| 00:17.47 | *** join/#tomcat reaper (i=reaper@ool-44c11e2a.dyn.optonline.net) |
| 00:20.02 | reaper | i accidently locked myself out of tomcat manager, now i get a 403.. how do i reset it? |
| 00:41.52 | *** join/#tomcat gorpon__ (n=gorpon@adsl-69-226-1-158.dsl.pltn13.pacbell.net) |
| 00:43.44 | *** join/#tomcat valmont (n=chrishol@germany.pspdev.pas.earthlink.net) |
| 00:44.08 | gorpon__ | hello. is it possible to do app specific <security-constraint> directives outside of the app container, such as in conf/Catalina/localhost? |
| 00:44.26 | bdc34 | reaper: look in /usr/local/tomcat/conf/tomcat-users.xml |
| 00:44.53 | *** part/#tomcat bdc34 (i=bdc34@rrdhcp56-617.redrover.cornell.edu) |
| 00:46.06 | reaper | no, i need to reset it, i entered the wrong user/pass 3 times |
| 00:51.40 | *** join/#tomcat rob-84x^ (i=rob@submarine.ath.cx) |
| 01:06.54 | *** part/#tomcat randrew (n=user1@91.sub-70-194-8.myvzw.com) |
| 01:44.31 | *** join/#tomcat phoenix- (i=phoenix@200.146.44.104.adsl.gvt.net.br) |
| 02:14.13 | *** join/#tomcat emp__ (n=emp@70.57.239.35) |
| 02:14.14 | *** join/#tomcat ohsix (i=ohsix@bc111222.bendcable.com) |
| 02:40.06 | *** join/#tomcat randrew (n=user1@40.sub-70-195-116.myvzw.com) |
| 03:17.54 | map7 | How do I get a web archive working under tomcat? |
| 03:18.16 | *** part/#tomcat reaper (i=reaper@ool-44c11e2a.dyn.optonline.net) |
| 03:49.10 | *** join/#tomcat jsisso1 (n=sissonj@59.167.28.37) |
| 03:58.38 | *** join/#tomcat jasonb (i=noneoyer@adsl-66-124-73-250.dsl.sntc01.pacbell.net) |
| 04:00.11 | *** join/#tomcat FreemaniaX (n=Freemani@pcp0011117215pcs.elkrdg01.md.comcast.net) |
| 04:13.24 | *** join/#tomcat dorileo (n=dorileo@201.22.172.95.adsl.gvt.net.br) |
| 04:26.26 | *** join/#tomcat vinse (n=vinse@ppp-71-139-57-38.dsl.snfc21.pacbell.net) |
| 05:16.18 | *** part/#tomcat randrew (n=user1@40.sub-70-195-116.myvzw.com) |
| 05:30.11 | *** join/#tomcat valmont (n=chrishol@dsl092-043-004.lax1.dsl.speakeasy.net) |
| 05:45.12 | *** join/#tomcat phoenix- (i=phoenix@200.146.44.104.adsl.gvt.net.br) |
| 05:50.50 | *** join/#tomcat lucasjb (n=lucas@mail.stabat.com) |
| 05:52.25 | *** part/#tomcat FreemaniaX (n=Freemani@pcp0011117215pcs.elkrdg01.md.comcast.net) |
| 05:52.36 | lucasjb | Hiyas, I'm having a problem starting Tomcat with jvsc. If I run the jvsc command directly from my shell, it works, but if I run it from within an init.d script that I'm working on, it fails with "jsvc.exec error: Cannot find daemon loader org/apache/commons/daemon/support/DaemonLoader"... the command line looks like this: /usr/local/jakarta-tomcat-5.0.28/bin/jsvc-src/jsvc -user tomcat5 -home /usr/lib/java -Dcatalina.home=/usr/local/jakarta-tomcat-5.0.28 |
| 05:52.36 | lucasjb | -Djava.io.tmpdir=/tmp -outfile /usr/local/jakarta-tomcat-5.0.28/logs/catalina.out -errfile '&1' CLASSPATH=/usr/lib/java/lib/tools.jar:/usr/local/jakarta-tomcat-5.0.28/bin/commons-daemon.jar:/usr/local/jakarta-tomcat-5.0.28/bin/bootstrap.jar -cp /usr/lib/java/lib/tools.jar:/usr/local/jakarta-tomcat-5.0.28/bin/commons-daemon.jar:/usr/local/jakarta-tomcat-5.0.28/bin/bootstrap.jar |
| 05:55.03 | lucasjb | Anyway, so perhaps there's some kind of environment variable or something that I need to put in my script, but I can't think what it is. I've got JAVA_HOME in there... |
| 07:06.41 | *** join/#tomcat phoenix- (i=phoenix@200.146.44.104.adsl.gvt.net.br) |
| 07:31.51 | *** join/#tomcat phoenix- (i=phoenix@200.146.44.104.adsl.gvt.net.br) |
| 07:55.43 | *** join/#tomcat phoenix- (i=phoenix@200.146.44.104.adsl.gvt.net.br) |
| 08:08.53 | *** join/#tomcat olem_omay (n=omay@dslb-088-072-037-115.pools.arcor-ip.net) |
| 08:21.25 | *** join/#tomcat gorpon__ (n=gorpon@adsl-69-226-1-158.dsl.pltn13.pacbell.net) |
| 09:27.50 | *** join/#tomcat noodl (n=noodl@195-97-225-122.onyx.net) |
| 09:32.31 | *** join/#tomcat jaysonR18 (n=Linux@203.131.131.36) |
| 09:36.04 | *** join/#tomcat putzel (n=putzel@183-237-221-213-pool.cable.lan.ch) |
| 11:33.30 | *** join/#tomcat zander (n=zander@Snow-Storm.jamalsoft.com) |
| 11:33.34 | zander | Hello |
| 11:34.55 | zander | People, please tell, how can i handle MMS protocol, which windows media player can play, by tomcat ? |
| 11:35.13 | zander | Is it possible of course |
| 11:37.52 | zander | s/Is/If/ |
| 11:52.01 | *** join/#tomcat Snuff (n=tbel3393@CPE-149-167-207-158.sa.bigpond.net.au) |
| 12:21.18 | Snuff | Is it possible to have 2 <Service> running on Tomcat? |
| 12:56.03 | *** join/#tomcat omay (n=omay@dslb-088-072-037-115.pools.arcor-ip.net) |
