Re: [OT] Memory Leak in Tomcat

2011-03-06 Thread הילה
Thanks :] This was the task I was required to do, wit no question asked, cause this is a requirement for our application to pass some major barriers. so.. :] Hila 2011/3/7 Christopher Schultz > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > הילה, > > On 3/6/2011 4:49 AM, הילה wrote: > >

Re: [OT] Memory Leak in Tomcat

2011-03-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 3/6/2011 4:49 AM, הילה wrote: > > Security seems to be always in the hands of the wrong people. > > No need for insults here, this is a new requirement which I'm not familiar > with, and that's why I asked you guys.. I don't think Jorge was

Re: [OT] Memory Leak in Tomcat

2011-03-06 Thread הילה
Security seems to be always in the hands of the wrong people. No need for insults here, this is a new requirement which I'm not familiar with, and that's why I asked you guys.. Instead of the JTDS, can I use Tomcat Spengo? will it provide same results, as using a domain user for the tomcat windo

Re: [OT] Memory Leak in Tomcat

2011-03-01 Thread Jorge Medina
I got a good laugh with your message. Security seems to be always in the hands of the wrong people. Once I asked for the algorithm used to hash the passwords (that happened to be HMAC SHA-1) into a database, if I was going to authenticate the users, I needed to use the same algorithm. I did not a

Re: [OT] Memory Leak in Tomcat

2011-02-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/28/2011 5:17 AM, הילה wrote: > How can I encrypt the password inside the xml file? 0. $file = conf/server.xml 1. Use your favorite encryption tool to encrypt the password and shove it into $file 2. Use that same tool in some code you ha

RE: [OT] Memory Leak in Tomcat

2011-02-28 Thread Caldarale, Charles R
> From: הילה [mailto:hilavalen...@gmail.com] > Subject: Re: [OT] Memory Leak in Tomcat > How can I encrypt the password inside the xml file? Short answer: pointless exercise. Long answer: search the archives. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PR

Re: [OT] Memory Leak in Tomcat

2011-02-28 Thread הילה
continue to the discussion- How can I encrypt the password inside the xml file? Thanks Hila בתאריך 27 בפברואר 2011 19:37, מאת הילה : > Original: > Does this happen all the time? Under what conditions? Are you able to > build a patched version of Tomcat in a test environment to test a fix I > ha

Re: [OT] Memory Leak in Tomcat

2011-02-27 Thread הילה
Original: Does this happen all the time? Under what conditions? Are you able to build a patched version of Tomcat in a test environment to test a fix I have? What version of Java and Tomcat are you running? Hey I'm not sure if you refer the question to me, since the whole topic shifted to an off t

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeffrey, On 2/25/2011 11:13 AM, Jeffrey Janner wrote: > Thanks for adding some more well-thought-out reasoning to this > discussion. You've pointed out some issues that the rest of us had > addressed, or even thought about, and pointing out that real

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 2/25/2011 10:47 AM, André Warnier wrote: > [Thread hijacking] is more annoying, because quite a few people have their > client set > to display messages "by thread" (a hierarchical display where messages > neatly appear under the ones they

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris, On 2/25/2011 4:54 AM, chris derham wrote: > It is far simpler to craft a fairly simple jsp > page, that allows posting arbitrary SQL to the same jsp, which then asks > tomcat for a connection, and then runs the SQL and displays the results. Tr

RE: [OT] Memory Leak in Tomcat

2011-02-25 Thread Jeffrey Janner
> From: cjder...@gmail.com [mailto:cjder...@gmail.com] On Behalf Of chris > derham > Sent: Friday, February 25, 2011 3:55 AM > To: Tomcat Users List > Subject: Re: [OT] Memory Leak in Tomcat > > All, > > I've only been on this mailing list for a couple of week

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread André Warnier
chris derham wrote: All, I've only been on this mailing list for a couple of weeks, so am still not quite sure of the etiquette. I know people get upset about top posting I think that's more a matter of personal preference. It makes it a bit harder sometimes to connect a response with the orig

Re: [OT] Memory Leak in Tomcat

2011-02-25 Thread chris derham
All, I've only been on this mailing list for a couple of weeks, so am still not quite sure of the etiquette. I know people get upset about top posting or replying to an existing email and changing the subject only. Not sure about the intricacies of when people should attempt to help others on the

