Security in Tomcat Webapps - WAS: Tomcat 4 / mod_webapp RPMs available...

2002-02-05 Thread GOMEZ Henri
I send a copy to tomcat-dev since it's an important issue Thanks for getting back to me so quickly. The distributions you have provided via jakarta have been very beneficial to us and our project. We are grateful so much work has gone into building RPM's. Thanks ;) Warning, the RPM goal

RE: [PATCH] RETRY: Tomcat 4.0 Docs SSL-Howto

2002-02-05 Thread GOMEZ Henri
Seems good to me and should be applied also to Tomcat 3.3 SSL HOWTO :) - Henri Gomez ___[_] EMAIL : [EMAIL PROTECTED](. .) PGP KEY : 697ECEDD...oOOo..(_)..oOOo... PGP Fingerprint : 9DF8 1EA8 ED53 2F39 DC9B 904A 364F 80E6 -Original

Re: Do different virtual hosts have to have different appBase values?

2002-02-05 Thread Oto Buchta
Dne út 5. únor 2002 01:22 Micael Padraig Og mac Grene napsal(a): [ ] They do. Reason: [ X ] They don't. Reason: It is not necessary. Why to block this functionality? Example: http://www.pig.cz will the same as http://www.pig.net/cz; http://www.pig.net will the same as

DO NOT REPLY [Bug 6214] - Problems on ClientAuth

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6214. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

RE: cvs commit: jakarta-tomcat RELEASE-PLAN-3.3.1.txt

2002-02-05 Thread Vincent Massol
-Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED]] Sent: 05 February 2002 06:44 To: Tomcat Developers List Subject: Re: cvs commit: jakarta-tomcat RELEASE-PLAN-3.3.1.txt Issue Description 1 Must be able to compile and run under JDK 1.1.8 +

DO NOT REPLY [Bug 4212] - How to configure Apache to serve static contents?

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=4212. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 6244] New: - javax.servlet.* in WEB-INF/lib overrides containers version

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6244. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 6244] - javax.servlet.* in WEB-INF/lib overrides containers version

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6244. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 6213] - Apache, Tomcat 4 mod_jk.

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6213. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 6211] - bug with jsp:plugin

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6211. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 6208] - Bug in Tomcat's implementation of the sendRedirect method of the HttpServletResponse interface

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6208. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 6247] New: - Tomcat not referencing jar files in web-inf/lib classpath conflicts

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6247. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

Tomcat 3.3 - Cactus Issue

2002-02-05 Thread Larry Isaacs
Hi Bill, Here are the details of the problem with Tomcat 3.3 and Cactus. Apparently, Cactus's sample test suite run against Tomcat 3.3 will occasionally fail on the main Gump system (a 300Mhz system running Linux) and reliably fails Vincent Massol's laptop (1Gig+ system running Windows XP).

Re:Connectors, Realms, 4.0.2b2 - 403 Access Denied

2002-02-05 Thread Jonathan Pierce
I'm posting this question a second time since I am not sure if mailer problems on my end prevented it from reaching the list and I got no responses on the issue. The security implementation in Tomcat 4.0.2b2 and earlier seems to depend on using redirect urls. This doesn't seem to work correctly

DO NOT REPLY [Bug 6248] - using xerces in webapp causes class cast exception

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6248. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

Bug in safe url parsing

2002-02-05 Thread Keith Wannamaker
Greetings, There is a bug in ByteChunk.indexOf which manifests itself in the safe url parsing. That is, BC.indexOf returns an offset relative to the start of the byte buffer, rather than the internal starting point. So, when safe url checks for indexOf('%'), depending on the length of the

Re: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread costinm
Hi Larry, We had a similar problem long time ago - with the POST and the extra CRLF. While investigating it, I found a lot of interesting stuff about Connection reset by peer :-) Most of the time it happens when something is still in the write buffer ( i.e. unsent or unread ), and the remote

cvs commit: jakarta-tomcat-4.0/catalina/src/bin setclasspath.bat

2002-02-05 Thread patrickl
patrickl02/02/05 09:59:28 Modified:catalina/src/bin setclasspath.bat Log: Add checking for all of the other tools in JAVA_HOME that the other scripts use Revision ChangesPath 1.3 +10 -2 jakarta-tomcat-4.0/catalina/src/bin/setclasspath.bat Index:

cvs commit: jakarta-tomcat-4.0/catalina/src/bin setclasspath.sh

2002-02-05 Thread patrickl
patrickl02/02/05 10:00:20 Modified:catalina/src/bin setclasspath.sh Log: Add checking for all of the other tools in JAVA_HOME that the other scripts use Revision ChangesPath 1.3 +3 -2 jakarta-tomcat-4.0/catalina/src/bin/setclasspath.sh Index:

RE: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread Larry Isaacs
Comments below. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 05, 2002 12:45 PM To: Tomcat Developers List Subject: Re: Tomcat 3.3 - Cactus Issue Hi Larry, We had a similar problem long time ago - with the POST and the extra

