DO NOT REPLY [Bug 24932] - Is there a rule on the User Name field?

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24932.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24932

Is there a rule on the User Name field?

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 09:59 ---
Please post on tomcat-user for this kind of issue.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Elements in web.xml file for 2.4 servlet specification (Tomcat 5)

2003-11-24 Thread Florent BENOIT
   Hi,

As you already know, one of the changes of the servlet 2.4 specification 
is that it uses XML schemas.
And with this new schema, there is not anymore a strict order for the 
top level elements in the web.xml file

So we can declare a servlet and then its mapping, and then a new servlet 
with its mapping
Something like that :

servlet ...servletA../servlet
servlet-mapping..servletA.../servlet-mapping
servlet ...servletB../servlet
servlet-mapping..servletB.../servlet-mapping
But the mapping of a servlet can be declared before the declaration of the servlet 
element
servlet-mapping..servletA.../servlet-mapping
servlet ...servletA../servlet
The problem is that this is a valid XML but it fails during the deployment on 
Tomcat 5.
This is due to the fact that during the XML parsing, when we add a servlet mapping, 
there is a check to see if the servlet exists.
Method addServletMapping() in org.apache.catalina.core.StandardContext class.
// Validate the proposed mapping
   if (findChild(name) == null)
   throw new IllegalArgumentException
   (sm.getString(standardContext.servletMap.name, name));
I agree that it is strange to do that (mapping between servlet declaration) and it can 
be a minor problem but it can occurs sometimes (during some copy/paste)
So, maybe the check has to move to another place.
Regards,

Florent.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


tomcat stats and performance

2003-11-24 Thread arinsoun

Hi to all, I have two questions. We have Tomcat as server for a struts web
application.

- We need do stats for that web application, stats like  what pages user
enter, who user enter more to the application, performance stats ... I have
seen that one choice is do a manual filter, other choice use awstats.  I
would appreciate information about that of someone that have experiencia on
stats, and he can help me to choose the best choice on time and effort.

- The second question is about performance, here we have tomcat and when
most user enter to the application the server don't reply very well. I have
read that is better have APACHE as web server and TOMCAT as server
container, is that true?  would I improve the performance? or the solution
is customize tomcat better?.

THANKS IN ADVANCE. REGARDS.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24940] New: - Direct access to request wrapped in (Http)ServletWrapper

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940

Direct access to request wrapped in (Http)ServletWrapper

   Summary: Direct access to request wrapped in (Http)ServletWrapper
   Product: Tomcat 5
   Version: 5.0.14
  Platform: All
OS/Version: All
Status: NEW
  Severity: Normal
  Priority: Other
 Component: Catalina
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


The ServletWrapper class provides getRequest and setRequest methods - as 
specificied in Java™ Servlet Specification Version 2.4 Final Draft.

These methods are used in core of Tomcat to directly access the wrapped 
request and hence to bipass the wrapper.  The whole point of the wrapper is to 
do just that - to wrap the request,  so all access to the wrapped object 
should go through the wrapper implementation - this allows it to control and 
to modify access to the request as it sees fit.  

It would seem best to me to remove the getRequest and setRequest methods 
altogether in order to force access through the Wrapper (of course this would 
mean altering the 2.4 spec. doc also).

This is not just a theoretical design problem it has manifested as a bug in my 
code.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24940] - Direct access to request wrapped in (Http)ServletWrapper

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940

Direct access to request wrapped in (Http)ServletWrapper





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 12:56 ---
This actually is the most poorly defined part of the spec and I have met
differing implementations. Some parts even contradict each other.
http://www.coredevelopers.net/library/j2ee/servlet24/ar01s05.jsp#d0e711 is an
interesting read on that.

I figure that until the spec gets clarified about this, the Tomcat implementors
cannot do much about that. I propose you address [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



JAASCallbackHandler clear password in the log file

2003-11-24 Thread Yann GUEVEL
Hi,

if the debug level is  3,  the 
org.apache.catalina.realm.JAASCallbackHandler.handle method writes in the 
log file the login and password it received (tomcat 4.1.29 
JAASCallbackHandler.java, line 155). So any people who can access the 
machine on which Tomcat is running can see all the login and passwords used. 
Isn't this unsafe ? Should'nt this log be removed ?

Thank for your answers.

Yann

_
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


DO NOT REPLY [Bug 24940] - Direct access to request wrapped in (Http)ServletWrapper

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940

Direct access to request wrapped in (Http)ServletWrapper

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 13:18 ---
getRequest is IMO necessary.

As for the rest, I had pointed out months ago the contradiction between wrapping
and request dispatcher. My current understanding is that implementing the RD
requirements is more important, so that wrapping will actually always occur.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 21561] - jk_uriEnv.c version 1.49 does not handle uri's with asterix

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21561.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21561

jk_uriEnv.c version 1.49 does not handle uri's with asterix

[EMAIL PROTECTED] changed:

   What|Removed |Added

Summary|jk_uriEnv.c version 1.49|jk_uriEnv.c version 1.49
   |does not handle uri's with  |does not handle uri's with
   |asterix |asterix



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 13:24 ---
I've also encountered this bug after switching from JK2 of Tomcat 4.1.27 to
4.1.29. Thanks to this bug report which pointed me to the right file I could
track down the problem. Here is a patch against the 4.1.29 distribution to fix
this problem.

---
--- old_jk_uriEnv.c 2003-11-24 13:43:30.0 +0100
+++ jk_uriEnv.c 2003-11-24 14:13:16.0 +0100
@@ -445,6 +445,7 @@

 if (uri[strlen(uri) - 1] == '*') {
 /* context based /context/prefix/ASTERISK  */
+uri[strlen(uri) - 1] = '\0';
 uriEnv-suffix  = NULL;
 uriEnv-prefix  = uri;
 uriEnv-prefix_len  =strlen( uriEnv-prefix );
---

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24940] - Direct access to request wrapped in (Http)ServletWrapper

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24940

Direct access to request wrapped in (Http)ServletWrapper





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 13:28 ---
I have submitted the question to [EMAIL PROTECTED] as suggested.

Not sure that I agree that getRequest is necessary.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: LB with mod_jk 2

2003-11-24 Thread Remy Maucherat
Bill Barker wrote:
Remy Maucherat [EMAIL PROTECTED] wrote in message
Hi,

I got a support question about LB with mod_jk 2 (and I saw posts about
that on tomcat-user).
Either there's something I don't understand, or the
jk2_get_most_suitable_worker method in jk_worker_lb will always return
the first worker which is not in an error state (assuming there was no
session), causing all requests to be redirected to the first declared
worker in a group.
So did I miss something, or is the algorithm bad ?
My recollection is that the algorithm is bad.  Of course, I'm currently of
the opinion that mod_jk2 is hopelessly broken, so I don't spend much time
there :).  At best, it suffers from the same problems as mod_jk if you are
using the pre-fork MPM, so it doesn't work at all.  mod_jk2 will need to
save this to the smem file in order to work with pre-fork.
The same configuration did get LB working ok with mod_jk 1.2.x.

It seems mod_jk 2 woul need work indeed ;-) In the meantime, I'll 
recommend using mod_jk 1.2.x. Maybe I'll have time to help improve 
mod_jk 2.0, who knows.

Rémy

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Justification for URIEncoding addition?

2003-11-24 Thread Remy Maucherat
Hans Bergsten wrote:

Larry Isaacs wrote:

Hans,

The behavior change is unrelated to the use of getParameter()
to search for jsp_precompile.  Both Tomcat 3.x and Tomcat 4.x
were bit by this log ago and Craig's fix was applied to both.
In Tomcat 4's case, it was prior to the 4.0 release.


Okay, I'm sure you're right that there may be more to it than
avoiding the getParameter() call in Jasper, but based on what
I've read, it seems to be part of the problem at least.
Assuming I have a good grip on the issue, I think it relates
to using UTF-8 to decode the path portion of the URL which
gets used to determine context, servlet mapping, etc.  Then
allowing setCharacterEncoding() to change the character encoding
for the query portion of the same URL.  The Servlet 2.3 and 2.4
specs both say setCharacterEncoding() applies to the request body
but don't mention it applying to the query portion of the URL.


Right, but since the servlet spec doesn't say anything about encoding
for the query portion, I think we have some room for a sensible
interpretation.
My concern is that with the new decoding behavior, apps that used to
work fine suddenly don't, and the reason seems to be that browsers
in fact ignore the RFC2718 recommendation that TC now enforces. I'm
all for compliance with all related specs, but in this case it's just
a recommendation and following it seems to do more harm than good.
I agree it's not as clean as you may want, but are there any real
problems with decoding the path portion using one charset and the
query string with another (i.e., the one from getCharacterEncoding()),
the way it used to be done?
I see you as a member of the expert group for the servlet spec. Did you 
make out those points during the review period ? If not, then you IMO 
have nothing to complain about, esp since Tomcat implements a far more 
reasonable and simpler behavior for the URL string handling.

The specification should have specified something along the lines of:
- The URL must be %xx encoded
- This decodes to bytes reprensenting UTF-8 characters
There's an IETF standard that, I think, states this in BW. It is being 
ignored. Maybe this wouldn't be the case if very popular tech, such as 
servlets  JSPs, started mandating it ? This is simply a chiken  egg issue.

i18n issues with HTTP and srevlets have been known about for years, but 
unfortunately they still haven't been addressed properly.
Same with the request dispatcher + wrapping issues that I have pointed 
out months ago (and of course, were silently ignored).

To balance this a little, among the other big issues, I have to give 
credit for solving the welcome files in a satisfactory way, as well as 
filters with RDs. Filters now make the proprietary APIs provided by the 
container irrelevant for most tasks.

Rémy



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: JAASCallbackHandler clear password in the log file

2003-11-24 Thread Tim Funk
IMO, no. In a production environment:
1) The debug should not turned up that high
2) If its a production box, file permissions as well as people able to log 
into the box should be trusted.

-Tim

Yann GUEVEL wrote:

Hi,

if the debug level is  3,  the 
org.apache.catalina.realm.JAASCallbackHandler.handle method writes in 
the log file the login and password it received (tomcat 4.1.29 
JAASCallbackHandler.java, line 155). So any people who can access the 
machine on which Tomcat is running can see all the login and passwords 
used. Isn't this unsafe ? Should'nt this log be removed ?


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


DO NOT REPLY [Bug 24723] - JNDI Datasource HOWTO instructions incorrect - Name jdbc is not bound in this Context

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24723.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24723

JNDI Datasource HOWTO instructions incorrect - Name jdbc is not bound in this Context





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 15:16 ---
I actually got the DataSource working as per the example, but only if i used 
the admin interface to add the resource. I added it under the context for my 
app, not in the global.
However, this was almost a catch-22 because the admin interface would 
dump cannot find driverName if there wasn't a resource already defined.
So I went directly to the server.xml file and added a dummy resource, then 
the admin interface would allow me to modify the url, login, etc.
Then it worked.
For awhile.
Now it seems that when i have ant pop the war file for my app into the tomcat 
webapps dir, and delete the folder for my app under the  webapps dir, i get the 
naming problem after restart.

Do i have to be locked into the admin interface?
whatever

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: SingleSignOn Valve and FormAuthenticator Principal Caching

2003-11-24 Thread Nelson, Luke
Brian,

What format is your attachement in?  When I try to follow the link, it
asks me to open a file named showattachment with no suffix.  It
doesn't appear to be text.

Does your fix do anything for bug 9077?  I've been working on fixing the
patch that is already pending for 9077.

Luke

-Original Message-
From: Brian Stansberry [mailto:[EMAIL PROTECTED] 
Sent: Saturday, November 22, 2003 4:55 PM
To: Tomcat Developers List
Subject: Re: SingleSignOn Valve and FormAuthenticator Principal Caching

Hi,

Your timing is good to bring this up.  We should definitely compare
notes.  Last night I committed a patch to JBoss that deals with this
issue (classes can be found in the JBoss CVS in the
org.jboss.web.catalina.tc4 package; most are in the authenticator
subpackage).

The JBoss patch is really more properly a Tomcat patch, but the JBoss
folks asked me to commit it.  I was planning to post a version to the
Tomcat Bugzilla this weekend.  In fact, I'll do it (against Bug 23881)
as soon as I send this.  The TC patch is against TC 5 HEAD; the JBoss
version is against TC 4.1, plus has some minor tweaks to optimize for
embedding in JBoss.

Best,

Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 

At 04:27 PM 11/21/2003 -0600, you wrote:
I believe that I have found a problem with the SingleSignOn valve, and
the Principal caching that is performed in the FormAuthenticator.  I
believe that I have a valid patch for the issue, and I would like to
discuss my proposed changes with the community.  After reading the
community rules, however, I'm unsure whether I'm suppose to present
this
discussion on the mailing list, or create a new bug report, and have
everything tracked there.  I believe my patch fixes some interaction
problems with JBoss and Tomcat when Tomcat is used as an embedded
server
(related to bug 23881).

Luke Nelson

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: catalina.policy to avoid no object DCH for MIME...

