Re: Question about compiling the servlets.

2000-10-25 Thread Craig R. McClanahan
Milan Kuchtiak wrote: I am partly working on Tomcat integration into Forte4j IDE. Could anybody tell me how the servlets are compiled into classes. I supose that not JDK javac compiler is used. In general, the JDK compiler is probably used by most people, although any Java compiler should

[ANNOUNCE] Tomcat 4.0 Milestone 4

2000-11-01 Thread Craig R. McClanahan
We're pleased to announce the availabililty of milestone 4 of the Tomcat 4.0 servlet container and JSP engine. Compared to milestone 3, this release reflects the following changes: * Implementation of all the changes between "public draft" and "proposed final draft" of the Servlet 2.3 and JSP

Re: Tomcat 4.0 Milestone 4 performance measurement

2000-11-02 Thread Craig R. McClanahan
I agree that it's definitely time to start doing this. However, to have useful results, it is important that we execute the same test procedures -- otherwise, you cannot even reproduce the same results reliably on the same platform. Roy, would it be possible for you to write us a simple

Re: Hello? Anybody?

2000-11-02 Thread Craig R. McClanahan
Ethan Wallwork wrote: Since the spec implies that exceptions should be thrown from a RequestDispatcher call rather than handled, and there seems to be nothing in the spec that forbids this behavior, I would like to see it implemented this way. Does anyone know of any reasons it shouldn't be

Re: Hello? Anybody?

2000-11-02 Thread Craig R. McClanahan
Larry Isaacs wrote: Thanks Craig, To support this behavior, should the spec require that for a JSP that is "included" or "forwarded", handlePageException() is required to propagate the exception back to the caller? Currently, it just says that if there is no error page, it should "perform

Re: Tomcat 4.0 Milestone 4

2000-11-03 Thread Craig R. McClanahan
Michael Percy wrote: Thanks, Costin. You guys all make it sound like much less pain than I had previously thought. Maybe Tomcat could use a developer community site akin to what Mozilla has (www.mozillazine.org) -- people would probably be more willing to contribute if they felt invited.

Re: Tomcat 3.3 / 4.0 confusion, rant and plan...

2000-11-04 Thread Craig R. McClanahan
Hans Bergsten wrote: "Craig R. McClanahan" wrote: [...] Therefore, I'm going to spend the weekend integrating all the bug reports and fixes I can find into 3.2 -- please check the CVS commit reports and remind me of any that I miss. In particular, I would like people to

Re: Fix for Tomcat 3.2 TcpConnector.receive() Problem

2000-11-04 Thread Craig R. McClanahan
Mark, I just checked in a slight generalization of this change (the read of the four-byte header could fail in the same way. I forgot to give you credit in the CVS commit :-(, but thaks for the bug report. Please test this (with your large servlet requests) when you can. Craig Mark Pollard

FYI: Tomcat Docs on the Jakarta Web Site

2000-11-04 Thread Craig R. McClanahan
I've updated the Tomcat documentation pages on the Jakarta web site to pull the "tomcat_32" branch, so that we can see the docs that will be included in a 3.2 release (and have the opportunity to fix them). Please help this process by reviewing the only doc pages at:

[Tomcat 3.2 Issue] Security Constraints on RequestDispatcher Calls

2000-11-04 Thread Craig R. McClanahan
While researching the isues related to BugRat Bug Report #213 ("RequestDispatcher does not propogate errors"), I became aware that, in the implementation of RequestDispatcher.forward() and RequestDispatcher.include(), (org.apache.tomcat.facade.RequestDispatcherImpl) the method

Re: Strange behavior with context mapping and load-on-startup

2000-11-04 Thread Craig R. McClanahan
David Soroko wrote: I am observing the following behavior which I do not understand (Tomcat 3.1 and 3.2b6) The setup: The appdev Hello sample servlet to which the method init (ServletConfig config) has been added. It just prints a line of text. To the servlet's web.xml the

Re: Strange behavior with context mapping and load-on-startup

2000-11-04 Thread Craig R. McClanahan
Hans Bergsten wrote: Once upon a time this happened when an application was defined by a Context element and stored in the default webapps directory. Tomcat created one context for the Context declaration and one for the the WAR (or expanded WAR) it found in the webapps directory. Well,

Re: HttpServletResponse.encodeURL is broken for relative URLs

2000-11-04 Thread Craig R. McClanahan
Colin Evans wrote: Hi, it appears that HttpServletResponse.encodeURL refuses to add a JSESSIONID to relative URLs for Tomcat 3.1 and 3.2b6. I looked at the code, and it appears that HttpServletResponseFacade.isEncodeable() always returns false on URL strings that are not fully qualified,

Re: Why tomcat 3.x makes redirects (302) absolute ?

