Jaas.conf file conflicts between WARs.....

We have several different apps running in a TomCat container and each one contains its own jaas.conf file in its WAR file. Is there anyway for these apps to all find their own jaas.conf file? As far as I can tell, there is no way to do this.
Right now, each app sets a system property like this:
String jaas_conf = getServlet().getServletContext()
.getRealPath("/WEB-INF/jaas.conf");
System.getProperties().setProperty(
"java.security.auth.login.config",jaas_conf);
The problem here is that only the most recently loaded app can ever find its jaas.conf file.
Is there a way to do this?
Thanks!
Tim

Right now, each app sets a system property like this:
String jaas_conf = getServlet().getServletContext()
.getRealPath("/WEB-INF/jaas.conf");
System.getProperties().setProperty(
"java.security.auth.login.config",jaas_conf);
Don't know exactly about jaas, but can you make a copy of the System propreties, or make a new property and fill it with your info and then use that as a parameter for your jaas instance?

Similar Messages

Nsapi in cluster (obj.conf file conflict)

Hi,
          I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
          running with the plugin...
          When I am on non-cluster environment, everything is just fine, but on
          cluster, IPlanet is starting, but I can not see anything on the browser
          (page cannot be displayed), I have attached my obj.conf file. Please let
          me know ASAP what I am doing wrong...
          Regards
          GOD BLESS
          Chris
          ## ------------- BEGIN SAMPLE OBJ.CONF CONFIGURATION ---------
          # (no cluster)
          # The following line locates the NSAPI library for loading at
          # startup, and identifies which functions within the library are
          # NSAPI functions. Verify the path to the library (the value
          # of the shlib=<...> parameter) and that the file is
          # readable, or the server will fail to start.
          Init fn="load-modules" funcs="wl-proxy,wl-init"\
          shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
          Init fn="wl-init"
          # Configure which types of HTTP requests should be handled by the
          # NSAPI module (and, in turn, by WebLogic). This is done
          # with one or more "<Object>" tags as shown below.
          # Here we configure the NSAPI module to pass requests for
          # "/weblogic" to a WebLogic Server listening at port 7011 on
          # the host ags-dtcXXXX.agsolutions.co.uk that is your localhost (e.g:
          ags-dtc1724) .
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
          PathTrim="/weblogic"
          </Object>
          # NSAPI's configuration to pass request for any file begining with
          # "WLS" to weblogic server on port 7011.
          <Object name="eutility" ppath="*WLS*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/EUtility"
          </Object>
          # NSAPI's configuration to pass request for any file begining with
          # "wls" to weblogic server on port 7011.
          <Object name="eutility1" ppath="*wls*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/EUtility"
          </Object>
          # Here we configure the plug-in so that requests that
          # match "/servletimages/" will be handled by the
          # plug-in/WebLogic.
          <Object name="si" ppath="*/servletimages/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          </Object>
          # This Object directive works by file extension rather than
          # request path. To use this configuration, you must also add
          # a line to the mime.types file:
          # type=text/jsp exts=jsp
          # This configuration means that any file with the extension
          # ".jsp" will be proxied to WebLogic. Then you must add the
          # Service line for this extension to the Object "default",
          # which should already exist in your obj.conf file:
          <Object name=default>
          NameTrans fn=pfx2dir from=/ns-icons\
          dir="/usr/Netscape/Server4/ns-icons"
          NameTrans fn=pfx2dir from=/mc-icons\
          dir="/usr/Netscape/Server4/ns-icons"
          NameTrans fn="pfx2dir" from="/help" dir=\
          "/usr/netscape/server4/manual/https/ug"
          NameTrans fn=document-root root="/usr/eutilweb"
          Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy\
          WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011 PathPrepend=/jspfiles
          PathCheck fn=unix-uri-clean
          PathCheck fn="check-acl" acl="default"
          PathCheck fn=find-pathinfo
          PathCheck fn=find-index
          index-names="index.html,index.htm,wls.htm,wls.html,home.html"
          ObjectType fn=type-by-extension
          ObjectType fn=force-type type=text/plain
          Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
          Service method=(GET|HEAD) \
          type=magnus-internal/directory fn=index-common
          Service method=(GET|HEAD) type=*~magnus-internal/* fn=send-file
          AddLog fn=flex-log name="access"
          </Object>
          # The following directive enables HTTP-tunneling of the
          # WebLogic protocol through the NSAPI plug-in.
          <Object name="tunnel" ppath="*/HTTPClnt*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          </Object>
          ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
          [att1.html]