| 13:04.06 | *** join/#tomcat GabiAPF (n=gabriela@200.122.94.137) |
| 13:04.47 | GabiAPF | Hello, I have a problem starting my tomcat server. Could someone please help me? |
| 13:05.18 | GabiAPF | When I run startup.sh I get an error (in the log) that says: |
| 13:05.19 | GabiAPF | 19/01/2006 10:02:27 org.apache.tomcat.util.digester.Digester error |
| 13:05.20 | GabiAPF | GRAVE: Parse Error at line 5 column 19: cvc-elt.1: Cannot find the declaration of element 'web-app'. |
| 13:05.42 | GabiAPF | That's just after the line that says XML validation activated. |
| 13:07.56 | *** join/#tomcat putzel (n=putzel@183-237-221-213-pool.cable.lan.ch) |
| 13:14.39 | GabiAPF | Is anyone here? |
| 13:19.51 | *** join/#tomcat lmeadors (n=lmeadors@72-160-4-12.dyn.centurytel.net) |
| 13:20.27 | *** join/#tomcat valmont (n=chrishol@dsl092-043-004.lax1.dsl.speakeasy.net) |
| 13:40.20 | GabiAPF | Ok, see you. |
| 13:45.37 | *** join/#tomcat michuk (n=borys@213.241.34.210) |
| 13:46.13 | GabiAPF | Ok, I solved my problem anyway. I just disabled XML validation and the server started working. |
| 13:53.29 | *** join/#tomcat JaiZ (n=no@81.19.245.205) |
| 13:55.16 | JaiZ | Hey everyone - is there a way that when i install a new Project - and add a url ( http://whatever.domain.com ) in the config file... But i would like to avoid rebooting the Tomcat everytime i add a new project and give it an given url |
| 14:02.51 | GabiAPF | I think the experts are out right now, I'm just getting started with Tomcat. But are you using the manager application? |
| 14:07.23 | JaiZ | yes |
| 14:07.25 | JaiZ | but thats not the problem |
| 14:07.53 | JaiZ | the problem is when i add an url newproject.domain.com - and thats in the config file and in order to use the new settings u have to stop/start/restart tomcat :( |
| 14:09.42 | JaiZ | or can i perhaps add it into the war file? when i deploy it so the url gets instant activated? ;) |
| 14:10.35 | GabiAPF | I guess that could work. |
| 14:10.55 | GabiAPF | Sorry, I wish I could help more, but I came here to ask for help and I didn't get it. |
| 14:11.07 | jasonb | JaiZ: You probably want to use the host manager web application that comes with Tomcat 5.5.x. |
| 14:11.23 | GabiAPF | He said he was using it. |
| 14:11.43 | jasonb | No, he said he was using teh manager webapp. The host manager is a different webapp. |
| 14:12.56 | GabiAPF | Ah. Sorry, I didn't know. |
| 14:13.03 | jasonb | Probably the admin webapp would also allow you to do this. |
| 14:13.23 | *** join/#tomcat bdc34 (i=bdc34@rrdhcp56-1019.redrover.cornell.edu) |
| 14:14.02 | GabiAPF | Speaking of the admin webapp, I can't access it. I have installed it and all the files landed on the right directories, but it still says it's unavailable when I try to use it. |
| 14:18.34 | JaiZ | will i avoid restarting the application for it to work in the tomcat web server admin tool? |
| 14:19.16 | JaiZ | GabiAPF - is the application running under your tomcat admimnistration? |
| 14:20.29 | JaiZ | tomcat manager even sorry |
| 14:21.38 | GabiAPF | Yes, it is. |
| 14:21.51 | GabiAPF | <PROTECTED> |
| 14:23.01 | GabiAPF | But when I click on it, it still says " Tomcat's administration web application is no longer installed by default. Download and install the "admin" package to use it." |
| 14:23.56 | JaiZ | under it it should say Running True/False |
| 14:24.06 | JaiZ | else try and delete all tomcat and install again easiest way |
| 14:24.25 | GabiAPF | Under what? |
| 14:24.54 | GabiAPF | The running column says true. |
| 14:25.35 | JaiZ | try and restart the admin apllication |
| 14:25.44 | JaiZ | and then press on the Adminmodule and see what it says after |
| 14:27.09 | GabiAPF | Thanks, I'll try that. |
| 14:27.28 | GabiAPF | Nothing. :-/ |
| 14:27.48 | *** join/#tomcat yel (n=Algebra@xdsl-213-196-254-151.netcologne.de) |
| 14:27.51 | GabiAPF | Do I have to add a context path to server.xml to tell it where it is like I did with the manager? |
| 14:28.54 | *** join/#tomcat randrew (n=raj@dolmen.cc.columbia.edu) |
| 14:31.43 | JaiZ | not really when it can find it |
| 14:34.04 | GabiAPF | It can find it, but it can't run it. |
| 14:36.31 | GabiAPF | It may be finding the wrong one. There are 3 directories named admin. |
| 14:37.12 | GabiAPF | server/webapps/admin, webapps/ROOT/admin and work/Catalina/localhost/admin. |
| 14:38.15 | GabiAPF | I think it's finding the webapps/ROOT/admin one instead of server/webapps/admin. |
| 14:39.01 | GabiAPF | The former has an index.html that contains the message I get. The latter is the real application. |
