Hi there,
I just subscribed to tomcat-dev in order to discuss a nitpick
issue I found in Tomcat 4.1.18.
The intro page you get on starting Tomcat for the first time, that
is the index page of the ROOT webapp, does not have a correct
doctype and is therefore probably invalid HTML, though I must
Bill Barker wrote:
Schnitzer, Jeff [EMAIL PROTECTED] writes:
The standard fix for this is to use a cryptographic pseudo-random
number generator, such as Java's SecureRandom. SecureRandom
automatically seeds itself from allegedly random system data.
the probability that two sufficiently long
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15612.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15612.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
glenn 2002/12/30 06:10:20
Modified:jk/native CHANGES.txt
Log:
Update changes
Revision ChangesPath
1.7 +6 -2 jakarta-tomcat-connectors/jk/native/CHANGES.txt
Index: CHANGES.txt
===
RCS
glenn 2002/12/30 06:16:54
Modified:jk/xdocs/jk aphowto.xml
Log:
Update version numbers for apache in docs
Revision ChangesPath
1.18 +8 -8 jakarta-tomcat-connectors/jk/xdocs/jk/aphowto.xml
Index: aphowto.xml
Mladen Turk [EMAIL PROTECTED] wrote on 30.12.2002 08:02:13:
Good, so if there is DSAPI, there shuld't be problems :).
I think so and I am making progress, but hope someone can help me further
with questions 2 and 3 :)
For the moment I work with 5.0 for the following reasons.
Many
I can also report that I've seen this happen when the system is under
load. We had a
user log in and gain access to another user's session. I'm sure you can
understand that
makes it a very serious bug for security-sensitive applications, perhaps
even deserving
some kind of security alert
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14008.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14008.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
Glenn Olander wrote:
I can also report that I've seen this happen when the system is under
load. We had a
user log in and gain access to another user's session. I'm sure you can
understand that
makes it a very serious bug for security-sensitive applications, perhaps
even deserving
some kind of
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10383.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
glenn 2002/12/30 08:00:32
Modified:jk/java/org/apache/ajp/tomcat4 Ajp13Processor.java
Log:
Fix bug 10383 and remove stack trace from client abort type of exception
Revision ChangesPath
1.10 +24 -7
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10383.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
glenn 2002/12/30 08:06:09
Modified:.RELEASE-NOTES-4.1.txt
Log:
Update release notes
Revision ChangesPath
1.42 +5 -1 jakarta-tomcat-4.0/RELEASE-NOTES-4.1.txt
Index: RELEASE-NOTES-4.1.txt
fyi, the version he checked in contains a bug. It should append jvmRoute
within
the loop. It should look like this:
String sessionId = generateSessionId();
String jvmRoute = getJvmRoute();
// @todo Move appending of jvmRoute generateSessionId()???
if (jvmRoute != null) {
This looks true by the looks of:
http://cvs.apache.org/viewcvs/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/session/ManagerBase.java?rev=1.15content-type=text/vnd.viewcvs-markup
The while loop is looking for one session ID, and if JVM route is set, a
different session ID is saved.
Bill Barker [EMAIL PROTECTED] writes:
As far as I can tell, ManagerBase could really use your expertise on this.
The current algorithm is really bad :-(
Ok. I've read the current code, which, as you say, is rather complicated.
As far as I can tell, here's how it works:
INITIALIZATION
(1)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Monday, December 30, 2002 3:15 PM
To: Tomcat Developers List
Subject: RE: Questions related to a port of the IIS-connector
to Domino I plan to provide
Good, so if there is DSAPI, there shuld't be
Can anyone tell me, Tomcat works both HTTP and APP
server? do i need to download apache HTTPserver
seperately inorder to make Tomcat work as both APP and
HTTP server?
Thanks,
ravi
=
Thanks,
RAVI KUMAR APPALA
__
Do you Yahoo!?
Yahoo! Mail Plus
Craig R. McClanahan wrote:
I don't see a problem with that, but I've stopped using reloadable at
all for my development -- reload-on-demand (via the manager webapp) is a
much more effective strategy IMHO. And reloadable shouldn't be used on
a production server anyway.
Is there a way to do
Good catch!
I'll apply the patch (if somebody doesn't beat me to it).
