What would you like to improve in Tomcat?

2007-10-21 Thread Lucas Galfaso
Hi all, I would like to know what are the main things you would like to improve in Tomcat. This is a small (and clearly incomplete) of some of the possible things to improve: - Improve JMX support. - Improve the admin console. - Have close-to-zero bugs in bugzilla. - Build a continuous

Re: What would you like to improve in Tomcat?

2007-10-21 Thread Peter Rossbach
HI Lucas, look like a very great plan. I also think about better JMX support and management console to muliple tomcat instances. Please let us start the discussion, about your ideas. regards Peter Personal hint: Start with simple changes, first! I like your zero bug count idea... Am

svn commit: r586861 - /tomcat/current/tc5.5.x/STATUS

2007-10-21 Thread pero
Author: pero Date: Sun Oct 21 00:55:39 2007 New Revision: 586861 URL: http://svn.apache.org/viewvc?rev=586861view=rev Log: add my vote Modified: tomcat/current/tc5.5.x/STATUS Modified: tomcat/current/tc5.5.x/STATUS URL:

svn commit: r586866 - /tomcat/container/tc5.5.x/webapps/docs/changelog.xml

2007-10-21 Thread pero
Author: pero Date: Sun Oct 21 01:10:28 2007 New Revision: 586866 URL: http://svn.apache.org/viewvc?rev=586866view=rev Log: Use JDT 3.3.1 Modified: tomcat/container/tc5.5.x/webapps/docs/changelog.xml Modified: tomcat/container/tc5.5.x/webapps/docs/changelog.xml URL:

svn commit: r586865 - /tomcat/build/tc5.5.x/build.properties.default

2007-10-21 Thread pero
Author: pero Date: Sun Oct 21 01:10:23 2007 New Revision: 586865 URL: http://svn.apache.org/viewvc?rev=586865view=rev Log: Use JDT 3.3.1 Modified: tomcat/build/tc5.5.x/build.properties.default Modified: tomcat/build/tc5.5.x/build.properties.default URL:

svn commit: r586867 - /tomcat/current/tc5.5.x/STATUS

2007-10-21 Thread pero
Author: pero Date: Sun Oct 21 01:11:16 2007 New Revision: 586867 URL: http://svn.apache.org/viewvc?rev=586867view=rev Log: commit: Use JDT 3.3.1 Modified: tomcat/current/tc5.5.x/STATUS Modified: tomcat/current/tc5.5.x/STATUS URL:

Re: What would you like to improve in Tomcat?

2007-10-21 Thread Bill Barker
Lucas Galfaso [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I would like to know what are the main things you would like to improve in Tomcat. This is a small (and clearly incomplete) of some of the possible things to improve: - Improve JMX support. IMHO it is already

svn commit: r586870 - /tomcat/connectors/trunk/jk/java/org/apache/jk/common/ChannelNioSocket.java

2007-10-21 Thread billbarker
Author: billbarker Date: Sun Oct 21 01:31:12 2007 New Revision: 586870 URL: http://svn.apache.org/viewvc?rev=586870view=rev Log: Fix possible DoS condition for the experimental NIO/AJP module Fix for bug #43621 Reported By: William Leung Modified:

svn commit: r586871 - /tomcat/tc6.0.x/trunk/STATUS

2007-10-21 Thread billbarker
Author: billbarker Date: Sun Oct 21 01:34:38 2007 New Revision: 586871 URL: http://svn.apache.org/viewvc?rev=586871view=rev Log: Propose forward port of NIO/AJP bug Modified: tomcat/tc6.0.x/trunk/STATUS Modified: tomcat/tc6.0.x/trunk/STATUS URL:

DO NOT REPLY [Bug 43621] - soTimeout not worked on channelNioSocket

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=43621. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

Re: [Fwd: [Security] - **Updated** Important vulnerability disclosed in Apache Tomcat webdav servlet]

2007-10-21 Thread Rémy Maucherat
On Sat, 2007-10-20 at 23:04 -0400, Mark Thomas wrote: The mitigations available are: - - Disable write access until a fixed version is released - - Limit write access to trusted users - - Apply the following patch which will be included in the next releases of 6.0.x, 5.5.x and 4.1.x Since

Re: [Fwd: [Security] - **Updated** Important vulnerability disclosed in Apache Tomcat webdav servlet]

2007-10-21 Thread Mark Thomas
Rémy Maucherat wrote: Since it's an obvious hacking attempt, I chose to use this method instead: documentBuilder.setEntityResolver (new EntityResolver() { public InputSource resolveEntity(String publicId, String systemId)