2000-11-04 Thread Craig R. McClanahan
Nacho wrote: Excuse my ignorance, Why tomcat 3.x makes redirects (302) absolute ? It leads to problems with NAT ( at router level ) redirects, and reverse proxys, and it can commented without aparent harm See servlet 2.2 specification, section 6.3, first complete paragraph. Making the

Re: I think that it is a bug.

2000-11-04 Thread Craig R. McClanahan
Qian Weichun wrote: The bug lies here: I forward a request in my servlet. After I commit the output, I perform the forwarding. Tomcat doesn't act conforming to the servlet 2.2 specification, which specifies that it should throw the IllegalStateException.

Re: [PATCH] jk_nt_service shutdown

2000-11-04 Thread Craig R. McClanahan
Luke, I apologize for not giving you credit for this patch -- it was included (along with other patches) by someone else. But thanks!!! Craig McClanahan "Kirby, Luke" wrote: Hi! It would seem that the Jakarta NT Service fails to properly shutdown Tomcat. Examining the code shows that it

Re: Why tomcat 3.x makes redirects (302) absolute ?

2000-11-04 Thread Craig R. McClanahan
Nacho wrote: Ohh unpleasure findings ( and i do need to read the damn RFC too :-) Tomcat 3.2 seems to have another bug!!! i've obtained this ( by means of telnet ) from different http servers, after done a GET / in all of them, i obtained This is from IIS 5.0 first finding: How

Re: Possible tomcat 3.2beta6 bug in session management

2000-11-05 Thread Craig R. McClanahan
[EMAIL PROTECTED] wrote: Hi, I have found a different session behavior between tomcat3.1 and tomcat3.2 I have a code in a servlet that invalidates a session, if is present, and creates a new session. The servlet works without any problem with tomcat 3.1 but with tomcat 3.2 beta6 there

Re: BugRat Bug Report #361

2000-11-08 Thread Craig R. McClanahan
It's actually quite a bit worse than just getting the /servlet prefix wrong. Basically, the web.xml settings are not consulted at all when generating tomcat-apache.conf. I do not anticipate that this will be changed any time soon in 3.2. For 4.0, one of the main reasons that the web connector

Re: Possible bug in tomcat wrt setting cookies?

2000-11-09 Thread Craig R. McClanahan
Yes, this is a real bug in 3.2b6 (and probably earlier). I checked in a patch for it earlier this week, which will be included in b7 and the eventual release. What caused the problem was kind of interesting -- the session stuff was abstracted out into a RequestInterceptor, which would add the

Re: More on redirection problems

2000-11-09 Thread Craig R. McClanahan
Nacho wrote: Hola a todos: After some more research in the issues related to NATs and tomcat standalone, and more reading, i think i have found a real and common problem in tomcat 3.X, that it's not present in Tomcat 4.0 ( this is from a brief reading of the code ). The problem, i think

Ready for 3.2b7?

2000-11-10 Thread Craig R. McClanahan
It's been a week now, and I've committed 20 patches to the 3.2 tree, ranging from simple tweaks to security problems to spec compliance bugs. I believe that I've gotten all of the critical bug reports submitted on the mailing lists or via BugRat. Does anyone know of any I've missed (see below

Re: Patch for bug report #362 (and a patch for a logging error)

2000-11-10 Thread Craig R. McClanahan
Serge Knystautas wrote: Ok, I submitted the bug report this afternoon (#362) about how jasper was mishandling a custom tag of mine. You can read the report if you want, but basically here's what happens... say your custom tag has an attribute to be rtexprvalue and because of the flexibility

Re: [Resend] Ready for 3.2b7?