2003-11-24 Thread Glenn Nielsen
This is a special use case depending on where you install the mail API jars.
Since there are potentially 1000's of special use cases I don't see where
adding these examples to catalina.policy would help.
A better solution would be to add a section to the Tomcat SecurityManager doc
which lists what permissions are required for different standard API's.  JDBC,
mail, etc.
If you want to create a patch for the Tomcat security manager docs I would be
happy to review it and commit it.
Thanks,

Glenn

Jun Inamori wrote:
Hi,

We faced the same problem as:
   http://www.mail-archive.com/[EMAIL PROTECTED]/msg48320.html
The message reports the exception when sending e-mail.
It looks like this:
javax.activation.UnsupportedDataTypeException: no object DCH for MIME type 
text/plain
at javax.mail.Transport.send0(Transport.java:219)
We re-produce this, only if we enable SecurityManager and place mail.jar and 
activation.jar into:
   ${catalina.home}/shared/lib
SecurityManager seems to prevent javax.activation.CommandMap to load:
   META-INF/mailcap
from mail.jar
To avoid this kind of problem, catalina.policy should include the entity like this:

   grant codeBase file:${catalina.home}/shared/lib/activation.jar {
  permission java.io.FilePermission 
/usr/local/jakarta-tomcat-4.1.12-LE-jdk14/shared/lib/mail.jar,read;
   };
I request you to add the lines below to catalina.policy.

// If you place mail.jar and activation.jar into:
//${catalina.home}/shared/lib
// please activate the entity below and update the target of
// FilePermission.
//grant codeBase file:${catalina.home}/shared/lib/activation.jar {
//  permission java.io.FilePermission 
/usr/local/jakarta-tomcat-4.1.12-LE-jdk14/shared/lib/mail.jar,read;
//};
I think this will help many Tomcat users, but do no harm.
Any suggestion/questions are welcome to me.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: tomcat stats and performance

2003-11-24 Thread Glenn Nielsen
[EMAIL PROTECTED] wrote:
Hi to all, I have two questions. We have Tomcat as server for a struts web
application.
- We need do stats for that web application, stats like  what pages user
enter, who user enter more to the application, performance stats ... I have
seen that one choice is do a manual filter, other choice use awstats.  I
would appreciate information about that of someone that have experiencia on
stats, and he can help me to choose the best choice on time and effort.
- The second question is about performance, here we have tomcat and when
most user enter to the application the server don't reply very well. I have
read that is better have APACHE as web server and TOMCAT as server
container, is that true?  would I improve the performance? or the solution
is customize tomcat better?.
THANKS IN ADVANCE. REGARDS.

I recommend using Apache 2 with mod_jk 1.2 to serve static content in front
of Tomcat.   You can then configure mod_jk to do tomcat request logging which
includes things like request latency in ms.  There are perl scripts which come
with the mod_jk 1.2 source distribution which can be used to analyze the mod_jk log.
With Apache in front you can also use tools like analog to generate web statistics
from the apache logs.
For general Tomcat peformance issues there was a session at ApacheCon on this.

Regards,

Glenn

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: IIS with Tomcat

2003-11-24 Thread Dmitriy .
I gave up on ajp13 and now am trying to setup an inline jni plugin. I get 
the following error in isapi.log:

Can't find class org/apache/tomcat/modules/server/JNIEndpoint

I searched for this, but couldn't find it. Also, I don't have tomcat.jar 
under tomcat. Maybe that's the problem? I have 4.1.27 version.


From: Richard Norman [EMAIL PROTECTED]
Reply-To: Tomcat Developers List [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: IIS with Tomcat
Date: Fri, 21 Nov 2003 15:25:19 -0800
Are you using Windows Server 2003? Windows 2000?

Did you set the jakarta folder as execute permissions (not script)..

Richard Norman
web/Application Developer
Original Message Follows
From: Dmitriy . [EMAIL PROTECTED]
Reply-To: Tomcat Developers List [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: IIS with Tomcat
Date: Fri, 21 Nov 2003 15:39:49 -0500
Thanks... Went through all the steps that you specified, but something is 
still not right. If I change the appbase as you specified to 
c:/intetpub/wwwroot the server doesn't find the pages. If I leave it as is 
webapps I still get that error:

HTTP Status 404 - /jakarta/isapi_redirect.dll



type Status report

message /jakarta/isapi_redirect.dll

description The requested resource (/jakarta/isapi_redirect.dll) is not 
available.



Apache Tomcat/4.1.27-LE-jdk14


From: Richard Norman [EMAIL PROTECTED]
Reply-To: Tomcat Developers List [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: IIS with Tomcat
Date: Fri, 21 Nov 2003 09:19:46 -0800
For IIS and Tomcat setup, here are some posts I did to get it to work... I 
have IIS 6 on Windows Server 2003 and it is working fine for me... I even 
got the JK2 connector to work..

{all my posts in archive}
http://nagoya.apache.org/eyebrowse/[EMAIL 
PROTECTED]by=authorfrom=82941to=82941first=1count=8
{The JK2 connector and config used}
http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]msgNo=129657
{My General Steps for configuring ISAPI connector-best for original ISAPI 
connector}

http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]msgNo=124930

Original Message Follows
From: Andy Armstrong [EMAIL PROTECTED]
Reply-To: Tomcat Developers List [EMAIL PROTECTED]
To: Tomcat Developers List [EMAIL PROTECTED]
Subject: Re: IIS with Tomcat
Date: Fri, 21 Nov 2003 16:03:07 +
MIME-Version: 1.0
Received: from mail.apache.org ([208.185.179.12]) by mc8-f16.hotmail.com 
with Microsoft SMTPSVC(5.0.2195.6713); Fri, 21 Nov 2003 08:03:36 -0800
Received: (qmail 64450 invoked by uid 500); 21 Nov 2003 16:03:24 -
Received: (qmail 64437 invoked from network); 21 Nov 2003 16:03:23 -
Received: from unknown (HELO protactinium.btinternet.com) (194.73.73.176)  
by daedalus.apache.org with SMTP; 21 Nov 2003 16:03:23 -
Received: from host213-122-65-99.in-addr.btopenworld.com ([213.122.65.99] 
helo=tagish.com)by protactinium.btinternet.com with esmtp (Exim 3.22 
#25)id 1ANDki-0005nh-00for [EMAIL PROTECTED]; Fri, 21 Nov 2003 
16:03:25 +
X-Message-Info: JGTYoYF78jGOFKEcD5wxD/gCr112vhqb
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
List-Unsubscribe: mailto:[EMAIL PROTECTED]
List-Subscribe: mailto:[EMAIL PROTECTED]
List-Help: mailto:[EMAIL PROTECTED]
List-Post: mailto:[EMAIL PROTECTED]
List-Id: Tomcat Developers List tomcat-dev.jakarta.apache.org
Delivered-To: mailing list [EMAIL PROTECTED]
Message-ID: [EMAIL PROTECTED]
Organization: Tagish Ltd
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) 
Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-gb, en-us, en
References: [EMAIL PROTECTED]
In-Reply-To: [EMAIL PROTECTED]
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
Return-Path: 
[EMAIL PROTECTED]
X-OriginalArrivalTime: 21 Nov 2003 16:03:37.0362 (UTC) 
FILETIME=[05D78F20:01C3B049]

Dmitriy . wrote:

Yes, it does... As to the spelling - I misspelled it in the e-mail. An 
interesting thing
Well there's certainly no need to set up a /jakarta virtual directory on 
Tomcat. The virtual directory on IIS is just part of the mechanism the 
connector uses to pass requests to itself. The jk2 code logs to the 
Windows event log - is there anything interesting in the application log?

--
Andy Armstrong, Tagish
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Sincerely,

Richard Norman
Web/Application Developer
Web Site: http://Jazzynupe.no-ip.com/
_
From the hottest toys to tips on keeping fit this winter, youll find a 
range of helpful holiday info here.  
http://special.msn.com/network/happyholidays.armx

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL 

DO NOT REPLY [Bug 19965] - mod_jk2 connection fails, workerEnv.init() create slot epStat.0 failed

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19965.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19965

mod_jk2 connection fails, workerEnv.init() create slot epStat.0 failed





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 16:13 ---
I got the same problem, but when i try to correct it with the following lines 
in workers2.properties :

[shm]
file=${serverRoot}/logs/shm.file
size=1048576
debug=0

then i got the following error message in jk2.log :

[Mon Nov 24 15:45:54 2003]  (error) [jk_shm.c (358)]: shm.create(): error 
mmapping c:/program files/apache group/apache/logs/shm.file



I'm using apache 1.3.29 on Windows XP

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: JSP implicit writer (out) vs. response.getWriter()

2003-11-24 Thread Mark Roth
Hi Karl,

The result is not unexpected.  See the JSP 2.0 specification, section 
JSP.1.7:

...JSP page authors are prohibited from writing directly to either the 
PrintWriter or OutputStream associated with the ServletResponse.

The reason is that writes performed by the JSP page are normally 
buffered.  There is an implicit object 'out' that writes to the buffered 
JspWriter which will accomplish what you are looking for, in the right 
order.  So you should do this instead:

   html
   body
   Me first.
   % out.println(Me second); %
   /body
   /html
Hope this helps.

---
Mark Roth, Java Software
JSP 2.0 Co-Specification Lead
Sun Microsystems, Inc.
Karl Goldstein wrote:
After thinking about it a bit more, it seems the solution to the issue I raised yesterday is potentially simple: just use a wrapped response for the JSP response variable, which returns the JspWriter.  

create a new package class JspResponseWrapper: 

  class JspResponseWrapper extends HttpServletResponseWrapper {

private Writer out;

JspResponseWrapper(HttpServletResponse response, JspWriter out) {
  super(response);
  this.out = out;
}

public Writer getWriter() {
  return out;
}
...override other methods related to output stream/writer
  }
Then in PageContextImpl._initialize:

this.response = new JspResponseWriter(response, this.out);

Thoughts?

Regards,

Karl Goldstein
  - Original Message - 
  From: Karl Goldstein 
  To: [EMAIL PROTECTED] 
  Sent: Saturday, November 22, 2003 10:32 PM
  Subject: JSP implicit writer (out) vs. response.getWriter()

  Hi all,

  I recently started working with Tomcat (4.1.29) and ran into an inconsistency between the implicit out variable in a JSP and response.getWriter().  Consider this JSP:

  html
  body
  Me first.
  % response.getWriter().println(Me second); %
  /body
  /html
  I was surprised to discover that the out of this is:

  Me second.
  html
  body
  Me first.
  /body
  /html
  Looking at org.apache.jasper.runtime.PageContextImpl and JspWriterImpl, it appears that the 
out variable is set up
  with its own buffer, which explains why text sent straight to the response writer 
appears first (before the JSP writer buffer gets flushed).
  Am I missing something or is this the way it actually works?  If I have it straight, 
is this a bug?  I'm not sure about the
  JSP spec, but other app servers I've tried seem to accumulate text in a single buffer for both 
out and response.getWriter().
  Thanks,

  Karl Goldstein


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


J2EE 1.4 final?

2003-11-24 Thread Shapira, Yoav

Hi,
Supposedly J2EE 1.4 has now gone final and been released.  Yet the link
on java.sun.com hot downloads section still says J2EE 1.4 Beta 2.  The
JSR pages for 152 and 154 on www.jcp.org say Final Approval Ballot is
completed, so I suppose the spec are indeed final?

Yoav Shapira
Millennium ChemInformatics





This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: IIS with Tomcat

2003-11-24 Thread Martin Gainty
Dmitry
The log you sent on Friday indicated a socket connect problem
Usually socket connect problems happen when you do not have you connector
(such as coyote connector in server.xml)

Concerning this problem
is tomcat.jar in %CATALINA_HOME%\common\lib
or %TOMCAT_HOME%\common\lib before you start TOMCAT?
Hth,
artin
- Original Message - 
From: Dmitriy . [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 24, 2003 11:02 AM
Subject: Re: IIS with Tomcat


 I gave up on ajp13 and now am trying to setup an inline jni plugin. I get
 the following error in isapi.log:

 Can't find class org/apache/tomcat/modules/server/JNIEndpoint

 I searched for this, but couldn't find it. Also, I don't have tomcat.jar
 under tomcat. Maybe that's the problem? I have 4.1.27 version.


 From: Richard Norman [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 15:25:19 -0800
 
 Are you using Windows Server 2003? Windows 2000?
 
 Did you set the jakarta folder as execute permissions (not script)..
 
 Richard Norman
 web/Application Developer
 
 
 Original Message Follows
 From: Dmitriy . [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 15:39:49 -0500
 
 Thanks... Went through all the steps that you specified, but something is
 still not right. If I change the appbase as you specified to
 c:/intetpub/wwwroot the server doesn't find the pages. If I leave it as
is
 webapps I still get that error:
 
 HTTP Status 404 - /jakarta/isapi_redirect.dll
 

---
-
 
 type Status report
 
 message /jakarta/isapi_redirect.dll
 
 description The requested resource (/jakarta/isapi_redirect.dll) is not
 available.
 
 

---
-
 
 Apache Tomcat/4.1.27-LE-jdk14
 
 
 From: Richard Norman [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 09:19:46 -0800
 
 For IIS and Tomcat setup, here are some posts I did to get it to work...
I
 have IIS 6 on Windows Server 2003 and it is working fine for me... I
even
 got the JK2 connector to work..
 
