[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #14 from Mike Lothian  ---
If you could post the patch I'll test it tomorrow when I'm in the office,
thanks

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

Michael Osipov  changed:

   What|Removed |Added

   Severity|normal  |regression

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #13 from Michael Osipov  ---
I have found the bug. Apologies, this was an oversight although I have read the
diff many times before merging into master.

Can add a modified JAR to your installation to verify potential fix? I will
provide one. Alternatively a patch if you want to compile yourself.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #12 from Michael Osipov  ---
Looked into it. Something is fishy because the issue should have failed
earlier. Will know more tomorrow.

I have the slight feeling that the changed triggered an bug previously present
in the code.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

Michael Osipov  changed:

   What|Removed |Added

 Status|NEEDINFO|NEW

--- Comment #11 from Michael Osipov  ---
(In reply to Mike Lothian from comment #9)
> Hi
> 
> I bisected between 8.5.49 and 8.5.50 and this was the first bad commit:
> 
> commit 12b857227b2671c9c871aa324cf5fc25c5d53c9a
> Author: Michael Osipov 
> Date:   Wed Aug 21 23:23:19 2019 +0200
> 
> BZ 63681: Introduce RealmBase#authenticate(GSSName, GSSCredential) and
> friends
> 
> It doesn't cleanly revert from 8.5.50

I already assumed that it could be one of my changes, but I do not yet
understand why.

> Would you mind providing the logging.properties strings for the options
> you'd like me to enable - org.apache.catalina.authenticator.level = FINEST
> was on last time
> 
> I don't have root access on this machine, but I'll see if I can get a
> tcpdump from either another machine or if I can get escalated privileges

No need for now. I am still trying to wrap my head around the failure. I will
get back to you tomorrow after understanding the issue or if I still need more
data.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #10 from Mike Lothian  ---
Created attachment 36942
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=36942&action=edit
Revert

This was my attempt at reverting the problem commit and does get things working
for me again

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 62723] Clarify "channelSendOptions" value in cluster documentation

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62723

Christopher Schultz  changed:

   What|Removed |Added

   Keywords||PatchAvailable

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 62611] Compress log files after rotation

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62611

Christopher Schultz  changed:

   What|Removed |Added

 Status|NEW |NEEDINFO

--- Comment #8 from Christopher Schultz  ---
Can you post a link to your GitHub fork and/or the PR itself?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59232] Make the context name of an app available via JNDI

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59232

Christopher Schultz  changed:

   What|Removed |Added

   Keywords||Beginner

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 59203] Try to call Thread.interrupt before calling Thread.stop in WebappClassLoaderBase#clearReferencesThreads

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=59203

Christopher Schultz  changed:

   What|Removed |Added

   Keywords||Beginner

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 60597] Add ability to set cipher suites for websocket client connections

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=60597

Christopher Schultz  changed:

   What|Removed |Added

   Keywords||PatchAvailable

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 63691] Add a no-op JarScanner

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63691

Christopher Schultz  changed:

   What|Removed |Added

   Keywords||Beginner

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 57701] Implement "[Redeploy]" button for a web application

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=57701

Christopher Schultz  changed:

   What|Removed |Added

   Keywords||PatchAvailable

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 63505] enhancement - support of stored procedures for DataSourceRealm authentication

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63505

Christopher Schultz  changed:

   What|Removed |Added

   Keywords||PatchAvailable

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #9 from Mike Lothian  ---
Hi

I bisected between 8.5.49 and 8.5.50 and this was the first bad commit:

commit 12b857227b2671c9c871aa324cf5fc25c5d53c9a
Author: Michael Osipov 
Date:   Wed Aug 21 23:23:19 2019 +0200

BZ 63681: Introduce RealmBase#authenticate(GSSName, GSSCredential) and
friends

It doesn't cleanly revert from 8.5.50

Would you mind providing the logging.properties strings for the options you'd
like me to enable - org.apache.catalina.authenticator.level = FINEST was on
last time

I don't have root access on this machine, but I'll see if I can get a tcpdump
from either another machine or if I can get escalated privileges

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Attention for BZ 62843 (Russian Localization)

2020-01-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

All,

It's unclear to me whether this work has largely been done, or if this
BZ issue has information which would help complete a Russian localizatio
n.

Maybe someone who speaks Russian (e.g. Konstantin) could take a look?

https://bz.apache.org/bugzilla/show_bug.cgi?id=62843

- -chjris
-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=dm0+
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 58548] support certifcate transparency

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=58548

Christopher Schultz  changed:

   What|Removed |Added

 Status|NEW |NEEDINFO

--- Comment #3 from Christopher Schultz  ---
Ping. This should either work or not, as described.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #8 from Michael Osipov  ---
Can you please also enable debug log on authenticators and also provide a
tcpdump of the unsuccessful and successful dump. If you don't want to disclose
the dump, plase send to my apache email address, if nesessary use my PGP public
key to encrypt it.

I would also like to see BER debug from LDAP provider with property
com.sun.jndi.ldap.trace.ber bug this required a OutputStream to be set which is
not possible via context.xml. I will be happy with the former mentioned for
now.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

Remy Maucherat  changed:

   What|Removed |Added

 Status|NEW |NEEDINFO

--- Comment #7 from Remy Maucherat  ---
There are no changes in JNDIRealm in 8.5.50, so given the stack and error
message a Tomcat issue is not the most likely explanation at the moment.
You should continue investigating without assuming it is a Tomcat issue, for
example you have a meaningful error message with a key "DSID-0C090A4C" that you
can google and the results could be relevant to you.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #6 from Mike Lothian  ---
This was with:

org.apache.catalina.realm.level = FINEST
org.apache.catalina.authenticator.level = FINEST

Added to logging.properties

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #5 from Mike Lothian  ---
Created attachment 36941
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=36941&action=edit
Broken logs

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 64011] JNDIRealm no longer authenticates to LDAP

2020-01-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #4 from Mike Lothian  ---
Created attachment 36940
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=36940&action=edit
Working logs

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org