          Since IPlanet is started ( as per your email) , are you able to access
          index.html page?
          If yes, add the following debug flag in obj.conf and point your browser
          to
          http://[NES-host]:[port]/weblogic/index.html?__WebLogicBridgeConfig (2
          under scores)
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/weblogic" DebugConfigInfo="ON"
          </Object>
          Does the screen shot shows primary & secondary server info?
          what's the build date/time on it?
          PS: Also make sure there aren't any extra spaces in it.. Sometimes NES
          is very much picky..
          Kumar
          starssoul wrote:
          > Hi,
          >
          > I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
          > running with the plugin...
          > When I am on non-cluster environment, everything is just fine, but on
          > cluster, IPlanet is starting, but I can not see anything on the
          > browser
          > (page cannot be displayed), I have attached my obj.conf file. Please
          > let me know ASAP what I am doing wrong...
          > Regards
          >
          > GOD BLESS
          > Chris
          >
          >
          >
          >
          > Init fn="load-modules" funcs="wl-proxy,wl-init"\
          > shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
          > Init fn="wl-init"
          >
          > <Object name="weblogic" ppath="*/weblogic/*">
          > Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
          > PathTrim="/weblogic"
          > </Object>
          >
          >
          > ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
          [att1.html]

Securing the JASS CONF file

Hi,
I have put the JASS conf file as a resource in a signed JAR file. I did this so someone cannot alter this file. I also set the location of the file in the code right before I use it by setting the environment variable java.security.auth.login.config. Can anyone find a hole in this technique? The other option is to set the location as a URL on the web server and set the location of the file by using the environment variable java.security.auth.login.config.
Thanks,
- Bob

Thanks for your reply. Do you have any specifics on
how the JAAS conf file in a signed jar could be
hacked.The security issues of client-side JAAS have been brought up several times in this forum. Securing the config file as you do it eliminates the easiest way of replacing a login module on the client, but I remember another forum message where the author replaced the related login module in rt.jar by his own, malicious implementation. You cannot prevent that with your approach.
Another other issue (not security-related) with the client-side JAAS config, delivered in a signed JAR, is that you are giving up one key advantage of JAAS, the ease of exchanging the authentication mechanism.
Accessing it via a (secure) web connection from the server is a way to address that, though, as you suggest.

