Re: tomcat-users.xml Unix file permissions and security (possible patch)

Hi, On 12.02.2009 18:06, Petr Sumbera wrote: Hi all, From Tomcat tar archive I get: ls -l apache-tomcat-6.0.18/conf/tomcat-users.xml -rw--- 1 tomcat staff 1107 Jul 21 2008 apache-tomcat-6.0.18/conf/tomcat-users.xml But Tomcat itself changes this during its first run: ls -l

DO NOT REPLY [Bug 46503] Garbage characters in cluster domain field

https://issues.apache.org/bugzilla/show_bug.cgi?id=46503 Martin Helff mar...@helff.net changed: What|Removed |Added CC||mar...@helff.net

Re: tomcat-users.xml Unix file permissions and security (possible patch)

On 13/02/2009, Rainer Jung rainer.j...@kippdata.de wrote: Hi, On 12.02.2009 18:06, Petr Sumbera wrote: Hi all, From Tomcat tar archive I get: ls -l apache-tomcat-6.0.18/conf/tomcat-users.xml -rw--- 1 tomcat staff 1107 Jul 21 2008

tomcat-native: multicast on win32

hi once again i have been trying to figure out why my tomcat native based mina acceptor won't join a speicified multicast group. the call goes through Multicast.join() over the tomcat native code to apr_mcast_join which in turn calls do_mcast in the apr multicast.c file. then it goes to os

DO NOT REPLY [Bug 46655] keystore's password handler

https://issues.apache.org/bugzilla/show_bug.cgi?id=46655 --- Comment #3 from Alessandro alessandro.giann...@urmet.it 2009-02-13 06:45:21 PST --- Connector.java contain patch code to handle new attributes (In reply to comment #2) As far as I can tell, the jar only contains the class file

DO NOT REPLY [Bug 46655] keystore's password handler

https://issues.apache.org/bugzilla/show_bug.cgi?id=46655 --- Comment #4 from Sebb s...@apache.org 2009-02-13 07:07:34 PST --- (In reply to comment #3) Connector.java contain patch code to handle new attributes (In reply to comment #2) Agreed, but in order to use the new attributes, the

Re: tomcat-native: multicast on win32

Lorenz Breu wrote: hi once again i have been trying to figure out why my tomcat native based mina acceptor won't join a speicified multicast group. the call goes through Multicast.join() over the tomcat native code to apr_mcast_join which in turn calls do_mcast in the apr multicast.c file. then

Re: tomcat-native: multicast on win32

Lorenz Breu wrote: hi once again i have been trying to figure out why my tomcat native based mina acceptor won't join a speicified multicast group. the call goes through Multicast.join() over the tomcat native code to apr_mcast_join which in turn calls do_mcast in the apr multicast.c file. then

Re: tomcat-native: multicast on win32

Try Multicast.loopback if Multicast.join fails. Win32 is pretty weired, and not sure why the join doesn't work. I suppose the multicast group needs to exists before joining. no cigar. i first expected an APR_ENOTIMPL or even a failure, but i get APR_SUCCESS all the way... but nothing actually

svn commit: r744160 - /tomcat/trunk/java/org/apache/coyote/http11/Http11Processor.java

Author: markt Date: Fri Feb 13 16:17:54 2009 New Revision: 744160 URL: http://svn.apache.org/viewvc?rev=744160view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=4 keepAliveTimeout should always be used regardless of setting of disableUploadTimeout Modified:

svn commit: r744161 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: markt Date: Fri Feb 13 16:19:23 2009 New Revision: 744161 URL: http://svn.apache.org/viewvc?rev=744161view=rev Log: Propose fix for 4 Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL:

DO NOT REPLY [Bug 46666] Why is disableUploadTimeout and KeepAliveTimeout correlated in Http11 Connector?

https://issues.apache.org/bugzilla/show_bug.cgi?id=4 --- Comment #1 from Mark Thomas ma...@apache.org 2009-02-13 08:19:46 PST --- Looks reasonable to me. I have made the change in trunk and proposed it for 6.0.x. There is always a chance, particularly with the connector code, that I have

svn commit: r744165 - /tomcat/tc6.0.x/trunk/STATUS.txt

Author: markt Date: Fri Feb 13 16:27:14 2009 New Revision: 744165 URL: http://svn.apache.org/viewvc?rev=744165view=rev Log: Vote Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL:

svn commit: r744166 - /tomcat/current/tc5.5.x/STATUS.txt

Author: markt Date: Fri Feb 13 16:31:45 2009 New Revision: 744166 URL: http://svn.apache.org/viewvc?rev=744166view=rev Log: Votes Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL:

Support for httpOnly cookies in Tomcat 6.0.x

Folks, The implementation of httpOnly support in Tomcat 7 fits well with the previous httpOnly patch [1] that is currently the proposed backport for 6.0.x When originally proposed there was some concern that the v3 servlet spec may require some changes. This hasn't been the case. With that in

svn commit: r744171 - in /tomcat/trunk/modules/jdbc-pool: ./ java/org/apache/tomcat/jdbc/pool/ java/org/apache/tomcat/jdbc/pool/jmx/ test/org/apache/tomcat/jdbc/test/

Author: fhanik Date: Fri Feb 13 16:44:35 2009 New Revision: 744171 URL: http://svn.apache.org/viewvc?rev=744171view=rev Log: Documentation Modified: tomcat/trunk/modules/jdbc-pool/.classpath tomcat/trunk/modules/jdbc-pool/java/org/apache/tomcat/jdbc/pool/JdbcInterceptor.java

svn commit: r744238 - /tomcat/trunk/java/org/apache/tomcat/util/http/ServerCookie.java

Author: markt Date: Fri Feb 13 20:46:22 2009 New Revision: 744238 URL: http://svn.apache.org/viewvc?rev=744238view=rev Log: Change to ThreadLocal to prevent potential sync bottleneck on cookie creation Modified: tomcat/trunk/java/org/apache/tomcat/util/http/ServerCookie.java Modified:

DO NOT REPLY [Bug 46666] Why is disableUploadTimeout and KeepAliveTimeout correlated in Http11 Connector?

https://issues.apache.org/bugzilla/show_bug.cgi?id=4 --- Comment #2 from Doug Drechsel do...@bea.com 2009-02-13 14:42:03 PST --- Hi Mark, Thanks. I agree with your assessment of unintended consequences. The location in such well exercised code does make one pause. I am a newbie to