Re: Appscan Issues

2016-04-09 Thread Mark Thomas
On 08/04/2016 14:40, Kikkeri, Amith wrote: > Thanks... I will me more detailed. > We don't use Apache HTTPD or ngnix. It's just tomcat7. Below is my connector > configuration. > > maxThreads="150" SSLEnabled="true" scheme="https" secure="true" >clientAuth="false"

Re: Appscan Issues

2016-04-09 Thread Olaf Kock
Am 09.04.2016 um 18:20 schrieb Christopher Schultz: > Olaf, > > On 4/8/16 9:49 AM, Olaf Kock wrote: > > > I'm typically configuring a HTTPS end point in Apache httpd and > > forward to tomcat. I feel that the documentation for explicit > > cipher-choice in Apache httpd is a lot better (and more wi

Re: Appscan Issues

2016-04-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Olaf, On 4/8/16 9:49 AM, Olaf Kock wrote: > Am 08.04.2016 um 15:40 schrieb Kikkeri, Amith: >> Thanks... I will me more detailed. We don't use Apache HTTPD or >> ngnix. It's just tomcat7. Below is my connector configuration. >> >> > protocol="org.apac

Re: JNDIRealm random authentication issue

2016-04-09 Thread Felix Schumacher
Am 06.04.2016 um 11:10 schrieb Arnaud Mergey: Hello, I have a tomcat 8.0.23 configured to authenticate against and Active Directory with LDAP realm. Randomly I have authentication failures with stack trace above. I didn not find anything except an old post mentionning same issue I am facing,

Re: JSESSIONID changed without notice

2016-04-09 Thread Felix Schumacher
Am 07.04.2016 um 17:40 schrieb Arno Schäfer: Hi all, I have the following Problem: we have a very old, some kind of complex webapp, that run under tomcat 7.0.54 on Windows. I have to maintain some functionality and came to a point, what I can't understand. Some requests have to have an authent