| 00:00.48 | *** join/#tomcat sourcemaker (n=sourcema@p54A34856.dip.t-dialin.net) |
| 00:00.59 | *** part/#tomcat sourcemaker (n=sourcema@p54A34856.dip.t-dialin.net) |
| 00:40.10 | *** join/#tomcat maier (n=maier@cpe-065-190-203-221.nc.res.rr.com) |
| 02:27.06 | *** join/#tomcat Internat (n=nf@dsl-58-6-125-95.qld.westnet.com.au) |
| 02:29.25 | *** join/#tomcat jstephan__ (n=jstephan@p54A5BFDC.dip.t-dialin.net) |
| 03:48.53 | *** join/#tomcat SteveWrightNZ (n=steve@202-89-145-209.static.qsi.net.nz) |
| 04:28.46 | *** join/#tomcat tomisina (n=tomisina@68.206.143.216) |
| 04:33.05 | *** join/#tomcat MHSL- (n=Linux@116.88.0.73) |
| 04:58.24 | *** join/#tomcat acidjnk (i=acid@p5B3F0554.dip0.t-ipconnect.de) |
| 05:16.15 | *** part/#tomcat SteveWrightNZ (n=steve@202-89-145-209.static.qsi.net.nz) |
| 05:18.58 | *** join/#tomcat tomisina (n=tomisina@68.206.143.216) |
| 06:53.33 | *** join/#tomcat sanju_baba (n=sanjeev@202.71.146.210) |
| 06:55.31 | *** join/#tomcat r0bby (n=wakawaka@guifications/user/r0bby) |
| 06:55.38 | *** part/#tomcat r0bby (n=wakawaka@guifications/user/r0bby) |
| 07:31.34 | *** join/#tomcat victori (n=victori@cpe-75-80-141-237.san.res.rr.com) |
| 07:31.45 | victori | anyone know how to turn off jsessionid? |
| 08:02.05 | *** join/#tomcat [algo] (n=ilia@algo.dialup.corbina.ru) |
| 08:07.01 | *** join/#tomcat twilight\ (n=ask@244.80-202-77.nextgentel.com) |
| 08:10.19 | *** join/#tomcat kjkoster5489 (n=kjkoster@kjkoster.org) |
| 09:08.54 | *** join/#tomcat cofeineSunshine (n=justinas@78-60-219-253.ip.zebra.lt) |
| 10:18.22 | *** join/#tomcat kjkoster5489 (n=kjkoster@kjkoster.org) |
| 10:50.15 | *** join/#tomcat Ix-Xitanu (n=rtwetrf@195.158.117.20) |
| 11:39.31 | *** join/#tomcat AlexStandsBy (n=alexworx@port-87-234-51-210.static.qsc.de) |
| 11:41.40 | *** join/#tomcat [algo] (n=ilia@algo.dialup.corbina.ru) |
| 12:15.25 | *** join/#tomcat Nicke (n=niclasa@ua-83-227-140-135.cust.bredbandsbolaget.se) |
| 12:56.46 | *** join/#tomcat Ix-Xitan (n=rtwetrf@195.158.117.20) |
| 13:35.11 | *** join/#tomcat [algo] (n=ilia@algo.dialup.corbina.ru) |
| 13:39.30 | *** join/#tomcat chowells79 (n=chowells@c-71-236-228-127.hsd1.or.comcast.net) |
| 14:17.06 | *** join/#tomcat Ix-Xitanu (n=rtwetrf@195.158.117.215) |
| 14:21.07 | *** join/#tomcat Ix-Xitan (n=rtwetrf@195.158.117.215) |
| 14:39.07 | *** join/#tomcat AlexAfk (n=alexworx@port-87-234-51-210.static.qsc.de) |
| 15:05.44 | *** join/#tomcat [algo] (n=ilia@algo.dialup.corbina.ru) |
| 15:15.12 | *** join/#tomcat victori (n=victori@cpe-75-80-141-237.san.res.rr.com) |
| 15:23.48 | dryrot | do i need to run tomcat as root ? |
| 15:24.38 | kjkoster5489 | no |
| 16:07.48 | jwisher | although you may have to if you want to use it on port 80 |
| 16:07.56 | jwisher | or any port less than 1024 |
| 16:13.19 | dryrot | can i just run a proxy somewhere to handle that ? |
| 16:33.32 | *** join/#tomcat wltjr (n=wltjr@gentoo/developer/wltjr) |
| 16:43.47 | *** join/#tomcat fzlogik (n=fzlogik@213.254.185.115) |
| 17:06.56 | jwisher | most people just run tomcat as root to be honest |
| 17:07.40 | jwisher | but ideally they lower its priviledges after it has started up |
| 17:08.28 | jwisher | most webservers run as root ... apache , lighttpd ... whatever they all need root privs |
| 17:32.24 | *** part/#tomcat danderson (n=dave@atlas.natulte.net) |
| 17:50.40 | kjkoster5489 | dryrot: you can use port mapping to run tomcat as unprivileged user on port (say) 8080 and then use the firewall to map that onto port 80. |
| 18:19.00 | BULLE | jwisher: you dont have much of a choice, when you run on *nix and want to bind to port 80 |
| 18:23.05 | fzlogik | it's important to point out that anything servicing web requests usually acts as a low-priv user though. |
| 18:23.47 | BULLE | yes |
| 18:23.54 | BULLE | grab port 80, drop privileges |
| 18:23.58 | fzlogik | :) |
| 18:52.28 | *** join/#tomcat satan (n=jcpiza@84.79.67.254) |
