date:20011129

servlets-ssi.renametojar

2001-11-29 Thread Paul Speed


Hello,

I'm currently looking into the security issues pertaining to enabling
this by default.  I followed the conversation for why it is the way
it is, but now that I'm actually in the guts of the thing, I don't
think I fully understand.

The issue as I remember it is that the SsiExec class in servlets-ssi.jar 
could be exploited even if SSI support wasn't enabled in the web.xml 
file.  The part I'm fuzzy on is how this can be true.

Since servlets-ssi.jar is loaded into the server class loader
(server/lib) it seems to me that it would be impossible for a rogue
webapp to access any classes in this jar.

In any case, my solution should protect from these kinds of attacks
also, I'm just not sure they're possible.

I'll be submitting a patch shortly that should allow SSI support to
be enabled by default but would require a specific configuration
change to get the exec directive to work.

-Paul Speed

P.S.: I'd be curious to know of anyone actually using the exec
directive.  Looking at the code, I'm not sure I see how it works
for non-CGI stuff.

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: Mod_webapp Solaris 8

2001-11-29 Thread jean-frederic clere

Matt Goyer wrote:

I've been struggling with this for a week or two now..

I'm able to compile mod_webapp on Solaris 8 with GCC 3.0.1 using the
snapshots of mod_webapp and apr from CVS. However I have to modify my
apxs since three values don't get properly set by the apache makefile.
I
So I then try and load my compiled mod_webapp with Apache and get the
following error:

Syntax error on line 206 of /usr/local/apache/conf/httpd.conf:
Cannot load /usr/local/apache/libexec/mod_webapp.so into server:
ld.so.1: /usr/local/apache/bin/httpd: fatal: relocation error: file
/usr/local/apache/libexec/mod_webapp.so: symbol __lshrdi3: referenced
symbol not found

Argh...! I thought I fixed the mod_webapp to detect this problem before
compiling...
Could you retry with
http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0.1/src/webapp-module-1.0.1-tc401-src.tar.gz
The configure should say Cannot mix gcc and native cc, if not tell me what
uname -a tells so I can add it to the check list.

The solution is _not_ using gcc with mod_webapp when apache-1.3 was compiled
with a native compiler.

I then pulled apart libgcc.a (as recommend in a post here) and made
libgcc.so and located it in /usr/lib and when I do:

export LD_PRELOAD=/usr/lib/libgcc.so /usr/local/apache/bin/apachectl
configtest

I then get:

What am I missing?

Can anyone get mod_webapp working on Solaris 8?? If some has.. If you
could post a quick install guide of what you did I'd appreciate that.

I posted here before and someone talked about setting LD_LIBRARY_PATH
and I tried that too to no avail.

Matt

--
To unsubscribe, e-mail: mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

[PATCH] SSI Security

2001-11-29 Thread Paul Speed


As promissed...

I've attached my patches to allow the exec directive to be enabled
or disabled (disabled by default).  The extra safety check I've built
in isn't really necessary, but it causes no harm and may prevent some
accidental foot-shootings in the future.

ssi-exec.patch is a diff -u from the catalina/src directory.  (We'll
see if the attachment actually works to the list since I've had 
problems with that before.)

Left up to discussion is the vulnerability of the jar file itself.
I contend that since the jar is in the server/lib class loader that
it is perfectly safe.  Indeed, when I played with moving it into 
shared it resulted in broken dependencies with at least one class 
in server/lib.

If it is not safe then it brings up a larger issue since all 
server/lib class have AllPermission and can therefore do whatever
they want.  If these classes are exploitable by webapps then it seems
to me that security should be set more fine grained (including not
allowing file execute for any file).  Otherwise, there's always risk
that some backdoor will be left open.