- Original Message -
From: Glenn Olander [EMAIL PROTECTED]
To: Tomcat Developers List [EMAIL PROTECTED]
Sent: Monday, December 30, 2002 8:05 AM
Subject: Re: Duplicate session IDs?
fyi, the version he checked in
On Mon, 30 Dec 2002, Joseph Shraibman wrote:
Date: Mon, 30 Dec 2002 14:00:57 -0500
From: Joseph Shraibman [EMAIL PROTECTED]
Reply-To: Tomcat Developers List [EMAIL PROTECTED]
To: Tomcat Developers List [EMAIL PROTECTED]
Subject: Re: [PATCH] Re: ThreadPool
Craig R. McClanahan wrote:
Mladen Turk wrote:
Seems that Domino 6 is using its own JVM (think that the one (IBM 1.3.1)
comes with installation) and you have collision problem cause you are
loading another JVM in the process.
There could be a problem with that if Domino already loads JVM, cause
you can load JVM only
Craig R. McClanahan wrote:
It would actually be a pretty good solution IMO. A single thread checking
the files for modification in all contexts is better ( again IMO ) than
one thread per context. Same for checking sessions.
The coding is a bit trickier ( and there are some issues related
On Mon, 30 Dec 2002, Costin Manolache wrote:
As for someone stoping the check for class modification at run time using
an admin interface - what's wrong with that ?
I don't see a problem with that, but I've stopped using reloadable at
all for my development -- reload-on-demand (via
Craig R. McClanahan wrote:
I like using the custom Ant tasks included with Tomcat 4.1 for
manipulation via manager, so that I can create a reload target. If you
don't use Ant, it's just as easy to leave a browser window open to:
I don't know if you looked at the JMX ant tasks in modeler.
Craig R. McClanahan wrote:
On Mon, 30 Dec 2002, Costin Manolache wrote:
I agree.
Is 'reloadabl' disabled by default ?
Yes ... at least in HEAD of 4.1 and 5.0. I'm pretty sure it's always been
that way.
Yes, it's disabled by default.
BTW, can't Linux 2.5/2.6 handle thousands of threads
Costin Manolache wrote:
Craig R. McClanahan wrote:
I like using the custom Ant tasks included with Tomcat 4.1 for
manipulation via manager, so that I can create a reload target. If you
don't use Ant, it's just as easy to leave a browser window open to:
I don't know if you looked at the
On Mon, 30 Dec 2002, Costin Manolache wrote:
Date: Mon, 30 Dec 2002 13:02:09 -0800
From: Costin Manolache [EMAIL PROTECTED]
Reply-To: Tomcat Developers List [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: [PATCH] Re: ThreadPool
Craig R. McClanahan wrote:
I like using the custom
BTW, can't Linux 2.5/2.6 handle thousands of threads without any problem
? I remember reading an iterview of Ingo who said JVM performance and
thread handling should be way better in 2.6.
You're right, and Java should be one to benefit well from it.
But if the kernel period freeze lasts as
Remy Maucherat wrote:
BTW, can't Linux 2.5/2.6 handle thousands of threads without any problem
? I remember reading an iterview of Ingo who said JVM performance and
thread handling should be way better in 2.6.
The idea is that there's nothing wrong with designing with threads in
mind (I
Hello,
Does anyone know how the two system running at the
same time -- http://sameaddress:8080 and
http://sameaddress:2999 using same tomcat-apache web
server?
ex: system1 using port 8080, system2 using port 2999,
Am I right to modify the server.xml file?
Connector
billbarker2002/12/30 19:45:48
Modified:catalina/src/share/org/apache/catalina/session
ManagerBase.java
Log:
Make certain that the jvmRoute is attached to the session before comparing for
uniqueness.
Submitted by: Glenn Olander [EMAIL PROTECTED]
billbarker2002/12/30 19:48:08
Modified:catalina/src/share/org/apache/catalina/session
ManagerBase.java
Log:
Port patch from Tomcat 4.
Revision ChangesPath
1.9 +16 -9
glenn 2002/12/30 19:57:20
Modified:catalina/src/share/org/apache/catalina/core
ApplicationFilterConfig.java
Log:
Wrap ServletFilter init with swallow output
Revision ChangesPath
1.4 +20 -5
glenn 2002/12/30 19:57:34
Modified:catalina/src/share/org/apache/catalina/core
ApplicationFilterConfig.java
Log:
Wrap ServletFilter init with swallow output
Revision ChangesPath
1.8 +19 -6
glenn 2002/12/30 20:19:31
Modified:jk/tools/reports tomcat_trend.pl
Log:
Update for mod_jk log changes
Revision ChangesPath
1.3 +5 -4 jakarta-tomcat-connectors/jk/tools/reports/tomcat_trend.pl
Index: tomcat_trend.pl
38 matches
Mail list logo
