Thinking in MyLife

study ruby on rails

tomcat 配置（轉載）

Tomcat5.0+MySql配置JDBC，DBCP，SSL

作者：ycg01 來源:Java研究組織 (2005-07-21 10:28:13)

準備環境:

1.j2sdk-1_4_2-windows-i586.exe

//jdk

2.mysql-4.0.20d-win.zip

//mysql數據庫

3.mysqlcc-0.9.4-win32.zip

//mysqlGUI控制

4.jakarta-tomcat-5.0.27.exe

//tomcat服務器

5.mysql-connector-java-3.0.14-production.zip

//內含mysql驅動

安裝步驟:

1.安裝jdk

2.安裝tomcat

3.安裝mysql

4.安裝mysqlcc

5.將驅動包解壓,拷貝mysql-connector-java-3.0.14-production-bin.jar

到tomcat/common/lib下

或者下載mm.mysql-2.0.14-you-must-unjar-me.jar，

解壓后拷貝其中的mm.mysql-2.0.14-bin.jar

Tomcat5.0配置本例使用安裝密碼 198277

1.配置manager 管理應用程序

在conf/server.xml 中

添加如下：

<Service name="Catalina">
...

    <Context path="/manager"
	debug="0" privileged="true"
             docBase="/usr/local/kinetic
			/tomcat5/server/webapps/manager">
    </Context>

</Service>

限制IP訪問配置

<Context path="/manager" 
debug="0" privileged="true"
         docBase="/usr/local/kinetic
		 /tomcat5/server/webapps/manager">
         <Valve className="org.apache.
		 catalina.valves.RemoteAddrValve"
                allow="127.0.0.1"/>
</Context>

測試為:http://localhost:8080/manager/html

2、配置JDBCRealm容器管理安全,以mysql-4.0數據庫為例

a.拷貝驅動mm.mysql-2.0.14-bin.jar到common/lib/下

b.在數據庫ycg中建表

create table users 
(
  user_name         
  varchar(15) not null primary key,
  user_pass         
  varchar(15) not null
);

create table user_roles 
(
  user_name         
  varchar(15) not null,
  role_name         
  varchar(15) not null,
  primary key (user_name, role_name)
);

c.修改server.xml如下(默認數據庫為root,無密碼,如果有形如:

connectionURL="jdbc:mysql:
//localhost/authority?

user=dbuser&password=dbpass")
      <Realm  className="org.apache.catalina.
	  realm.JDBCRealm" debug="99"
             driverName="
			 org.gjt.mm.mysql.Driver"
          connectionURL="jdbc:mysql:
		  //localhost/ycg?user=root"
         connectionName="" 
		 connectionPassword=""
              userTable="users" 
			  userNameCol="user_name"
			  userCredCol="user_pass"
          userRoleTable="user_roles"
		  roleNameCol="role_name" />

d.在數據庫中添加入tomcat的默認配置數據:

e.啟動mysql,啟動tomcat,此后tomcat將從數據庫中讀用戶規則認證.默認的conf/tomcat-users.xml失效

3.DBCP的配置

a.設置

<parameter>
    <name>removeAbandoned</name>
        <value>true</value>
            </parameter>

可使失效的數據連接重新啟用.

配套設置

<parameter>
    <name>removeAbandonedTimeout</name>
          <value>60</value>
            </parameter>

失效時間

如果要寫入日志

設置

<parameter>
    <name>logAbandoned</name>
         <value>true</value>
            </parameter>

以上三個默認都是false

b.以mysql為例,配置數據連接池

c.配置新的用戶與數據庫,必須設定密碼,空密碼將導致連接失敗

e.

指定root密碼:

mysqladmin -u root -h localhost 
password "198277"

(需修改上面的jdbcrealm設置connectionURL="jdbc:mysql://localhost/ycg?user=root&password=198277")

命令mysql進入匿名連接到服務器

密碼訪問

shell> mysql -h host -u user -p
Enter password: ********
//如果root沒有密碼,以下是不成功的.(試過了)
 mysql> GRANT ALL PRIVILEGES ON *.*
 TO javauser@localhost 
    ->   IDENTIFIED BY 'javadude' 
	WITH GRANT OPTION;
mysql> create database javatest;
mysql> use javatest;
mysql> create table testdata
(
    ->   id int not null 
	auto_increment primary key,
    ->   foo varchar(25), 
    ->   bar int);

在conf/server.xml中<host></host>
中添加
<Context path="/DBTest" docBase="DBTest"
        debug="5" reloadable="true" 
		crossContext="true">

  <Logger className="org.apache.
  catalina.logger.FileLogger"
             prefix="localhost_DBTest_log." 
			 suffix=".txt"
             timestamp="true"/>

  <Resource name="jdbc/TestDB"
               auth="Container"
               type="javax.sql.DataSource"/>

  <ResourceParams name="jdbc/TestDB">
    <parameter>
      <name>factory</name>
      <value>org.apache.commons.dbcp.
	  BasicDataSourceFactory</value>
    </parameter>

    <!-- Maximum number of dB connections 
	in pool. Make sure you
         configure your mysqld 
		 max_connections large enough to handle
         all of your db connections. 
		 Set to 0 for no limit.
         -->
    <parameter>
      <name>maxActive</name>
      <value>100</value>
    </parameter>

    <!-- Maximum number of idle dB
	connections to retain in pool.
         Set to 0 for no limit.
         -->
    <parameter>
      <name>maxIdle</name>
      <value>30</value>
    </parameter>

    <!-- Maximum time to wait for a 
	dB connection to become available
         in ms, in this example 10
		 seconds. An Exception is thrown if
         this timeout is exceeded. 
		 Set to -1 to wait indefinitely.
         -->
    <parameter>
      <name>maxWait</name>
      <value>10000</value>
    </parameter>

    <!-- MySQL dB username and
	password for dB connections  -->
    <parameter>
     <name>username</name>
     <value>javauser</value>
    </parameter>
    <parameter>
     <name>password</name>
     <value>javadude</value>
    </parameter>

    <!-- Class name for the old mm.
	mysql JDBC driver - uncomment
	this entry and comment next
         if you want to use this driver
		 - we recommend using Connector/J though
    <parameter>
       <name>driverClassName</name>
       <value>org.gjt.mm.mysql.Driver</value>
    </parameter>
     -->
    
    <!-- Class name for the official
	MySQL Connector/J driver -->
    <parameter>
       <name>driverClassName</name>
       <value>com.mysql.jdbc.Driver</value>
    </parameter>
    
    <!-- The JDBC connection url for 
	connecting to your MySQL dB.
         The autoReconnect=true argument 
		 to the url makes sure that the
         mm.mysql JDBC Driver will 
		 automatically reconnect if mysqld closed the
         connection.  mysqld by default 
		 closes idle connections after 8 hours.
         -->
    <parameter>
      <name>url</name>
      <value>jdbc:mysql://localhost:3306
	 /javatest?autoReconnect=true</value>
    </parameter>


            <parameter>
              <name>removeAbandoned</name>
              <value>true</value>
            </parameter>

             <parameter>
              <name>removeAbandonedTimeout</name>
              <value>60</value>
            </parameter>
            <parameter>
              <name>logAbandoned</name>
              <value>true</value>
            </parameter>
  </ResourceParams>
</Context>

f.在web服務中調用.配置web.xml 如:

<web-app xmlns=
"http://java.sun.com/xml/ns/j2ee"
    xmlns:xsi=
	"http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation=
	"http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
    version="2.4">
  <description>MySQL Test App</description>
  <resource-ref>
      <description>DB Connection</description>
      <res-ref-name>jdbc/TestDB</res-ref-name>
      <res-type>javax.sql.DataSource</res-type>
      <res-auth>Container</res-auth>
  </resource-ref>
</web-app>

g.測試用test.jsp

<%@ taglib uri=
"http://java.sun.com/jsp/jstl/sql"
prefix="sql" %>
<%@ taglib uri=
"http://java.sun.com/jsp/jstl/core"
prefix="c" %>