-Paul

Index: conf/web.xml
===
RCS file: /home/cvspublic/jakarta-tomcat-4.0/catalina/src/conf/web.xml,v
retrieving revision 1.31
diff -u -r1.31 web.xml
--- conf/web.xml2001/11/21 17:36:52 1.31
+++ conf/web.xml2001/11/29 08:05:04
@@ -165,6 +165,12 @@
   !--   be ignored and no errors shown?--
   !--   (0=false, 1=true) [1]  --
   !--  --
+  !--   allowExecDirective --
+  !--   Should the exec directive be allowed in SSI--
+  !--   pages?  When false, exec will be treated like  --
+  !--   an unknown command.--
+  !--   (0=false, 1=true) [0]  --
+  !--  --
   !-- IMPORTANT: To use the SSI servlet, you also need to rename the   --
   !--$CATALINA_HOME/server/lib/servlets-ssi.renametojar file   --
   !--to $CATALINA_HOME/server/lib/servlets-ssi.jar --
@@ -194,6 +200,10 @@
 init-param
   param-nameignoreUnsupportedDirective/param-name
   param-value1/param-value
+/init-param
+init-param
+  param-nameallowExecDirective/param-name
+  param-value0/param-value
 /init-param
 load-on-startup4/load-on-startup
 /servlet
Index: share/org/apache/catalina/servlets/SsiInvokerServlet.java
===
RCS file: 
/home/cvspublic/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/servlets/SsiInvokerServlet.java,v
retrieving revision 1.14
diff -u -r1.14 SsiInvokerServlet.java
--- share/org/apache/catalina/servlets/SsiInvokerServlet.java   2001/11/29 03:50:48
 1.14
+++ share/org/apache/catalina/servlets/SsiInvokerServlet.java   2001/11/29 08:05:05
@@ -161,6 +161,13 @@
 }
 
 try {
+value = getServletConfig().getInitParameter(allowExecDirective);
+
+ssiDispatcher.setAllowExecDirective((Integer.parseInt(value)0)?true:false);
+} catch (Throwable t) {
+;
+}
+
+try {
 value = getServletConfig().getInitParameter(expires);
 expires = Long.valueOf(value);
 } catch (NumberFormatException e) {
Index: share/org/apache/catalina/util/ssi/SsiDispatcher.java
===
RCS file: 
/home/cvspublic/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/util/ssi/SsiDispatcher.java,v
retrieving revision 1.2
diff -u -r1.2 SsiDispatcher.java
--- share/org/apache/catalina/util/ssi/SsiDispatcher.java   2001/11/29 03:41:26
 1.2
+++ share/org/apache/catalina/util/ssi/SsiDispatcher.java   2001/11/29 08:05:06
@@ -76,7 +76,7 @@
  *  @version   $Revision: 1.2 $, $Date: 2001/11/29 03:41:26 $
  *  @authorPaul Speed
  */
-public class SsiDispatcher {
+public final class SsiDispatcher {
 
 /**
  *  Determines how to treate unknown command references.
@@ -84,6 +84,11 @@
 private boolean ignoreUnsupportedDirective = true;
 
 /**
+ *  True if the exec command is allowed.
+ */
+private boolean allowExec = false;
+
+/**
  *  Contains the SSI command instances.  This is shared
  *  across all dispatcher instances.
  */
@@ -99,7 +104,6 @@
 ssiCommands.put(echo, new SsiEcho());
 ssiCommands.put(fsize, new SsiFsize());
 ssiCommands.put(flastmod, new SsiFlastmod());
-ssiCommands.put(exec, new SsiExec());
 ssiCommands.put(set, new SsiSet());
 
 SsiConditional cond = new

Re: cvs commit: jakarta-tomcat/src/facade22/org/apache/tomcat/facade JspInterceptor.java WebXmlReader.java

2001-11-29 Thread Bojan Smojver


Thanks Bill and sorry for my laziness... Servlet only people like myself
will be happier now :-)

Bojan

[EMAIL PROTECTED] wrote:
 
 billbarker01/11/28 19:06:05
 
   Modified:src/facade22/org/apache/tomcat/facade JspInterceptor.java
 WebXmlReader.java
   Log:
   Rationalize the setting of the default mapping for JSP pages.
 
   With this code move, only JspInterceptor knows anything about JSP pages.  In 
particular, removing JspInterceptor from server.xml disables all support for *.jsp 
files.
 
   Revision  ChangesPath
   1.32  +3 -0  
jakarta-tomcat/src/facade22/org/apache/tomcat/facade/JspInterceptor.java
 
   Index: JspInterceptor.java
   ===
   RCS file: 
/home/cvs/jakarta-tomcat/src/facade22/org/apache/tomcat/facade/JspInterceptor.java,v
   retrieving revision 1.31
   retrieving revision 1.32
   diff -u -r1.31 -r1.32
   --- JspInterceptor.java   2001/11/27 03:54:35 1.31
   +++ JspInterceptor.java   2001/11/29 03:06:05 1.32
   @@ -298,6 +298,9 @@
public void contextInit(Context ctx)
 throws TomcatException
{
   + if(ctx.getContainer(*.jsp) == null)
   + ctx.addServletMapping( *.jsp, jsp);
   +
 if( useJspServlet ) {
 // prepare jsp servlet.
 Handler jasper=ctx.getServletByName( jsp );
 
 
 
   1.15  +0 -1  
jakarta-tomcat/src/facade22/org/apache/tomcat/facade/WebXmlReader.java
 
   Index: WebXmlReader.java
   ===
   RCS file: 
/home/cvs/jakarta-tomcat/src/facade22/org/apache/tomcat/facade/WebXmlReader.java,v
   retrieving revision 1.14
   retrieving revision 1.15
   diff -u -r1.14 -r1.15
   --- WebXmlReader.java 2001/09/29 04:28:22 1.14
   +++ WebXmlReader.java 2001/11/29 03:06:05 1.15
   @@ -64,7 +64,6 @@
 
 try {
 // Defaults
   - ctx.addServletMapping( *.jsp, jsp);
 ctx.setSessionTimeOut( 30 );
 
 // We may read a default web.xml from INSTALL/conf/web.xml -
 
 
 
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: TC 3.3: For Servlets only

2001-11-29 Thread Bojan Smojver


Bill Barker wrote:
 
 I've checked in a change to move setting the default mapping to
 JspInterceptor.  Now, all Bojan needs to do is to comment out JspInterceptor
 in server.xml and all of his *.jsp files will be served as regular text
 files.

Again, thanks for this. It makes JSP and Servlet spec totally different
beasts in Tomcat 3.3.x. Cool!

The aim was actually not to have JSP files... What can I say, I'm a
passionate Velocity convert ;-)

Bojan

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

xsltc problems inside Tomcat 4.0.1

2001-11-29 Thread Deon van der Merwe


Hi All,

I have a simple application that uses the xalan XSLTC to transform
XML documents into HTML documents.  When running this stand-alone
(without Tomcat) it all works fine.

If I run this from a servlet inside Tomcat (4.0.1 and build 20011127)
I get one of the following errors:

Added to the my webapp is the following jar files:
- BCEL.jar
- xsltc.jar
- xalan.jar

The servlet need to load my application and read its configuration
from a static XML file.  I implemented a SAX ContentHandler like
this:
   public class SAXConfiguration
 extends org.xml.sax.helpers.DefaultHandler

Here is the error that I get:
===
java.lang.LinkageError: loader constraints violated when linking 
org/xml/sax/helpers/DefaultHandler class
 at 
com.truteq.configuration.SAXConfiguration.init(SAXConfiguration.java:147)
===
The line of code is this one:
   vSAXParser.parse (aInputStream, this);

Now I remove the xalan.jar file from the webapp.  The above error
is then fixed, but I get the following error:
===
java.lang.NoClassDefFoundError: javax/xml/transform/Source
 at com.truteq.presentation.Index.init(Index.java:16)
 at javax.servlet.GenericServlet.init(GenericServlet.java:258)
===
This is expected as the XSLTC requires this. But why/how does it
interfere with the other SAX parser?




-Deon
_
TruTeq Wireless (Pty) Ltd.Tel +27 82 663 8617
http://www.truteq.com
Wireless communications for remote machine management


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: Info on customizing jspc - jasper

2001-11-29 Thread Alberto Romei


Hi Tom, and many thanks for the suggestions !

I think i'll use a filter, although the taglib solution is interesting, too.

Thanks

Alberto

- Original Message -
From: Tom Drake [EMAIL PROTECTED]
To: Tomcat Developers List [EMAIL PROTECTED]
Sent: Wednesday, November 28, 2001 6:38 PM
Subject: Re: Info on customizing jspc - jasper


 Alberto:

 Maybe I'm missing something here but couldn't you simply
  intercept the response output stream and redirect it to a file?

 Have you tried using a filter?

 Alternatively, ou may be able to do this by 'including'
 your jsp from a servlet or another jsp.

 One last thought. Tag libraries have the ability to intercept 'body
content'
 that appears between the corresponding opening and closing tags.

 BodyContent body = getBodyContent();
 String bodyOfCaptureTag = body.getString();
 // write bodyOfCaptureTag to file here...

 You could create a simple BodyTagSupport taglib object, use this tag in
 a new jsp that you create that looks something like this.

 MyCaptureTagjsp:include page=TheRealUrlGoesHere//MyCaptureTag

 This is a little bizarre, but should even work with Tomcat 3.1 .

 Tom
 - Original Message -
 From: Alberto Romei [EMAIL PROTECTED]
 To: Tomcat Developers List [EMAIL PROTECTED]
 Sent: Wednesday, November 28, 2001 2:34 AM
 Subject: Re: Info on customizing jspc - jasper


 | Hi, and many thanks for the replies.
 | Using %@page extends=my.jsp.page.class % allows me to change only
the
 | name of the superclass for my JSP, but i need to do more than this.
 | I need to change all the fixed lines of the generated code.
 | For example, i would like to change:
 |
 | public void _jspService(HttpServletRequest request,
 HttpServletResponse
 | response)
 | in
 | public void _jspService(MyParam p1, String  s, int n)
 |
 | or substituting
 | JspFactory _jspxFactory = null;
 | with
 | String name = X;
 |
 | and so on...
 |
 | The other solution proposed by Mike is good, but HttpServletResponse
needs
 a
 | ServletOutputStream, and the generated servlet calls getPageContext()
 which
 | takes my request and response objects, so i guess my implementation will
 not
 | be so straightforward. Anyway, i think i'll try this way.
 |
 | If you have other ideas, please let me know
 |
 | Thanks
 | Alberto
 |
 | - Original Message -
 | From: Bill Barker [EMAIL PROTECTED]
 | To: Tomcat Developers List [EMAIL PROTECTED]
 | Sent: Tuesday, November 27, 2001 8:27 PM
 | Subject: Re: Info on customizing jspc - jasper
 |
 |
 |  This is off-topic for the dev list.  You'll probably get a better
 response
 |  from [EMAIL PROTECTED]
 | 
 |  What you want is @page extends=my.jsp.page.class %
 |  - Original Message -
 |  From: Alberto Romei [EMAIL PROTECTED]
 |  To: [EMAIL PROTECTED]
 |  Sent: Tuesday, November 27, 2001 10:32 AM
 |  Subject: Info on customizing jspc - jasper
 | 
 | 
 |   I wanted to use JspC to generate a java program (not exactly a
 servlet)
 |   which writes its output to a file on the disk instead of the
 |   HttpServletResponse's JspWriter.
 |  
 |   In practice, i just need to customize the fixed parts of the
generated
 |  code
 |   like:
 |  
 |   public class Foo extends HttpJspBase {
 |  
 |   or
 |  
 |   public void _jspService(HttpServletRequest request,
 |  HttpServletResponse
 |   response)
 |   throws java.io.IOException, ServletException {
 |  
 |   From what i've seen, i could simply substitute JspParseEventListener
 in
 |  the
 |   jasper jars, but in this way i would throw away the normal
 processing
 | of
 |   JSPs.
 |  
 |   So, what is the correct way to customize the JSP compilation ?
 |   Must i subclass org.apache.jasper.compiler.Compiler and call
 |   MyCompiler.something() instead of jspc.parseFiles() ? (that would be
a
 | lot
 |   of work... )
 |   If so, is there any kind of documentation on how to correctly write
a
 |  custom
 |   JSP compiler ? (possibly working with future versions of tomcat,
too)
 |  
 |   Any suggestion is appreciated.
 |  
 |   Thanks
 |  
 |   Alberto
 |  
 |   P.S.
 |   I'm new to tomcat source, so please be patient.
 |  
 |  
 |  
 |   --
 |   To unsubscribe, e-mail:
 |  mailto:[EMAIL PROTECTED]
 |   For additional commands, e-mail:
 |  mailto:[EMAIL PROTECTED]
 |  
 | 
 | 
 |  **
 | 
 |  This message is intended only for the use of the person(s) listed
above
 |  as the intended recipient(s), and may contain information that is
 |  PRIVILEGED and CONFIDENTIAL.  If you are not an intended recipient,
 |  you may not read, copy, or distribute this message or any attachment.
 |  If you received this communication in error, please notify us
 immediately
 |  by e-mail and then delete all copies of this message and any
 attachments.
 | 
 | 
 |  In addition you should be aware that ordinary (unencrypted) e-mail
sent
 |  through the Internet is not secure. Do not send confidential or
 sensitive
 |  information, such as social security numbers,

RE: [VOTE] Tomcat 4.0.2 Release Plan

2001-11-29 Thread Larry Isaacs


+1  Though I'm still coming up to speed on 4.x.

Fortunately I've firmly established the habit of using spaces
instead tabs by now. :)

Larry

 -Original Message-
 From: Remy Maucherat [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, November 28, 2001 1:26 AM
 To: [EMAIL PROTECTED]
 Subject: [VOTE] Tomcat 4.0.2 Release Plan
 
 
 Hi,
 
 I think it's the appropriate time to consider starting a new 
 release cycle
 for
 Tomcat 4.0. There has been a variety of significant bugs 
 fixed since 4.0.1
 (although there hasn't been any fixes for any showstopper bug).
 
 I don't plan to propose a formal release plan for this 
 release, as it is a
 bugfix-only release, and it will be released as soon as there 
 are no more
 must-fix issues remaining in the most current release candidate.
 
 - A few more code merge will happen between now and the first 
 beta release
   (at least one to add JAVA_HOME support in the install script).
 - The release notes will document all the fixes which occured 
 since 4.0.1.
 - The release notes will list the must-fix bugs. This 
 generally includes
 bugs
   whose severity in Bugzilla is 'blocker' (P1), 'critical' (P2)
   or 'major' (P3).
 - Tomcat 4.0.2 won't have any regressions over 4.0.1.
 - All betas for 4.0.2 should be considered release candidates if the
 must-fix
   issues list is empty.
 - Tomcat 4.0.2 beta 1 should be released between 12/02 and 12/16.
 - This vote will run until 12/01.
 
 ballot
 [ ] +1: I approve this plan, and I'll help
 [ ] +0: I approve this plan
 [ ] -0: I'm against this plan, but I won't veto it
 [ ] -1: I'm against this plan, and my reason is:
 
 
 /ballot
 
 Remy
 
 
 --
 To unsubscribe, e-mail:   
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]
 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

RE: [VOTE] New Committer: Jazmin Jonson

2001-11-29 Thread Larry Isaacs


+1

Larry

 -Original Message-
 From: Amy Roh [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, November 28, 2001 2:04 PM
 To: tomcat-dev
 Subject: [VOTE] New Committer: Jazmin Jonson
 
 
 As Bill Barker suggested, I would like to propose Jazmin 
 Jonson as a new
 committer.
 
 She has contributed a numerous patches to Tomcat4 admin application.
 
 Votes please?
 
 Amy Roh
 
 
 --
 To unsubscribe, e-mail:   
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]
 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: [VOTE] New Committer: Jazmin Jonson

2001-11-29 Thread Andy Armstrong


+1

Amy Roh wrote:
 
 As Bill Barker suggested, I would like to propose Jazmin Jonson as a new
 committer.
 
 She has contributed a numerous patches to Tomcat4 admin application.
 
 Votes please?
 
 Amy Roh
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]

-- 
Andy Armstrong, Tagish

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: [VOTE] Tomcat 4.0.2 Release Plan

2001-11-29 Thread Andy Armstrong




Remy Maucherat wrote:
 
 Hi,
 
 I think it's the appropriate time to consider starting a new release cycle
 for
 Tomcat 4.0. There has been a variety of significant bugs fixed since 4.0.1
 (although there hasn't been any fixes for any showstopper bug).
 
 I don't plan to propose a formal release plan for this release, as it is a
 bugfix-only release, and it will be released as soon as there are no more
 must-fix issues remaining in the most current release candidate.
 