| 14:41.35 | GabiAPF | How can I tell the server where the real one is? |
| 14:43.19 | *** join/#tomcat bdc34 (i=bdc34@rrdhcp56-634.redrover.cornell.edu) |
| 14:45.36 | GabiAPF | Ok, I cheated, but it worked (I renamed the old directory and made a link to the new one in its place). |
| 14:46.13 | *** join/#tomcat bdudney (n=bdudney@c-24-9-189-43.hsd1.wa.comcast.net) |
| 14:56.29 | *** join/#tomcat Cozmiin (i=coz@CPE000d88872d1c-CM001225408690.cpe.net.cable.rogers.com) |
| 15:01.24 | *** join/#tomcat valmont (n=chrishol@germany.pspdev.pas.earthlink.net) |
| 15:33.50 | *** join/#tomcat linuxfreck (n=freck@p5492C097.dip0.t-ipconnect.de) |
| 15:40.23 | *** join/#tomcat bdudney (n=bdudney@c-24-9-189-43.hsd1.co.comcast.net) |
| 15:42.24 | bdc34 | i'm looking for some advice on how to use jstl w/ the EL in jsp's in tomcat 5.5.12 |
| 15:43.30 | bdc34 | i'm using jakarta-jstl-1.2, and I have jstl tags working but Expression Language statements are not interperted |
| 15:43.58 | linuxfreck | make sure you have a servlet 2.4 schema definition in your web.xml file |
| 15:44.59 | bdc34 | something like? <! DOCTTYPE blabla "http://java.sun.com/j2ee/dtds/web-app_2.4.dtd" > |
| 15:45.10 | *** join/#tomcat NorthDragon (n=IzhikovN@213.251.192.43) |
| 15:45.12 | *** part/#tomcat NorthDragon (n=IzhikovN@213.251.192.43) |
| 15:45.19 | *** join/#tomcat NorthDragon (n=IzhikovN@213.251.192.43) |
| 15:45.36 | linuxfreck | afaik, servlet 2.4 doesn't use doctypes anymore |
| 15:45.56 | linuxfreck | you can rip off the example in $CATALINA_HOME/webapps/jsp-examples/WEB-INF/web.xml |
| 15:50.02 | bdc34 | linuxfreck: thanks, my jsp's can now move out of the dark ages. |
| 15:50.53 | linuxfreck | np |
| 16:03.27 | *** join/#tomcat valmont (n=chrishol@germany.pspdev.pas.earthlink.net) |
| 16:06.56 | *** join/#tomcat geemark (n=geemark@port12.ds1-vey.adsl.cybercity.dk) |
| 16:21.10 | *** join/#tomcat Snuff (n=tbel3393@CPE-149-167-207-158.sa.bigpond.net.au) |
| 16:23.15 | *** join/#tomcat Hayat (n=chatzone@p85.212.145.66.tisdip.tiscali.de) |
| 16:37.14 | *** part/#tomcat GabiAPF (n=gabriela@200.122.94.137) |
| 16:57.38 | *** join/#tomcat a4akb (i=a4akb@ask13-106.qualitynet.net) |
| 17:09.13 | a4akb | yo |
| 17:10.02 | larryBoy | mama |
| 17:10.11 | a4akb | yes my boy |
| 17:10.24 | a4akb | larry did u wet ur bed again! u bad boy! |
| 17:11.48 | larryBoy | *mmmmph* |
| 17:11.57 | larryBoy | that was mean |
| 17:15.27 | larryBoy | oooh, invigorating |
| 17:15.35 | larryBoy | makes me feel...spunky |
| 17:23.13 | a4akb | you have a tomcat related question larryBoy? |
| 17:24.09 | *** join/#tomcat mick (n=map7@teksup41.lnk.telstra.net) |
| 17:24.10 | larryBoy | noodl, do you? |
| 17:24.18 | larryBoy | err, no even |
| 17:24.41 | noodl | hm? |
| 17:24.46 | noodl | oh :) |
| 17:24.53 | larryBoy | sorry, bad tab completion :) |
| 17:34.43 | *** join/#tomcat FreemaniaX (n=Freemani@ip67-153-106-58.z106-153-67.customer.algx.net) |
| 17:36.23 | *** join/#tomcat jasonb (i=noneoyer@adsl-66-124-73-250.dsl.sntc01.pacbell.net) |
| 17:57.42 | Coszmin | hey linuxfreck u arround ? |
| 17:59.20 | linuxfreck | hi Coszmin, sup? |
| 17:59.57 | Coszmin | hey I wanted to ask you about the tomcat configuration you've advised me on last week |
| 18:00.16 | Coszmin | if u remember forwarding the iptables port 8080 - > 80 and changing some settings in the server.xml |
| 18:00.37 | pfn | redirectPort is only used if you're doing transport-security CONFIDENTIAL |
| 18:00.45 | pfn | so there is no change in server.xml, it is transparent |
| 18:00.49 | pfn | unless you wish to redirect to SSL |
| 18:00.58 | Coszmin | I have ssl configure |
| 18:01.02 | Coszmin | on port 8443 |
| 18:01.03 | linuxfreck | pfn: nope, there is also the proxy stuff |
| 18:01.36 | gorpon__ | hello all. anybody know if/how can I put app specific <security-constraint> directives in conf/Catalina/localhost/ ? |
| 18:02.26 | Coszmin | oh ... somebody changed my file :| |
| 18:02.58 | pfn | what proxy stuff? |
| 18:03.23 | pfn | gorpon why not in web.xml ? |
| 18:03.25 | Coszmin | anywais for the 8080 connector i have redirectPort="8443" and proxyPort="80" |
| 18:03.38 | pfn | what's proxyport for |
| 18:03.56 | Coszmin | but this looks to cause some problems |
| 18:04.08 | Coszmin | is this not how it should be ? |
| 18:04.27 | Coszmin | my connectors are running on port : 8443 and 8080 redirected to 443 and 80 |
| 18:04.49 | gorpon__ | pfn: because the developers don't want security stuff to go into the container directory. |