Re: [Fwd: [Security] - **Updated** Important vulnerability disclosed in Apache Tomcat webdav servlet]

2007-10-21 Thread William L. Thomson Jr.
On Sun, 2007-10-21 at 09:09 -0400, Mark Thomas wrote: Rémy Maucherat wrote: Since it's an obvious hacking attempt, I chose to use this method instead: documentBuilder.setEntityResolver (new EntityResolver() { public InputSource

Re: [Fwd: [Security] - **Updated** Important vulnerability disclosed in Apache Tomcat webdav servlet]

2007-10-21 Thread Mark Thomas
William L. Thomson Jr. wrote: I take it down streams should run with the first patches to work around this vulnerability till next release. I already applied the one liner, kinda glad I did not apply the other last night ;) Please advise, thanks. You need a version of the second patch for a

Re: [Fwd: [Security] - **Updated** Important vulnerability disclosed in Apache Tomcat webdav servlet]

2007-10-21 Thread William L. Thomson Jr.
On Sun, 2007-10-21 at 17:41 +0100, Mark Thomas wrote: William L. Thomson Jr. wrote: I take it down streams should run with the first patches to work around this vulnerability till next release. I already applied the one liner, kinda glad I did not apply the other last night ;) Please

Re: What would you like to improve in Tomcat?

2007-10-21 Thread Santosh [ಸಂತೋಷ ]
Hi all, How about adding this feature to tomcat. A option in manager/admin to see the log file output in webpage. It will reduce the time to login into the system(if TC is installed in remote machine), then open the log file and see. Regards, Santosh On 10/21/07, Bill Barker [EMAIL PROTECTED]

Re: What would you like to improve in Tomcat?

2007-10-21 Thread Mark Thomas
Santosh [ಸಂತೋಷ ] wrote: Hi all, How about adding this feature to tomcat. A option in manager/admin to see the log file output in webpage. It will reduce the time to login into the system(if TC is installed in remote machine then open the log file and see. Take a look at lambdaprobe. It

Re: [Fwd: [Security] - **Updated** Important vulnerability disclosed in Apache Tomcat webdav servlet]

2007-10-21 Thread jkew
Mark Thomas wrote: William L. Thomson Jr. wrote: I take it down streams should run with the first patches to work around this vulnerability till next release. I already applied the one liner, kinda glad I did not apply the other last night ;) Please advise, thanks. You need a version

DO NOT REPLY [Bug 43668] New: - ApplicationDispatcher.doForward for non-HTTP request is always NULL

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=43668. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 43669] New: - ApplicationDispatcher.unwrapRequest raises cannot be cast to javax.servlet.ServletRequestWrapper

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=43669. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 43669] - ApplicationDispatcher.unwrapRequest raises cannot be cast to javax.servlet.ServletRequestWrapper

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=43669. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 39417] - ApplicationDispatcher.unwrapRequest() should not assume request is an extension of ServletRequestWrapper

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=39417. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 43669] - ApplicationDispatcher.unwrapRequest raises cannot be cast to javax.servlet.ServletRequestWrapper

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=43669. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 39417] - ApplicationDispatcher.unwrapRequest() should not assume request is an extension of ServletRequestWrapper

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=39417. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 43668] - ApplicationDispatcher.doForward for non-HTTP request is always NULL

2007-10-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=43668. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

svn commit: r586983 - /tomcat/tc6.0.x/trunk/STATUS

2007-10-21 Thread fhanik
Author: fhanik Date: Sun Oct 21 19:34:29 2007 New Revision: 586983 URL: http://svn.apache.org/viewvc?rev=586983view=rev Log: cast votes Modified: tomcat/tc6.0.x/trunk/STATUS Modified: tomcat/tc6.0.x/trunk/STATUS URL:

svn commit: r586984 - /tomcat/tc6.0.x/trunk/STATUS

2007-10-21 Thread billbarker
Author: billbarker Date: Sun Oct 21 19:38:24 2007 New Revision: 586984 URL: http://svn.apache.org/viewvc?rev=586984view=rev Log: Propose fix to BZ 43668 Modified: tomcat/tc6.0.x/trunk/STATUS Modified: tomcat/tc6.0.x/trunk/STATUS URL:

svn commit: r586990 - /tomcat/tc6.0.x/trunk/STATUS

2007-10-21 Thread markt
Author: markt Date: Sun Oct 21 20:08:58 2007 New Revision: 586990 URL: http://svn.apache.org/viewvc?rev=586990view=rev Log: Add vote Modified: tomcat/tc6.0.x/trunk/STATUS Modified: tomcat/tc6.0.x/trunk/STATUS URL: