You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by fu...@apache.org on 2003/10/16 03:42:04 UTC
cvs commit: jakarta-tomcat-site/xdocs-faq connectors.xml misc.xml security.xml
funkman 2003/10/15 18:42:04
Modified: docs/faq connectors.html misc.html security.html
docs/faq/printer connectors.html misc.html security.html
xdocs-faq connectors.xml misc.xml security.xml
Log:
Clarify error handling, system.out, new links for connector, configure ip
address for connector, restrict connections by ip address.
Revision Changes Path
1.7 +31 -1 jakarta-tomcat-site/docs/faq/connectors.html
Index: connectors.html
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/docs/faq/connectors.html,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- connectors.html 9 Sep 2003 01:21:38 -0000 1.6
+++ connectors.html 16 Oct 2003 01:42:04 -0000 1.7
@@ -15,7 +15,11 @@
<ul>
<li>[link]
<a href="http://www.johnturner.com/howto/apache-tomcat-howto.html">
- John Turner's HOWTO
+ John Turner's HOWTO,
+ </a> also there is
+
+ <a href="http://johnturner.com/howto/apache2-tomcat4127-jk-rh9-howto.html">
+ Apache 2.0.47 / Tomcat 4.1.27 / mod_jk for Red Hat 9.0
</a>
</li>
<li>[link]
@@ -117,6 +121,13 @@
</a>
</li>
+
+ <li>
+ <a href="#bind">
+ How do I bind to a specific ip address?
+ </a>
+ </li>
+
</ul>
</p>
</blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Answers"><strong>Answers</strong></a></font></td></tr><tr><td><blockquote>
@@ -293,6 +304,25 @@
<code>mod_jk.conf-auto</code> and edit it manually to your preference.
None of production tomcat installations really use <code>mod_jk.conf-auto</code>
as it is.
+ </div><br>
+
+ <b style="font-size: larger">
+ <a name="bind">
+ How do I bind to a specific ip address?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ Each Connector element allows an address property. For example:
+<div align="left"><table border="0" cellpadding="0" cellspacing="4"><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td></tr><tr><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" bgcolor="#ffffff"><pre>
+<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
+ address="192.168.1.1"
+ port="8080" minProcessors="5" maxProcessors="75"
+ enableLookups="true" redirectPort="8443"
+ acceptCount="100" debug="0" connectionTimeout="20000"
+ useURIValidationHack="false" disableUploadTimeout="true" />
+</pre></td><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td></tr><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../images/void.gif"></td></tr></table></div>
+
+
</div><br>
1.9 +42 -0 jakarta-tomcat-site/docs/faq/misc.html
Index: misc.html
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/docs/faq/misc.html,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- misc.html 28 Aug 2003 00:20:56 -0000 1.8
+++ misc.html 16 Oct 2003 01:42:04 -0000 1.9
@@ -119,6 +119,17 @@
What is <code>Element "web-app" does not allow "servlet" here</code>?
</a>
</li>
+ <li>
+ <a href="#catalina.out">
+ Where does System.out go? <br>
+ How do I rotate catalina.out?
+ </a>
+ </li>
+ <li>
+ <a href="#getResourceAsStream">
+ How do open a file for reading in my webapp?
+ </a>
+ </li>
</ul>
</p>
@@ -330,6 +341,9 @@
</error-page>
</pre>
+ You may also catch error 500's as well as other specific exceptions or
+ exceptions which extend <tt>Throwable</tt>.
+ <br>
For more information, see the Servlet Specification for all the gory
details of how you can play with this.
</div><br>
@@ -579,6 +593,34 @@
your web.xml file is ok.
</div><br>
+
+ <b style="font-size: larger">
+ <a name="catalina.out">
+ Where does System.out go? <br>
+ How do I rotate catalina.out?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ <code>System.out</code> and <code>System.err</code> both print to
+ catalina.out. But you can suppress this via the swallowOutput property and
+ sent to different log files.
+ <br>
+ catalina.out does not rotate. But it should not be an issue because
+ nothing should be printing to standard output since you are using a logging
+ package, right?
+ <a href="http://marc.theaimsgroup.com/?l=tomcat-user&m=106623436423859&w=2"> A log4j example</a> and
+ <a href="http://marc.theaimsgroup.com/?t=105544472600001&r=1&w=2">a thread about rotation of catalina.out</a>
+
+ </div><br>
+
+ <b style="font-size: larger">
+ <a name="getResourceAsStream">
+ How do open a file for reading in my webapp?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ Use <tt>ServletContext.getResourceAsStream()</tt>.
+ </div><br>
</blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade=""></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font size="-1" color="#525D76"><em>
Copyright © 1999-2003, Apache Software Foundation
1.8 +28 -1 jakarta-tomcat-site/docs/faq/security.html
Index: security.html
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/docs/faq/security.html,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- security.html 28 Aug 2003 00:20:56 -0000 1.7
+++ security.html 16 Oct 2003 01:42:04 -0000 1.8
@@ -6,7 +6,15 @@
" align="right" src="../images/tomcat.gif"></a></td></tr><!--HEADER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade=""></td></tr><tr><!--LEFT SIDE NAVIGATION--><td nowrap="true" valign="top" width="20%"><p><strong>Links</strong></p><ul><li><a href="..">Tomcat Home</a></li><li><a href="index.html">FAQ Home</a></li></ul><p><strong>Contents</strong></p><ul><li><a href="bugs.html">Bugs</a></li><li><a href="classnotfound.html">Class Not Found</a></li><li><a href="connectors.html">Connectors</a></li><li><a href="database.html">Database</a></li><li><a href="http://nagoya.apache.org/wiki/apachewiki.cgi?Tomcat/Howto">How do I</a></li><li><a href="unix.html">Linux / Unix</a></li><li><a href="memory.html">Memory</a></li><li><a href="meta.html">Meta</a></li><li><a href="misc.html">Miscellaneous</a></li><li><a href="performance.html">Monitoring / Performance</a></li><li><a href="http://nagoya.apache.org/wiki/apachewiki.cgi?Tomcat/Links">Other Resources</a></li><li><a href="security.html">Security</a></li><li><a href="version.html">Which Version</a></li><li><a href="tomcatuser.html">Tomcat User List</a></li><li><a href="windows.html">Windows</a></li></ul></td><!--RIGHT SIDE MAIN BODY--><td align="left" valign="top" width="80%"><table cellspacing="4" width="100%" border="0"><tr><td nowrap="true" valign="top" align="left"><h1>Tomcat FAQ</h1><h2>Security</h2></td><td nowrap="true" valign="top" align="right"><small><a href="printer/security.html"><img alt="Printer Friendly Version" border="0" src="../images/printer.gif"><br>print-friendly<br>version
</a></small></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Preface"><strong>Preface</strong></a></font></td></tr><tr><td><blockquote>
<p>
- Security issues. Here they are.
+ Security issues. But first a helpful link or two ...
+ <ul>
+ <li>
+ <a href="http://marc.theaimsgroup.com/?l=tomcat-user&m=106293430225790&w=2">
+ Using OpenSSL to set up your own CA
+ </a>
+ </li>
+ </ul>
+
</p>
</blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Questions"><strong>Questions</strong></a></font></td></tr><tr><td><blockquote>
<ul>
@@ -36,6 +44,12 @@
</a>
</li>
+ <li>
+ <a href="#restrict">
+ How do I restrict access by ip address or remote host?
+ </a>
+ </li>
+
</ul>
</blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Answers"><strong>Answers</strong></a></font></td></tr><tr><td><blockquote>
@@ -106,6 +120,19 @@
<a href="http://jakarta.apache.org/tomcat/tomcat-4.1-doc/manager-howto.html#Configuring%20Manager%20Application%20Access">
Configuring Manager Application Access</a>
</div><br>
+
+ <b style="font-size: larger">
+ <a name="restrict">
+ How do I restrict access by ip address or remote host?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ By using the RemoteHostValve or RemoteAddrValve. Warning, these valves rely on
+ accurate incoming ip addresses or hostnames. So they can fall victim to spoofing!