| 18:05.12 | pfn | gorpon it's called a deployment descriptor for a reason |
| 18:05.27 | linuxfreck | Coszmin: you mean 80 is redirected to 8080, right? |
| 18:05.33 | Coszmin | yes |
| 18:05.42 | linuxfreck | pfn: http://tomcat.apache.org/tomcat-5.5-doc/proxy-howto.html |
| 18:05.47 | linuxfreck | Coszmin: which issues do you get? |
| 18:06.02 | pfn | if you're using port forwarding, it should all be transparent to tomcat, I don't see why proxying becomes involved |
| 18:06.15 | Coszmin | hmm i couldn't restart my tapestry application |
| 18:06.20 | Coszmin | it would simply hang |
| 18:06.41 | linuxfreck | pfn: read that and realize that it gives you the same issues as proxying, i.e. different ports |
| 18:06.48 | Coszmin | but that got fixed when i changed this for the secure 8443 conector : proxyPort="443" redirectPort="8443" |
| 18:06.52 | pfn | indeed, getServerPort gives a different name |
| 18:06.54 | Coszmin | it use to be proxyport="80" |
| 18:07.25 | pfn | I just ignore the use of getServerPort(), why do it? |
| 18:07.32 | pfn | using non-standard port numbers is silly |
| 18:07.33 | gorpon__ | pfn: they want to keep the app deployment separate from the security configuration. |
| 18:07.45 | Coszmin | so now for 8443 conector i have : proxyPort="443" redirectPort="8443" and for the 8080 connector i have : redirectPort="8443" proxyPort="80" |
| 18:07.59 | Coszmin | does this look like what it should be ? |
| 18:08.08 | pfn | gorpon security is inherently a part of deployment |
| 18:08.09 | linuxfreck | pfn: maybe you have to support 3rd party apps |
| 18:08.22 | pfn | linuxfreck maybe |
| 18:08.31 | pfn | but even so, apps that run on custom port numbers are teh utter suck |
| 18:08.43 | Coszmin | app seems to run fine now |
| 18:08.43 | linuxfreck | pfn: if you don't you can safely ignore it of course |
| 18:08.47 | pfn | there's pretty much no reason for an app to need to know if it's running under ssl/port number |
| 18:09.04 | pfn | since it should be handled by the deployment... except for losers that can't do standard port numbers, etc. ;-) |
| 18:09.24 | linuxfreck | Coszmin: you probably want redirectPort="443" for the 8080 connector |
| 18:10.01 | linuxfreck | pfn: maybe you have to run broken 3rd party apps :) |
| 18:10.02 | pfn | anyway, I don't think you can define security-constraints in context.xml ... |
| 18:10.10 | pfn | linuxfreck fortunately, I don't |
| 18:11.34 | pfn | /me ponders using mod_proxy_ajp instead of mod_jk |
| 18:11.57 | pfn | I wonder if there's any advantage, minus the obvious reduced configuration of not having to have workers.properties |
| 18:11.57 | linuxfreck | gorpon__: it is application-specific to tell which parts should be protected, and thus should go into web.xml. tomcat doesn't support it anywhere else |
| 18:12.04 | pfn | and JkMount/Unmount |
| 18:12.25 | linuxfreck | pfn: I'd say never change a running system, plus mod_proxy_ajp is still quite new and not that well tested |
| 18:12.29 | gorpon__ | thx linuxfreck |
| 18:12.33 | *** join/#tomcat sapere (n=a@64.186.48.15) |
| 18:12.54 | sapere | Hello all ... How do portlets with multiple "steps" work? Is each step in the portlet lifecycle a different portlet? |
| 18:13.01 | sapere | I understand this might not be the best place to ask |
| 18:13.03 | pfn | linuxfreck fortunately, it's just my personal site, so that isn't a problem |
| 18:13.15 | pfn | /me knows nothing about portlets |
| 18:13.21 | sapere | Say for example I wish to have a portlet that is an email contact form. step 1 is display the form, step 2 is a "thank you" portlet. Would both steps be different portlets? |
| 18:13.24 | pfn | I don't even understand why they're all the rage |
| 18:13.53 | linuxfreck | sapere: you may want to ask that in ##java, too. |
| 18:13.57 | pfn | sounds like it's just a bunch of servlets that want to render on a single page, basically a bunch of includes.... |
| 18:14.07 | sapere | linuxfreck : thanks, I tried ... no one even knew what they were =) |
| 18:14.40 | sapere | pfn : roughly, yeah ... mini-servlets (API-wise and feature-wise) that produce html without <html> and <body> |
| 18:14.50 | Coszmin | thanks linuxfreck , i've made the changes , seems to work fine |
| 18:15.21 | pfn | sapere right, I just don't see it as so cool.... |
| 18:15.34 | sapere | pfn : they're NOT cool, that's for sure |
| 18:15.52 | pfn | anyway, given what you say, mini servlets, then the workflow would be the same as a typical servlet, Iw ould assume |
| 18:16.09 | pfn | so the lifecycle, etc. of a particular portlet would behave similar to its underlying servlet |
| 18:16.11 | linuxfreck | pfn: it's just a standard way to integrate stuff from several different vendors |
| 18:16.29 | pfn | thus, if you have multiple steps in a form, you can have multiple servlets in the backend or a single servlet, just depends on your design |
| 18:16.52 | pfn | portlets just seems like a very big step in the opposite direction from "web 2.0" |
| 18:34.54 | sapere | pfn: sure, but businesses are willing to spend alot of money on them |
| 18:36.08 | pfn | that may be so |
| 18:37.11 | linuxfreck | it's for businesses, that means it doesn't make sense... |
| 18:38.40 | sapere | haha |
| 18:39.40 | sapere | not that far from the truth i've witnessed |
| 18:45.22 | *** part/#tomcat vinse_ (n=vinse_@208.253.223.146) |
| 18:49.00 | *** join/#tomcat vinse_ (n=vinse_@208.253.223.146) |
| 19:13.00 | *** join/#tomcat ardor (n=vircuser@las-cust-66.18.135.148.mpowercom.net) |
| 19:15.03 | ardor | I have a question about the mod_jk2 for apache, I can't figure out where to tell jk2 to look for workers2.properties, what the command looks like inside of httpd.conf |
| 19:15.22 | linuxfreck | mod_jk2 is deprecated, don't use it |
| 19:16.08 | ardor | What should i use? |
| 19:16.20 | ardor | mod_jk? |
| 19:17.34 | linuxfreck | the easiest way is to use the tomcat http server |
| 19:17.52 | ardor | ya my boss wants me to use jk |
| 19:18.01 | linuxfreck | I pity you |
| 19:18.24 | linuxfreck | maybe you can convince him to use apache 2.2's mod_proxy, which can connect to tomcat using ajp, too |
| 19:18.34 | linuxfreck | if that is no option, go mod_jk |
| 19:18.56 | ardor | I can use mod_proxy i am pretty sure |
| 19:21.52 | sapere | is there a difference between tomcat http server and the tomcat servlet container? |
| 19:23.29 | linuxfreck | sapere: the tomcat http server (or better named connector) is part of tomcat, and tomcat is often called a servlet container |
| 19:26.44 | *** join/#tomcat honschu (n=honschu@p549EF140.dip.t-dialin.net) |
| 19:27.30 | honschu | Hi, is JSP connected by CGI? |
| 19:27.44 | jasonb | Nope. |
| 19:28.08 | honschu | thx |
| 19:28.31 | jasonb | np |
| 19:30.13 | linuxfreck | heh, nice question |
| 19:30.20 | linuxfreck | hi jasonb btw |
| 19:31.15 | jasonb | linuxfreck: Hi there. How's it going? |
| 19:32.12 | linuxfreck | I'm a bit ill, but else things are ok |
| 19:32.32 | jasonb | linuxfreck: Eat some chicken soup. |
| 19:32.40 | linuxfreck | you're involved in new horizons? |
| 19:33.55 | linuxfreck | I'll stick to thyme tea and antibiotics |
| 19:35.00 | jasonb | No, I'm not involved in that project, but a different (and somewhat similar) project. |
| 19:36.41 | linuxfreck | nice, what exactly are you doing there? |
| 19:38.35 | jasonb | Java development (my main job), and a small amount of system administration (mainly because I know it best, and they need it done, but it's not my main job). |
| 19:38.59 | jasonb | We're writing software to analyze data sent back from the spacecraft. |
| 19:39.20 | jasonb | So far, we're not using Tomcat, but we plan to use it a little. |
| 19:39.37 | jedir0x | jasonb: Sounds like fun |
| 19:39.50 | jedir0x | do you have security clearance? |
| 19:39.53 | jasonb | jedir0x: Yes. It is. It's a lot to learn all at once.. but it's fun. |
| 19:40.38 | jasonb | jedir0x: No government security clearance.. but I do work in a secure area, and I have to have a badge to drive in past two security gates gates. |
| 19:40.46 | jedir0x | heh, for some reason i thought i was still in the #nebula chan, of course i do java if i'm in #tomcat :) |
| 19:40.56 | jasonb | heh |
| 19:41.44 | jedir0x | I was working for a company in central california for a while, they started the TSI process for my clearance but the project went under before it completed so they canceled it. |
| 19:41.57 | jedir0x | i wish it would have went through, would have been nice to have that clearance. |
| 19:41.57 | jasonb | ugh. |
| 19:42.07 | linuxfreck | jasonb: I'm somewhat surprised that nasa uses java for that task. I'd have expected that c++ or fortran would still prevail in such analysis tasks |
| 19:42.27 | jedir0x | linuxfreck: hail JEP |
| 19:42.39 | linuxfreck | jep? |
| 19:42.45 | jedir0x | http://www.singularsys.com/jep/ |
| 19:42.46 | jasonb | linuxfreck: For all the same reasons we (individual developers) use Java instead of C++, so does NASA. Java is now the #1 most popular professional programming language. |
