Steve McCain

Ranch Hand
+ Follow
since Sep 03, 2001
Cows and Likes
Cows
Total received
0
In last 30 days
0
Total given
0
Likes
Total received
0
Received in last 30 days
0
Total given
0
Given in last 30 days
0
Forums and Threads
Scavenger Hunt
expand Ranch Hand Scavenger Hunt
expand Greenhorn Scavenger Hunt

Recent posts by Steve McCain

talking to yourself is said to be the first of madness.

I thought perhaps I could set the max age on the authentication cookie in my servlet but when I try to find it via getCCookies() I dont see it. Can someone please explain what I'm missing here?

15 years ago
I found the following in "Enterprise Java Programming with IBM WebSphere" by K Brown et al :-

"Once a user has been authenticated into WebSphere, WebSphere generates a special client credential to keep the user from having to log in again. This credential uniquely identifies the user and is kept in a cookie that is stored in memory on the user's browser. It has an expiration time associated with it to keep someone else from finding the cookie and using it to surreptiously log in as the original user (called a relay attack) after which it is regenerated and retransmitted."

I think that what I would like to do is to be able to set an absolute expiry timeout on the authentication cookie in the way that you can set an expiry time on a session. At the moment I have an application that uses its own authentication system & I control access via Http sessions (my servlets check if there is a current session and if not I redirect to a login page and at appropriate places in the app I end the session etc) but I would now like to use WebSphere's own authentication and would like the same level of control. I need to ensure that another user using the
browser has to log in afresh and not continue where the first user left-off so I need somehow to be able to "get rid" of the authentication cookie.

thanks
15 years ago
Using WAS 5.1 on Solaris.

Is it possible to set an expiry time for an authentication cookie (created by WAS Basic authentication) or does such a cookie persist until the browser is closed? If a timeout can be set how do I set it?
15 years ago
Many thanks for the advice John. I made the change about four days ago &
have not seen any more SocketTimeOut problems since, so it looks like its fixed!!



cheers

Steve
16 years ago
Occasionally I find a similar error:

[20/07/04 09:51:45:293 BST] d74b31 SRTServletReq E SRVE0133E: An error occurred while parsing parameters. java.io.IOException: post body contains less bytes than specified by content-length
at com.ibm.ws.webcontainer.servlet.RequestUtils.parsePostData(RequestUtils.java:521)
at com.ibm.ws.webcontainer.srt.SRTServletRequest.parseParameters(SRTServletRequest.java:789)
at com.ibm.ws.webcontainer.srt.SRTServletRequest.getParameter(SRTServletRequest.java:412)
at enquiriescontrol.EnquiryControl.performTask(EnquiryControl.java:90)
at enquiriescontrol.EnquiryControl.doPost(EnquiryControl.java:40)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
etc

Any help would be appreciated.
16 years ago
Using WAS 5.1 on Solaris.

In about 0.5% of POST requests to a servlet I get a SVRE0133E error on the first call to getParameter().
Advice on why these occasional errors occur & what to do about them would be much appreciated.