+ <a href="http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/valve.html">
+ Valve Reference Link</a>
+ </div><br>
+
</blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade=""></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font size="-1" color="#525D76"><em>
1.6 +31 -1 jakarta-tomcat-site/docs/faq/printer/connectors.html
Index: connectors.html
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/docs/faq/printer/connectors.html,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- connectors.html 9 Sep 2003 01:21:39 -0000 1.5
+++ connectors.html 16 Oct 2003 01:42:04 -0000 1.6
@@ -14,7 +14,11 @@
<ul>
<li>[link]
<a href="http://www.johnturner.com/howto/apache-tomcat-howto.html">
- John Turner's HOWTO
+ John Turner's HOWTO,
+ </a> also there is
+
+ <a href="http://johnturner.com/howto/apache2-tomcat4127-jk-rh9-howto.html">
+ Apache 2.0.47 / Tomcat 4.1.27 / mod_jk for Red Hat 9.0
</a>
</li>
<li>[link]
@@ -116,6 +120,13 @@
</a>
</li>
+
+ <li>
+ <a href="#bind">
+ How do I bind to a specific ip address?
+ </a>
+ </li>
+
</ul>
</p>
</blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Answers"><strong>Answers</strong></a></font></td></tr><tr><td><blockquote>
@@ -292,6 +303,25 @@
<code>mod_jk.conf-auto</code> and edit it manually to your preference.
None of production tomcat installations really use <code>mod_jk.conf-auto</code>
as it is.
+ </div><br>
+
+ <b style="font-size: larger">
+ <a name="bind">
+ How do I bind to a specific ip address?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ Each Connector element allows an address property. For example:
+<div align="left"><table border="0" cellpadding="0" cellspacing="4"><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td></tr><tr><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td><td height="1" bgcolor="#ffffff"><pre>
+<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
+ address="192.168.1.1"
+ port="8080" minProcessors="5" maxProcessors="75"
+ enableLookups="true" redirectPort="8443"
+ acceptCount="100" debug="0" connectionTimeout="20000"
+ useURIValidationHack="false" disableUploadTimeout="true" />
+</pre></td><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td></tr><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td></tr></table></div>
+
+
</div><br>
1.6 +42 -0 jakarta-tomcat-site/docs/faq/printer/misc.html
Index: misc.html
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/docs/faq/printer/misc.html,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- misc.html 28 Aug 2003 00:20:56 -0000 1.5
+++ misc.html 16 Oct 2003 01:42:04 -0000 1.6
@@ -118,6 +118,17 @@
What is <code>Element "web-app" does not allow "servlet" here</code>?
</a>
</li>
+ <li>
+ <a href="#catalina.out">
+ Where does System.out go? <br>
+ How do I rotate catalina.out?
+ </a>
+ </li>
+ <li>
+ <a href="#getResourceAsStream">
+ How do open a file for reading in my webapp?
+ </a>
+ </li>
</ul>
</p>
@@ -329,6 +340,9 @@
</error-page>
</pre>
+ You may also catch error 500's as well as other specific exceptions or
+ exceptions which extend <tt>Throwable</tt>.
+ <br>
For more information, see the Servlet Specification for all the gory
details of how you can play with this.
</div><br>
@@ -578,6 +592,34 @@
your web.xml file is ok.
</div><br>
+
+ <b style="font-size: larger">
+ <a name="catalina.out">
+ Where does System.out go? <br>
+ How do I rotate catalina.out?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ <code>System.out</code> and <code>System.err</code> both print to
+ catalina.out. But you can suppress this via the swallowOutput property and
+ sent to different log files.
+ <br>
+ catalina.out does not rotate. But it should not be an issue because
+ nothing should be printing to standard output since you are using a logging
+ package, right?
+ <a href="http://marc.theaimsgroup.com/?l=tomcat-user&m=106623436423859&w=2"> A log4j example</a> and
+ <a href="http://marc.theaimsgroup.com/?t=105544472600001&r=1&w=2">a thread about rotation of catalina.out</a>
+
+ </div><br>
+
+ <b style="font-size: larger">
+ <a name="getResourceAsStream">
+ How do open a file for reading in my webapp?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ Use <tt>ServletContext.getResourceAsStream()</tt>.