| 19:42.52 | jedir0x | check out some of the people that use JEP |
| 19:43.03 | jedir0x | http://www.singularsys.com/jep/users.html |
| 19:43.19 | jedir0x | jasonb: are you guys using JEP? |
| 19:44.46 | linuxfreck | that jep thing sounds interesting |
| 19:44.55 | jedir0x | yeah, it's pretty cool. |
| 19:45.00 | jedir0x | I used it for a business rule engine once |
| 19:45.12 | jedir0x | because everything can be expressed mathematically :) |
| 19:46.04 | linuxfreck | what's its license? |
| 19:46.09 | *** join/#tomcat levon (n=levon@62.48.88.185) |
| 19:46.53 | jedir0x | GNU GENERAL PUBLIC LICENSE |
| 19:46.54 | jasonb | jedir0x: Hmm, looks interesting. I'm not sure what we'd use JEP for. |
| 19:47.43 | linuxfreck | jedir0x: I'm asking since many source files are marked as creative commons in the header and not gpl |
| 19:47.56 | linuxfreck | and a gpl library may cause issues in a corporate setting |
| 19:48.47 | linuxfreck | adopted shouldn't be the problem, since the default text states that you may use any later version at your choice |
| 19:49.16 | linuxfreck | which is a quite wierd thing really |
| 19:49.27 | jedir0x | i like BSD and MIT |
| 19:50.10 | jasonb | linuxfreck: Yeah. |
| 19:51.20 | jasonb | jedir0x: GPLv3 should be compatible with those.. finally. I'm eagarly awaiting that. |
| 19:52.36 | jedir0x | yeah, i saw the draft on /. yesterday |
| 20:15.36 | *** part/#tomcat randrew (n=raj@dolmen.cc.columbia.edu) |
| 20:16.55 | *** join/#tomcat a4akb (i=a4akb@ask13-166.qualitynet.net) |
| 20:30.52 | *** join/#tomcat mmassera (n=chatzill@200.123.177.145) |
| 20:32.09 | mmassera | hi! has anyone had some experience with tomcat clustering? |
| 20:34.01 | mmassera | well, i ve already set up session replication, but... there is "application-wide info" that i should be replicating also and i can't find any mechanism to do that! and it should be the same as replicating a session |
| 20:34.06 | mmassera | any ideas? |
| 20:37.23 | linuxfreck | you usually use a common relational database |
| 20:38.54 | *** join/#tomcat paq (i=foobar@port-212-202-37-129.dynamic.qsc.de) |
| 20:38.59 | paq | grmbl |
| 20:39.02 | paq | how can i in tomcat have a servlet-mapping for / but still serve jsps? |
| 20:39.05 | paq | i.e. i need the jsp-servlet mapped to *.jsp (and hit first) and my custom default servlet for everything else |
| 20:42.40 | paq | ahh |
| 20:42.46 | *** part/#tomcat a4akb (i=a4akb@ask13-166.qualitynet.net) |
| 20:42.49 | paq | skipping the mappings and just using getNamedDispatcher solved it for me |
| 20:42.52 | paq | thx for not laughing :)) |
| 20:49.48 | mmassera | hmmm linuxfreck that's what i am trying to avoid... it would be a lot of overhead to the DB. could JNDI help? |
| 20:50.32 | linuxfreck | mmassera: I'm not aware of a clustered jndi implementation for tomcat |
| 20:51.26 | linuxfreck | mmassera: you could build your own replication system of course, e.g. on top of jgroups or treecache |
| 20:51.50 | mmassera | shite... i don't understand why if you can replicate a session noone ever thought of replicating application state |
| 20:52.30 | linuxfreck | if you have lots of application state that changes all the time you have another issue, and it won't scale horizontally anyway |
| 20:52.42 | linuxfreck | if not, a rdbms is enough |
| 20:53.36 | linuxfreck | and there are ways in j2ee to do what you want, tomcat just doesn't implement it (and I'm not an expert in these technologies) |
| 20:58.12 | mmassera | what i want to do is not let an user login twice. So i ve got a set of logged-in users, with the last timestamp. In a DBMS this would make me do an update every time a user requests a page |
| 20:59.56 | *** join/#tomcat yel (n=Algebra@xdsl-213-196-254-151.netcologne.de) |
| 21:10.46 | *** join/#tomcat ardor (n=vircuser@las-cust-66.18.135.148.mpowercom.net) |
| 21:21.00 | mmassera | well see you all, thanks for your help |
| 21:38.20 | *** join/#tomcat agherna (n=agherna@bementil-117.illinois.prairieinet.net) |
| 21:38.26 | *** join/#tomcat valmont_ (n=chrishol@ppp-69-237-25-136.dsl.irvnca.pacbell.net) |
| 21:41.48 | jedir0x | <PROTECTED> |
| 21:42.01 | jedir0x | I guess it does cost money for the commercial license |
| 21:42.49 | linuxfreck | thought so |
| 21:43.13 | linuxfreck | the creative commons license they use in their source files explicitely disallows commercial use |
| 21:43.26 | pfn | mmassera use an HttpSession listener |
| 21:43.51 | linuxfreck | pfn: he left, and I doubt it would have worked in a clustered environment |
