| 00:32.40 | godzirra | Heh.. welcome to hell. |
| 00:32.49 | godzirra | I finally fixed my problem with getting ldap authentication to work. |
| 00:58.59 | *** join/#tomcat Hellaenergy (~Hellaener@hellaweb.com) |
| 01:31.15 | *** join/#tomcat ph2k (~ph2k@HSE-MTL-ppp66469.qc.sympatico.ca) |
| 02:52.47 | *** join/#tomcat Hellaenergy (~Hellaener@hellaweb.com) |
| 02:53.34 | *** join/#tomcat Phoenix^ (~phoenix@adsl-210-9-126-179.webone.com.au) |
| 02:55.23 | Phoenix^ | Hey guys, just got a quick question... I am trying to open a properties file with database connection information in it inside a webapp but I am unsure where to put the properties file so it can be read |
| 02:56.33 | Phoenix^ | This from a bean that is called from JSP and doesnt have a context that I am aware of... I am new to jsp development |
| 03:58.36 | *** join/#tomcat Hellaenergy_ (~Hellaener@hellaweb.com) |
| 05:01.41 | *** join/#tomcat schlumpf (~vx_schlum@dsl-082-082-069-131.arcor-ip.net) |
| 06:35.53 | *** join/#tomcat jasonb (~jasonb@adsl-66-124-73-250.dsl.sntc01.pacbell.net) |
| 07:05.54 | *** join/#tomcat kernel (~tim@212.174.202.6) |
| 08:00.39 | *** part/#tomcat kernel (~tim@212.174.202.6) |
| 09:12.23 | *** join/#tomcat fireangel (~fireangel@cowmeuh.dyndns.org) |
| 09:30.40 | *** join/#tomcat fox__ (fox@debian.as) |
| 10:48.28 | *** join/#tomcat kpla (~chatzilla@195.224.244.22) |
| 12:11.42 | *** join/#tomcat xkb_ (~xkb@cp15731-b.tilbu1.nb.home.nl) |
| 13:07.37 | *** join/#tomcat fox__ (fox@debian.as) |
| 13:13.16 | destr0 | godzirra: you have an ldap realm running? |
| 13:35.52 | destr0 | morning folks |
| 13:40.39 | *** join/#tomcat tue (~tue@port351.ds1-ly.adsl.cybercity.dk) |
| 13:44.19 | *** join/#tomcat gremid (~gremid@pD9EB195F.dip.t-dialin.net) |
| 13:51.12 | *** join/#tomcat schlumpf (~vx_schlum@dsl-082-082-069-131.arcor-ip.net) |
| 13:51.20 | *** part/#tomcat gremid (~gremid@pD9EB195F.dip.t-dialin.net) |
| 14:00.25 | *** join/#tomcat did (~didier@83.reverse62.fmcf.fr) |
| 14:00.30 | did | Hi |
| 14:00.32 | destr0 | I keep getting this error trying to use JDBCRealms: WARNING: Security role name admin used in an <auth-constraint> without being defined in a <security-role> |
| 14:00.49 | destr0 | should'nt tomcat be finding admin defined in my database? |
| 14:07.28 | destr0 | I keep getting: 2003-10-07 09:02:57 ContextConfig[qmp] Exception processing JAR at resource path /WEB-INF/lib/jakarta-oro.jar |
| 14:07.28 | destr0 | javax.servlet.ServletException: Exception processing JAR at resource path /WEB-INF/lib/jakarta-oro.jar |
| 14:07.29 | destr0 | <PROTECTED> |
| 14:07.32 | destr0 | when I start my web-app. I can't figure out what this error is. jakarta-oro.jar is in the lib directory of my webapp and it has read permissions to it. If I remove the jar, and then restart tomcat4, it just picks the next jar in line and says the same thing about it. |
| 14:44.12 | *** join/#tomcat joered (~chatter@62-101-126-216.fastres.net) |
| 14:58.24 | destr0 | everyone who is really a pet rock raise their hand. |
| 15:02.06 | *** join/#tomcat Xag_ (~xag@2001:618:f:501:204:76ff:fe49:38d0) |
| 15:02.17 | Xag_ | Hi |
| 15:02.18 | destr0 | I'm going to consider that everyone having raised thier hand. |
| 15:02.29 | destr0 | hell Xag_ |
| 15:02.35 | destr0 | hello that is |
| 15:02.45 | Xag_ | I had like to migrate from resin to tomcat, Is tomcat able to conpile itself the servlet ? |
| 15:02.53 | Xag_ | or should I use ant each time ? |
| 15:03.39 | destr0 | I'm not positive, I use ant to compile my .java files used for servlets into .class files. |
| 15:03.49 | destr0 | any of you pet rocks have an opinion? |