 {all my posts in archive}

http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]
.apache.orgby=authorfrom=82941to=82941first=1count=8
 
 {The JK2 connector and config used}

http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]
ache.orgmsgNo=129657
 
 {My General Steps for configuring ISAPI connector-best for original
ISAPI
 connector}
 

http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]
ache.orgmsgNo=124930
 
 
 Original Message Follows
 From: Andy Armstrong [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: Tomcat Developers List [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 16:03:07 +
 MIME-Version: 1.0
 Received: from mail.apache.org ([208.185.179.12]) by mc8-f16.hotmail.com
 with Microsoft SMTPSVC(5.0.2195.6713); Fri, 21 Nov 2003 08:03:36 -0800
 Received: (qmail 64450 invoked by uid 500); 21 Nov 2003 16:03:24 -
 Received: (qmail 64437 invoked from network); 21 Nov 2003 16:03:23 -
 Received: from unknown (HELO protactinium.btinternet.com)
(194.73.73.176)
 by daedalus.apache.org with SMTP; 21 Nov 2003 16:03:23 -
 Received: from host213-122-65-99.in-addr.btopenworld.com
([213.122.65.99]
 helo=tagish.com)by protactinium.btinternet.com with esmtp (Exim 3.22
 #25)id 1ANDki-0005nh-00for [EMAIL PROTECTED]; Fri, 21 Nov
2003
 16:03:25 +
 X-Message-Info: JGTYoYF78jGOFKEcD5wxD/gCr112vhqb
 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
 Precedence: bulk
 List-Unsubscribe: mailto:[EMAIL PROTECTED]
 List-Subscribe: mailto:[EMAIL PROTECTED]
 List-Help: mailto:[EMAIL PROTECTED]
 List-Post: mailto:[EMAIL PROTECTED]
 List-Id: Tomcat Developers List tomcat-dev.jakarta.apache.org
 Delivered-To: mailing list [EMAIL PROTECTED]
 Message-ID: [EMAIL PROTECTED]
 Organization: Tagish Ltd
 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4)
 Gecko/20030624 Netscape/7.1 (ax)
 X-Accept-Language: en-gb, en-us, en
 References: [EMAIL PROTECTED]
 In-Reply-To: [EMAIL PROTECTED]
 X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
 Return-Path:
 [EMAIL PROTECTED]
 X-OriginalArrivalTime: 21 Nov 2003 16:03:37.0362 (UTC)
 FILETIME=[05D78F20:01C3B049]
 
 Dmitriy . wrote:
 
 Yes, it does... As to the spelling - I misspelled it in the e-mail. An
 interesting thing
 
 Well there's certainly no need to set up a /jakarta virtual directory on
 Tomcat. The virtual directory on IIS is just part of the mechanism the
 connector uses to pass requests to itself. The jk2 code logs to the
 Windows event log - is there anything interesting in the application
log?
 
 --
 Andy Armstrong, Tagish
 
 
 

Re: J2EE 1.4 final?

2003-11-24 Thread Jean-Francois Arcand


Shapira, Yoav wrote:

Hi,
Supposedly J2EE 1.4 has now gone final and been released.
Not yet :-)

 Yet the link
on java.sun.com hot downloads section still says J2EE 1.4 Beta 2.  The
JSR pages for 152 and 154 on www.jcp.org say Final Approval Ballot is
completed, so I suppose the spec are indeed final?
Yes, they are.

The J2EE link  on sun.com will be updated soon.

-- Jeanfrancois


Yoav Shapira
Millennium ChemInformatics




This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged.  This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender.  Thank you.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: SingleSignOn Valve and FormAuthenticator Principal Caching

2003-11-24 Thread Brian Stansberry
At 09:39 AM 11/24/2003 -0600, you wrote:
What format is your attachement in?  When I try to follow the link, it
asks me to open a file named showattachment with no suffix.  It
doesn't appear to be text.

Sorry; it's a zip file.  Guess bugzilla doesn't like those.  Even if you save the 
file, you have to rename it to something.zip before WinZip will open it.  Includes a 
cvs diff and one new class.  I've attached the patch to this reply as its only 10K.


Does your fix do anything for bug 9077?  I've been working on fixing the
patch that is already pending for 9077.

No, because this patch was written against the TC 5 code base.  The TC 5 version on 
SingleSignOn already included logic for handling session expiration's differently from 
logouts, so I didn't change that.  A port of this patch to TC 4 would need to address 
bug 9077.

Best,

Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 

patch.zip
Description: Zip archive
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: J2EE 1.4 final?

2003-11-24 Thread Remy Maucherat
Shapira, Yoav wrote:
Hi,
Supposedly J2EE 1.4 has now gone final and been released.  Yet the link
on java.sun.com hot downloads section still says J2EE 1.4 Beta 2.  The
JSR pages for 152 and 154 on www.jcp.org say Final Approval Ballot is
completed, so I suppose the spec are indeed final?
They were voted on the 11th. However, I think we have to wait for the 
final specs to be available officially (and then I'll tag 5.0.15 within 
24 hours).

Remy



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


cvs commit: jakarta-tomcat-catalina/webapps/balancer/WEB-INF/classes/org/apache/webapp/balancer RulesParser.java

2003-11-24 Thread remm
remm2003/11/24 08:41:24

  Modified:webapps/balancer/WEB-INF/classes/org/apache/webapp/balancer
RulesParser.java
  Log:
  - Use the context CL for the digester (this allows not duplicating JARs).
  
  Revision  ChangesPath
  1.2   +1 -0  
jakarta-tomcat-catalina/webapps/balancer/WEB-INF/classes/org/apache/webapp/balancer/RulesParser.java
  
  Index: RulesParser.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-catalina/webapps/balancer/WEB-INF/classes/org/apache/webapp/balancer/RulesParser.java,v
  retrieving revision 1.1
  retrieving revision 1.2
  diff -u -r1.1 -r1.2
  --- RulesParser.java  20 Nov 2003 18:43:44 -  1.1
  +++ RulesParser.java  24 Nov 2003 16:41:24 -  1.2
  @@ -105,6 +105,7 @@
*/
   protected Digester createDigester() {
   Digester digester = new Digester();
  +digester.setUseContextClassLoader(true);
   
   String rules = rules;
   String rule = /rule;
  
  
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24943] New: - Tomcat 5.0.14 / Windows 2000 Service does not start

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24943.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24943

Tomcat 5.0.14 / Windows 2000 Service does not start

   Summary: Tomcat 5.0.14 / Windows 2000 Service does not start
   Product: Tomcat 5
   Version: 5.0.14
  Platform: PC
OS/Version: Windows NT/2K
Status: NEW
  Severity: Normal
  Priority: Other
 Component: Native:Integration
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


I downloaded jakarta-tomcat-5.0.14.exe and installed without any problem.
I have only j2sdk 1.4.2 and not jre. (But jre included with jdk you know)

After installation I opened the Windows 2000 Services tool and tried to start
Apache Tomcat service but it didn't start and I received following error 
message;

Could not start the Apache Tomcat service on Local Computer. 
Error 1053: The service did not respond to the start or control request in a 
timely fashion.

I can start/stop Tomcat 5 with startup.bat and shutdown.bat without any problem.

I think there was a problem about tomcat.exe or tomcatw.exe service 
installation parameters. But I couldn't find any documentation about Windows 
NT/2000/XP Service Installation in currect documentation bundle.

For example if I want to use tomcat zip distribution (jakarta-tomcat-
5.0.14.zip) and make a manual installation (which it is better and flexible for 
me) I must know how to install the service with command line arguments. Or you 
can put a batch file for this, it will be very usefull.

I read http://jakarta.apache.org/commons/daemon/procrun.html;  but I couldn't 
install tomcat5 service. I don't know what is the problem?

Thanks lot,

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24942] New: - Tomcat 5.0.14 / Windows 2000 Service does not start

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24942.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24942

Tomcat 5.0.14 / Windows 2000 Service does not start

   Summary: Tomcat 5.0.14 / Windows 2000 Service does not start
   Product: Tomcat 5
   Version: 5.0.14
  Platform: PC
OS/Version: Windows NT/2K
Status: NEW
  Severity: Normal
  Priority: Other
 Component: Native:Integration
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


I downloaded jakarta-tomcat-5.0.14.exe and installed without any problem.
I have only j2sdk 1.4.2 and not jre. (But jre included with jdk you know)

After installation I opened the Windows 2000 Services tool and tried to start
Apache Tomcat service but it didn't start and I received following error 
message;

Could not start the Apache Tomcat service on Local Computer. 
Error 1053: The service did not respond to the start or control request in a 
timely fashion.

I can start/stop Tomcat 5 with startup.bat and shutdown.bat without any problem.

I think there was a problem about tomcat.exe or tomcatw.exe service 
installation parameters. But I couldn't find any documentation about Windows 
NT/2000/XP Service Installation in currect documentation bundle.

For example if I want to use tomcat zip distribution (jakarta-tomcat-
5.0.14.zip) and make a manual installation (which it is better and flexible for 
me) I must know how to install the service with command line arguments. Or you 
can put a batch file for this, it will be very usefull.

I read http://jakarta.apache.org/commons/daemon/procrun.html;  but I couldn't 
install tomcat5 service. I don't know what is the problem?

Thanks lot,

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthenticator.java SingleSignOn.java mbeans-descriptors.xml

2003-11-24 Thread remm
remm2003/11/24 08:46:56

  Modified:catalina/src/share/org/apache/catalina/authenticator
AuthenticatorBase.java BasicAuthenticator.java
DigestAuthenticator.java FormAuthenticator.java
NonLoginAuthenticator.java SSLAuthenticator.java
SingleSignOn.java mbeans-descriptors.xml
  Added:   catalina/src/share/org/apache/catalina/authenticator
SingleSignOnEntry.java
  Log:
  - Bug 23881: SSO in embedded Tomcat.
  - Patch submitted by Brian Stansberry. Thanks :)
  
  Revision  ChangesPath
  1.14  +86 -20
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java
  
  Index: AuthenticatorBase.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java,v
  retrieving revision 1.13
  retrieving revision 1.14
  diff -u -r1.13 -r1.14
  --- AuthenticatorBase.java23 Oct 2003 17:33:10 -  1.13
  +++ AuthenticatorBase.java24 Nov 2003 16:46:56 -  1.14
  @@ -625,7 +625,7 @@
*
* @param request Request we are processing
* @param response Response we are creating
  - * @param login Login configuration describing how authentication
  + * @param configLogin configuration describing how authentication
*  should be performed
*
* @exception IOException if an input/output error occurs
  @@ -643,7 +643,6 @@
   protected synchronized String generateSessionId() {
   
   // Generate a byte array containing a session identifier
  -Random random = getRandom();
   byte bytes[] = new byte[SESSION_ID_BYTES];
   getRandom().nextBytes(bytes);
   bytes = getDigest().digest(bytes);
  @@ -801,6 +800,53 @@
   
   
   /**
  + * Attempts reauthentication to the codeRealm/code using
  + * the credentials included in argument codeentry/code.
  + *
  + * @param ssoId identifier of SingleSignOn session with which the
  + *  caller is associated
  + * @param request   the request that needs to be authenticated
  + */
  +protected boolean reauthenticateFromSSO(String ssoId, HttpRequest request) {
  +
  +if (sso == null || ssoId == null)
  +return false;
  +
  +boolean reauthenticated = false;
  +
  +SingleSignOnEntry entry = sso.lookup(ssoId);
  +if (entry != null  entry.getCanReauthenticate()) {
  +Principal reauthPrincipal = null;
  +Container parent = getContainer();
  +if (parent != null) {
  +Realm realm = getContainer().getRealm();
  +String username = entry.getUsername();
  +if (realm != null  username != null) {
  +reauthPrincipal =
  +realm.authenticate(username, entry.getPassword());
  +}
  +}
  +
  +if (reauthPrincipal != null) {
  +associate(ssoId, getSession(request, true));
  +request.setAuthType(entry.getAuthType());
  +request.setUserPrincipal(reauthPrincipal);
  +
  +reauthenticated = true;
  +if (log.isDebugEnabled()) {
  +log.debug( Reauthenticated cached principal ' +
  +  entry.getPrincipal().getName() +
  +  ' with auth type ' +
  +  entry.getAuthType() + ');
  +}
  +}
  +}
  +
  +return reauthenticated;
  +}
  +
  +
  +/**
* Register an authenticated Principal and authentication type in our
* request, in the current session (if there is one), and with our
* SingleSignOn valve, if there is one.  Set the appropriate cookie
  @@ -825,9 +871,9 @@
   request.setAuthType(authType);
   request.setUserPrincipal(principal);
   
  +Session session = getSession(request, false);
   // Cache the authentication information in our session, if any
   if (cache) {
  -Session session = getSession(request, false);
   if (session != null) {
   session.setAuthType(authType);
   session.setPrincipal(principal);
  @@ -845,19 +891,39 @@
   // Construct a cookie to be returned to the client
   if (sso == null)
   return;
  -HttpServletRequest hreq =
  -(HttpServletRequest) request.getRequest();
  -HttpServletResponse hres =
  -(HttpServletResponse) response.getResponse();
  -String value = generateSessionId();
  -Cookie cookie = new Cookie(Constants.SINGLE_SIGN_ON_COOKIE, value);
  -cookie.setMaxAge(-1);
  

DO NOT REPLY [Bug 24943] - Tomcat 5.0.14 / Windows 2000 Service does not start

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24943.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24943

Tomcat 5.0.14 / Windows 2000 Service does not start

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||DUPLICATE



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 16:48 ---


*** This bug has been marked as a duplicate of 24942 ***

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24942] - Tomcat 5.0.14 / Windows 2000 Service does not start

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24942.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24942

Tomcat 5.0.14 / Windows 2000 Service does not start





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 16:48 ---
*** Bug 24943 has been marked as a duplicate of this bug. ***

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: IIS with Tomcat

2003-11-24 Thread Dmitriy .
Martin,

No, I don't have tomcat.jar in common/lib... It's weird because in docs they 
refer to that... Maybe a 4.1.27 was a bad build? But then I would assume a 
standalone tomcat (without IIS) wouldn't be working properly and it works 
just fine.


From: Martin Gainty [EMAIL PROTECTED]
To: Tomcat Developers List 
[EMAIL PROTECTED],[EMAIL PROTECTED]
Subject: Re: IIS with Tomcat
Date: Mon, 24 Nov 2003 16:20:19 -0500

Dmitry
The log you sent on Friday indicated a socket connect problem
Usually socket connect problems happen when you do not have you connector
(such as coyote connector in server.xml)
Concerning this problem
is tomcat.jar in %CATALINA_HOME%\common\lib
or %TOMCAT_HOME%\common\lib before you start TOMCAT?
Hth,
artin
- Original Message -
From: Dmitriy . [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 24, 2003 11:02 AM
Subject: Re: IIS with Tomcat
 I gave up on ajp13 and now am trying to setup an inline jni plugin. I 
get
 the following error in isapi.log:

 Can't find class org/apache/tomcat/modules/server/JNIEndpoint

 I searched for this, but couldn't find it. Also, I don't have tomcat.jar
 under tomcat. Maybe that's the problem? I have 4.1.27 version.


 From: Richard Norman [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 15:25:19 -0800
 
 Are you using Windows Server 2003? Windows 2000?
 
 Did you set the jakarta folder as execute permissions (not script)..
 
 Richard Norman
 web/Application Developer
 
 
 Original Message Follows
 From: Dmitriy . [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 15:39:49 -0500
 
 Thanks... Went through all the steps that you specified, but something 
is
 still not right. If I change the appbase as you specified to
 c:/intetpub/wwwroot the server doesn't find the pages. If I leave it as
is
 webapps I still get that error:
 
 HTTP Status 404 - /jakarta/isapi_redirect.dll
 

---
-
 
 type Status report
 
 message /jakarta/isapi_redirect.dll
 
 description The requested resource (/jakarta/isapi_redirect.dll) is not
 available.
 
 

---
-
 
 Apache Tomcat/4.1.27-LE-jdk14
 
 
 From: Richard Norman [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 09:19:46 -0800
 
 For IIS and Tomcat setup, here are some posts I did to get it to 
work...
I
 have IIS 6 on Windows Server 2003 and it is working fine for me... I
even
 got the JK2 connector to work..
 
 {all my posts in archive}

http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]
..apache.orgby=authorfrom=82941to=82941first=1count=8
 
 {The JK2 connector and config used}

http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]
ache.orgmsgNo=129657
 
 {My General Steps for configuring ISAPI connector-best for original
ISAPI
 connector}
 

http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]
ache.orgmsgNo=124930
 
 
 Original Message Follows
 From: Andy Armstrong [EMAIL PROTECTED]
 Reply-To: Tomcat Developers List [EMAIL PROTECTED]
 To: Tomcat Developers List [EMAIL PROTECTED]
 Subject: Re: IIS with Tomcat
 Date: Fri, 21 Nov 2003 16:03:07 +
 MIME-Version: 1.0
 Received: from mail.apache.org ([208.185.179.12]) by 
mc8-f16.hotmail.com
 with Microsoft SMTPSVC(5.0.2195.6713); Fri, 21 Nov 2003 08:03:36 -0800
 Received: (qmail 64450 invoked by uid 500); 21 Nov 2003 16:03:24 -
 Received: (qmail 64437 invoked from network); 21 Nov 2003 16:03:23 
-
 Received: from unknown (HELO protactinium.btinternet.com)
(194.73.73.176)
 by daedalus.apache.org with SMTP; 21 Nov 2003 16:03:23 -
 Received: from host213-122-65-99.in-addr.btopenworld.com
([213.122.65.99]
 helo=tagish.com)by protactinium.btinternet.com with esmtp (Exim 3.22
 #25)id 1ANDki-0005nh-00for [EMAIL PROTECTED]; Fri, 21 Nov
2003
 16:03:25 +
 X-Message-Info: JGTYoYF78jGOFKEcD5wxD/gCr112vhqb
 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
 Precedence: bulk
 List-Unsubscribe: mailto:[EMAIL PROTECTED]
 List-Subscribe: mailto:[EMAIL PROTECTED]
 List-Help: mailto:[EMAIL PROTECTED]
 List-Post: mailto:[EMAIL PROTECTED]
 List-Id: Tomcat Developers List tomcat-dev.jakarta.apache.org
 Delivered-To: mailing list [EMAIL PROTECTED]
 Message-ID: [EMAIL PROTECTED]
 Organization: Tagish Ltd
 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4)
 Gecko/20030624 Netscape/7.1 (ax)
 X-Accept-Language: en-gb, en-us, en
 References: [EMAIL PROTECTED]
 In-Reply-To: [EMAIL PROTECTED]
 X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
 Return-Path:
 [EMAIL PROTECTED]
 X-OriginalArrivalTime: 21 Nov 2003 16:03:37.0362 (UTC)
 FILETIME=[05D78F20:01C3B049]
 
 Dmitriy . wrote:
 
 Yes, it 

DO NOT REPLY [Bug 12810] - socket write error clicking between pages to fast

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12810.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12810

socket write error clicking between pages to fast





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 16:49 ---
I fixed this a month ago.  Here is the commit message for j-t-c.

glenn   2003/10/22 06:46:28

  Modified:util/java/org/apache/tomcat/util/net PoolTcpEndpoint.java
  Log:
  SocketExceptions can occur in a networked app.
  No need to log a stack trace, just log the remote host
  name/ip and the exception message. Then there is less
  cruft in the logs.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24942] - Tomcat 5.0.14 / Windows 2000 Service does not start

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24942.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24942

Tomcat 5.0.14 / Windows 2000 Service does not start

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 16:52 ---
If this cannot start, this likely means your JVM cannot be found for some reason
(you moved it manually maybe); the installation uses the registry keys to locate
your VM (pay special  attention to the JVM path being chosen at that time, this
won't work if it's not right).

I have yet to see this report be valid, so please use tomcat-user to debug this
more.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 23881] - SingleSignOn and FormAuthenticator in embedded tomcat

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23881.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23881

SingleSignOn and FormAuthenticator in embedded tomcat

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 16:53 ---
I have applied your patch, thanks.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 20073] - no object DCH for MIME type text/plain

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=20073.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=20073

no object DCH for MIME type text/plain

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||INVALID



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 16:55 ---
This is not a bug in Tomcat bug a misconfigured catalina.policy for
using the JavaMail API.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthenticator.java SingleSignOn.java mbeans-descriptors.xml

2003-11-24 Thread Tim Funk
This means that the logout check is now back in, the revert from 1.6 - 1.7 
for bug http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23764

Diff link:
http://cvs.apache.org/viewcvs.cgi/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java.diff?r1=1.6r2=1.7diff_format=h
Just an FYI, at this point, I don't know if that is good, bad, or neither.

-Tim



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthenticator.java SingleSignOn.java mbeans-descriptors.xml

2003-11-24 Thread Remy Maucherat
Tim Funk wrote:

This means that the logout check is now back in, the revert from 1.6 
- 1.7 for bug http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23764

Diff link:
http://cvs.apache.org/viewcvs.cgi/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java.diff?r1=1.6r2=1.7diff_format=h 

Just an FYI, at this point, I don't know if that is good, bad, or neither.
That's true.
Maybe Brian can explain why he removed this (otherwise, I'll reapply the 
fix).

Remy



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


DO NOT REPLY [Bug 24944] New: - jasper writes temp files to directory TC started from

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24944.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24944

jasper writes temp files to directory TC started from

   Summary: jasper writes temp files to directory TC started from
   Product: Tomcat 4
   Version: 4.1.24
  Platform: Other
OS/Version: Other
Status: NEW
  Severity: Normal
  Priority: Other
 Component: Jasper 2
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


1/ deploy new war file 
2/ start (/bin/startup.sh) TC from a directory to which TC user has no write 
permissions
3/ TC will not be able to compile (some - no pattern I could see) jsps as it 
will try to write a file (eg. files8349374) to the directory you started TC 
from which will not have sufficient write permissions

This file looks like a file jasper needs to write before performing the initial 
jsp - _jsp.java conversion. When appropriate permissions provided - it is 
created then automatically deleted after about 1 second. If you cat the temp 
file created example contents are :
/usr/local/tomcat/work/Standalone/localhost/_/jsp/diagnostics/diagpage_jsp.java


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24944] - jasper writes temp files to directory TC started from

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24944.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24944

jasper writes temp files to directory TC started from

[EMAIL PROTECTED] changed:

   What|Removed |Added

 OS/Version|Other   |Linux
   Platform|Other   |PC

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthenticator.java SingleSignOn.java mbeans-descriptors.xml

2003-11-24 Thread Brian Stansberry
At 06:15 PM 11/24/2003 +0100, you wrote:
Tim Funk wrote:

This means that the logout check is now back in, the revert from 1.6 - 1.7 for 
bug http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23764
Diff link:
http://cvs.apache.org/viewcvs.cgi/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java.diff?r1=1.6r2=1.7diff_format=h
 
Just an FYI, at this point, I don't know if that is good, bad, or neither.

That's true.
Maybe Brian can explain why he removed this (otherwise, I'll reapply the fix).

No, my mistake. It didn't intend to change anything related to session invalidation 
and didn't notice it in the diff.  :(

Since the logout feature no longer is there, this means bug 9077 still applies to 
TC5.  Is anyone aware of any issue with the proposed patch attached to that bug?


Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthentic

2003-11-24 Thread Nelson, Luke
I have tried applying the patch, and I found three problems with it.
First, its removal of a session from the SingleSignOnEntry object causes
an IndexOutOfBounds exception.  Second, the method for determining
whether the user explicitly logged out or whether a session timed out
doesn't scale one of the numbers correctly (i.e. comparing millisecond
values to seconds).  I have fixed the patch, but I don't have a diff of
it yet (I'm new to helping with this project).  Finally, the patch
doesn't synchronize on 'reverse' when removing an entry from it.

The only other issue that I have with this patch is that if someone
explicitly logged out at the same instant that the session timed out,
the user may not be logged out of all of the applications.  It is an
unlikely scenario, but still a dangerous one.  This is why it is better
for the session object, when firing the destroyed event, to indicate
whether it was destroyed by timeout or explicit invalidation.

Luke

-Original Message-
From: Brian Stansberry [mailto:[EMAIL PROTECTED] 
Sent: Monday, November 24, 2003 10:43 AM
To: Tomcat Developers List
Subject: Re: cvs commit:
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti
cator SingleSignOnEntry.java AuthenticatorBase.java
BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java
NonLoginAuthenticator.java SSLAuthentic

At 06:15 PM 11/24/2003 +0100, you wrote:
Tim Funk wrote:

This means that the logout check is now back in, the revert from 1.6
- 1.7 for bug http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23764
Diff link:
http://cvs.apache.org/viewcvs.cgi/jakarta-tomcat-catalina/catalina/src
/share/org/apache/catalina/authenticator/SingleSignOn.java.diff?r1=1.6r
2=1.7diff_format=h 
Just an FYI, at this point, I don't know if that is good, bad, or
neither.

That's true.
Maybe Brian can explain why he removed this (otherwise, I'll reapply
the fix).

No, my mistake. It didn't intend to change anything related to session
invalidation and didn't notice it in the diff.  :(

Since the logout feature no longer is there, this means bug 9077 still
applies to TC5.  Is anyone aware of any issue with the proposed patch
attached to that bug?


Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthentic

2003-11-24 Thread Nelson, Luke
I'm sorry I should have stated in my last message that I have tried the
patch to bug 9077.

Luke

-Original Message-
From: Nelson, Luke 
Sent: Monday, November 24, 2003 10:57 AM
To: Tomcat Developers List
Subject: RE: cvs commit:
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti
cator SingleSignOnEntry.java AuthenticatorBase.java
BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java
NonLoginAuthenticator.java SSLAuthentic

I have tried applying the patch, and I found three problems with it.
First, its removal of a session from the SingleSignOnEntry object causes
an IndexOutOfBounds exception.  Second, the method for determining
whether the user explicitly logged out or whether a session timed out
doesn't scale one of the numbers correctly (i.e. comparing millisecond
values to seconds).  I have fixed the patch, but I don't have a diff of
it yet (I'm new to helping with this project).  Finally, the patch
doesn't synchronize on 'reverse' when removing an entry from it.

The only other issue that I have with this patch is that if someone
explicitly logged out at the same instant that the session timed out,
the user may not be logged out of all of the applications.  It is an
unlikely scenario, but still a dangerous one.  This is why it is better
for the session object, when firing the destroyed event, to indicate
whether it was destroyed by timeout or explicit invalidation.

Luke

-Original Message-
From: Brian Stansberry [mailto:[EMAIL PROTECTED] 
Sent: Monday, November 24, 2003 10:43 AM
To: Tomcat Developers List
Subject: Re: cvs commit:
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti
cator SingleSignOnEntry.java AuthenticatorBase.java
BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java
NonLoginAuthenticator.java SSLAuthentic

At 06:15 PM 11/24/2003 +0100, you wrote:
Tim Funk wrote:

This means that the logout check is now back in, the revert from 1.6
- 1.7 for bug http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23764
Diff link:
http://cvs.apache.org/viewcvs.cgi/jakarta-tomcat-catalina/catalina/src
/share/org/apache/catalina/authenticator/SingleSignOn.java.diff?r1=1.6r
2=1.7diff_format=h 
Just an FYI, at this point, I don't know if that is good, bad, or
neither.

