Re: CSRF errors after upgrade of tomcat 8

2015-12-14 Thread Violeta Georgieva
Hello, 2015-12-15 4:35 GMT+02:00 Baron Fujimoto : > > On Mon, Dec 14, 2015 at 09:12:20PM +, Mark Thomas wrote: > >On 14/12/2015 20:49, Baron Fujimoto wrote: > >> On Fri, Dec 11, 2015 at 05:02:43PM -1000, Baron Fujimoto wrote: > >>> On Sat, Dec 12, 2015 at 12:16:01AM +, Mark Thomas wrote: >

Re: CSRF errors after upgrade of tomcat 8

2015-12-14 Thread Baron Fujimoto
On Mon, Dec 14, 2015 at 09:12:20PM +, Mark Thomas wrote: >On 14/12/2015 20:49, Baron Fujimoto wrote: >> On Fri, Dec 11, 2015 at 05:02:43PM -1000, Baron Fujimoto wrote: >>> On Sat, Dec 12, 2015 at 12:16:01AM +, Mark Thomas wrote: > > > >>> I've confirmed that the problem begins with 8.0.29.

Re: Regarding User in Host Manager

2015-12-14 Thread Christopher Schultz
Divya, On 12/14/15 1:55 PM, Divya Modi wrote: > I am facing problem in login Host Manager I am trying to login but it does > not authenticate so any suggestion how i should access Host Manager in my > VPS of GoDaddy so kindly let me know the solution. > > Even i tried to add in tomcat-users.xml s

Re: Generated Dump file for HeapDumpOnOutOfMemoryError

2015-12-14 Thread Christopher Schultz
Yogesh, On 12/14/15 1:34 AM, Yogesh Patel wrote: > We set -XX:+HeapDumpOnOutOfMemoryError > but we couldn't find any file which contains the heap dump. > As per the docs file name will be "./java_pid.hprof" but there is no > such file generated on OutOFMemoryError. What is the CWD of the Tomcat p

Re: Custom Connector class

2015-12-14 Thread Christopher Schultz
Roel, On 12/12/15 11:17 AM, Roel Storms wrote: > I believe that this is not entirely what I need. As far as I understand the > code it will detect if getInputStream or getReader has been called by the > servlet application. Depending on the usingReader boolean that was set as a > result, it will e

How to use org.apache.catalina.Catalina#findRoleMapping properly?

2015-12-14 Thread Michael Osipov
Hello, I'd like to perform role mapping from technical role names spit out by our realm to application specific ones like Admin, Translator, Manager, etc. Though, the aforementioned method should do it but it isn't called anywhere in the code. I am aware of security-role-ref in web.xml but those

Re: CSRF errors after upgrade of tomcat 8

2015-12-14 Thread Mark Thomas
On 14/12/2015 20:49, Baron Fujimoto wrote: > On Fri, Dec 11, 2015 at 05:02:43PM -1000, Baron Fujimoto wrote: >> On Sat, Dec 12, 2015 at 12:16:01AM +, Mark Thomas wrote: >> I've confirmed that the problem begins with 8.0.29. Looking through the changelog it is hard to see how any of the chan

Re: CSRF errors after upgrade of tomcat 8

2015-12-14 Thread Baron Fujimoto
On Fri, Dec 11, 2015 at 05:02:43PM -1000, Baron Fujimoto wrote: >On Sat, Dec 12, 2015 at 12:16:01AM +, Mark Thomas wrote: >>On 12/12/2015 00:01, Baron Fujimoto wrote: >>> >>> On Fri, Dec 11, 2015 at 09:25:12PM +, Mark Thomas wrote: On 11/12/2015 21:10, Baron Fujimoto wrote: > Afte

Regarding User in Host Manager

2015-12-14 Thread Divya Modi
I am facing problem in login Host Manager I am trying to login but it does not authenticate so any suggestion how i should access Host Manager in my VPS of GoDaddy so kindly let me know the solution. Even i tried to add in tomcat-users.xml still i am facing the problem so let me know if any altern

Re: Enabling X-XSS-Protection

2015-12-14 Thread Jacopo Cappellato
Hi Mark, I have created a ticket and attached a patch to it: https://bz.apache.org/bugzilla/show_bug.cgi?id=58735 Thanks, Jacopo On 08/10/2015, Mark Thomas wrote: > On 08/10/2015, Jacopo Cappellato wrote: >>... >> Do you think that HttpHeaderSecurityFilter should be enhanced to support >> this

Tomcat 7.0.62 fill logs directories from a bad GET request.

2015-12-14 Thread Wyatt Zacharias
So I've been having this one intermittent issue with a tomcat app, where it will occasionally go crazy and spit out gigabytes of logs until the directory fills up. I spent some time tracing through and replaying all of the GET requests that were received around the time that it happened, and I've f

Re: WebEx meeting invitation: Apache Tomcat: TLS Virtual Hosting

2015-12-14 Thread gustavo . avitabile
Quoting Mark Thomas : On 10 December 2015 15:28:03 GMT+00:00, gustavo.avitab...@unina.it wrote: Quoting Mark Thomas : On 08/12/2015 10:19, gustavo.avitab...@unina.it wrote: Hi Mark, I tried to attend this meeting. I connected with WebEx, I could see the slides, but I got no audio. The sam

Re: Context destroy sequence of events

2015-12-14 Thread David kerber
On 12/11/2015 4:36 PM, Mark Thomas wrote: On 11/12/2015 16:41, David kerber wrote: On 12/11/2015 8:30 AM, David kerber wrote: Running TC 8.0.22 with JRE 1.8.0.60 on Windows 2008 R2, as a windows service. Can someone point me to a reference that will tell me exactly what the sequence of events