Easy Switch between xorg.conf files enable disable tvout

Hello,
This is my first post on this forum, so i'am not sure were to put my post, but i think here is the best place
summary:
Easy Switch between xorg.conf files, and enable/disable startup applications. Script does this:
detect which xorg.conf file is used and then depending on which one is used do 1 or 2:
1. copy tvout.conf to xorg.conf and disable all startup applications + enable one or more startup application(s) defined in the script startupappsoff
2. copy xorg.conf.backup to xorg.conf and enable all startup applications + disable one or more startup application(s) defined in the script startupappson
I thought it would be nice to share the script i created for an easy switch between two xorg.conf files. Myself preferred to switch between two xorg files for personal need.
Beside only switching between two xorg.conf files i would like to enable/disable some startup apps, therefor i created the scripts startupappsoff and startupappson.
If you want to use these scripts, look in this code for comments, and custimize at the points A. to I. Further read the comments on top of each script.
If something is not clear or is not correct, your free to ask!
have fun!
The script to be run to switch:
tvout
#!/bin/sh
#summary: This programm switches xorg.conf file with an other and back. Also it calls the programms startupappsoff and startupappson.
#in order to get this as a command, copy this program to: /usr/bin/
#to execute without password, add: <username> ALL=NOPASSWD: /usr/bin/tvout (replace <username> with your own)
#A. this script needs to recorgnize the different xorg.conf files you want to use. So put on top of your xorg.conf files in the first line: #tvout or #original
var1=$(head -1 /etc/X11/xorg.conf)
if [ $var1 == "#original" ]
then
#B. put here the path to your own custimized xorg.conf
sudo cp /mnt/data1/Arch\ Files/xorg.conf.tvout /etc/X11/xorg.conf
zenity --info --text 'tv-out enabled, to switch press CTRL+ALT+BACKSPACE'
#C. put here the path to startupappsoff and change username
su rob /mnt/data1/Arch\ Files/startupappsoff
fi
if [ $var1 == "#tvout" ]
then
#D. put here the path to your backuped xorg.conf or second custimized xorg.conf
sudo cp /mnt/data1/Arch\ Files/xorg.conf.backup /etc/X11/xorg.conf
zenity --info --text 'tft-out enabled, to switch press CTRL+ALT+BACKSPACE'
#E. put here the path to startupappson and change username
su rob /mnt/data1/Arch\ Files/startupappson
fi
startupappsoff
#!/bin/sh
#this programm turns startup programms off and turns only the startup programms defined here on
for file in $(ls ~/.config/autostart/);
do
#switch all startup apps off
#G. change rob to your own username
sed -i 's/X-GNOME-Autostart-enabled=true/X-GNOME-Autostart-enabled=false/g' /home/rob/.config/autostart/$file
#H. switch only these startup apps on, change rob to your own username
sed -i 's/X-GNOME-Autostart-enabled=false/X-GNOME-Autostart-enabled=true/g' /home/rob/.config/autostart/appchk.desktop
sed -i 's/X-GNOME-Autostart-enabled=false/X-GNOME-Autostart-enabled=true/g' /home/rob/.config/autostart/yakuake.desktop
done
startupappson
#!/bin/sh
#this script turns all startup programms of, and only turns on the startup programms defined here:
for file in $(ls ~/.config/autostart/);
do
#switch all startup apps on
#I. change rob to your own username
sed -i 's/X-GNOME-Autostart-enabled=false/X-GNOME-Autostart-enabled=true/g' /home/rob/.config/autostart/$file
#J. switch only these startup apps off, change rob to your own username
sed -i 's/X-GNOME-Autostart-enabled=true/X-GNOME-Autostart-enabled=false/g' /home/rob/.config/autostart/xbmc.desktop
done
Last edited by Rob (2010-11-24 14:10:58)

Many thanks, I am actually using your script minus the app changing script - to change my xorg from my dual screen display to a single screen display and my s-video tvout.
Now I need to tune my xorg to work, but I am trying to add the <username> ALL=NOPASSWD for the script to work without password but I do not know where to add the line and the format of the line?
Again many thanks for your script,
looking forward for your reply,
Regards

Difference between .war file and .ear file

Hi,
what is the difference between .war file and .ear file ?
Please let me know with appropriate explanation.

War file means web application archive. It is archived file having a collection of JSP, servlets and static pages that together costitute a web application. It contains one WEB-INF directory which will have a file named web.xml which defines the structure of the web application.
On the other side EAR file is Enterprise application archive. It is file having packaged content of one or more modules into a single archive so that the deployment of all the modules can be done simultaneously on the application server. It also contains XML files called deployment descriptors which gives the details of the deployment method. This deployment descriptor will be present in the folder META-INF folder.
So the main difference betwwen the two is that Ear file is having collection of various modules to be deployed on the application server while the WAR file is used to deploy the web applications.

Behaviour differences between war file and exploded directory

Hi,
I'm baffled by differences in how my web app behaves when deploy in a war file and when deployed in exploded directory.
Firstly when I deploy in exploded directory format (using wldeploy in ant) - the jsps do not precompile. However, when I deploy the war file - again using ant and wldeploy - precompile works just fine - and general performance seems better.
Secondly - the webapp has a pdf file - which is used as a template to dynamically produce a document. When deployed
in exploded format - the webapp works fine and is able to read the pdf. However, when I deploy in war file, the pdf cannot be read.
Surely the behaviour should be the same whether we deploy as a war or exploded.
Someone please help
Tariq

Some behaviors will be different between a WAR file deployment and an exploded WAR deployment.
With respect to JSP precompile, you just say "they do not precompile", so I can't tell anything about that.
When you read files from an exploded WAR, you can reference them in two ways: as a resource, or as an absolute file path. When you read files from a WAR file, you can only read files as a resource, and not as an absolute file path. You're not giving any information about how you're reading the file, so I can't tell about that either.
You'd have to provide more detail to get better answers.

Conflicting /images/ aliases in conf files

This is an Oracle 9iAS 9.0.2 installation. I have an alias for /images/ in the httpd.conf file and I find that Portal has an alias for /images/ in its portal.conf file. It seems that the httpd.conf file is overriding the portal.conf since none of the Portal GIF's are being displayed. Short of copying Portal's 4052 GIF's to my /images/ directory or having to change my httpd.conf /images/ alias (and all the associated files) how can I get the Portal GIF's displayed?

revised post.

