omcat is a Java servlet container and Web server from the Jakarta project of the Apache Software Foundation. A Web server is, of course, the program that dishes out Web pages in response to requests from a user sitting at a Web browser. But Web servers aren’t limited to serving up static HTML pages; they can also run programs in response to user requests and return the dynamic results to the user’s browser. This is an aspect of the Web that Apache’s Tomcat is very good at because Tomcat provides both Java servlet and JavaServer Pages (JSP) technologies (in addition to traditional static pages and external CGI programming). The result is that Tomcat is a good choice for use as a Web server for many applications. And it’s a very good choice if you want a free, open source servlet and JSP engine. It can be used standalone, but it is often used “behind” traditional Web servers such as Apache httpd, with the traditional server serving static pages and Tomcat serving dynamic servlet and JSP requests.
Chapter 2: “Configuring Tomcat” discusses using the Apache Web server, managing realms, roles, and users, controlling sessions, and more.
Download the PDF of Chapter 2: “Configuring Tomcat”
Chapter 6: “Tomcat Security” teaches you about securing the system, multiple server security models, using the -security option, and much more.
Download the PDF of Chapter 6: “Tomcat Security”
Reproduced from Tomcat: The Definitive Guide by permission of O’Reilly & Associates. ISBN 0596003188, copyright 2003. All rights reserved.