tomcat component releases

2004-10-26 Thread Nathan Coast
Hi,
bit of background... I maintain the maven-tomcat-plugin.  This plugin uses:
catalina-ant
jasper-compiler
jasper-runtime
In the interest of keeping the plugin up to date, I should probably cut 
a new version of the plugin whenever any of these components are 
modified.  Do these components have their own release cycle? or are they 
just released whenever there is a new tomcat build?

I'm guessing there are some tomcat releases where none of these 
components are modified.

cheers
Nathan
--
Nathan Coast
Managing Director
codeczar ltd
mobile: (852) 9049 5581
email:  mailto:[EMAIL PROTECTED]
web:http://www.codeczar.com
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: tomcat component releases

2004-10-26 Thread Nathan Coast
thanks Tim,
the maven repo for tomcat components seems fairly out of date or 
inconsistent, some components have been 'released' to the maven repo and 
others haven't.  most components seem to be at 5.0.18, with no mention 
of 5.5.X

http://www.ibiblio.org/maven/tomcat/jars/
I can however see why the maven repo isn't kept up to date if each 
release of tomcat leads to 10 or so different components having to be 
released.

My life would be made a lot easier if components were released 
independently :)

Tim Funk wrote:
The components are released during a tomcat upgrade. yes, it can be 
possible for one of the components to not change during a release cycle.

-Tim
Nathan Coast wrote:
Hi,
bit of background... I maintain the maven-tomcat-plugin.  This plugin 
uses:

catalina-ant
jasper-compiler
jasper-runtime
In the interest of keeping the plugin up to date, I should probably 
cut a new version of the plugin whenever any of these components are 
modified.  Do these components have their own release cycle? or are 
they just released whenever there is a new tomcat build?

I'm guessing there are some tomcat releases where none of these 
components are modified.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

--
Nathan Coast
Managing Director
codeczar ltd
mobile: (852) 9049 5581
email:  mailto:[EMAIL PROTECTED]
web:http://www.codeczar.com
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


possible bug in jspc

2004-08-20 Thread Nathan Coast
Hi, I've been chasing an inconsistency in the behaviour wrt jsp error page execution.
in this case the error page is evaluated and flushed to the response
  html:link forward=boguslink
  logic:iterate name=currentLoggers id=logger
in this case the error page is evaluated but is not flushed to the response
  logic:iterate name=currentLoggers id=logger
html:link forward=boguslink
I checked the struts tags and they're fine,  I also checked on weblogic and the error page 
is flushed to response in both cases which makes me think it's a problem with the tomcat 
jsp compiler.

bug? should I add it bugzilla?
cheers
Nathan

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Roles / Login / j_security check

2001-05-08 Thread Nathan Coast

Hi, apologies as this is a bit of a cross-post from tomcat-user last week (was 
getting no responses from there).  I need to work out what's going on re: roles 
and login.

I'm observing some unexpected behaviour in Tomcat (3.2.1) in conjuction with 
roles. This is the situation: (web.xml is at the bottom)

two roles:
Customer
Gold Customer

a user:
Joe Bloggs

Joe is a Customer but not a Gold Customer

This is what I observe:

1) new browser (not logged in) browse to /control/CustomerSecurePage
2) browser is redirected to /login.jsp
3) Joe logs in and is redirected to /control/CustomerSecurePage
4) browse to /control/GoldSecurePage
5) browser redirected to /control/loginerror
6) Joe is now logged out, any subsequent attempts to browse to a page secured by
the customer role results in a redirection to the login page.

Is this correct behaviour? I would have expected an attempt to access to the
gold url to have denied access but not to have logged the user out!  Unless I 
can resolve this I'm going to have to abandon using tomcat to manage access to 
restricted content.  This is not something I want to do. I've tried working 
through the source but got lost.

Thanks in advance,
Nathan

this is the relevant section of web.xml:



security-constraint
  web-resource-collection
web-resource-nameMySecureBit0/web-resource-name
descriptionno description/description
url-pattern/control/GoldSecurePage/url-pattern
http-methodGET/http-method
http-methodPOST/http-method
  /web-resource-collection
  auth-constraint
descriptionno description/description
role-namegold/role-name
  /auth-constraint
/security-constraint

security-constraint
  web-resource-collection
web-resource-nameMySecureBit1/web-resource-name
descriptionno description/description
url-pattern/control/CustomerSecurePage/url-pattern
http-methodGET/http-method
http-methodPOST/http-method
  /web-resource-collection
  auth-constraint
descriptionno description/description
role-namecustomer/role-name
  /auth-constraint
/security-constraint

login-config
  auth-methodFORM/auth-method
  realm-nameTheGiftStore/realm-name
  form-login-config
form-login-page/login.jsp/form-login-page
form-error-page/control/loginerror/form-error-page
  /form-login-config
/login-config
security-role
  descriptionthe customer role/description
  role-namecustomer/role-name
/security-role
security-role
  descriptionthe gold customer role/description
  role-namegold/role-name
/security-role