That's true.
Maybe Brian can explain why he removed this (otherwise, I'll reapply
the fix).

No, my mistake. It didn't intend to change anything related to session
invalidation and didn't notice it in the diff.  :(

Since the logout feature no longer is there, this means bug 9077 still
applies to TC5.  Is anyone aware of any issue with the proposed patch
attached to that bug?


Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24944] - jasper writes temp files to directory TC started from

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24944.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24944

jasper writes temp files to directory TC started from

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||DUPLICATE



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 18:04 ---


*** This bug has been marked as a duplicate of 18485 ***

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 18485] - Jasper tries to write something directly to $CATALINA_HOME

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=18485.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=18485

Jasper tries to write something directly to $CATALINA_HOME

[EMAIL PROTECTED] changed:

   What|Removed |Added

 CC||[EMAIL PROTECTED]



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 18:04 ---
*** Bug 24944 has been marked as a duplicate of this bug. ***

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthentic

2003-11-24 Thread Brian Stansberry
At 11:56 AM 11/24/2003 -0600, you wrote:
I have tried applying the patch, and I found three problems with it.
First, its removal of a session from the SingleSignOnEntry object causes
an IndexOutOfBounds exception.  Second, the method for determining
whether the user explicitly logged out or whether a session timed out
doesn't scale one of the numbers correctly (i.e. comparing millisecond
values to seconds).  I have fixed the patch, but I don't have a diff of
it yet (I'm new to helping with this project).  Finally, the patch
doesn't synchronize on 'reverse' when removing an entry from it.

I also looked at the code for StandardSession.getLastAccessedTime() and it looks as if 
it will throw an IllegalStateException if the session is expired.  So that would break 
the algorithm used in the 9077 patch.

BTW, the javadoc for javax.servlet.http.HttpSession doesn't specify throwing an 
IllegalStateException for a call to getLastAccessedTime().  It looks as if the 
exception throw  was added in response to bug 15967, which stated that the javadoc 
does specify the exception, but I'm looking at the javadoc for both Servlet 2.3 and 
2.4, and in both cases it's not specified.


Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Non beta version of TC5?

2003-11-24 Thread Sam Ewing
Hi,

When would a non-beta version of Tomcat 5 be released?

Thanks,

/s

__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthentic

2003-11-24 Thread Jean-Francois Arcand


Brian Stansberry wrote:

At 11:56 AM 11/24/2003 -0600, you wrote:
 

I have tried applying the patch, and I found three problems with it.
First, its removal of a session from the SingleSignOnEntry object causes
an IndexOutOfBounds exception.  Second, the method for determining
whether the user explicitly logged out or whether a session timed out
doesn't scale one of the numbers correctly (i.e. comparing millisecond
values to seconds).  I have fixed the patch, but I don't have a diff of
it yet (I'm new to helping with this project).  Finally, the patch
doesn't synchronize on 'reverse' when removing an entry from it.
   

I also looked at the code for StandardSession.getLastAccessedTime() and it looks as if it will throw an IllegalStateException if the session is expired.  So that would break the algorithm used in the 9077 patch.

BTW, the javadoc for javax.servlet.http.HttpSession doesn't specify throwing an IllegalStateException for a call to getLastAccessedTime().  It looks as if the exception throw  was added in response to bug 15967, which stated that the javadoc does specify the exception, but I'm looking at the javadoc for both Servlet 2.3 and 2.4, and in both cases it's not specified.

Hum...look at:

http://java.sun.com/j2ee/1.4/docs/api/index.html
quote

  getLastAccessedTime

public long *getLastAccessedTime*()

[.]

*Returns:*
a |long| representing the last time the client sent a request
associated with this session, expressed in milliseconds since
1/1/1970 GMT 
*Throws:*
|IllegalStateException
http://java.sun.com/j2se/1.4/docs/api/java/lang/IllegalStateException.html|
- if this method is called on an invalidated session

/quote

-- Jeanfrancois






Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthentic

2003-11-24 Thread Remy Maucherat
Brian Stansberry wrote:
At 11:56 AM 11/24/2003 -0600, you wrote:

I have tried applying the patch, and I found three problems with
it. First, its removal of a session from the SingleSignOnEntry
object causes an IndexOutOfBounds exception.  Second, the method
for determining whether the user explicitly logged out or whether a
session timed out doesn't scale one of the numbers correctly (i.e.
comparing millisecond values to seconds).  I have fixed the patch,
but I don't have a diff of it yet (I'm new to helping with this
project).  Finally, the patch doesn't synchronize on 'reverse' when
removing an entry from it.


I also looked at the code for StandardSession.getLastAccessedTime()
and it looks as if it will throw an IllegalStateException if the
session is expired.  So that would break the algorithm used in the
9077 patch.
BTW, the javadoc for javax.servlet.http.HttpSession doesn't specify
throwing an IllegalStateException for a call to
getLastAccessedTime().  It looks as if the exception throw  was added
in response to bug 15967, which stated that the javadoc does specify
the exception, but I'm looking at the javadoc for both Servlet 2.3
and 2.4, and in both cases it's not specified.
Can you address those issues ASAP ? (incl the array out of bounds and 
the sync issue)

Thanks,
Remy
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


[5.0] J2EE release

2003-11-24 Thread Remy Maucherat
Sun has released the new J2EE RI, but not the specifications (no wonder 
they are first with an implementation ...). Assuming the specs are also 
released today, I will tag 5.0.15 tomorrow.

Rémy



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthentic

2003-11-24 Thread Brian Stansberry
At 02:08 PM 11/24/2003 -0500, you wrote:
Brian Stansberry wrote:

BTW, the javadoc for javax.servlet.http.HttpSession doesn't specify throwing an 
IllegalStateException for a call to getLastAccessedTime().  It looks as if the 
exception throw  was added in response to bug 15967, which stated that the javadoc 
does specify the exception, but I'm looking at the javadoc for both Servlet 2.3 and 
2.4, and in both cases it's not specified.
Hum...look at:

http://java.sun.com/j2ee/1.4/docs/api/index.html

quote


  getLastAccessedTime

public long *getLastAccessedTime*()

[.]

*Returns:*
a |long| representing the last time the client sent a request
associated with this session, expressed in milliseconds since
1/1/1970 GMT *Throws:*
|IllegalStateException
http://java.sun.com/j2se/1.4/docs/api/java/lang/IllegalStateException.html|
- if this method is called on an invalidated session
/quote

Oh, OK.  The Servlet 2.4 javadoc I was looking at was downloaded from the JSR-154 
Proposed Final Draft 3 web page 
(http://jcp.org/aboutJava/communityprocess/first/jsr154/index3.html).  The throws tag 
is not included there.  Hopefully they'll make this clear when they issue the final 
J2EE 1.4 spec.


Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 23811] - Erratic The servlet container is temporary unavailable or being upgraded message

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23811.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23811

Erratic The servlet container is temporary unavailable or being upgraded message

[EMAIL PROTECTED] changed:

   What|Removed |Added

Version|Unknown |4.1.29



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 19:48 ---
I am using Tomcat 4.1.29 with newest version of mod_jk2.  I am receiving the
same kind of behavior.  This is with the simplest setup... no jni, just the
channelSocket and very moderate load.

[Mon Nov 24 14:23:54 2003] [error] workerEnv.processCallbacks() Error reading reply
[Mon Nov 24 14:23:54 2003] [error] ajp13.service() ajpGetReply recoverable error
12
[Mon Nov 24 14:24:29 2003] [error] channelSocket.receive(): Error receiving
message body -1 11 Resource temporarily unavailable
[Mon Nov 24 14:24:29 2003] [error] workerEnv.processCallbacks() Error reading reply
[Mon Nov 24 14:24:29 2003] [error] ajp13.service() ajpGetReply recoverable error
12
[Mon Nov 24 14:24:32 2003] [error] channelSocket.receive(): Error receiving
message body -1 11 Resource temporarily unavailable


[Mon Nov 24 14:26:23 2003] [error] ajp13.service() ajpGetReply recoverable error 3
[Mon Nov 24 14:26:24 2003] [error] ajp13.service() ajpGetReply recoverable error 3
[Mon Nov 24 14:26:24 2003] [error] ajp13.service() Error  forwarding
ajp13:localhost:8009 1 0
[Mon Nov 24 14:26:24 2003] [error] mod_jk.handler() Error connecting to tomcat 3

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [5.0] J2EE release

2003-11-24 Thread Sam Ewing
Hi Remy,

  How close is 5.0.15 to a non-beta Tomcat release?

  Thanks,

/s
--- Remy Maucherat [EMAIL PROTECTED] wrote:
 Sun has released the new J2EE RI, but not the
 specifications (no wonder 
 they are first with an implementation ...). Assuming
 the specs are also 
 released today, I will tag 5.0.15 tomorrow.
 
 Rémy
 
 
 

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 


__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 9077] - SingleSignOn and session invalidate

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077

SingleSignOn and session invalidate





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 20:04 ---
Created an attachment (id=9266)
Proposed fixes to previous attachment

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 9077] - SingleSignOn and session invalidate

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077

SingleSignOn and session invalidate





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 20:09 ---
I just added a new attachment that fixes three problems with the attachment 
dated 04/29/03 22:54:

1) The comparison on the timeout was comparing seconds to milliseconds.  Added 
a scaling factor of 1000 to compensate.

2) A value was removed from the reverse map with being called in a 
synchronized block.  Added a synchronized block on reverse.

3) Removing a session from the SingleSignOnEntry was causing an 
IndexOutOfBounds exception.  Added logic to test more carefully how to resize 
the array.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator SingleSignOn.java

2003-11-24 Thread remm
remm2003/11/24 12:22:54

  Modified:catalina/src/share/org/apache/catalina/authenticator
SingleSignOn.java
  Log:
  - Reapply fix for bug 23764.
  
  Revision  ChangesPath
  1.9   +7 -12 
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java
  
  Index: SingleSignOn.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java,v
  retrieving revision 1.8
  retrieving revision 1.9
  diff -u -r1.8 -r1.9
  --- SingleSignOn.java 24 Nov 2003 16:46:56 -  1.8
  +++ SingleSignOn.java 24 Nov 2003 20:22:54 -  1.9
  @@ -376,14 +376,9 @@
   if (ssoId == null)
   return;
   
  -if ( event.getData() != null 
  -  logout.equals( event.getData().toString() )) {
  -// logout of all applications
  -deregister(ssoId);
  -} else {
  -// invalidate just one session
  -deregister(ssoId, session);
  -}
  +// FIXME: Find a way to deregister only a single session in case of 
  +// a timeout
  +deregister(ssoId, session);
   
   }
   
  
  
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAuthentic

2003-11-24 Thread Brian Stansberry
At 08:21 PM 11/24/2003 +0100, Remy wrote:
Brian Stansberry wrote:
At 11:56 AM 11/24/2003 -0600, Luke Nelson wrote:

I have tried applying the patch, and I found three problems with
it. First, its removal of a session from the SingleSignOnEntry
object causes an IndexOutOfBounds exception.  Second, the method
for determining whether the user explicitly logged out or whether a
session timed out doesn't scale one of the numbers correctly (i.e.
comparing millisecond values to seconds).  I have fixed the patch,
but I don't have a diff of it yet (I'm new to helping with this
project).  Finally, the patch doesn't synchronize on 'reverse' when
removing an entry from it.

I also looked at the code for StandardSession.getLastAccessedTime()
and it looks as if it will throw an IllegalStateException if the
session is expired.  So that would break the algorithm used in the
9077 patch.
BTW, the javadoc for javax.servlet.http.HttpSession doesn't specify
throwing an IllegalStateException for a call to
getLastAccessedTime().  It looks as if the exception throw  was added
in response to bug 15967, which stated that the javadoc does specify
the exception, but I'm looking at the javadoc for both Servlet 2.3
and 2.4, and in both cases it's not specified.

Can you address those issues ASAP ? (incl the array out of bounds and the sync issue)

Sure; I'm starting on it now.  However, Jean-Francois found a HttpSession javadoc that 
specifies throwing an IllegalStateException in getLastAccessedTime().  If that is in 
the final spec, the 9077 patch algorithm will not work.  I'll work on it anyway in 
case the exception's not in the final spec.

As a backup, I've attached a patch that restores your earlier removal of the logout 
code.


Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 Index: SingleSignOn.java
===
RCS file: 
/home/cvspublic/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java,v
retrieving revision 1.8
diff -u -r1.8 SingleSignOn.java
--- SingleSignOn.java   24 Nov 2003 16:46:56 -  1.8
+++ SingleSignOn.java   24 Nov 2003 20:14:10 -
@@ -376,7 +376,11 @@
 if (ssoId == null)
 return;
 
-if ( event.getData() != null 
+deregister(ssoId);
+// FIXME: There's no way right now to specify per application or
+// global logout
+/*
+if ( event.getData() != null
   logout.equals( event.getData().toString() )) {
 // logout of all applications
 deregister(ssoId);
@@ -384,6 +388,7 @@
 // invalidate just one session
 deregister(ssoId, session);
 }
+*/
 
 }

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAut

2003-11-24 Thread Remy Maucherat
Nelson, Luke wrote:

Brian, I believe I just fixed those issues.  See the latest patch to
9077.
Did you actually test it ? Your patch calls getLastModified, does this 
really work if the session *did* timeout (and as such is no longer valid) ?

