssl are you implementing ssl in Tomcat bio-connector 3)if not mod_ssl are you implementing ssl in Tomcat nio-connector http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support Martin___

Re: Reporting a revoked certificate

2012-12-21 Thread Cédric Couralet
> > Hello, > > I'm not sure you could get an error page. The ssl dialog takes place > before any http communication. So I don't think tomcat can send an > http response if the certificate is revoked. > > You could use openssl s_client to try and connect to your server to > see what is returned from

Re: Reporting a revoked certificate

2012-12-21 Thread Cédric Couralet
>> > Thanks Dan - which access log should I look at? all of the tomcat > logs don't show anything. I've got it configured with APR & TCNATIVE > Hello, I'm not sure you could get an error page. The ssl dialog takes place before any http communication. So I don't think tomcat can send an http res

Re: Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa wrote: > On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: > >> At long last, I have tomcat configured, I have revoked certificates to >> test with… > > Nice! > >> my question today... >> >> When I try using a revoked certificate, I get the lovely an

Re: Reporting a revoked certificate

2012-12-21 Thread Daniel Mikusa
On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: > At long last, I have tomcat configured, I have revoked certificates to > test with… Nice! > my question today... > > When I try using a revoked certificate, I get the lovely and > meaningful "page cannot be displayed." What browser are you

Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
At long last, I have tomcat configured, I have revoked certificates to test with... my question today... When I try using a revoked certificate, I get the lovely and meaningful "page cannot be displayed." So it is properly denying access - but it doesn't provide appear to provide any other feedba

Re: Tomcat common and webapp classloader

2012-12-21 Thread Antonio Manuel Muñiz Martín
It works! Thank you guys! 2012/12/17 Kris Maker : > yea should work > > On Mon, Dec 17, 2012 at 3:28 PM, Olivier Lamy wrote: > >> 2012/12/17 Antonio Manuel Muñiz Martín : >> > Hi Olivier, >> > >> > My fault, I found the problem, I had two spring versions in my >> dependencies. >> > However I have