| 21:44.28 | pfn | linuxfreck do HttpSession events not get propagated in a cluster? |
| 21:45.04 | linuxfreck | pfn: don't think so |
| 21:45.21 | pfn | what good is that... |
| 21:45.50 | linuxfreck | the listener only gets called on the instance that creates the session |
| 21:46.10 | linuxfreck | not sure about stop events though |
| 21:46.35 | *** join/#tomcat anirban (n=kvirc@59.93.242.212) |
| 21:47.06 | anirban | Is it possible to do EJB project on Tomcat 5.X |
| 21:47.31 | pfn | well, I'm sure one could get creative with session bound/unbound |
| 21:47.33 | linuxfreck | anirban: tomcat does not support ejbs, you may want to look into apache geronimo though |
| 21:47.36 | pfn | and persisting to a database |
| 21:47.48 | anirban | I tried to set tomcat 5.5 as the server for EJB project from eclipse but eclipse sadin the server is invalid |
| 21:48.06 | anirban | okay |
| 21:48.35 | pfn | on any HttpSessionBindEvent check against a central datastore |
| 21:48.39 | pfn | update it if necessary |
| 21:48.43 | pfn | fail if necessary |
| 21:50.04 | linuxfreck | pfn: so if a user logs in twice, what do you do? normally you would invalidate the old session, but how do you get access to it? |
| 21:51.24 | pfn | linuxfreck good point, I'd assume there has to be some way of retrieving the old session |
| 21:51.54 | pfn | assuming this is a clustered environment, then sessions should be replicated, so I figure you should be able to retrieve the old session by way of some sort of registry map |
| 21:52.26 | linuxfreck | these ways would be container-specific |
| 21:56.11 | linuxfreck | pfn: and you are not guaranteed that the sessions are replicated to all nodes of a cluster |
| 21:56.35 | pfn | right, it's usually just master-secondary replication |
| 21:56.38 | pfn | as opposed to n-way |
| 21:57.13 | pfn | I figure the same sort of thing applies still |
| 21:57.18 | pfn | you could still take advantage of the binding event |
| 21:57.28 | linuxfreck | true that |
| 21:57.43 | pfn | when the session is bound to the user, you can store an owner "UUID" into the db specifying a session id |
| 21:58.02 | pfn | of course, that would mean every page hit would involve retrieving the owner id, but that isn't horrible... |
| 21:59.47 | linuxfreck | imo you don't want to implement the one user login only thing at all |
| 22:00.03 | *** join/#tomcat map7 (n=map7@teksup41.lnk.telstra.net) |
| 22:01.03 | *** part/#tomcat mick (n=map7@teksup41.lnk.telstra.net) |
| 22:01.34 | *** part/#tomcat map7 (n=map7@teksup41.lnk.telstra.net) |
| 22:01.48 | *** join/#tomcat map7 (n=map7@teksup41.lnk.telstra.net) |
| 22:02.19 | *** join/#tomcat map7 (n=map7@teksup41.lnk.telstra.net) |
| 22:02.31 | *** join/#tomcat jsisson (n=sissonj@210-0-83-196.nexnet.net.au) |
| 22:05.56 | *** join/#tomcat sobersabre (n=bilbo@l192-117-118-8.broadband.actcom.net.il) |
| 22:06.17 | jedir0x | http://blogs.snapstream.com/2006/01/18/godzilla-pvr/ |
| 22:07.11 | sobersabre | hi. I have ssl q. created a private key with a password, by mistake. Is there a way to clear private key's password ? |
| 22:07.41 | sobersabre | tried #openssl or #ssl, they are empty. |
| 22:21.52 | jedir0x | not really dude |
| 22:22.07 | jedir0x | i mean: not at all |
| 22:22.20 | sobersabre | jedir0x what do you mean, will I have to request a new CERT ? |
| 22:22.34 | sobersabre | what a bummer... |
| 22:22.44 | jedir0x | you don't remember the password? |
| 22:22.51 | jedir0x | is that the problem? |
| 22:22.55 | sobersabre | NO! |
| 22:23.09 | sobersabre | the problem is the password is set. and it shouldn't. |
| 22:23.13 | sobersabre | I do know it. |
| 22:23.13 | jedir0x | yeah, then your fucked... think of how un secure it would be if you could do that :P |
| 22:23.30 | sobersabre | could do what ? |
| 22:23.32 | jedir0x | if you remembered the password, you _might_ be able to change it to blank... i'm not sure about that (i doubt it) |
| 22:23.59 | jedir0x | if you could clear the password for a private key... (un secure) |
| 22:24.38 | sobersabre | ok ok ok... thank you, jedir0x. let's wait for somebody who _does_ know. hopefully... maybe I should go for #apache.. |
| 22:24.57 | sobersabre | I googled for a while, but ... got flooded with info. |
| 22:25.47 | jedir0x | sobersabre: you CAN NOT do _ANYTHING_ at _ALL_ if you don't know the password. |
| 22:25.54 | jedir0x | i know that for a fact. |
| 22:31.20 | sobersabre | jedir0x but... I do know it :) |
| 22:31.46 | sobersabre | so your knowledge is of not much use to me, very unfortunately. |