| 15:04.19 | Xag_ | because resin is doing it on the fly, and no need to call ant... |
| 15:04.41 | destr0 | you just drop your .java files in? |
| 15:05.06 | Xag_ | destr0, yes |
| 15:05.38 | destr0 | I'm pretty sure you have to precompile, I'm not sure why you would'nt want to though. |
| 15:05.55 | Xag_ | destr0, and you can changes them, resin will recreate the .class |
| 15:06.21 | destr0 | Xag_ what happens if you make a mistake in your code? |
| 15:06.49 | Xag_ | you get an error message |
| 15:07.03 | Xag_ | saying the servlet couldn be compiled |
| 15:07.29 | destr0 | I think I'd rather just keep my debugging in my development environment. |
| 15:14.13 | *** join/#tomcat mod_cure (~Cure@cs666863-15.austin.rr.com) |
| 16:00.14 | hellabot | "destr0" pasted "stupid tomcat JDBC Real problem" at http://www.hellaweb.com/hellabot/243 |
| 16:10.02 | *** join/#tomcat schlumpf (~vx_schlum@dsl-082-082-071-084.arcor-ip.net) |
| 16:26.49 | godzirra | Is htere a way to make tomcat run as a different user than the user its started as? |
| 16:27.38 | destr0 | first, why do you want to? |
| 16:31.41 | jasonb | godzirra: Commons-daemon can allow you to do that. I wrote about how it all works and how to do it in Tomcat: The Definitive Guide. |
| 16:32.22 | godzirra | destr0: Because I need to be able to start as root so I can bind to port 443, but running as root is ... well.. no explanation needed. |
| 16:32.40 | godzirra | jasonb: I'll add it to my list of tech books I need to pick up ;) I'm in desperate need of some tomcat books. |
| 16:35.02 | schlumpf | it should also be possible with chroot on linux, isn't? |
| 16:36.28 | godzirra | How would chroot help? |
| 16:36.57 | schlumpf | ohh, i haven't noticed your port, sorry :) |
| 16:37.03 | godzirra | ;) |
| 16:37.14 | destr0 | godzirra: I would look into forwarding port 442 to 8080 before I ran tomcat as root. |
| 16:37.20 | schlumpf | but port forwarding should then be possible :) |
| 16:37.25 | destr0 | or 443 whatever. |
| 16:37.42 | godzirra | Forwarding 443 to 8080? Is it still secure? |
| 16:38.14 | godzirra | 443 is https standard... I'm fine with forwarding it to 8080 as long as it still runs securely... |
| 16:38.37 | destr0 | nevermind: I wasn't thinking about what port that actually was either |
| 16:39.39 | destr0 | can you proxy the connection with apache? |
| 16:39.43 | godzirra | So then how do I not run as root but still run on standard https? |
| 16:39.57 | godzirra | I could, but that would require me to undo everything I just did. :/ We only have tomcat on this server... no apache. |
| 16:40.44 | destr0 | root it up then. |
| 16:41.28 | godzirra | Running it as root is a big no no as well. |
| 16:42.34 | godzirra | hmm.. apache -IS- on there. |
| 16:42.40 | godzirra | where can I read about proxying apache? |
| 16:42.45 | godzirra | to tomcat I mean |
| 16:42.59 | godzirra | Wait.. another question. |
| 16:43.17 | godzirra | I assume apache is going to proxy 443 to 8443 is the normal way to do it... 8443 is blocked by my firewall.. is that going to work? |
| 16:45.20 | destr0 | yeah, traffic will go in and out of your firewall on 443 |
| 16:45.20 | destr0 | I proxy through apache on my box because my retarded ISP blocks 8080 |
| 16:45.20 | destr0 | but I still run tomcat on 8080 |
| 16:45.21 | destr0 | I just can't hit it without the proxy |
| 16:45.31 | godzirra | Ok... cool... |
| 16:45.37 | godzirra | I'll read up on apache proxying rules. |
| 16:45.48 | godzirra | Lemme verify I dont need apache SSL on this box first though. |
| 16:47.28 | destr0 | anyone know if you can specify a specific security constriant? like: <url-pattern>/dropzone.jsp</url-pattern> |
| 17:11.43 | destr0 | jasonb: do you have a JDBC auth section in you book? |
| 17:16.03 | *** join/#tomcat zike (~zike@pantpc0104.pant.aber.ac.uk) |
| 17:18.16 | jasonb | destr0: Yes, it's in there. |
| 17:18.53 | jasonb | It's in among the other realms. |
| 17:24.55 | destr0 | jasonb: thanks, I actually started reading the section via safari before you replied. |
| 17:28.35 | *** join/#tomcat zike_ (~zike@pantpc0104.pant.aber.ac.uk) |
| 17:32.46 | *** join/#tomcat Seb-work (~Seb@cf-345park-10.adobe.com) |
| 17:32.55 | Seb-work | hi fellows |
| 17:33.31 | Seb-work | I have a mod_jk2 question: I'd like tomcat to serve anything under /foo, except for *.zip files that should be served by apache. Is there an easy/direct way to do that ? |
| 17:33.49 | Seb-work | i could not find anything in the coudmentation so far :\ |
| 17:33.55 | Seb-work | documentation |
| 17:37.26 | Seb-work | ooookkkk |
| 17:41.38 | Seb-work | ok, a simpler one maybe: how can I have tomcat server foo/ but apache serve foo/bar/* ? |
| 18:04.30 | destr0 | foo/bar/baz/*? |
| 18:26.41 | Seb-work | pardon me ? I didn't mention baz did I ? :> |
| 18:32.31 | *** join/#tomcat polak (~msowka@CPE0004e2281201-CM000a73667036.cpe.net.cable.rogers.com) |
| 18:45.48 | *** join/#tomcat jasonb (~jasonb@67.124.81.122) |
| 19:07.25 | *** join/#tomcat heaps (eapolo01@hills.ccsf.cc.ca.us) |
| 19:27.38 | *** join/#tomcat PolX (~chatzilla@h-167.n-184.dialup.mirado.de) |
| 19:51.32 | PolX | Has anyone tried running tomcat on JavaWebStart ? I seem to endure classloading woes... |
| 19:55.05 | jasonb | wow. Nope, I haven't tried that. It would be quite interesting to see what happens with that tough! |
| 19:56.18 | PolX | Basically, in my startup code: Class.forName("org.apache.catalina.core.ApplicationContext$PrivilegedGetRequestDispatcher"); works painlessly. |
| 19:56.41 | PolX | But then : java.lang.ClassNotFoundException: org.apache.catalina.core.ApplicationContext$PrivilegedGetRequestDispatcher |
| 19:56.43 | PolX | at org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClassLoader.java:992) |
| 19:57.04 | PolX | (note, running tomcat 4.1.23) |
| 19:58.53 | PolX | Something that would help me is to grasp how to raise the debug level in this class... I don't have a compiling tomcat yet... and it seems the debug-level of our server.xml doesn't affect that. |
| 19:59.58 | PolX | There is something special in JavaWebStart for that... I'm running the same tomcat within one single jar (including webapps and everything) and that's running fine with java -jar. |
| 20:02.59 | *** join/#tomcat Hellaenergy (~Hellaener@209.181.237.141) |
| 20:07.06 | jasonb | wow. I doubt that anyone's tried running all of Tomcat from within a single jar file before. |
| 20:07.38 | jasonb | In theory, it should be doable, but it may not be easy. |
| 20:07.56 | PolX | Double clickable-jar is trouble free, double clicking, displaying logForce 5. For some reasons our windows-based author has preferred it to the bat scripts. |
| 20:10.26 | jasonb | PolX: I don't know if this will help with debugging or not, but you can try to add a <Loader> element in your server.xml with debug="3".. |
| 20:10.36 | jasonb | http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/loader.html |
| 20:14.44 | PolX | Looks to be bound for context (webapps)... |
| 20:22.45 | PolX | The StandardClassLoader seem to use a somewhat different logging mechanism... classloaders... |
| 20:29.24 | destr0 | jasonb: I read through the realms stuff in your book, I still can't get mine to work. |