Rémy



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenti cator SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java SSLAut

2003-11-24 Thread Nelson, Luke
I tested it and it didn't throw the exception indicated earlier in this thread.  I 
would rather this part of the patch be replaced with something more robust.  There 
really isn't a need to test for the timeout as we should be able to know how the 
session expired by the session itself providing that information.

Luke

 -Original Message-
 From: Remy Maucherat [mailto:[EMAIL PROTECTED]
 Sent: Monday, November 24, 2003 1:49 PM
 To: Tomcat Developers List
 Subject: Re: cvs commit: jakarta-tomcat-
 catalina/catalina/src/share/org/apache/catalina/authenti cator
 SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java
 DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java
 SSLAut
 
 Nelson, Luke wrote:
 
  Brian, I believe I just fixed those issues.  See the latest patch to
  9077.
 
 Did you actually test it ? Your patch calls getLastModified, does this
 really work if the session *did* timeout (and as such is no longer valid)
 ?
 
 Rémy
 
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Tomcat sessions at ApacheCon

2003-11-24 Thread Craig R. McClanahan
Quoting Remy Maucherat [EMAIL PROTECTED]:

 * Performance and optimization (Glenn)
 * JSP 2.0 (Mark Roth) - well, not really about TC
 * Jasper from TC 5 (Kin-Man)
 * TC 5 new features (JF + Craig) - Craig has had nothing to do with TC 
 for a while, I wonder what he'll be talking about

Basically I was just a fill-in speaker for J-F's session on new Catalina
features.  Slides are at:

  http://www.apache.org/~craigmcc/

Craig

 * Building desktops apps with TC (Will Iverson) - something original, 
 woohoo :)
 * Various other vaguely related sessions
 
 It could be useful to post online the slides for the first four sessions 
 in a few days, if possible :)
 
 Remy
 
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: catalina.policy to avoid no object DCH for MIME...

2003-11-24 Thread Jun Inamori
Hi,

Thank you for your reply.

 This is a special use case depending on where you install
 the mail API jars.
 Since there are potentially 1000's of special use cases I
 don't see where adding these examples to catalina.policy
 would help.
 
 A better solution would be to add a section to the Tomcat
 SecurityManager doc which lists what permissions are required
 for different standard API's.  JDBC, mail, etc.

That's a good idea.
I'll try it.
I just downloaded:
   security-manager-howto.xml
from CVS.
I think I should work on this XML, rather than the HTML.
After the section titled:

  h3Policy File Format/h3

I'll add the new section titled:

  h3Required Permissions for standard API's/h3

The new section will list the required permissions for JDBC and JavaMail.
I have ever experienced the difficulties in Java Advanced Imaging API with 
SecurityManager, and so I'll also list the required permission for it.
I'll work on it in the next weekend.
Any suggestions are welcome to me.

Best regards,
-- 

Happy Java programming!

Jun Inamori
OOP-Reserch Corporation
E-mail: [EMAIL PROTECTED]
URL:http://www.oop-reserch.com/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



9077 Patch

2003-11-24 Thread Nelson, Luke
 Did you actually test it ?

Rémy, I started two of my jsp applications.  Logged into one, then accessed the other 
(which automatically signs me in because of the SingleSignOn.)  Waited for one minute 
(my timeout interval), and the sessions expired without throwing any exceptions.  
Next, I logged in again under both applications (the same as before), but manually 
logged out by invalidating the session.  Again, no exception were thrown.  To be fair, 
I'm using Tomcat 4.1.27 with a few patches applied.  I do not know how this would 
behave in Tomcat 5.0.

Hopefully Brian can take the patch I added, and test it under 5.0 since he indicated 
he was available to make the change.

Luke


 -Original Message-
 From: Remy Maucherat [mailto:[EMAIL PROTECTED]
 Sent: Monday, November 24, 2003 1:49 PM
 To: Tomcat Developers List
 Subject: Re: cvs commit: jakarta-tomcat-
 catalina/catalina/src/share/org/apache/catalina/authenti cator
 SingleSignOnEntry.java AuthenticatorBase.java BasicAuthenticator.java
 DigestAuthenticator.java FormAuthenticator.java NonLoginAuthenticator.java
 SSLAut
 
 Nelson, Luke wrote:
 
  Brian, I believe I just fixed those issues.  See the latest patch to
  9077.
 
 Did you actually test it ? Your patch calls getLastModified, does this
 really work if the session *did* timeout (and as such is no longer valid)
 ?
 
 Rémy
 
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator SingleSignOn.java

2003-11-24 Thread remm
remm2003/11/24 13:28:22

  Modified:catalina/src/share/org/apache/catalina/authenticator
SingleSignOn.java
  Log:
  - Oops. Unregister the whole session.
  
  Revision  ChangesPath
  1.10  +5 -5  
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java
  
  Index: SingleSignOn.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SingleSignOn.java,v
  retrieving revision 1.9
  retrieving revision 1.10
  diff -u -r1.9 -r1.10
  --- SingleSignOn.java 24 Nov 2003 20:22:54 -  1.9
  +++ SingleSignOn.java 24 Nov 2003 21:28:22 -  1.10
  @@ -378,7 +378,7 @@
   
   // FIXME: Find a way to deregister only a single session in case of 
   // a timeout
  -deregister(ssoId, session);
  +deregister(ssoId);
   
   }
   
  
  
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: 9077 Patch

2003-11-24 Thread Remy Maucherat
Nelson, Luke wrote:
Did you actually test it ?
Rémy, I started two of my jsp applications.  Logged into one, then
accessed the other (which automatically signs me in because of the
SingleSignOn.)  Waited for one minute (my timeout interval), and the
sessions expired without throwing any exceptions.  Next, I logged in
again under both applications (the same as before), but manually
logged out by invalidating the session.  Again, no exception were
thrown.  To be fair, I'm using Tomcat 4.1.27 with a few patches
applied.  I do not know how this would behave in Tomcat 5.0.
Hopefully Brian can take the patch I added, and test it under 5.0
since he indicated he was available to make the change.
That would be good. I can apply a verified TC 5 patch tomorrow if you 
can post one. Otherwise, the issue won't be fixed in 5.0.15.

Rémy



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/core ApplicationContext.java

2003-11-24 Thread jfarcand
jfarcand2003/11/24 13:48:27

  Modified:catalina/src/share/org/apache/catalina/core
ApplicationContext.java
  Log:
  When calling ServletContext.log, append the application's name so we know from which 
application the log is coming.
  
  Feel free to revert if it breaks something.
  
  Revision  ChangesPath
  1.21  +7 -7  
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/core/ApplicationContext.java
  
  Index: ApplicationContext.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/core/ApplicationContext.java,v
  retrieving revision 1.20
  retrieving revision 1.21
  diff -u -r1.20 -r1.21
  --- ApplicationContext.java   4 Sep 2003 17:45:40 -   1.20
  +++ ApplicationContext.java   24 Nov 2003 21:48:27 -  1.21
  @@ -665,7 +665,7 @@
   
   Logger logger = context.getLogger();
   if (logger != null)
  -logger.log(message);
  +logger.log(context.logName() + message);
   
   }
   
  @@ -683,7 +683,7 @@
   
   Logger logger = context.getLogger();
   if (logger != null)
  -logger.log(exception, message);
  +logger.log(exception, context.logName() + message);
   
   }
   
  @@ -698,7 +698,7 @@
   
   Logger logger = context.getLogger();
   if (logger != null)
  -logger.log(message, throwable);
  +logger.log(context.logName() + message, throwable);
   
   }
   
  
  
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24954] New: - Removing web application at context path /jaxrpc-VoteService by tomcat manager

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24954.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24954

Removing web application at context path /jaxrpc-VoteService by tomcat manager

   Summary: Removing web application at context path /jaxrpc-
VoteService by tomcat manager
   Product: Tomcat 4
   Version: 4.1.29
  Platform: PC
OS/Version: Windows XP
Status: NEW
  Severity: Major
  Priority: Other
 Component: Catalina
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


Tomcat manager removes deployment jaxrpc immediately after deployment.
After I deployed my war file by dropping to webapps dir or thru deployment 
tool, my deployement is removed immediatelly when I call tomcat manager from 
the browser.

Removing web application at context path /jaxrpc-VoteService

After deployment!

the following is message from log file 
2003-11-24 14:02:11 HostConfig[localhost]: Expanding web application archive 
jaxrpc-VoteService.war
2003-11-24 14:02:11 StandardHost[localhost]: Installing web application at 
context path /jaxrpc-VoteService from URL file:c:/tomcat-4.1.29/webapps/jaxrpc-
VoteService
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploying class 
repositories to work directory C:\tomcat-4.1.29
\work\Standalone\localhost\jaxrpc-VoteService
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy class files /WEB-
INF/classes to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-INF\classes
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy JAR /WEB-
INF/lib/RmiJdbc.jar to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-
INF\lib\RmiJdbc.jar
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy JAR /WEB-
INF/lib/cloudclient.jar to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-
INF\lib\cloudclient.jar
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy JAR /WEB-
INF/lib/jdbc_inet.jar to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-
INF\lib\jdbc_inet.jar
2003-11-24 14:02:11 StandardManager[/jaxrpc-VoteService]: Seeding random 
number generator class java.security.SecureRandom
2003-11-24 14:02:11 StandardManager[/jaxrpc-VoteService]: Seeding of random 
number generator has been completed
2003-11-24 14:02:11 StandardWrapper[/jaxrpc-VoteService:default]: Loading 
container servlet default
2003-11-24 14:02:11 StandardWrapper[/jaxrpc-VoteService:invoker]: Loading 
container servlet invoker

 Removal section 

2003-11-24 14:03:53 StandardWrapper[/manager:HTMLManager]: Loading container 
servlet HTMLManager
2003-11-24 14:03:53 HTMLManager: init: Associated with Deployer 'localhost'
2003-11-24 14:03:53 HTMLManager: init: Global resources are available
2003-11-24 14:03:53 HTMLManager: remove: Removing web application at '/jaxrpc-
VoteService'
2003-11-24 14:03:53 StandardHost[localhost]: Removing web application at 
context path /jaxrpc-VoteService
2003-11-24 14:03:54 HTMLManager: list: Listing contexts for virtual 
host 'localhost'

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24956] New: - Removing web application at context path /jaxrpc-VoteService by tomcat manager

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24956.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24956

Removing web application at context path /jaxrpc-VoteService by tomcat manager

   Summary: Removing web application at context path /jaxrpc-
VoteService by tomcat manager
   Product: Tomcat 4
   Version: 4.1.29
  Platform: PC
OS/Version: Windows XP
Status: NEW
  Severity: Major
  Priority: Other
 Component: Catalina
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


Tomcat manager removes deployment jaxrpc immediately after deployment.
After I deployed my war file by dropping to webapps dir or thru deployment 
tool, my deployement is removed immediatelly when I call tomcat manager from 
the browser.

Removing web application at context path /jaxrpc-VoteService

After deployment!

the following is message from log file 
2003-11-24 14:02:11 HostConfig[localhost]: Expanding web application archive 
jaxrpc-VoteService.war
2003-11-24 14:02:11 StandardHost[localhost]: Installing web application at 
context path /jaxrpc-VoteService from URL file:c:/tomcat-4.1.29/webapps/jaxrpc-
VoteService
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploying class 
repositories to work directory C:\tomcat-4.1.29
\work\Standalone\localhost\jaxrpc-VoteService
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy class files /WEB-
INF/classes to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-INF\classes
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy JAR /WEB-
INF/lib/RmiJdbc.jar to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-
INF\lib\RmiJdbc.jar
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy JAR /WEB-
INF/lib/cloudclient.jar to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-
INF\lib\cloudclient.jar
2003-11-24 14:02:11 WebappLoader[/jaxrpc-VoteService]: Deploy JAR /WEB-
INF/lib/jdbc_inet.jar to c:\tomcat-4.1.29\webapps\jaxrpc-VoteService\WEB-
INF\lib\jdbc_inet.jar
2003-11-24 14:02:11 StandardManager[/jaxrpc-VoteService]: Seeding random 
number generator class java.security.SecureRandom
2003-11-24 14:02:11 StandardManager[/jaxrpc-VoteService]: Seeding of random 
number generator has been completed
2003-11-24 14:02:11 StandardWrapper[/jaxrpc-VoteService:default]: Loading 
container servlet default
2003-11-24 14:02:11 StandardWrapper[/jaxrpc-VoteService:invoker]: Loading 
container servlet invoker

 Removal section 

2003-11-24 14:03:53 StandardWrapper[/manager:HTMLManager]: Loading container 
servlet HTMLManager
2003-11-24 14:03:53 HTMLManager: init: Associated with Deployer 'localhost'
2003-11-24 14:03:53 HTMLManager: init: Global resources are available
2003-11-24 14:03:53 HTMLManager: remove: Removing web application at '/jaxrpc-
VoteService'
2003-11-24 14:03:53 StandardHost[localhost]: Removing web application at 
context path /jaxrpc-VoteService
2003-11-24 14:03:54 HTMLManager: list: Listing contexts for virtual 
host 'localhost'

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



cvs commit: jakarta-tomcat-connectors/util/java/org/apache/tomcat/util/net PoolTcpEndpoint.java

2003-11-24 Thread amyroh
amyroh  2003/11/24 15:01:22

  Modified:http11/src/java/org/apache/coyote/http11 Http11Protocol.java
   util/java/org/apache/tomcat/util/net PoolTcpEndpoint.java
  Log:
  Add getters for all attributes defined in MBeanInfo so getAttribute calls suceed.
  