| 22:39.03 | *** part/#tomcat agherna (n=agherna@bementil-117.illinois.prairieinet.net) |
| 22:41.01 | jedir0x | use the passwd command |
| 22:41.08 | jedir0x | are you in *nix? |
| 22:41.14 | jedir0x | *n?x |
| 22:44.36 | sobersabre | yes. |
| 22:44.59 | sobersabre | so is it openssl passwd -inkey ? |
| 22:45.30 | sobersabre | note, I haven't created the key with keytool. I used plain openssl tools. |
| 22:45.43 | sobersabre | hmm in the end your knowledge is really usefull. :) |
| 23:04.44 | pfn | linuxfreck I dunno, sometimes the application requires that you only allow one login per user |
| 23:05.29 | jedir0x | i was talking about the openssl program |
| 23:05.32 | jedir0x | type openssl |
| 23:05.37 | jedir0x | and in that console type "passwd" |
| 23:06.06 | pfn | openssl rsa -in withpasswd.key -out withoutpasswd.key |
| 23:06.09 | *** join/#tomcat valmont (n=chrishol@ppp-69-237-25-136.dsl.irvnca.pacbell.net) |
| 23:06.09 | pfn | pretty simple, really |
| 23:07.20 | jedir0x | oh yeah, that works too ;) |
| 23:07.25 | jedir0x | I've never had to alter a private key |
| 23:07.35 | pfn | I alter private keys all the time :p |
| 23:08.50 | pfn | having to enter a password on server start is super lame |
| 23:09.19 | pfn | what I would like to see are "private key" dongles |
| 23:09.29 | pfn | that only ever emit ciphered data |
| 23:09.39 | sobersabre | pfn I agree, but after creating several user certs you instinctively put in password. |
| 23:09.48 | sobersabre | ( I -instinctively ) |
| 23:09.55 | pfn | that way, the private key can never be stolen, yet still be completely useful |
| 23:10.01 | pfn | outside of physical theft |
| 23:10.07 | jedir0x | heh |
| 23:10.11 | jedir0x | like a USB dongle |
| 23:10.31 | jedir0x | it could read the private key from /dev/private_key |
| 23:11.00 | jedir0x | problem with that is that it could easily be copied to a file |
| 23:11.34 | pfn | no no, not /dev/private_key |
| 23:11.43 | pfn | the idea is that the private key is *never* accessible |
| 23:11.51 | pfn | it only ever outputs ciphered data |
| 23:12.08 | jedir0x | ah |
| 23:12.17 | jedir0x | so.... |
| 23:12.22 | jedir0x | /dev/usb_socket |
| 23:12.33 | jedir0x | socket as in network socket |
| 23:12.41 | pfn | so you would communicate to it via known certificates |
| 23:13.04 | jedir0x | invent it and make millions :) |
| 23:13.18 | pfn | it's been something I've been tossing around |
| 23:13.26 | pfn | but I don't know how compact and low power rsa chips would be |
| 23:13.31 | jedir0x | i haven't any time for it |
| 23:13.37 | jedir0x | for any side projects that is |
| 23:13.37 | pfn | if it could run in less than 500mW, and comes in a small form factor |
| 23:13.43 | pfn | and could output >10mbps |
| 23:13.46 | jedir0x | yeah |
| 23:13.57 | jedir0x | i know someone that could help with that. |
| 23:15.21 | pfn | this would work perfectly for identifying oneself to websites instead of passwords, etc. shouldn't be easily stolen (outside of physical theft), etc. |
| 23:15.40 | jedir0x | there are dongles for that actually. |
| 23:15.42 | pfn | should be protected from mitm attacks as long as one can run a trusted app |
| 23:21.46 | *** part/#tomcat FreemaniaX (n=Freemani@ip67-153-106-58.z106-153-67.customer.algx.net) |
| 23:24.52 | pfn | dongles by whom? |
| 23:24.57 | pfn | I haven't seen anything like it yet |
| 23:45.48 | *** join/#tomcat triumph (n=triumph@196.41.108.7) |
| 23:46.18 | triumph | hello all, anybody know how i can change the default bind address of tomcat that starts in jboss? have google'd around but haven't found anything concrete. i have changed the address in my server.xml but no luck. any help would be much appreciated |
| 23:55.35 | pfn | why do you want to change the bind addr? |
| 23:56.59 | paq | is there a way to map / to a servlet and still serve jsp pages? |
| 23:57.33 | pfn | paq yes, <servlet-mapping><servlet-name>jsp</servlet-name><url-pattern>*.jsp</url-pattern></servlet-mapping> |
| 23:58.24 | paq | pfn, before or after the <servlet-mapping><servlet-name>navmap</servlet-name><url-pattern>/*</url-pattern></servlet-mapping> ? |
| 23:58.35 | pfn | it doesn't matter |
| 23:58.47 | paq | my problem is that i want to dispatcher.forward to jsp pages from within the navmap servlet.. but it always hits the servlet again |
| 23:59.06 | pfn | then put in a mapping for *.jsp |
| 23:59.11 | paq | i have |
| 23:59.18 | pfn | then it should work fine |
| 23:59.18 | paq | i'll try again sec |
| 23:59.21 | pfn | I know, because I do it |