cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/util/http Cookies.java ServerCookie.java

2000-12-01 Thread costin
costin 00/12/01 00:19:18 Modified:src/share/org/apache/tomcat/modules/session SessionId.java src/share/org/apache/tomcat/request AccessInterceptor.java src/share/org/apache/tomcat/util/http Cookies.java ServerCookie.java Log: -

RE: Web application security problem on windows

2000-12-01 Thread Petr Jiricka
Does not the following address this issue for Tomcat 3.2 ? (from $TOMCAT_HOME/doc/readme) 6.7 URL's are now case sensitive on all operating systems As of Tomcat 3.2, URL's are case sensitive for all operating systems, including operating systems which have case insensitive file systems, such

Re: cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/util/http Cookies.java ServerCookie.java

2000-12-01 Thread Paul Frieden
I was just flipping through this code because I did some changes to CookieTools. To force a V0 cookie to be deleted properly, the time should actually be set way in the past rather than the current time to make it be deleted properly. I did it by checking if maxAge was 0 and setting the expires

Re: Bugrat down/broken?

2000-12-01 Thread Nick Bauman
OOoops. Sorry. It's fixed now. (forgot to put activation in the TC classpath) On Tue, 28 Nov 2000, Brian Vetter wrote: I tried submitting a new bug to Bugrat this afternoon. I get the following error: Error: 500 Location: /BugRatReport/PostReport Internal Servlet Error:

[BUG TRACKING] Scarab schema and status etc.

2000-12-01 Thread Nick Bauman
Could someone with edit rights on Jakarta change the link to me as the Keeper of the Bugs from my yahoo email to this one? I'm talking about the link on: http://jakarta.apache.org/site/bugs.html Also, what's up with the Scarab schema: it's gone (the link is broken). Jon Stevens wants to be

custom tag life cycle question - are custom tags expensive?

2000-12-01 Thread Dave Harms
I posted this in tomcat-user and didn't get any bites, so I'm trying here. I notice that section 5.4.7 of the JSP 1.1 spec states that "at execution time the implementation of a JSP will use an available Tag instance with the appropriate prefix and name that is not being used, initialize it,

Fw: Virtual Hosts and Context Path Question

2000-12-01 Thread Shahed Ali
-Original Message-From: Shahed Ali [EMAIL PROTECTED]To: [EMAIL PROTECTED] [EMAIL PROTECTED]Cc: [EMAIL PROTECTED] [EMAIL PROTECTED]Date: Friday, December 01, 2000 11:33 AMSubject: Virtual Hosts and Context Path Question I am running Apache Stronghold with Virtual Hosts and

RE: cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/core ContextManager.java

2000-12-01 Thread Larry Isaacs
Hi Costin, I was getting ready to ask about ContextManager getting stuck during shutdown. This patch keeps it from getting stuck, but if the context was in "STATE_READY", then "shutdownContext( context )" is called which sets the state to "STATE_DISABLED" causing removeContext() to exit early.

Re: Compiling JSP with debug info

2000-12-01 Thread Craig R. McClanahan
Larry Isaacs wrote: Hi all, We have a need for a global way to have Jasper compile the JSP servlet source with debug information. I would propose defining a system property such as: jasper.compile.debug which if set to "true" would turn on the inclusion of debug info. Any

Re: [BUG TRACKING] Scarab schema and status etc.

2000-12-01 Thread Craig R. McClanahan
Nick Bauman wrote: Could someone with edit rights on Jakarta change the link to me as the Keeper of the Bugs from my yahoo email to this one? I'm talking about the link on: http://jakarta.apache.org/site/bugs.html Done. Also, what's up with the Scarab schema: it's gone (the link is

Ajp13 Security

2000-12-01 Thread Dan Milstein
All, I'm working on documenting ajp13, and I'm noticing that there doesn't seem to be any authentication step between the web server and the servlet container (in contrast to ajp11 and ajp12, both of which I believe had some sort of shared secret-based authenication step when opening up a TCP

RE: Compiling JSP with debug info

2000-12-01 Thread Larry Isaacs
Wouldn't you really want this option at the per-web-app level, rather than global? While we were at it, you'd want similar options for turning optimization on and off, or (more generally) a way to set compiler options for a generic compiler. The main need at SAS is for a way to within

Re: [BUG TRACKING] Scarab schema and status etc.

2000-12-01 Thread Jon Stevens
on 12/1/2000 10:20 AM, "Nick Bauman" [EMAIL PROTECTED] wrote: Also, what's up with the Scarab schema: it's gone (the link is broken). Jon Stevens wants to be able to migrate the data from Bugrat directly into Scarab. I need his schema to do this. Can anyone help? Jon are you out there? In

Tomcat 4.0 mod_webapp connector

2000-12-01 Thread Glenn Nielsen
I just checked out Tomcat 4.0 from CVS and had no problems building it or the mod_webapp connector using Solaris X86 2.7. Are there any docs on how to install/configure mod_webapp? Or do I need to puzzle that out from the source? Glenn

Re: Fw: Virtual Hosts and Context Path Question

2000-12-01 Thread Paul Frieden
We're doing essentially the same thing. First thing you'll need to do is upgrade to Tomcat 3.2. There are lots of reasons other than the virtual hosting support to do this. If you use multiple Host name="..." entries where the name matches the ServerName from httpd.conf, it should pick the

Win32 Build Docs have UNIX line endings

2000-12-01 Thread Michael Percy
Shouldn't the Win32 Build docs and source files be using CRLF instead of just LF? Admittedly, most *developers* on Win32 systems have a decent text editor, but everybody has Notepad, which only handles CRLF. Can we do anything about this oversight? Thanks, Mike

Re: cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/util/http Cookies.java ServerCookie.java

2000-12-01 Thread cmanolache
Thanks, I'll check it in. I was reviewing the 3.2 fixes in cookies, I hope I'll get them all updated. ( including this one ) Costin I was just flipping through this code because I did some changes to CookieTools. To force a V0 cookie to be deleted properly, the time should actually be set

Apache (1.3.6)/SSL + tomcat 3.1

2000-12-01 Thread Paul Rubenis
I am wondering if anyone else has run into this problem and resolved it. I have installed SSL support for my version of Apache. I have created a self signed certificate. I have followed the directions to install tomcat 3.1 and have Apache forward .jsp and servlet requests to tomcat. I

BugRat Report #508 has been filed.