<sql:query var="rs"
dataSource="jdbc/TestDB">
select id, foo, bar from testdata
</sql:query>

<html>
  <head>
    <title>DB Test</title>
  </head>
  <body>

  <h2>Results</h2>
  
<c:forEach var="row" items="${rs.rows}">
    Foo ${row.foo}<br/>
    Bar ${row.bar}<br/>
</c:forEach>

  </body>
</html>

h.新建web應用

下載jakarta-taglibs-standard-1.1.0

copy jstl.jar and standard.jar to your web app's WEB-INF/lib

DBTest/
    WEB-INF/
        web.xml
        lib/
            jstl.jar
            standard.jar
    test.jsp

拷貝到webapps/ 下

i.啟動mysql,tomcat

訪問:

http://localhost:8080/DBTest/test.jsp

顯示:

Results
Foo hello
Bar 12345

4.ssl的配置,以jdk1.4.2為例

a.進入%JAVA_HOME%\bin

運行命令:keytool -genkey -alias tomcat -keyalg RSA

以tomcat 安裝密碼為198277,ketool設置密碼為198277為例

輸入keystore密碼： 198277

您的名字與姓氏是什么？

[Unknown]： ycg

您的組織單位名稱是什么？

[Unknown]： nju

您的組織名稱是什么？

[Unknown]： nju

您所在的城市或區域名稱是什么？

[Unknown]： nanjing

您所在的州或省份名稱是什么？

[Unknown]： jiangsu

該單位的兩字母國家代碼是什么

[Unknown]： nd

CN=ycg, OU=nju, O=nju, L=nanjing, ST=jiangsu, C=nd 正確嗎？

[否]： y

輸入的主密碼

（如果和 keystore 密碼相同，按回車）： 198277

b.在你的D:\Documents and Settings\的當前用戶目錄下可以找到.keystore文件.將其拷貝到conf/文件夾下.

c.在server.xml 中找到

<!--
    <Connector port="8443" 
   maxThreads="150" minSpareThreads="25" 
   maxSpareThreads="75"
   enableLookups="false" 
   disableUploadTimeout="true"
   acceptCount="100" debug="0"
   scheme="https" secure="true"
   clientAuth="false" sslProtocol="TLS" />
    -->

去掉注釋

添加配置字段:keystoreFile="/conf/.keystore" keystorePass="198277"

如:

<Connector port="8443" 
 maxThreads="150" minSpareThreads=
 "25" maxSpareThreads="75"
  enableLookups="false" 
  disableUploadTimeout="true"
    acceptCount="100" debug="0" 
	scheme="https" secure="true"
     clientAuth="false" sslProtocol="TLS"
	 keystoreFile="/conf/.keystore"
       keystorePass="198277"/>

d.測試為:

https://localhost:8443

e.在自己的程序中添加ssl認證方式為:

在web.xml 中添加

<security-constraint>
<web-resource-collection>
<web-resource-name>Success
</web-resource-name>
<url-pattern>/</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL
</transport-guarantee>
</user-data-constraint>
</security-constraint>

f.用上提為例就是

修改web.xml 為

<web-app xmlns=
"http://java.sun.com/xml/ns/j2ee"
    xmlns:xsi=
	"http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation=
	"http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
    version="2.4">

    <description>MySQL Test App</description>

<security-constraint>
<web-resource-collection>
<web-resource-name>Success
</web-resource-name>
<url-pattern>/</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL
</transport-guarantee>
</user-data-constraint>
</security-constraint>

  
  <resource-ref>
      <description>DB Connection</description>
      <res-ref-name>jdbc/TestDB</res-ref-name>
      <res-type>javax.sql.DataSource</res-type>
      <res-auth>Container</res-auth>
  </resource-ref>
</web-app>

訪問:

https://localhost:8443/DBTest/test.jsp

g.如果與2配置的jdbcRealm結合起來進行表單認證

先在user_roles表中添加user_name:ycg role_name:web-user

在users表中添加user_name:ycg user_pass:198277

然后在web.xml中添加

<auth-constraint>
<role-name>web-user</role-name>
</auth-constraint>

<login-config>
 <auth-method>BASIC</auth-method>
 <realm-name>My Member Area</realm-name>
</login-config>

修改后的web.xml如:

<web-app xmlns=
"http://java.sun.com/xml/ns/j2ee"
    xmlns:xsi=
	"http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation=
	"http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
    version="2.4">

    <description>MySQL Test App</description>

<security-constraint>
<web-resource-collection>
<web-resource-name>Success
</web-resource-name>
<url-pattern>/</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>web-user</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL
</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
 <auth-method>BASIC</auth-method>
 <realm-name>My Member Area</realm-name>
</login-config>
  
  <resource-ref>
      <description>DB Connection</description>
      <res-ref-name>jdbc/TestDB</res-ref-name>
      <res-type>javax.sql.DataSource</res-type>
      <res-auth>Container</res-auth>
  </resource-ref>
</web-app>

測試:

http://localhost:8080/DBTest/test.jsp

將通過ssl連接,并進行表單認證.用戶密碼可在user_roles,和users中添加.

5.中文亂碼問題:

mysql 默認編碼 iso

tomcat request 傳輸編碼 iso

如果要顯示中文

在*.jsp中添加

<head>
<%@ page 
language="java"
contentType="text/html;
charset=GB18030"
pageEncoding="GB18030"
%>
</head>

如果是數據傳輸中的亂碼(如用servlet從mysql數據庫讀出的數據)用以下兩個轉碼函數轉碼，如果不清楚由哪種編碼轉成哪種編碼，就多嘗試。

//轉碼GBK轉ISO
    public String toISO(String input)
	{
        try
		{
                byte[] bytes = input.getBytes("GBK");
                return new String(bytes,"ISO8859-1");
        }catch(Exception ex) 
		{
        }
        return input;

    }
    
    //轉碼IS0轉GBK
    public String toGBK(String input)
	{
        try {
            byte[] bytes = 
			input.getBytes("ISO8859-1");
            return new String(bytes,"GBK");
        }catch(Exception ex) {
        }
        return input;
    }

(http://www.fanqiang.com)

posted on 2007-01-29 15:51 leoli 閱讀(211) 評論(0) 編輯收藏所屬分類: java

新用戶注冊刷新評論列表


只有注冊用戶登錄后才能發表評論。




網站導航: 博客園 IT新聞 Chat2DB C++博客博問管理
相關文章: ant junit send mail Java基本數據類型轉換 eclipse plug open source link 幾個開源的 BI java.util.logging.Logger 類 modrian ssh 配置（轉 http://blog.csdn.net/daryl715）大小寫中文轉換 java 日期數字

統計

隨筆 - 17
文章 - 100
評論 - 19
引用 - 0

常用鏈接

留言簿(6)

隨筆分類

c++ (rss)

隨筆檔案(17)

文章分類(86)

java blog

tools

asm study
computer performance
drivers
english
english 2
find image
good javascripte
it 公司
javascript kit
linux information
open source erp
script IDE
so good IDE ,for dynamic scripting languages like JavaScript, Perl, PHP, Python, Ruby and Tcl.
sina blog
site history
ww english
xsl,xml
美食中國

Thinking in MyLife

tomcat 配置（轉載）

Tomcat5.0+MySql配置JDBC，DBCP，SSL

導航

統計

常用鏈接

留言簿(6)

隨筆分類

隨筆檔案(17)

文章分類(86)

收藏夾(3)

flex blog

good site

java blog

my friend

tools

抓蝦

搜索

最新評論

閱讀排行榜

評論排行榜

Thinking in MyLife

tomcat 配置 （轉載）

Tomcat5.0+MySql配置JDBC，DBCP，SSL

導航

統計

常用鏈接

留言簿(6)

隨筆分類

隨筆檔案(17)

文章分類(86)

收藏夾(3)

flex blog

good site

java blog

my friend

tools

抓蝦

搜索

最新評論

閱讀排行榜

評論排行榜

tomcat 配置（轉載）