+ </div><br>
</blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade=""></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font size="-1" color="#525D76"><em>
Copyright © 1999-2003, Apache Software Foundation
1.5 +28 -1 jakarta-tomcat-site/docs/faq/printer/security.html
Index: security.html
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/docs/faq/printer/security.html,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- security.html 28 Aug 2003 00:20:56 -0000 1.4
+++ security.html 16 Oct 2003 01:42:04 -0000 1.5
@@ -5,7 +5,15 @@
Tomcat FAQ
" align="right" src="../../images/tomcat.gif"></a></td></tr><!--HEADER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade=""></td></tr><tr><!--RIGHT SIDE MAIN BODY--><td align="left" valign="top" width="80%"><table cellspacing="4" width="100%" border="0"><tr><td nowrap="true" valign="top" align="left"><h1>Tomcat FAQ</h1><h2>Security</h2></td><td nowrap="true" valign="top" align="right"><img border="0" hspace="0" vspace="0" height="1" width="1" src="../../images/void.gif"></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Preface"><strong>Preface</strong></a></font></td></tr><tr><td><blockquote>
<p>
- Security issues. Here they are.
+ Security issues. But first a helpful link or two ...
+ <ul>
+ <li>
+ <a href="http://marc.theaimsgroup.com/?l=tomcat-user&m=106293430225790&w=2">
+ Using OpenSSL to set up your own CA
+ </a>
+ </li>
+ </ul>
+
</p>
</blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Questions"><strong>Questions</strong></a></font></td></tr><tr><td><blockquote>
<ul>
@@ -35,6 +43,12 @@
</a>
</li>
+ <li>
+ <a href="#restrict">
+ How do I restrict access by ip address or remote host?
+ </a>
+ </li>
+
</ul>
</blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Answers"><strong>Answers</strong></a></font></td></tr><tr><td><blockquote>
@@ -105,6 +119,19 @@
<a href="http://jakarta.apache.org/tomcat/tomcat-4.1-doc/manager-howto.html#Configuring%20Manager%20Application%20Access">
Configuring Manager Application Access</a>
</div><br>
+
+ <b style="font-size: larger">
+ <a name="restrict">
+ How do I restrict access by ip address or remote host?
+ </a>
+ </b>
+ <div style="padding-left : 20px;">
+ By using the RemoteHostValve or RemoteAddrValve. Warning, these valves rely on
+ accurate incoming ip addresses or hostnames. So they can fall victim to spoofing!
+ <a href="http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/valve.html">
+ Valve Reference Link</a>
+ </div><br>
+
</blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade=""></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font size="-1" color="#525D76"><em>
1.6 +31 -1 jakarta-tomcat-site/xdocs-faq/connectors.xml
Index: connectors.xml
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/xdocs-faq/connectors.xml,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- connectors.xml 9 Sep 2003 01:21:39 -0000 1.5
+++ connectors.xml 16 Oct 2003 01:42:04 -0000 1.6
@@ -25,7 +25,11 @@
<ul>
<li>[link]
<a href="http://www.johnturner.com/howto/apache-tomcat-howto.html">
- John Turner's HOWTO
+ John Turner's HOWTO,
+ </a> also there is
+
+ <a href="http://johnturner.com/howto/apache2-tomcat4127-jk-rh9-howto.html">
+ Apache 2.0.47 / Tomcat 4.1.27 / mod_jk for Red Hat 9.0
</a>
</li>
<li>[link]
@@ -130,6 +134,13 @@
</a>
</li>
+
+ <li>
+ <a href="#bind">
+ How do I bind to a specific ip address?
+ </a>
+ </li>
+
</ul>
</p>
</section>
@@ -309,6 +320,25 @@
<code>mod_jk.conf-auto</code> and edit it manually to your preference.
None of production tomcat installations really use <code>mod_jk.conf-auto</code>
as it is.
+ </answer>
+
+ <question>
+ <a name="bind">
+ How do I bind to a specific ip address?