2000-12-01 Thread BugRat Mail System
Bug report #508 has just been filed. You can view the report at the following URL: http://znutar.cortexity.com/BugRatViewer/ShowReport/508 REPORT #508 Details. Project: Tomcat Category: Feature Requests SubCategory: New Feature Class: suggest State: received Priority: low Severity:

JDK bug or am I crazy ?

2000-12-01 Thread cmanolache
Hi, I spent many hours trying to fix a bug in tomcat3.3. I'm now down to DependManager, and I really have no idea what's happening. There is a method: boolean shouldReload() {} All return statements are: "return expired;", where expired is an object property ( no local variables - the class

BugRat Report #509 has been filed.

2000-12-01 Thread BugRat Mail System
Bug report #509 has just been filed. You can view the report at the following URL: http://znutar.cortexity.com/BugRatViewer/ShowReport/509 REPORT #509 Details. Project: Catalina Category: Bug Report SubCategory: New Bug Report Class: swbug State: received Priority: medium Severity: serious

BugRat Report #508 was closed (apparently by: Nick Bauman)

2000-12-01 Thread BugRat Mail System
Report #508 was closed by Person #0 Synopsis: IGNORE -TESTING (logged in as: Nick Bauman)

BugRat Report #510 has been filed.

2000-12-01 Thread BugRat Mail System
Bug report #510 has just been filed. You can view the report at the following URL: http://znutar.cortexity.com/BugRatViewer/ShowReport/510 REPORT #510 Details. Project: Tomcat Category: Bug Report SubCategory: New Bug Report Class: swbug State: received Priority: low Severity: non-critical

[BUG TRACKING] change to jakarta.apache.org

2000-12-01 Thread Nick Bauman
Sorry, I just noticed this. The link to BugRat in Jakarta needs a trailing slash. ie: http://znutar.cortexity.com/BugRatReport s/b http://znutar.cortexity.com/BugRatReport/ As I was unable to correct the mappings from apache into tomcat. For some reason no matter what I do, tomcat loses

Tomcat 4.0 build process feedback

2000-12-01 Thread Sam Ruby
I tried to do a build of jakarta-tomcat-4.0 using the instructions in the README.txt, and taking the option of building dependencies from source whenever that option was available. * When downloading the JMX extensions, downloading the JMX Instrumentation Reference Implementation is not

Re: JDK bug or am I crazy ?

2000-12-01 Thread cmanolache
This doesn't happen if I use IBM JDK1.3 - only with Blackdown 1.2.2 ( FCS, BETA ). VERY, VERY SCARRY !!! Does disabling the JIT help any? ( -Djava.compiler= ) Doesn't help - I tried that. Anyway - now we have a workaround, but we do print a warning when this happens ( I still have

cvs commit: jakarta-tomcat-4.0/webapps/examples/jsp/num numguess.html

2000-12-01 Thread pierred
pierred 00/12/01 16:42:11 Modified:webapps/examples/jsp/num numguess.html Log: Fixed the link to the source file for numguess example. Revision ChangesPath 1.2 +1 -1 jakarta-tomcat-4.0/webapps/examples/jsp/num/numguess.html Index: numguess.html

Re: [BUG TRACKING] change to jakarta.apache.org

2000-12-01 Thread Jon Stevens
on 12/1/2000 8:12 PM, "Nick Bauman" [EMAIL PROTECTED] wrote: Sorry, I just noticed this. The link to BugRat in Jakarta needs a trailing slash. ie: http://znutar.cortexity.com/BugRatReport s/b http://znutar.cortexity.com/BugRatReport/ As I was unable to correct the mappings

Re: Tomcat 4.0 build process feedback

2000-12-01 Thread Jon Stevens
on 12/1/2000 8:23 PM, "Sam Ruby" [EMAIL PROTECTED] wrote: I tried to do a build of jakarta-tomcat-4.0 using the instructions in the README.txt, and taking the option of building dependencies from source whenever that option was available. * When downloading the JMX extensions, downloading

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http SocketInputStream.java

2000-12-01 Thread remm
remm00/12/01 19:51:31 Modified:catalina/src/share/org/apache/catalina/connector/http SocketInputStream.java Log: - The IS is now more tolerant when parsing the HTTP header. It now doesn't require that CRLF to end a line (LF is enough), as is

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector/http HttpRequestStream.java

2000-12-01 Thread remm
remm00/12/01 20:34:58 Modified:catalina/src/share/org/apache/catalina/connector/http HttpRequestStream.java Log: - Ooops, forgot to remove some Sys.out.println before commit. Revision ChangesPath 1.4 +3 -6

Re: [jetty-discuss] RE: Web application security problem on windows

2000-12-01 Thread Greg Wilkins
It helps, but does not solve the problem completely. Firstly user servlets that use getResource or getRealPath calls will not use the tomcat URL mechanism. JspServlet in 3.1 is a good example of this. constraint on /secret/* does not protect servlet at *.jsp from /SecRet/private.jsp I