  Revision  ChangesPath
  1.44  +143 -14   
jakarta-tomcat-connectors/http11/src/java/org/apache/coyote/http11/Http11Protocol.java
  
  Index: Http11Protocol.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-connectors/http11/src/java/org/apache/coyote/http11/Http11Protocol.java,v
  retrieving revision 1.43
  retrieving revision 1.44
  diff -u -r1.43 -r1.44
  --- Http11Protocol.java   17 Nov 2003 09:42:40 -  1.43
  +++ Http11Protocol.java   24 Nov 2003 23:01:21 -  1.44
  @@ -264,20 +264,36 @@
   
   //  Pool setup 
   
  +public boolean getPools(){
  +return ep.isPoolOn();
  +}
  +
   public void setPools( boolean t ) {
   ep.setPoolOn(t);
   setAttribute(pools,  + t);
   }
   
  +public int getMaxThreads() {
  +return ep.getMaxThreads();
  +}
  +
   public void setMaxThreads( int maxThreads ) {
   ep.setMaxThreads(maxThreads);
   setAttribute(maxThreads,  + maxThreads);
   }
   
  +public int getMaxSpareThreads() {
  +return ep.getMaxSpareThreads();
  +}
  +
   public void setMaxSpareThreads( int maxThreads ) {
   ep.setMaxSpareThreads(maxThreads);
   setAttribute(maxSpareThreads,  + maxThreads);
   }
  +
  +public int getMinSpareThreads() {
  +return ep.getMinSpareThreads();
  +}
   
   public void setMinSpareThreads( int minSpareThreads ) {
   ep.setMinSpareThreads(minSpareThreads);
  @@ -286,11 +302,19 @@
   
   //  Tcp setup 
   
  +public int getBacklog() {
  +return ep.getBacklog();
  +}
  +
   public void setBacklog( int i ) {
   ep.setBacklog(i);
   setAttribute(backlog,  + i);
   }
   
  +public int getPort() {
  +return ep.getPort();
  +}
  +
   public void setPort( int port ) {
   ep.setPort(port);
   setAttribute(port,  + port);
  @@ -301,123 +325,223 @@
   ep.setAddress( ia );
   setAttribute(address,  + ia);
   }
  -
  -public void setHostName( String name ) {
  +
  +// commenting out for now since it's not doing anything
  +//public void setHostName( String name ) {
   // ??? Doesn't seem to be used in existing or prev code
   // vhost=name;
  -}
  +//}
   
  +public String getSocketFactory() {
  +return socketFactoryName;
  +}
  +
   public void setSocketFactory( String valueS ) {
   socketFactoryName = valueS;
   setAttribute(socketFactory, valueS);
   }
  -
  +
  +public String getSSLImplementation() {
  +return sslImplementationName;
  +}
  +
   public void setSSLImplementation( String valueS) {
   sslImplementationName = valueS;
   setAttribute(sslImplementation, valueS);
   }
   
  +public boolean getTcpNoDelay() {
  +return ep.getTcpNoDelay();
  +}
  +
   public void setTcpNoDelay( boolean b ) {
   ep.setTcpNoDelay( b );
   setAttribute(tcpNoDelay,  + b);
   }
   
  +public boolean getDisableUploadTimeout() {
  +return disableUploadTimeout;
  +}
  +
   public void setDisableUploadTimeout(boolean isDisabled) {
   disableUploadTimeout = isDisabled;
   }
   
  +public int getSocketBuffer() {
  +return socketBuffer;
  +}
  +
   public void setSocketBuffer(int valueI) {
   socketBuffer = valueI;
   }
   
  +public String getCompression() {
  +return compression;
  +}
  +
   public void setCompression(String valueS) {
   compression = valueS;
   setAttribute(compression, valueS);
   }
   
  +public int getMaxPostSize() {
  +return maxPostSize;
  +}
  +
   public void setMaxPostSize(int valueI) {
   maxPostSize = valueI;
   setAttribute(maxPostSize,  + valueI);
   }
   
  +public String getRestrictedUserAgents() {
  +return restrictedUserAgents;
  +}
  +
   public void setRestrictedUserAgents(String valueS) {
   restrictedUserAgents = valueS;
   setAttribute(restrictedUserAgents, valueS);
   }
   
  +public String getNoCompressionUserAgents() {
  +return noCompressionUserAgents;
  +}
  +
   public void setNoCompressionUserAgents(String valueS) {
   noCompressionUserAgents = valueS;
   setAttribute(noCompressionUserAgents, valueS);
   }
   
  +public 

DO NOT REPLY [Bug 24956] - Removing web application at context path /jaxrpc-VoteService by tomcat manager

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24956.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24956

Removing web application at context path /jaxrpc-VoteService by tomcat manager

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||DUPLICATE



--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 23:13 ---


*** This bug has been marked as a duplicate of 24954 ***

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24954] - Removing web application at context path /jaxrpc-VoteService by tomcat manager

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24954.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24954

Removing web application at context path /jaxrpc-VoteService by tomcat manager





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 23:13 ---
*** Bug 24956 has been marked as a duplicate of this bug. ***

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24586] - Compilation error when exposing an Inner class

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24586.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24586

Compilation error when exposing an Inner class





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 23:30 ---
Created an attachment (id=9271)
changes from tomcat 5 adapted back to tomcat 4

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24586] - Compilation error when exposing an Inner class

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24586.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24586

Compilation error when exposing an Inner class





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 23:34 ---
This looks very similar to http://nagoya.apache.org/bugzilla/show_bug.cgi?
id=22867 which has been fixed in 5.  I've attached diffs which are the changes 
from 5 applied to 4.  I've tested the fix as far as it affects inner tag 
classes.  It looks like it fixes beans too, but I haven't explicitly tested 
that.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: 9077 Patch

2003-11-24 Thread Brian Stansberry
At 10:29 PM 11/24/2003 +0100, you wrote:
Nelson, Luke wrote:

Hopefully Brian can take the patch I added, and test it under 5.0
since he indicated he was available to make the change.

That would be good. I can apply a verified TC 5 patch tomorrow if you can post one. 
Otherwise, the issue won't be fixed in 5.0.15.

Yes, I'm working on this and have integrated Luke's patch w/ the TC5 SSO version.  Had 
to run out and fix a customer's broken network, but I'll be on this the rest of the 
day.

But, the IllegalStateException issue needs to be resolved.  Luke, your patch has no 
problem in TC4 because the IllegalStateException in getLastAccessedTime() was added in 
TC5.  Off the top of my head, I can think of only 1 potential workaround, which is to 
move the logic that throws the exception to HttpSessionFacade; this complies with the 
javadoc version that specifies the exception in javax.servlet.http.HttpSession but 
leaves the method in StandardSession available for internal use anytime.  Kind of a 
hack, and it changes the behavior of the public API of StandardSession.  But, the 
exception throw is not specified in the javadoc for interface o.a.c.Session, and a 
quick look at the TC5 usages of o.a.c.Session.getLastAccessedTime() shows a few calls 
to the method that 1) aren't making any obvious tests for session validity before 
invoking it; and 2) aren't catching IllegalStateException.

1) JDBCStore.save()
2) ManagerBase.getLastAccessedTime()
3) PersistentValve.isSessionStale()

Or we can hope the final spec matches the JSR154-PFD3 javadoc, and not the J2EE1.4 
docs on the Sun site ;-)

Any thoughts?


Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24957] New: - EL treates operators as functions

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24957.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24957

EL treates operators as functions

   Summary: EL treates operators as functions
   Product: Tomcat 5
   Version: 5.0.14
  Platform: Sun
OS/Version: All
Status: NEW
  Severity: Major
  Priority: Other
 Component: Jasper
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


The JSP/EL language is incorrectly treating operator keywords (such as 'and'
'or' 'mod' and so on) as functions when the expression on the right of the
operator is a parenthetical expression. 

For example: ${7 div (3 + 2)}   gives a translation error because it thinks
that 'div' should be treated as a function (but it cannot find the declaration
of that function).

I have a test webapp that I will submit.

-Bryan Basham

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



cvs commit: jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/compiler JspDocumentParser.java

2003-11-24 Thread kinman
kinman  2003/11/24 15:51:10

  Modified:jasper2/src/share/org/apache/jasper/compiler
JspDocumentParser.java
  Log:
  - Fix 24779: Jasper fails to compile a valid JSP document (xml syntax) when
an EL string in template text contains a [].  The fix to to buffer and
concatenate template text strings and only start processing the texts when
they are all in one piece.
  
This, BTW, also fixes the bug that somestimes trims the white spaces that
trails template texts.
  
  Revision  ChangesPath
  1.72  +42 -15
jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/compiler/JspDocumentParser.java
  
  Index: JspDocumentParser.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/compiler/JspDocumentParser.java,v
  retrieving revision 1.71
  retrieving revision 1.72
  diff -u -r1.71 -r1.72
  --- JspDocumentParser.java22 Nov 2003 02:09:34 -  1.71
  +++ JspDocumentParser.java24 Nov 2003 23:51:10 -  1.72
  @@ -90,6 +90,7 @@
* syntax.
*
* @author Jan Luehe
  + * @author Kin-man Chung
*/
   
   class JspDocumentParser
  @@ -110,6 +111,7 @@
   private JspCompilationContext ctxt;
   private PageInfo pageInfo;
   private String path;
  +private StringBuffer charBuffer;
   
   // Node representing the XML element currently being parsed
   private Node current;
  @@ -287,6 +289,8 @@
   AttributesImpl nonTaglibAttrs = null;
   AttributesImpl nonTaglibXmlnsAttrs = null;
   
  +processChars();
  +
   checkPrefixes(uri, qName, attrs);
   
   if (directivesOnly 
  @@ -399,14 +403,33 @@
   /*
* Receives notification of character data inside an element.
*
  + * The SAX does not call this method with all of the template text, but may
  + * invoke this method with chunks of it.  This is a problem when we try
  + * to determine if the text contains only whitespaces, or when we are
  + * looking for an EL expression string.  Therefore it is necessary to
  + * buffer and concatenate the chunks and process the concatenated text 
  + * later (at beginTag and endTag)
  + *
* @param buf The characters
* @param offset The start position in the character array
* @param len The number of characters to use from the character array
*
* @throws SAXException
*/
  -public void characters(char[] buf, int offset, int len)
  -throws SAXException {
  +public void characters(char[] buf, int offset, int len) {
  +
  +if (charBuffer == null) {
  +charBuffer = new StringBuffer();
  +}
  +charBuffer.append(buf, offset, len);
  +}
  +
  +private void processChars() throws SAXException {
  +
  +if (charBuffer == null) {
  +return;
  +}
  +
   /*
* JSP.6.1.1: All textual nodes that have only white space are to be
* dropped from the document, except for nodes in a jsp:text element,
  @@ -418,11 +441,11 @@
   boolean isAllSpace = true;
   if (!(current instanceof Node.JspText)
!(current instanceof Node.NamedAttribute)) {
  -for (int i = offset; i  offset + len; i++) {
  -if (!(buf[i] == ' '
  -|| buf[i] == '\n'
  -|| buf[i] == '\r'
  -|| buf[i] == '\t')) {
  +for (int i = 0; i  charBuffer.length(); i++) {
  +if (!(charBuffer.charAt(i) == ' '
  +|| charBuffer.charAt(i) == '\n'
  +|| charBuffer.charAt(i) == '\r'
  +|| charBuffer.charAt(i) == '\t')) {
   isAllSpace = false;
   break;
   }
  @@ -436,10 +459,10 @@
   int column = startMark.getColumnNumber();
   
   CharArrayWriter ttext = new CharArrayWriter();
  -int limit = offset + len;
   int lastCh = 0;
  -for (int i = offset; i  limit; i++) {
  -int ch = buf[i];
  +for (int i = 0; i  charBuffer.length(); i++) {
  +
  +int ch = charBuffer.charAt(i);
   if (ch == '\n') {
   column = 1;
   line++;
  @@ -463,7 +486,7 @@
   boolean doubleQ = false;
   lastCh = 0;
   for (;; i++) {
  -if (i = limit) {
  +if (i = charBuffer.length()) {
   throw new SAXParseException(
   Localizer.getMessage(
   jsp.error.unterminated,
  @@ -471,7 +494,7 @@
   locator);
   
   }
  -   

DO NOT REPLY [Bug 24957] - EL treates operators as functions

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24957.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24957

EL treates operators as functions





--- Additional Comments From [EMAIL PROTECTED]  2003-11-24 23:54 ---
Created an attachment (id=9272)
test webapp for failure of EL operators

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Justification for URIEncoding addition?

2003-11-24 Thread Hans Bergsten
Remy Maucherat wrote:
Hans Bergsten wrote:

Larry Isaacs wrote:

Hans,

The behavior change is unrelated to the use of getParameter()
to search for jsp_precompile.  Both Tomcat 3.x and Tomcat 4.x
were bit by this log ago and Craig's fix was applied to both.
In Tomcat 4's case, it was prior to the 4.0 release.


Okay, I'm sure you're right that there may be more to it than
avoiding the getParameter() call in Jasper, but based on what
I've read, it seems to be part of the problem at least.
Assuming I have a good grip on the issue, I think it relates
to using UTF-8 to decode the path portion of the URL which
gets used to determine context, servlet mapping, etc.  Then
allowing setCharacterEncoding() to change the character encoding
for the query portion of the same URL.  The Servlet 2.3 and 2.4
specs both say setCharacterEncoding() applies to the request body
but don't mention it applying to the query portion of the URL.