Re: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread costinm
On Tue, 5 Feb 2002 [EMAIL PROTECTED] wrote: Most of the time it happens when something is still in the write buffer ( i.e. unsent or unread ), and the remote side is closing the connection. I'll try again: Assuming CLIENT sending data to SERVER. The exception happens when: - server has

RE: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread Larry Isaacs
Vincent: is your test servlet reading the body i.e. calls getParameters() if it's a url-encoded body, or read the full stream ? If not, I believe the current behavior is correct and shouldn't be changed - it signals the CLIENT that whatever it posted was not read, and that's a very

RE: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread Vincent Massol
Larry, See below. -Original Message- From: Larry Isaacs [mailto:[EMAIL PROTECTED]] Sent: 05 February 2002 19:03 To: 'Tomcat Developers List' Subject: RE: Tomcat 3.3 - Cactus Issue Comments below. [snip] Let me know if that helps - and if not what's the easiest way to

RE: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread costinm
On Tue, 5 Feb 2002, Larry Isaacs wrote: I looked for this and didn't find that there was any POST data sent and none was read. I certainly could have missed something. I don't completely understand everything that Cactus' controller servlet does on the Tomcat side. However, I think I

Development Documents

2002-02-05 Thread Gunnar Wagenknecht
Hi! I'm thinking of a web application that processes JSP itself and returns only the HTML content of JSP pages back to the Client. I don't want to point the Client to Java Server Pages. Where can I find usefull documentation to evaluate such a functionality for Tomcat? Have you any suggestions

RE: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread Larry Isaacs
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 05, 2002 2:46 PM To: Tomcat Developers List Subject: RE: Tomcat 3.3 - Cactus Issue On Tue, 5 Feb 2002, Larry Isaacs wrote: One question - with the sleep(), do you do an

FW: PageCaching Feature

2002-02-05 Thread Gunnar Wagenknecht
-Original Message- From: Gunnar Wagenknecht Sent: Tuesday, February 05, 2002 8:43 PM To: 'Tomcat Developers List' Subject: RE: PageCaching Feature Hi! I'm sorry but OSCache is not that what I really need. I want to cache the full output of selected URLs not just JSP. Any Ideas? I

Re: Development Documents

2002-02-05 Thread Micael Padraig Og mac Grene
Hi, Gunnar. I think that this is what JSP itself does already, i.e. return HTML content. So, I am not sure what you are asking. If you don't want to use JSP pages, then don't. I am sure that is not what you wanted to say, so, again, I misunderstood what you are saying. Could you be more

RE: Bug in safe url parsing

2002-02-05 Thread Larry Isaacs
This looks good to me. Also, CharChunk looks like it has the same problem. Could you go ahead and fix that on as well. Thanks. Cheers, Larry -Original Message- From: Keith Wannamaker [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 05, 2002 12:45 PM To: Tomcat Developers List

RE: PageCaching Feature

2002-02-05 Thread Gunnar Wagenknecht
Hi! I'm sorry but OSCache is not that what I really need. I want to cache the full output of selected URLs not just JSP. Any Ideas? I plan to build a web application with a CentralEntryServlet. This Servlet invokes some actions which depends on the given PathInfo. The actions are very extensive

RE: Development Documents

2002-02-05 Thread Gunnar Wagenknecht
Hi! I plan to build a web application with a CentralEntryServlet. This Servlet invokes some actions which depends on the given PathInfo. The actions are very extensive and return a ready OutputStream which then is printed out to the Client. I want to use templates which are connected to

RE: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread Larry Isaacs
I tried adding a Thread.sleep(1) just before the call to TcpConnection.shutdownInput() in Http10Interceptor. A System.out.println() within shutdownInput's while never prints during a successful Cactus run on Win2k. Is there anything different I should try? Larry -Original Message-

RE: Tomcat 3.3 - Cactus Issue

2002-02-05 Thread costinm
On Tue, 5 Feb 2002, Larry Isaacs wrote: I tried adding a Thread.sleep(1) just before the call to TcpConnection.shutdownInput() in Http10Interceptor. A System.out.println() within shutdownInput's while never prints during a successful Cactus run on Win2k. Is there anything different I should

DO NOT REPLY [Bug 6260] New: - No processor available, rejecting this connection

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6260. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

RE: Bug in safe url parsing

2002-02-05 Thread costinm
On Tue, 5 Feb 2002, Larry Isaacs wrote: This looks good to me. Also, CharChunk looks like it has the same problem. Could you go ahead and fix that on as well. Thanks. And please, update j-t-c/util package as well :-) Costin -Original Message- From: Keith Wannamaker

patch: fix warp connector to properly implement flush() and flushBuffer()

2002-02-05 Thread Roger Nesbitt
Hi all, I've got a little servlet that keeps the HTTP connection streams data (html script data, to be precise) at the rate of a few bytes per second. Tomcat handled this fine, but as soon as I routed it through Apache using the warp connector, I found that data was not sent until the

DO NOT REPLY [Bug 6208] - Bug in Tomcat's implementation of the sendRedirect method of the HttpServletResponse interface

2002-02-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6208. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.