Full details of the error as follows:-
[10/07/04 02:16:12:603 BST] 1c5ee67 SRTServletReq E SRVE0133E: An error occurred while parsing parameters. java.net.SocketTimeoutException: Read timed out
at java.net.SocketInputStream.socketRead0(Native Method)
at java.net.SocketInputStream.read(SocketInputStream.java:129)
at com.ibm.ws.io.Stream.read(Stream.java:17)
at com.ibm.ws.io.ReadStream.read(ReadStream.java:177)
at com.ibm.ws.http.ContentLengthInputStream.read
ContentLengthInputStream.java:32)
at com.ibm.ws.io.ReadStream.read(ReadStream.java:177)
at com.ibm.ws.webcontainer.http.HttpConnection.read(HttpConnection.java:
340)
at com.ibm.ws.webcontainer.srp.SRPConnection.read(SRPConnection.java:200
)
at com.ibm.ws.webcontainer.srt.SRTInputStream.read(SRTInputStream.java:8
0)
at com.ibm.ws.webcontainer.srt.http.HttpInputStream.read(HttpInputStream
.java:309)
at com.ibm.ws.webcontainer.servlet.RequestUtils.parsePostData(RequestUti
ls.java:517)
at com.ibm.ws.webcontainer.srt.SRTServletRequest.parseParameters(SRTServ
letRequest.java:789)
at com.ibm.ws.webcontainer.srt.SRTServletRequest.getParameter(SRTServlet
Request.java:412)
at enquiriescontrol.EnquiryControl.performTask(EnquiryControl.java:60)
at enquiriescontrol.EnquiryControl.doPost(EnquiryControl.java:36)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.ibm.ws.webcontainer.servlet.StrictServletInstance.doService(Stric
tServletInstance.java:110)
at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._service(Stric
tLifecycleServlet.java:174)
at com.ibm.ws.webcontainer.servlet.IdleServletState.service(StrictLifecy
cleServlet.java:313)
at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.service(Strict
LifecycleServlet.java:116)
at com.ibm.ws.webcontainer.servlet.ServletInstance.service(ServletInstan
ce.java:283)
at com.ibm.ws.webcontainer.servlet.ValidServletReferenceState.dispatch(V
alidServletReferenceState.java:42)
at com.ibm.ws.webcontainer.servlet.ServletInstanceReference.dispatch(Ser
vletInstanceReference.java:40)
at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDi
spatch(WebAppRequestDispatcher.java:974)
at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAp
pRequestDispatcher.java:555)
at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebApp
16 years ago
Have recently moved to WebSphere Studio Site Developer (WSSD) from VisualAge
and am wondering if anyone can point me to a tutorial covering WSSD's web page design functionality? Currently we use DreamWeaver for page design and I'm interested in how the 2 products compare. Need to produce html pages and also JSPs.
Thanks
Steve McCain
16 years ago
Sorry, I meant to say that I have set Allow Hosts= "ALL" in serviceconfig.xml
16 years ago
I have WSSD 5.1 on my PC (W2000 Prof). I have WAS 5.0 running on a Solaris box. I've installed the Remote Agent Controller that was supplied with WSSD
on the Solaris box, it starts OK.
I thought I would test out the ability to deploy apps direct from WSSD to WAS so in WSSD I created a Server project & have tried to create a new server & server config. I select the appropriate server type in the wizard. On the next screen I give it the IP address of the Solaris box. When I click 'next' WSSD tries to connect but I always get "Connection Failed on host xxx.xx.xx.xx. Make sure that the Agent Controller is installed etc etc".
I have changed the RAC serviceconfig.xml to include <Allow host="ALL">. The port is the default 10002. What am I missing?
On a wider front, can anyone point me to some helful documentation of deploying applications via RAC? The Websphere Help System (Infocenter) doesn't help me at all nor does the help avaliable in WSSD.
IBM Tech Support don't seem able to help either - I was recommended just to deploy apps via AAT & the Admin console.
Anyone got any experience of RAC - is it worth pursuing or am I wasting my time???
16 years ago
I'd like to extend this thread to ask about some compatibility issues. I've got to access an Oracle 8.1.5 server & the driver supplied is in classes111.zip. There is no mention of DataSource support in the 815 documentation and they say to load to driver via
DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
I've got classes12.zip from Oracle 8.1.7 & assume the driver will connect to 8.1.5. I can try to use this in WAS 4.0 to create a DataSource. However I'm using VisualAge 4.0 for development &
the WTE datasource driver class for Oracle is
also oracle.jdbc.driver.OracleDriver not oracle.jdbc.pool.OracleConnectionPoolDataSource as mentioned by Shanmugan.
I'm wondering can I really create a datasource in VAJ using oracle.jdbc.driver.OracleDriver and if so which classesXX.zip should I use?
Also I could upgrade VAJ to WS Studio Site Developer - is the limitation of not being able to add new drivers to the WTE JNDI database fixed in this?
17 years ago
I'd like to extend this thread to ask about some compatibility issues. I've got to access an Oracle 8.1.5 server & the driver supplied is in classes111.zip. There is no mention of DataSource support in the documentation and they say to load to driver via
DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
I've got classes12.zip from Oracle 8.1.7 & assume the driver will connect to 8.1.5. S
17 years ago
Thanks for the reply but according to the infocentre for AES, section 6.6a, you can start the app server as a service. Pity it doesn't tell you how to create the service!
I created a script using startServer -script.
I tweaked it a bit to stop it echoing a few REMs. Then I created a service (using instsrv) to call the script. It works except WAS takes more than 30 seconds to start so I get a Windows error & the service is not shown as started even though it does start OK. I'm not sure how to tweak W2000
to give it more time to start.
Perhaps I should just log a call with IBM Tech Support - we pay for it after all!
18 years ago
I'm really interested in how other people handle this. Can anyone advise? Please!
18 years ago
Kyle,
your comparison with Word is fatuous.
Are you really telling me that the Websphere Application Server can only be run on W2000 as a 'foreground' task so that if you want to run it 24 hours a day then you have to leave the machine with the user who starts WAS logged in? Not what I'd call a secure solution.
Is there a particular reason why WAS can't be started as a service, after all this is the normal way of running servers (eg IBM HTTP Server, SQL Server etc)?
What about running it on Solaris - can it be run as background task?
Steve McCain
University of Bradford
18 years ago
I can start the app server interactively via
the startServer script or via the First Steps
utility but it dies when I log-off. The question I should have asked is how do I start it so it keeps running after I log-out? This seems like a pretty basic requirement to me!
18 years ago