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread André Warnier
Jeffrey Janner wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Thursday, February 24, 2011 3:43 AM To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat Jeffrey Janner wrote: .. Not sure exactly what Windows does once you've entered a verified

RE: [OT] Memory Leak in Tomcat

2011-02-24 Thread Jeffrey Janner
> -Original Message- > From: peter.crowth...@googlemail.com > [mailto:peter.crowth...@googlemail.com] On Behalf Of Peter Crowther > Sent: Thursday, February 24, 2011 3:57 AM > To: Tomcat Users List > Subject: Re: [OT] Memory Leak in Tomcat > > On 24 February 2

RE: [OT] Memory Leak in Tomcat

2011-02-24 Thread Jeffrey Janner
> -Original Message- > From: André Warnier [mailto:a...@ice-sa.com] > Sent: Thursday, February 24, 2011 3:43 AM > To: Tomcat Users List > Subject: Re: [OT] Memory Leak in Tomcat > > Jeffrey Janner wrote: > .. > >> > > > > Not sure exactly wha

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread Peter Crowther
On 24 February 2011 09:42, André Warnier wrote: > Jeffrey Janner wrote: > .. > >> >>> >> Not sure exactly what Windows does once you've entered a verified user/pw >> combination for a service. I'm guessing that it stores the password >> somehow, because if you change the password, the service wo

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread André Warnier
Jeffrey Janner wrote: .. Not sure exactly what Windows does once you've entered a verified user/pw combination for a service. I'm guessing that it stores the password somehow, because if you change the password, the service won't start next time. It is stored in whatever format, encrypte

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread הילה
I'll try to check what you suggested. sounds like something that maybe shed some light on this issue. Thanks :] 2011/2/23 André Warnier > הילה wrote: > >> Yes, I've read you other mail about the Jprofiler. I've run the Jprofiler >> for a weak until it generated a stuck process on the DB and cra

Re: [OT] Memory Leak in Tomcat

2011-02-24 Thread הילה
istopher Schultz [mailto:ch...@christopherschultz.net] > > Sent: Wednesday, February 23, 2011 10:11 AM > > To: Tomcat Users List > > Subject: Re: [OT] Memory Leak in Tomcat > > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > הילה, > >

RE: [OT] Memory Leak in Tomcat

2011-02-23 Thread Jeffrey Janner
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Wednesday, February 23, 2011 10:11 AM > To: Tomcat Users List > Subject: Re: [OT] Memory Leak in Tomcat > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > הי

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread André Warnier
הילה wrote: Yes, I've read you other mail about the Jprofiler. I've run the Jprofiler for a weak until it generated a stuck process on the DB and crashed the application (even though it ran on the app server, and not the DB server) I'm not too familiar with Tomcat tweaks and java monitoring, so i

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread הילה
Yes, I've read you other mail about the Jprofiler. I've run the Jprofiler for a weak until it generated a stuck process on the DB and crashed the application (even though it ran on the app server, and not the DB server) I'm not too familiar with Tomcat tweaks and java monitoring, so i'll try to go

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:51 AM, הילה - צוות אגורה wrote: > the user that runs the tomcat service is a domain user, but I specify the > user name and password of this user under "log on" tab on the service > properties. > it's not a problem since the pass

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread הילה - צוות אגורה
Hey, the user that runs the tomcat service is a domain user, but I specify the user name and password of this user under "log on" tab on the service properties. it's not a problem since the password is encrypted, but in the xml file it's in clear text. so.. the problem for me is the memory leak tha

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:38 AM, הילה wrote: > I've explained it in my mail :] > change the user that runs the tomcat service to a domain user with > permissions to the DB So the domain user is password-less? How does the service start without credential

Re: [OT] Memory Leak in Tomcat

2011-02-23 Thread הילה
I've explained it in my mail :] change the user that runs the tomcat service to a domain user with permissions to the DB place ntlmauth.dll (from jtds-1.2.5 package) under c:\windows\system32 place jtds-1.2.5.jar (from jtds-1.2.5 package) in the tomcat 6.0\lib folder and it works. :] 2011/2/23 Ch

Re:[OT] Memory Leak in Tomcat

2011-02-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 הילה, On 2/23/2011 10:29 AM, הילה wrote: > I trust the people in the company, but the company's work is with sites that > any user all over the internet can access. so we want to perform a damage > control if some hacker would gain access to our web s