| 19:26.59 | *** join/#tomcat kjkoster5489 (n=kjkoster@kjkoster.org) |
| 20:25.54 | pfn | jwisher, redirecting all *.jsp to a servlet is trivial, url-mapping *.jsp servlet-name yourservlet |
| 20:26.25 | pfn | BULLE, there's several options, jsvc, or iptables, or an ajp-aware webserver |
| 20:26.28 | pfn | that can drop-privs |
| 20:26.49 | pfn | jwisher, most web servers don't run as root, they start up as root in order to do the bind and then drop privs |
| 20:32.56 | *** join/#tomcat pompboy (n=pompboy@user-10lfeaf.cable.mindspring.com) |
| 20:33.33 | *** join/#tomcat prgrmr (n=prgrmr@bzq-79-181-13-71.red.bezeqint.net) |
| 20:37.23 | *** join/#tomcat [algo] (n=ilia@algo.dialup.corbina.ru) |
| 20:48.14 | *** join/#tomcat Internat3 (n=nf@dsl-58-6-125-95.qld.westnet.com.au) |
| 20:59.46 | *** join/#tomcat cofeineSunshine (n=justinas@78-60-219-253.ip.zebra.lt) |
| 21:06.21 | *** join/#tomcat DarezGhost (n=Darez@c-69-244-241-36.hsd1.fl.comcast.net) |
| 21:07.38 | DarezGhost | guys, i'm trying to execute the "ls" binary on my server using a servlet. But I get this exception: java.security.AccessControlException: access denied (java.io.FilePermission <<ALL FILES>> execute) . Can someone tell me how to fix this? i know it has to do with the security policy, but i don't know which tomcat policy file i need to modify to get this to work |
| 21:07.51 | DarezGhost | my tomcat is 5.5 |
| 21:08.07 | DarezGhost | java 1.6.0 |
| 21:08.17 | DarezGhost | os is linux ubuntu |
| 21:22.39 | kjkoster5489 | DarezGhost: check your java.policy files. |
| 21:23.04 | kjkoster5489 | File execution from the servlet is generally a Bad Idea(tm), though. |
| 21:24.19 | *** join/#tomcat ohsix (i=ohsix@66.220.111.222) |
| 21:50.09 | *** join/#tomcat fzl0gik (n=fzlogik@213.254.185.115) |
| 22:52.14 | *** join/#tomcat alk^ (n=cc@87-194-94-237.bethere.co.uk) |
| 23:37.03 | fzlogik | anyone aware of a "working" way of getting tomcat to play nicely with php(5)? my situation is this: I'm looking to write some stats-gathering code as a plugin for a web server... I'd rather not code it in C/C++, so apache httpd and lighttpd are low on my list of preferences. ideally I just want to code a Valve for tomcat and record information as it passes through there. |
| 23:38.08 | pfn | that's rather difficult... |
| 23:38.12 | fzlogik | but some of the sites on the machine are using PHP 5. so in my mind, ideal solutions would either be: 1) a servlet that communicates with php (faster than CGI; fastcgi would be nice) or 2) a servlet that can forward a request to apache httpd (so php can run with apache httpd and *.php requests get forwarded). |
| 23:38.16 | pfn | unless you can find a decent proxy app for tomcat |
| 23:38.22 | fzlogik | heh |
| 23:38.29 | pfn | or a fastcgi servlet implementation |
| 23:39.49 | fzlogik | so you're not aware of any? I just feel like there would be projects already established to achieve this (I know php4 had a servlet...). so this means either 1) there's no reason other than laziness for the project not existing or 2) there are people smarter than me that know a great reason -not- to work on such a project. :) |
| 23:40.25 | fzlogik | in particular, I bet jboss would love to have this sort of thing to add to its belt of features. |
| 23:41.18 | pfn | I think people mostly just aren't interested |
| 23:41.22 | pfn | they're happy with apache, etc. |
| 23:41.32 | pfn | and if they need such functionality, they'll do it through mod_perl, or mod_python |
| 23:41.35 | pfn | or as a native apache module |
| 23:46.06 | fzlogik | interesting: caucho seems to have developed a few servlets for this sort of thing... I'll look into whether they work with more servlet containers than just resin... |
| 23:46.34 | fzlogik | no reason why they should be tied to resin, imo |
| 23:51.03 | fzlogik | heh, okay, caucho even has a full implementation of php5 written in java. :| |
| 23:51.25 | fzlogik | crazy people. |