| 20:33.51 | destr0 | I tried turning the debug="4" on in the Realm tag so it would log the attempts at authentication, but nothing extra is getting spit out. |
| 20:36.06 | jasonb | destr0: Hmm. Which realm are you using, and in what version of Tomcat? |
| 20:38.10 | destr0 | JDBCRealm |
| 20:39.23 | destr0 | Tomcat 4.1 |
| 20:42.38 | hellabot | "destro" pasted "tomcat JDBC realm stuff." at http://www.hellaweb.com/hellabot/244 |
| 20:42.52 | destr0 | there's my config files for my realm stuff. |
| 20:45.39 | jasonb | digest="MD5" |
| 20:45.57 | destr0 | yes? |
| 20:46.04 | jasonb | I heard from Remy that digest auth is broken for all auth methods except for BASIC, so that might be part of the problem. |
| 20:46.12 | jasonb | You might want to try without digest turned on. |
| 20:47.41 | jasonb | digest turned on in Tomcat configs is always a red flag.. gotta watch that very carefully. |
| 20:48.02 | jasonb | It may end up different in TC5, but so far it doesn't look different. |
| 20:50.34 | destr0 | same thing.. it just fails to authenticate |
| 20:51.50 | destr0 | and to "turn off" digest I just removed the digest attribute from my Realm declaration, I'm going to assume that's correct |
| 21:03.03 | jasonb | Yes. But, also, did you try turning off digest and doing the following: creating a new user and setting the password and _then_ logging in? |
| 21:03.46 | destr0 | I reset the password for the current user from an md5 string to a clear text string |
| 21:03.57 | jasonb | Okay. good. |
| 21:04.16 | jasonb | Can you see your database logs to see whether Tomcat is doing the proper queries? |
| 21:05.01 | destr0 | I would like to have the realm doing extra logging with the debug attribute |
| 21:05.50 | jasonb | So would I. :) |
| 21:06.34 | jasonb | destr0: Which exact version of Tomcat are you using? You said 4.1 above, that's not specific enough. |
| 21:07.23 | jasonb | Another thing you can try is to find out how to make your JDBC driver produce (more verbose) logs. Usually, they support an option like that. |
| 21:09.39 | destr0 | I'm downloading 4.1.27 right now as I can't remember what version is actually on my machine right now. |
| 21:12.37 | dsp_ | hi, is anyone familiar with running multiple tomcat instances via setting CATALINA_HOME and seperate CATALINA_BASE paths? |
| 21:13.52 | destr0 | jasonb: it was 4.1.24 |
| 21:17.20 | PolX | Wouaaah, got it to run Tomcat over webstart (full permissions), tomcat 4.1.27 is in use. |
| 21:17.37 | PolX | The trick is simple, it just takes to read the boostrap.java and you get it: |
| 21:17.54 | PolX | c = new org.apache.catalina.startup.Catalina(); |
| 21:18.27 | PolX | c.setParentClassLoader(this.getClass().getClassLoader()); |
| 21:18.37 | PolX | c.process(new String[] {"start"}); |
| 21:18.42 | PolX | ... and here you are... |
| 21:22.59 | PolX | Can anyone forward this some tomcat mailing-list ? Or is there a wiki where I could post that ? |
| 21:28.22 | Hellaenergy | tomcat-dev@jakarta.apache.org |
| 21:28.39 | PolX | (my fear, registering to there is huge...) |
| 21:29.17 | Hellaenergy | Then unsubscribe when you are done |
| 21:35.23 | destr0 | what up Hella |
| 21:47.10 | destr0 | jasonb: I just downloaded 4.1.27, and set the digest level to md5 with the usermemoryrealm that controls the admin app, and it worked. |
| 22:28.06 | *** join/#tomcat Seb-work_ (firewall-u@tcp-relay-4.adobe.com) |
| 22:31.11 | *** join/#tomcat IRCMonkey (~chatzilla@www.luunja.ee) |
| 22:31.47 | IRCMonkey | hi |
| 22:32.54 | *** join/#tomcat Seb-work (~Seb@cf-345park-10.adobe.com) |
| 22:36.57 | *** join/#tomcat jasonb (~jasonb@67.124.81.122) |