 - A few more code merge will happen between now and the first beta release
   (at least one to add JAVA_HOME support in the install script).
 - The release notes will document all the fixes which occured since 4.0.1.
 - The release notes will list the must-fix bugs. This generally includes
 bugs
   whose severity in Bugzilla is 'blocker' (P1), 'critical' (P2)
   or 'major' (P3).
 - Tomcat 4.0.2 won't have any regressions over 4.0.1.
 - All betas for 4.0.2 should be considered release candidates if the
 must-fix
   issues list is empty.
 - Tomcat 4.0.2 beta 1 should be released between 12/02 and 12/16.
 - This vote will run until 12/01.
 
 ballot
 [ ] +1: I approve this plan, and I'll help
 [X] +0: I approve this plan
 [ ] -0: I'm against this plan, but I won't veto it
 [ ] -1: I'm against this plan, and my reason is:
 
 /ballot
 
 Remy
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]

-- 
Andy Armstrong, Tagish

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

RE: [VOTE] New Committer: Jazmin Jonson

2001-11-29 Thread GOMEZ Henri


+1


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]

ClassNotFound Exception when loading Tomcat 4.0.1 via URLClassLoader

2001-11-29 Thread Sriram N


Hi all,

I'm trying to write a java class that will load Tomcat 4.0.1 for me.
My goal is:
- Do not use the classpath. The CLASSPATH env variable's contents are clear
be me first.
- Use the URLClassLoader to get started.

This technique works with Tomcat 3.3

With Tomcat 4.0.1 however, I get a ClassNotFoundException for
org.apache.catalina.loader.Reloader which is in the same bootstrap.jar that is
used to load 
org.apache.catalina.startup.Bootstrap

However, when I stick to the batch file which adds bootstrap.jar to the system
CLASSPATH, tomcat runs OK, as usual.

Could some one point me to what I'm missing or doing wrong ? Thanks.

Here's the code that I use to load Tomcat 4.0.1

-- begin code 
public class TCStart{
public static void main(String args[]){
try{
System.setProperty(catalina.home,f:/tc4.0.1/);
System.setProperty(catalina.base,f:/tc4.0.1/);
System.setProperty(java.class.path,);

java.io.File file = new 
java.io.File(f:/tc4.0.1/bin/bootstrap.jar);
java.net.URL[] urls = new java.net.URL[]{file.toURL()};
java.net.URLClassLoader loader = new 
java.net.URLClassLoader(urls);
Class aClass = 
loader.loadClass(org.apache.catalina.startup.Bootstrap);
String classLoaderName = 
aClass.getClassLoader().getClass().getName();
String className = aClass.getName();
System.out.println(ClassName  + className);
System.out.println(ClassLoader  + classLoaderName);
//Class aClass = 
Class.forName(org.apache.catalina.startup.Bootstrap);
java.lang.reflect.Method method = null;
Class[] argsClass = new Class[] { String[].class };
// get the main method for the org.apache.tomcat.shell.Startup 
class
method = aClass.getMethod(main, argsClass);
Object object = null;
String filePath= -f conf/server.xml;
Object[] arguments = new Object[] { new String[] {start}};
// now invoke the main method for the 
org.apache.tomcat.shell.Startup class
method.invoke(object, arguments);
}catch(Exception ex){
System.err.println(Ugh ! is all that I can say);
ex.printStackTrace(System.err);
}
}
}


-- end code ---

And here's the stack Trace that I get.

 begin stack trace dump ---
ClassName org.apache.catalina.startup.Bootstrap
ClassLoader java.net.URLClassLoader
Starting service Tomcat-Standalone
Apache Tomcat/4.0.1
Exception during startup processing
java.lang.reflect.InvocationTargetException: java.lang.NoClassDefFoundError:
org
/apache/catalina/loader/Reloader
at java.lang.ClassLoader.defineClass0(Native Method)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$100(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at
org.apache.catalina.loader.StandardClassLoader.findClass(StandardClas
sLoader.java:671)
at
org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClas
sLoader.java:1090)
at
org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClas
sLoader.java:989)
at java.lang.ClassLoader.loadClassInternal(Unknown Source)
at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3
313)
at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)

at org.apache.catalina.core.StandardHost.start(StandardHost.java:612)
at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)

at
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:307
)
at
org.apache.catalina.core.StandardService.start(StandardService.java:3
88)
at
org.apache.catalina.core.StandardServer.start(StandardServer.java:505
)
at org.apache.catalina.startup.Catalina.start(Catalina.java:776)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
at java.lang.reflect.Method.invoke(Native Method)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)
at java.lang.reflect.Method.invoke(Native Method)
at TCStart.main(TCStart.java:25)

 end stack trace dump

85 matches

Mail list logo