Conflict between mod_oc4j.conf and http.conf

If I put the line:
Redirect /webportal/destination http://www.destination.co.uk
into my httpd.conf file, it gets ignored because I have the following lines in my mod_oc4j.conf file:
Oc4jMount /webportal OC4J_NHSU
Oc4jMount /webportal/* OC4J_NHSU
The mod_oc4j.conf seems to be taking precedence.
Does anyone know how to get round this?

personally i wouldn't setup mod_ocy to do the proxy, but I would setup mod_proxy / mod_proxy_reverse. (to pass the request from port 80 to 7777 and reverse).

Conflict between audigy and Olympus voice recor

I have an audigy se recently installed. Seemed to be working fine until I opened my Olympus voice recorder program. Just opening the program knocked out the sound card and I could not get it back again. No speakers in any application on the computer except the diagnostic test. Then the speakers would play. But no cd's, no wav files, no nothing. Tried checking and unchecking all the boxes. There really aren't that many. Only way to solve the problem was to uninstall and reinstall audigy and not go to Olympus anymore. I've done that several times to confirm that is the problem.
Any suggestions?
(5. sourround)

Bazbear wrote:
Could anyone help me to resolve the conflict between my Soundblaster Audigy 2ZS and Norton antivirus. The auto protect feature is constantly being turned off on boot up. According to Symantec the problem is caused by conflict between the two soft wares. The Creative page does not mention this at all and the work around on the Symantec site either does not work or entails time wasting closing of programs and re-boots. It is really getting to me now and I wonder if any one knows of a permanent fix?
Bazbear
Some past post here mention of this too.....and the mods suggestion does indeed helped some of them resolve it. Perhaps you can try it. What you need to do is uninstall all Norton and Creative software. When you're done with that, install Creative software first follow by Norton stuff.

Conflict between Logic pro 7.2.2 and DIGI002 using a macbook pro

Hi.
I'm running Logic pro 7.2.2 on a macbook Pro using a DIGI002 rack as audio interface. I experience an extremely bad performance from my computer and keep getting these warnings: "conflict between Logic Pro and external device (digi002)" and the application runs VERY slow! I have updated all drivers but that hasn't helped! I practically can't use Logic at all, as it complaints when hardly running any tracks in a session. Has anybody experinced or heard of it before? It has really started to get on my nerves!!!!

Hi,
I am running Logic Pro with a Digi002 Rack.My driver versions are:
Digi Core Audio manager 7.1.1cs1
ProTools LE v7.1.1cs1 also the first Intel compatible version of ProToolsLE.
Logic Pro 7.2.2
All of this works,and I even use the Digi002 also to playback audio from iTunes,iMovieHD,iDVD,and Quicktime Pro,without any problems at all.
Are you able to run ProToolsLE well,or is it exhibiting the same problems?
Are you using the internal drive as a record drive,or do you have an external firewire drive for audio? This is important.I would recommend NEVER using the internal drive for recording audio,it can make the drive unusable after a while.
It would be good to know if you do have the latest drivers for the Digi002,and are able to run iTunes etc... If that is the case then going and removing all of Logic Pro preference files,and re-selecting the Digi002 interface as the audio hardware might do the trick.Also,check Audio Midi setup and make sure it sees the Digi002 correctly.
Lastly,and this suggestion no one seems to give...is simply this:check ALL your firewire cables,and if they look even a little frayed,replace them.Also,please put the Digi002 in the following order,if you are daisy chaining multiple firewire devices:
MacBook Pro
\Digi002 Rack
\\firewire hard drive(s)
\\\any external DVD/CDburners,ESPECIALLY if the manufacturer recommends this position for heir device.
\\\\any other external devices(cameras,printers,whatever)and have them OFF when running Logic or ProTools.
I hope some of this helps,
Cheers,
Nick

Conflict between program Mac mail and program Microsoft Outlook e-mail???

