IRC Logs

Network: freenode Channel: #tomcat

	Enter your search terms Submit search form
	Web www.irclog.org

[11:38]<gnsvzjd>hi everybody, I have a problem with the / admin plugin for 5.5.13 I copied the two things admin.xml and the webapp folder, made an user with administrative rights and restartet the server, but when i go to 127.0.0.1:8080/admin i get again a message telling me that this feature is disabled... what can I do???
[11:39]<gnsvzjd>sorry 5.5.17
[11:45]<gnsvzjd>ok, problem solved... cache sucks... thanks for nothing!
[11:46]<drssygn>morning *
[11:48]<ngsypnzud>mörning
[12:01]<xzzljjg>morsche
[12:01]<xzzljjg>:-)
[12:04]<sgupp>Is there a way for setting up some code to intercept all requests to the server?
[12:05]<xzzljjg>Snuff: one call that a filter
[12:06]<drssygn>:)
[12:06]<sgupp>Thanks, that will be useful.
[12:06]<drssygn>Snuff, j_security does if you activate it
[12:07]<drssygn>Snuff, i mean j_security_check sorry
[13:51]<dzssygnwjzc>hi *
[17:57]<ppuppmbpuncpjum>mew
[17:57]<ngsypnzud>mow
[17:57]<ppuppmbpuncpjum>^_^
[17:57]<dzssygnwjzc>boaf
[17:58]<ppuppmbpuncpjum>so, i have apache, mod_jk, and tomcat... and they all *appear* to be working...
[17:58]<ppuppmbpuncpjum>but how can i tell tomcat to go read *.jsp files from urls like ~user/foo/whatever.jsp ?
[17:58]<ppuppmbpuncpjum>it keeps telling me resource /~user/foo/whatever.jsp is not available
[18:09]<fygvfjac>good morning everyone
[18:11]<fygvfjac>swente would you happen to be here. I got the login part of my site to work with the singlesignon, but if i wanted to use a self created form i ended up not being able to go beyond the validation page
[18:57]<dzssygnwjzc>lintlock, i dont think he is here do you handel SSO with Valve ?
[18:59]<fygvfjac>well ive gotten logged into my site with a basic page
[18:59]<fygvfjac>now im trying to store information into the database or redirect the page and it wont allow it
[19:01]<fygvfjac>it wont even let me put a picture in the jsp page
[19:01]<dzssygnwjzc>lintlock, how do you achieve login ?
[19:01]<dzssygnwjzc>j_security_check ?
[19:02]<mrvysvv>Hi all. Is there anyway to get a context to run as a specified user for file ownership purposes?
[19:02]<mrvysvv>I'm using commons-fileupload, and it writes all files as owned by root.root, which prevents clients from deleting or modifying them via FTP.
[19:03]<dzssygnwjzc>davistv, to run oder to be accessable only by a user X ?
[19:03]<mrvysvv>yassinework: No, I'm already using JAAS to do back-end logins. This is about file management on the client sites.
[19:03]<dzssygnwjzc>ah i c
[19:03]<mrvysvv>Each client has its own context, but tomcat seems to run all contexts as the root user.
[19:04]<fygvfjac>yes yassinework
[19:04]<fygvfjac>j_security_check
[19:04]<dzssygnwjzc>lintlock, your users located in the tomcat-users.xml now ?
[19:04]<fygvfjac>no i set it up for a database login
[19:04]<mrvysvv>A client uploads a file through our jsp app, it is owned by root.root. The client also has FTP access to the file upload directory, but can't touch any files uploaded through commons-fileupload
[19:04]<fygvfjac>jdbc
[19:04]<dzssygnwjzc>ahh fine
[19:05]<dzssygnwjzc>so what's the issue exactly ?
[19:05]<fygvfjac>well i would rather not use j_security_check if possible
[19:05]<mrvysvv>Once a file is uploaded through commons-fileupload, the client cannot delete or change it through FTP.