Right, but since the servlet spec doesn't say anything about encoding
for the query portion, I think we have some room for a sensible
interpretation.
My concern is that with the new decoding behavior, apps that used to
work fine suddenly don't, and the reason seems to be that browsers
in fact ignore the RFC2718 recommendation that TC now enforces. I'm
all for compliance with all related specs, but in this case it's just
a recommendation and following it seems to do more harm than good.
I agree it's not as clean as you may want, but are there any real
problems with decoding the path portion using one charset and the
query string with another (i.e., the one from getCharacterEncoding()),
the way it used to be done?


I see you as a member of the expert group for the servlet spec. Did you 
make out those points during the review period ? If not, then you IMO 
have nothing to complain about, esp since Tomcat implements a far more 
reasonable and simpler behavior for the URL string handling.
Remy, I'm not complaining, I'm just trying to help with ideas for how
solve a problem that apparently affects a lot of people. Sigh!
Yes, I'm in the servlet spec EG and I did help solving other i18n
problems by bringing together all the spec leads for servlets, JSP and
JSTL and Sun's i18n guru to fix inconsistencies between these specs.
Unfortunately, I missed the query string encoding problem, largely
because the way TC handled it before the recent change seemed to work
for most apps so I hadn't encountered the problem. My bad.
The specification should have specified something along the lines of:
- The URL must be %xx encoded
- This decodes to bytes reprensenting UTF-8 characters
There's an IETF standard that, I think, states this in BW. It is being 
ignored. Maybe this wouldn't be the case if very popular tech, such as 
servlets  JSPs, started mandating it ? This is simply a chiken  egg 
issue.
And because its a chicken and egg problem, I doubt that it will ever be
solved. No server vendor is likely to change the behavior in a way
that's incompatible with a large set of browsers. A more sensible way
to solve this would be for W3C to change the spec to require the
behavior most browsers already implement, even if it's less elegant.
i18n issues with HTTP and srevlets have been known about for years, but 
unfortunately they still haven't been addressed properly.
Same with the request dispatcher + wrapping issues that I have pointed 
out months ago (and of course, were silently ignored).

To balance this a little, among the other big issues, I have to give 
credit for solving the welcome files in a satisfactory way, as well as 
filters with RDs. Filters now make the proprietary APIs provided by the 
container irrelevant for most tasks.
I'm glad you like something in the new spec ;-) Although, there's more
to be done with the welcome file mechanism. I tried to get it all done
in 2.4, but we couldn't reach consensus so what there now is still too
vague, IMHO.
Hans
--
Hans Bergsten[EMAIL PROTECTED]
Gefion Software   http://www.gefionsoftware.com/
Author of O'Reilly's JavaServer Pages, covering JSP 2.0 and JSTL 1.1
Details athttp://TheJSPBook.com/
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


DO NOT REPLY [Bug 24739] - Control of secure flag when establishing sessions through https using cookies

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24739.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24739

Control of secure flag when establishing sessions through https using cookies

[EMAIL PROTECTED] changed:

   What|Removed |Added

   Severity|Minor   |Enhancement



--- Additional Comments From [EMAIL PROTECTED]  2003-11-25 00:41 ---
Tomcat 4 (and 5) work this way to protect sessions created in SSL from being 
at risk of session hijacking if transferred back to http. That being said, 
there have been a number of requests for this type of functionality on tomcat-
user.

As this is not strictly a bug, I am setting it to an enhancement request. 
Until such time as a patch is written, using something similar to the 
following in your jsp will provide a work-around.

A HREF=http://localhost:8080/bug24739/display.jsp;jsessionid=%=session.getId
()%display session cookie(http)/A

Obviously, you will need to 
replace http://localhost:8080/bug24739/display.jsp; with something 
appropriate to your environment.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24779] - Jasper fails to parse correct XML syntax JSP page with certain EL expressions.

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24779.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24779

Jasper fails to parse correct XML syntax JSP page with certain EL expressions.

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED



--- Additional Comments From [EMAIL PROTECTED]  2003-11-25 01:03 ---
Fixed.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



cvs commit: jakarta-tomcat-connectors/http11/src/java/org/apache/coyote/http11 Http11Protocol.java

2003-11-24 Thread amyroh
amyroh  2003/11/24 17:26:26

  Modified:http11/src/java/org/apache/coyote/http11 Http11Protocol.java
  Log:
  Put unused methods back in comments -- accidently removed /* earlier.
  
  Revision  ChangesPath
  1.45  +7 -6  
jakarta-tomcat-connectors/http11/src/java/org/apache/coyote/http11/Http11Protocol.java
  
  Index: Http11Protocol.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-connectors/http11/src/java/org/apache/coyote/http11/Http11Protocol.java,v
  retrieving revision 1.44
  retrieving revision 1.45
  diff -u -r1.44 -r1.45
  --- Http11Protocol.java   24 Nov 2003 23:01:21 -  1.44
  +++ Http11Protocol.java   25 Nov 2003 01:26:26 -  1.45
  @@ -321,6 +321,10 @@
   //this.port=port;
   }
   
  +public InetAddress getAddress() {
  +return ep.getAddress();
  +}
  +
   public void setAddress(InetAddress ia) {
   ep.setAddress( ia );
   setAttribute(address,  + ia);
  @@ -774,11 +778,7 @@
   }
   }
   
  -
  -public InetAddress getAddress() {
  -return ep.getAddress();
  -}
  -
  +/*
   public boolean isKeystoreSet() {
   return (attributes.get(keystore) != null);
   }
  @@ -802,7 +802,8 @@
   public PoolTcpEndpoint getEndpoint() {
   return ep;
   }
  -
  +*/
  +
   protected String domain;
   protected ObjectName oname;
   protected MBeanServer mserver;
  
  
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 17323] - Cancelled SSL connections cause Tomcat to stumble

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17323.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17323

Cancelled SSL connections cause Tomcat to stumble





--- Additional Comments From [EMAIL PROTECTED]  2003-11-25 01:29 ---
Which build has this been fixed in?  It still seems to occur in Tomcat 4.1.27.
Is there a patch or workaround available without going to a nightly build?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



cvs commit: jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/compiler ELParser.java

2003-11-24 Thread kinman
kinman  2003/11/24 17:38:21

  Modified:jasper2/src/share/org/apache/jasper/compiler ELParser.java
  Log:
  - Fix 24957: Operators are mis-treated as functions
  
  Revision  ChangesPath
  1.3   +27 -1 
jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/compiler/ELParser.java
  
  Index: ELParser.java
  ===
  RCS file: 
/home/cvs/jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/compiler/ELParser.java,v
  retrieving revision 1.2
  retrieving revision 1.3
  diff -u -r1.2 -r1.3
  --- ELParser.java 30 Oct 2003 02:39:48 -  1.2
  +++ ELParser.java 25 Nov 2003 01:38:21 -  1.3
  @@ -77,6 +77,11 @@
   private String expression;   // The EL expression
   private boolean escapeBS;// is '\' an escape char in text outside EL?
   
  +private static final String reservedWords[] = {
  +and, div, empty, eq, false,
  +ge, gt, instanceof, le, lt, mod,
  +ne, not, null, or, true};
  +
   public ELParser(String expression) {
index = 0;
this.expression = expression;
  @@ -145,7 +150,7 @@
* Note: currently we don't parse arguments
*/
   private boolean parseFunction() {
  - if (! (curToken instanceof Id)) {
  + if (! (curToken instanceof Id) || isELReserved(curToken.toString())) {
return false;
}
String s1 = null; // Function prefix
  @@ -172,6 +177,27 @@
}
setIndex(mark);
return false;
  +}
  +
  +/**
  + * Test if an id is a reserved word in EL
  + */
  +private boolean isELReserved(String id) {
  +int i = 0;
  +int j = reservedWords.length;
  +while (i  j) {
  +int k = (i+j)/2;
  +int result = reservedWords[k].compareTo(id);
  +if (result == 0) {
  +return true;
  +}
  +if (result  0) {
  +i = k+1;
  +} else {
  +j = k;
  +}
  +}
  +return false;
   }
   
   /**
  
  
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24957] - EL treates operators as functions

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24957.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24957

EL treates operators as functions

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED



--- Additional Comments From [EMAIL PROTECTED]  2003-11-25 01:41 ---
Fixed.

Thanks for reporting the bug, and for providing the test.  If every bug has test
as good as this, they'd all have been fixed!

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: catalina.policy to avoid no object DCH for MIME...

2003-11-24 Thread Glenn Nielsen
Jun Inamori wrote:
Hi,

Thank you for your reply.


This is a special use case depending on where you install
the mail API jars.
Since there are potentially 1000's of special use cases I
don't see where adding these examples to catalina.policy
would help.
A better solution would be to add a section to the Tomcat
SecurityManager doc which lists what permissions are required
for different standard API's.  JDBC, mail, etc.


That's a good idea.
I'll try it.
I just downloaded:
   security-manager-howto.xml
from CVS.
I think I should work on this XML, rather than the HTML.
Yes, thats the right place.

After the section titled:

  h3Policy File Format/h3

I'll add the new section titled:

  h3Required Permissions for standard API's/h3

The new section will list the required permissions for JDBC and JavaMail.
I have ever experienced the difficulties in Java Advanced Imaging API with 
SecurityManager, and so I'll also list the required permission for it.
I'll work on it in the next weekend.
Any suggestions are welcome to me.
Best regards,
This sounds great.  Thanks for taking the initiative to improve the docs.

Regards,

Glenn

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


DO NOT REPLY [Bug 9077] - SingleSignOn and session invalidate

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077

SingleSignOn and session invalidate





--- Additional Comments From [EMAIL PROTECTED]  2003-11-25 02:26 ---
Created an attachment (id=9275)
Previous patch adapted for TC 5

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 9077] - SingleSignOn and session invalidate

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9077

SingleSignOn and session invalidate





--- Additional Comments From [EMAIL PROTECTED]  2003-11-25 02:43 ---
Attached patch adapts Luke Nelson's patch (Thanks Luke!) for TC 5.

Of 3 issues Luke mentions, 3rd is not relevant to TC5 as TC 5 code already had 
a valid algorithm for removing a single session from the SSO entry.

Attached also updates StandardSession for 2 reasons:

1) Unlike other similar methods in the class, TC 5's 
StandardSession.getLastAccessedTime() used field isValid to check for session 
validity instead of calling isValid().  isValid() will return true during 
session expiration, allowing SessionEventHandlers to access the session during 
shutdown.  The SingleSignOn patch needs to access getLastAccessedTime() during 
the session expiration process.

2) The key to the LocalStrings.properties file used in getLastAccessedTime() 
did not match the properties file.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: 9077 Patch

2003-11-24 Thread Brian Stansberry
At 10:29 PM 11/24/2003 +0100, you wrote:
Nelson, Luke wrote:
Hopefully Brian can take the patch I added, and test it under 5.0
since he indicated he was available to make the change.

That would be good. I can apply a verified TC 5 patch tomorrow if you can post one. 
Otherwise, the issue won't be fixed in 5.0.15.

TC 5 version of patch tested posted to bug 9077.  Thanks Luke!  Turns out the issue 
with the IllegalStateException was easily solved; my note attached to the bug report 
explains.

Best,

Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:(510) 894-0114 x 116
Fax:(510) 797-3005 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24960] New: - CGI module reveals server internals details to all

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24960.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24960

CGI module reveals server internals details to all

   Summary: CGI module reveals server internals details to all
   Product: Tomcat 4
   Version: 4.1.29
  Platform: All
OS/Version: All
Status: NEW
  Severity: Critical
  Priority: Other
 Component: Servlets:CGI
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


A request to a context that supports CGI for a CGI script that does not exist 
results in an error page that includes a whole swag of internal context 
details.  Some of these details, such as context init parameters, may be 
sensitive (eg passwords).

The problem is in org.apache.catalina.servlets.CGIServlet.  Its doGet() method 
calls printServletEnvironment() when (certain) errors occur.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 24961] New: - Temporary files marked deleteOnExit not deleted when Tomcat runs as NT Service

2003-11-24 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24961.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24961

Temporary files marked deleteOnExit not deleted when Tomcat runs as NT Service

   Summary: Temporary files marked deleteOnExit not deleted when
Tomcat runs as NT Service
   Product: Tomcat 4
   Version: 4.1.29
  Platform: PC
OS/Version: Windows XP
Status: NEW
  Severity: Major
  Priority: Other
 Component: Unknown
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]


I've written a simple JSP to illustrate:

%@ page contentType=text/html;charset=UTF-8 session=false 
import=java.io.*%
% 
ServletContext servlet_ctxt = getServletContext();
File temp_directory = (File)servlet_ctxt.getAttribute
( javax.servlet.context.tempdir );
File new_temp_file = File.createTempFile ( test, file, 
temp_directory );
new_temp_file.deleteOnExit();
%

Just make this available to Tomcat, run Tomcat as a console app, and when you 
CTRL-C to quit Tomcat, those files will disappear.

However, do the exact same thing using Tomcat as a service, and when you net 
stop Apache Tomcat 4.1, those files will still exist.

I've found a workaround for my particular use of temp files, but I think that 
it would be best if this was fixed.  I believe the issue relates to how 
tomcat.exe is killing the Java process, but I'm not entirely sure.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]