Denmark, Kolding, 30th of September 2010
A conflict between program Mac mail and program Microsoft Outlook e-mail?
For several months tried to discuss and resolve with several Apple specialists/support, but without much luck.
Therefore I have discussed these issues with 2 different and independent Mac users to find out in testing other Mac users will have the same problems as outlined in the below mentioned situations.
I will therefore outline the coverage issues, as mentioned, including occurs on my iMac 21.5 " with serial number: <Edited by Host> and 2 friends with their Macbooks of new dates as follows:
1. Sending from my Mac plain mail as "plain text "(during formatting):
Plain text mail as "Plain Text "(during formatting) Verdana font size 10, sent and received on Windows PC with the correct letter size - but with the font changed to Century Gothic!!!
2. Sending from my Mac plain mail "formatted text" (during formatting):
Eg. with my signature/signature-colored types and Verdana as font and size 10, possibly with underlining and italics in the text dispatched - the mail received as text with New Times Roman size 12 and signing /signature color Verdana now in size 13.5!!!!
3. Sending plain mail "as normal text "(during formatting)
In the mail text underlined and made bold - the program asks whether to convert to RTF format (to keep underlining, bold, etc.) and Verdana as font and size 10, YES - this mail is received on the Windows PC as text with New Times Roman with the desired underlining and bold text and size 12!!!!
4. Plain text mail as "formatted Text"
Eg. with signature / signature-colored types and Verdana as font and size 10, possibly with underlining and italics in the text sent - received as text with New Times Roman and signing / signature as colored Verdana now in size 13.5!!!
5. Sending mail with file attached:
After producing a normal text document modified to PDF and directly from the Adobe Reader sent this PDF file in e-mail formatted as normal text with font Verdana 10 point, with signature. This is received on the Windows PC with a PDF file OK, but the font of the mail text is changed to Century Gothic and missing signature. Signature is available as an attachment on the Windows Outlook e-mail program as a ATT00113.text file. This can be opened and there is the missing signature!
6. Sending e-mail with photos directly from iPhoto
iPhoto opens and click on the desired photos eg. 5 pcs. (Exactly as mentioned in the demo video!) and click on the e-mail icon at iPhoto and the program opens and e-mail that is opened with the attached photos and rich text is being used in the mail. Signature disappears and must be clicked on the mail by the sender.
The mail is received with the attached pictures OK - text changed to Times Roman with the desired bold - though no signature and 5 pcs. Att0028.html files attached. These can be opened and contains the file number each picture!
The above problems can be partly avoided by the following:
1. Only send mails as plain text
Without any underlining, attachments, etc.. When the Windows PC Outlook receiver opens the mail where only the text fond is changed!!
2. Sending mail with attached file
Start opening the mail program and use formatted plain text first and then attach (with the staple) file, and the Window receiver will get the file, but text and signature changed to Times New Roman size 13!!
3. Sending mail with photos from iPhoto
Start by opening mail program text in Verdana 10 and click the Photo Browser and find (look for - takes its time!) the pictures you want to send and pull/drag them into the mail and send, - images, text and signature are in the mail on Windows PC - but with the font changed to Century Gothic!!!
If sent as formatted text with various underlining, italics, etc. together with the photos will be received OK - but the writing is now New Times Roman size 12 signatures Verdana now in size 13!!!
I must say – I am disappointed with the Mac mail program – it actually means that sending a perfect mail with underlining, colours, a.s.o. also photos directly from iPhoto – will received at a Windows computer in a totally mess.
Looking forward to some good news from either Mac supporter or some clever Mac users who can help me to adjust my Mac to avoid these problems IF POSSIBLE!!!!.
Apple/Mac is too good a product to make these problems!!
Best regards
Peter Larsen
<Edited by Host>

Welcome to Apple Discussions!
The PC sets the font on its side, the Mac does on its side for plain text. There is no "font size" in plain text coding. Rich Text gives you a bit more control, but only if both e-mail clients support it. HTML gives you a bit more control, but only if both e-mail clients support it. Use the asterisk, parenthesis, underscore, or any keyboard symbol that is part of the original ASCII. Otherwise, the chance is nobody else will be able to read it who does not have your e-mail client in the same version.
Sadly there are no e-mail standards except MIME for attachment, and even that isn't universally supported. E-mail is not the ideal medium for anything except plain text that is ASCII. To learn more about ASCII, see:
http://en.wikipedia.org/wiki/ASCII
If you want to post a website that is universally understood, see the hints here:
http://www.anybrowser.org/

OTC ssl.conf file does not have ssl wallet file location details

Hi B2B Gurus,
While doing the HTTPS configuration in OTC we observed that some of lines were missing in ssl.conf file located at <Oracle_Home>\Apache\Apache\conf. The below mentioned lines are missing in OTC’s ssl.conf but present in OracleB2B’s ssl.conf
Even ssl wallet file location is also missing in OTC ssl.conf file as mentioned below.
Can u please let us know as why these lines are missing or should we manually add these lines when we do HTTPS on OTC ?
Listen 4444
<VirtualHost default:4444>
# General setup for the virtual host
DocumentRoot "E:\Oracle_b2b\cachehome\Apache\Apache\htdocs"
ServerName DSCP17506.TechMahindra.com
ServerAdmin [email protected]
ErrorLog "|E:\Oracle_b2b\cachehome\Apache\Apache\bin\rotatelogs logs/error_log 43200"
TransferLog "|E:\Oracle_b2b\cachehome\Apache\Apache\bin\rotatelogs logs/access_log 43200"
Port 443
# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine on
# SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate.
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
# Server Wallet:
# The server wallet contains the server's certificate, private key
# and trusted certificates. Set SSLWallet at the wallet directory
# using the syntax: file:<path-to-wallet-directory>
SSLWallet file:E:\Oracle_b2b\cachehome\Apache\Apache\conf\ssl.wlt\default
# Certificate Revocation Lists (CRL):
# Set the CA revocation path where to find CA CRLs for client
# authentication or alternatively one huge file containing all
# of them (file must be PEM encoded)
# Note: Inside SSLCARevocationPath you need hash symlinks
# to point to the certificate files. Use the provided
# Makefile to update the hash symlinks after changes.
#SSLCARevocationPath conf\ssl.crl
#SSLCARevocationFile conf\ssl.crl\ca-bundle.crl
# Client Authentication (Type):
# Client certificate verification type and depth. Types are
# none, optional and require
#SSLVerifyClient require
# Access Control:
# With SSLRequire you can do per-directory access control based
# on arbitrary complex boolean expressions containing server
# variable checks and other lookup directives. The syntax is a
# mixture between C and Perl. See the mod_ssl documentation
# for more details.
#<Location />
#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ \
# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
#</Location>
# SSL Engine Options:
# Set various options for the SSL engine.
# o FakeBasicAuth:
# Translate the client X.509 into a Basic Authorisation. This means that
# the standard Auth/DBMAuth methods can be used for access control. The
# user name is the `one line' version of the client's X.509 certificate.
# Note that no password is obtained from the user. Every entry in the user
# file needs this password: `xxj31ZMTZzkVA'.
# o ExportCertData:
# This exports two additional environment variables: SSL_CLIENT_CERT and
# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
# server (always existing) and the client (only existing when client
# authentication is used). This can be used to import the certificates
# into CGI scripts.
# o StdEnvVars:
# This exports the standard SSL/TLS related `SSL_*' environment variables.
# Per default this exportation is switched off for performance reasons,
# because the extraction step is an expensive operation and is usually
# useless for serving static content. So one usually enables the
# exportation for CGI and SSI requests only.
# o CompatEnvVars:
# This exports obsolete environment variables for backward compatibility
# to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this
# to provide compatibility to existing CGI scripts.
# o StrictRequire:
# This denies access when "SSLRequireSSL" or "SSLRequire" applied even
# under a "Satisfy any" situation, i.e. when it applies access is denied
# and no other module can change it.
# o OptRenegotiate:
# This enables optimized SSL connection renegotiation handling when SSL
# directives are used in per-directory context.
#SSLOptions FakeBasicAuth ExportCertData CompatEnvVars StrictRequire
<Files ~ "\.(cgi|shtml)$">
SSLOptions +StdEnvVars
</Files>
<Directory "E:\Oracle_b2b\cachehome\Apache\Apache\cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
# Per-Server Logging:
# The home of a custom SSL log file. Use this when you want a
# compact non-error SSL logfile on a virtual host basis.
CustomLog E:\Oracle_b2b\cachehome\Apache\Apache\logs\ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
Thanks for your help in Advance.
Regards,
Priyanka

Hi Ramesh,
We added the missing entries in ssl.conf file and tested it out. It is working fine. When we did slient install we are facing this error, we found that this is a bug in 10.1.2.3 AS patch (5983622) silent install. Raised an SR on this and Support is working to get this fixed.
Regards,
Priyanka

Apache conf file not working

I've seen instructions all over the internet about rewriting a .conf file to get Apache to see your user "Sites" folder in Mountain Lion. Mine refuses to work. The server still works at localhost, but localhost/~user will not, I get "Safari cannot connect to server localhost."
I'm really the only user that uses it, is there any problem with just changing to document root in the httpd.conf file to /Users/user/Sites?
Or, any ideas about the user.conf file? Permissions are correct, file is correct, apache restarted.

Interesting. I ran apachectl configtest, and it found a syntax error in my user.conf file, which I thought I deleted. All this time I've been working in /etc/apache2/users, as the online tutorials specify. The other .conf file, brought to my attention by the configtest, is in /private/etc/apache2/users.
The error: a space between allow,deny.
Fixed the error... all is well. Thanks for the configtest tip... I never knew about that one.

Httpd.conf file missing in action

This is a weird one. I want to modify my httpd.conf file so my URL's all default to lower case. I'm using MAMP, so I navigated to Applications > MAMP, opened the file, modified it and restarted my server. (I also modified an .htaccess file.)
I then added the code LogLevel trace8 to my config file, with the understanding that I would see more "verbose" messages in my error log. Afterr restarting my servers, I reloaded my web page, then checked the log - nothing changed. That is, the log is recording my activity, but it doesn't display "verbose" messages.
Someone who was helping me on an Apache forum came to thte conclusion that my httpd.conf fiile isn't being used. So I typed httpd.conf into Apple's finder and, sure enough, I found half a dozen files with that name. I couldn't determine which is the right one, so I modifed all of them and restarted my serverrs again. There's STILL no change in my URL's, and my log is still recording generic messages.
Does anyone have any idea how I can solve this problem? First, am I correct in understanding that there must be at least ONE active httpd.conf files in order for my sites to function? If so, then I know there must be an invisible httpd.conf file somewhere on my MacBook that I need to locate.
Also, is it possible for error messages to be written to more than one Apache log at a time? It's just so strange that the error log in my Applications > MAMP folder is keeping tabs on the web pages I visit when the httpd.conf file in the same folder is apparently doing nothing.
Thanks for any tips.

MAMP is not Apple software and is well outside the normal 'consumer' stuff they deal with in Apple stores, I therefore don't think a Genius would be either will or able to investigate this. However I can provide the following information and maybe others who have used MAMP can provide more.
/etc/apache2/httpd.conf is the file used on a standard OS X Mac
/Library/Server/Web/Config/apache2/httpd_server_app.conf is the equivalent file used on a Mac server if you have installed Apple's Server.app
I have seen conflicting comments suggesting the location for the equivalent file for MAMP is -
/Applications/MAMP/conf/apache/httpd.conf
or
~/Library/Application Support/appsolute/MAMP PRO/httpd.conf
The following might be helpful http://foundationphp.com/tutorials/vhosts_mamp.php

Conflict between one or more third party MIDI or audio drivers

I have a Logic Pro 8 session with 17 audio files, each one of which have 2 to 4 plugins.
Every time I try to bounce the session to an .aiff or .mp3 this dialog box appears:
Logic Pro has detected a possible conflict between one or more third party MIDI or audio drivers.
Be sure to install the latest drivers for all audio and MIDI equipment connected to your computer, and remove any older or unused drivers.
I haven't installed any extra drivers/midi controllers/software. I just work entirely with Logic and an M-Audio external card (which is unplugged and audio preferences set to Built-In Input). And anyway, this issue arose after having recorded all the audios, after doing the editing, so no other possible installation move was done.
Please, help me find a solution.
Thanks.

I have looked in Library/Audio/MIDI Drivers and there is just one file called EmagicUSBMIDIDriver.plugin - can this be causing the problem?
Nothing on User/YourName/Library/Audio/MIDI Drivers.
I have found 3 AVID folders on Applications:
- Avid MetaSync Manager
- Avid MetaSync Publisher
- Avid_Uninstallers
Shall I remove these?
There is also an empty folder called Digidesign on User/Library/Audio/Plugins
I have tried it with the M-Audio card connected and selected in Logic, and it doesn't work.

Jaas.conf file conflicts between WARs.....

Similar Messages

Maybe you are looking for