[19:05]<dzssygnwjzc>davistv, how about creating a groupe /tomcat and the user
[19:05]<mrvysvv>I can get apache to run each site as a particular user, but that doesn't have any impact on tomcat.
[19:06]<mrvysvv>Problem with a tomcat group is that our clients can't have access to eachother's files.
[19:06]<dzssygnwjzc>lintlock, j_security is fine why wouldn you ?
[19:06]<dzssygnwjzc>davistv, right
[19:06]<fygvfjac>well its not allowing me to use any images and its also not allowing me to properly validate users like i had it set up before
[19:07]<dzssygnwjzc>create a group per user
[19:07]<dzssygnwjzc>lintlock,
[19:07]<mrvysvv>But tomcat won't write those files with that group.
[19:07]<dzssygnwjzc>there is way to use it
[19:07]<dzssygnwjzc>create an application
[19:07]<mrvysvv>Tomcat will set it to root.root.
[19:07]<dzssygnwjzc>without access restrictiion
[19:07]<dzssygnwjzc>store your images there
[19:07]<mrvysvv>An application to mimic FTP? Why?
[19:08]<mrvysvv>Isn't that recreating the wheel?
[19:08]<dzssygnwjzc>dont run tomcat as root
[19:08]<mrvysvv>Ok, so if I ran tomcat as some other user, how does that help?
[19:09]<mrvysvv>Say I run it as user tomcat. Then all uploaded files are owned by tomcat.tomcat.
[19:09]<mrvysvv>Still the same problem.
[19:09]<dzssygnwjzc>lets say that tomcat_user belonge to GroupUser1 and GroupUser2 and GroupUser3
[19:09]<mrvysvv>User client1 won't be able to touch those files.
[19:09]<mrvysvv>Ok.
[19:09]<mrvysvv>I follow that.
[19:10]<dzssygnwjzc>so the menbers of GroupUser1
[19:10]<dzssygnwjzc>should be able to write and read
[19:10]<dzssygnwjzc>okay
[19:10]<dzssygnwjzc>got it
[19:10]<mrvysvv>I'm confused. Won't tomcat just write the file out as being owned by tomcat_user.tomcat_user?
[19:10]<dzssygnwjzc>in the GroupUser1 you have only two memebers
[19:10]<dzssygnwjzc>the User1 and tomcat
[19:11]<dzssygnwjzc>and both have read and write permission
[19:11]<mrvysvv>Even if tomcat_user belongs to all of the customer groups, how will it know to change the group of the file to GroupUser1 and set g+w?
[19:11]<dzssygnwjzc>lintlock, understand what i suggest you ?
[19:11]<fygvfjac>im confused slightly with who your talking to
[19:11]<dzssygnwjzc>both :)
[19:12]<dzssygnwjzc>lintlock, i told you to create a new application okay
[19:12]<mrvysvv>both what?
[19:12]<fygvfjac>i saw that
[19:12]<fygvfjac>ill try that for the image, but ill wait till your done with dav to ask you my next issue
[19:12]<dzssygnwjzc>lintlock, the application should be accessable without resriction
[19:12]<vjdc>I'm trying to get omcat 5.5.17 working for https using APR but I'm getting a permission denied error when it tries to bind to the socket
[19:12]<dzssygnwjzc>okay
[19:12]<dzssygnwjzc>davistv,
[19:12]<dzssygnwjzc>back to you
[19:12]<mrvysvv>Yes, thank you.
[19:13]<mrvysvv>So how would tomcat know to set the group of uploaded files to something other than tomcat_user?
[19:13]<dzssygnwjzc>so when tomcat is a member of all the GroupUserX groups
[19:13]<dzssygnwjzc>files are updloaded via tomcat
[19:13]<dzssygnwjzc>?
[19:13]<mrvysvv>commons-fileupload
[19:13]<dzssygnwjzc>mhh
[19:14]<mrvysvv>Web upload.
[19:14]<dzssygnwjzc>lemme think a bit :s

Back to #tomcat
Or go to some related logs:
#gentoo
#gentoo
#gentoo
#netbsd
#gentoo