+ </a>
+ </question>
+ <answer>
+ Each Connector element allows an address property. For example:
+<source>
+<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
+ address="192.168.1.1"
+ port="8080" minProcessors="5" maxProcessors="75"
+ enableLookups="true" redirectPort="8443"
+ acceptCount="100" debug="0" connectionTimeout="20000"
+ useURIValidationHack="false" disableUploadTimeout="true" />
+</source>
+
+
</answer>
1.6 +42 -0 jakarta-tomcat-site/xdocs-faq/misc.xml
Index: misc.xml
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/xdocs-faq/misc.xml,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- misc.xml 28 Aug 2003 00:20:56 -0000 1.5
+++ misc.xml 16 Oct 2003 01:42:04 -0000 1.6
@@ -131,6 +131,17 @@
What is <code>Element "web-app" does not allow "servlet" here</code>?
</a>
</li>
+ <li>
+ <a href="#catalina.out">
+ Where does System.out go? <br />
+ How do I rotate catalina.out?
+ </a>
+ </li>
+ <li>
+ <a href="#getResourceAsStream">
+ How do open a file for reading in my webapp?
+ </a>
+ </li>
</ul>
</p>
@@ -345,6 +356,9 @@
</error-page>
</pre>
+ You may also catch error 500's as well as other specific exceptions or
+ exceptions which extend <tt>Throwable</tt>.
+ <br/>
For more information, see the Servlet Specification for all the gory
details of how you can play with this.
</answer>
@@ -594,6 +608,34 @@
your web.xml file is ok.
</answer>
+
+ <question>
+ <a name="catalina.out">
+ Where does System.out go? <br />
+ How do I rotate catalina.out?
+ </a>
+ </question>
+ <answer>
+ <code>System.out</code> and <code>System.err</code> both print to
+ catalina.out. But you can suppress this via the swallowOutput property and
+ sent to different log files.
+ <br/>
+ catalina.out does not rotate. But it should not be an issue because
+ nothing should be printing to standard output since you are using a logging
+ package, right?
+ <a href="http://marc.theaimsgroup.com/?l=tomcat-user&m=106623436423859&w=2"> A log4j example</a> and
+ <a href="http://marc.theaimsgroup.com/?t=105544472600001&r=1&w=2">a thread about rotation of catalina.out</a>
+
+ </answer>
+
+ <question>
+ <a name="getResourceAsStream">
+ How do open a file for reading in my webapp?
+ </a>
+ </question>
+ <answer>
+ Use <tt>ServletContext.getResourceAsStream()</tt>.
+ </answer>
</section>
1.5 +28 -1 jakarta-tomcat-site/xdocs-faq/security.xml
Index: security.xml
===================================================================
RCS file: /home/cvs/jakarta-tomcat-site/xdocs-faq/security.xml,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- security.xml 28 Aug 2003 00:20:56 -0000 1.4
+++ security.xml 16 Oct 2003 01:42:04 -0000 1.5
@@ -16,7 +16,15 @@
<section name="Preface">
<p>
- Security issues. Here they are.
+ Security issues. But first a helpful link or two ...
+ <ul>
+ <li>
+ <a href="http://marc.theaimsgroup.com/?l=tomcat-user&m=106293430225790&w=2">
+ Using OpenSSL to set up your own CA
+ </a>
+ </li>
+ </ul>
+
</p>
</section>
@@ -49,6 +57,12 @@
</a>
</li>
+ <li>
+ <a href="#restrict">
+ How do I restrict access by ip address or remote host?
+ </a>
+ </li>
+
</ul>
</section>
@@ -122,6 +136,19 @@
<a href="http://jakarta.apache.org/tomcat/tomcat-4.1-doc/manager-howto.html#Configuring%20Manager%20Application%20Access">
Configuring Manager Application Access</a>
</answer>
+
+ <question>
+ <a name="restrict">
+ How do I restrict access by ip address or remote host?
+ </a>
+ </question>
+ <answer>
+ By using the RemoteHostValve or RemoteAddrValve. Warning, these valves rely on
+ accurate incoming ip addresses or hostnames. So they can fall victim to spoofing!
+ <a href="http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/valve.html">
+ Valve Reference Link</a>
+ </answer>
+
</section>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org