2000-11-10 Thread Craig R. McClanahan
Marc Saegesser wrote: Craig, I posted the diffs to fix a log file problem in jk_nt_service.c a few days ago. The changes are minor (but fix a really annoying problem) and have been running at my site without problem for about a week. I'm new to submitting code changes to the project so

Re: Patch for bug report #362 (and a patch for a logging error)

2000-11-10 Thread Craig R. McClanahan
Serge Knystautas wrote: [snip] The way I got this to work was to overload the setter method to take both a String and an Object... this got it working through Jasper Servlet but not jspc. I don't know if that's a violation of the spec or the way to handle this issue. Yep, it is, and again

Re: facade22.jar

2000-11-10 Thread Craig R. McClanahan
Jon Stevens wrote: During ./build.sh, facade22.jar is placed into the tomcat/lib directory twice (once also in lib/servlet22). Is there a reason for that? I couldn't tell you ... but it's worth mentioning that the main branch of "jakarta-tomcat" (where you committed your change for

Re: About Form-Login-Config

2000-11-10 Thread Craig R. McClanahan
Arieh Markel wrote: I am reading the (2.3) spec and am realizing that I am not able to share a login page with multiple contexts. That's true (also true for servlet 2.2). In our (embedded) use of Tomcat, we have different contexts, but we use a single login form/screen. When

Re: [PATCH] Re: Ready for 3.2b7?

2000-11-10 Thread Craig R. McClanahan
Paul and others, See intermixed comments below. Paul Frieden wrote: I've attached 1 patch, 2 modified interceptors, and one new interceptor. These all work with 3.2b6. Please consider these for 3.2b7. Here is what they do: CookieTools.patch: This patch fixes cookie deletion.

Re: Ready for 3.2b7?

2000-11-11 Thread Craig R. McClanahan
[EMAIL PROTECTED] wrote: Hi, I have posted bug fix to TC load balancing when using URL-only sessionID (both mod_jk and mod_jserv). I have received no answer. The fix is for 3.2b6. R u going to include this? This fix bug #328, and let tomcat to serve applications that can't use

Re: Ant rant

2000-11-12 Thread Craig R. McClanahan
Nick Bauman wrote: I have all kinds of problems using new versions of Tomcat (and someone said that they are suprised at how few people try the milestone builds / betas) and many of them come from problems with Ant. So I think Ant is actually _preventing_ people from getting the most out of

Re: [BUG] j_security_check forward no longer working

2000-11-14 Thread Craig R. McClanahan
Barry Dunne wrote: Hi, I need to trap the username and password entered by the user when accessing a secured web page, this is so that I can use this information when connecting to an external system in a servlet. The method I used was to have form based authentication but with the action

Re: Instances of a Servlet

2000-11-16 Thread Craig R. McClanahan
Rob Shaw wrote: I'm seeing a behaviour that suggests instantiation of servlets due to an invocation via a "servlet-mapping" or via the InvokerServlet (/servlet) are handled differently. More specifically, given that I've set up a Context for the path "/foo", and within that context, I've

Re: Classloader

2000-11-16 Thread Craig R. McClanahan
Rob Shaw wrote: Given that I have 2 "contexts" defined (which I'm assuming each has thier own classloader). That is correct. After making a request to the same servlet within each context, I'm witnessing the creation of seperate instances of the servlet per context, which I would

Re: [PROPOSED 3.2B7 PATCH] error displayed for case mismatch in JSP URL

2000-11-16 Thread Craig R. McClanahan
+1 Craig Larry Isaacs wrote: In Tomcat 3.2b7 (and earlier), invoking http://localhost:8080/test/jsp/Helloworld.jsp results in an NPE in JspCompiler.isOutDated(). This occurs because getRealPath() returns null since the 'w' should be uppercase, hence it is considered an "unsafe" path.

Re: FW: sessionID within URL and loadbalance (was: WAP and sessionIDs)

2000-11-16 Thread Craig R. McClanahan
and no-cookie browsers (WAP). Please let me know whether you are going to include that in tomcat 3.2. (this fix bug #328) TIA. --Shai -Original Message- From: Shai Fultheim (BRM IL) Sent: Thursday, November 16, 2000 01:03 To: '[EMAIL PROTECTED]' Cc: 'Craig R. McClanahan' Subject

Re: [TC4] ResourcesBase.setCheckInterval() bug

2000-11-16 Thread Craig R. McClanahan
Hi Jason, See below. Jason Brittain wrote: Hi guys! In reading through the org.apache.catalina.resources package code, I found a small omission from the ResourcesBase.setCheckInterval() method: public void setCheckInterval(int checkInterval) { // Perform the property update int

Re: [TC4] ResourcesBase.setCheckInterval() (not a) bug

2000-11-16 Thread Craig R. McClanahan
Jason Brittain wrote: BTW: I really like the resources package! I can think of several useful implementations that I'd like to use, like one for CVS, or one for JavaMail, or ... lots more. I like the Resources abstraction as well. Before we go whole hog at creating new implementations,

Re: Tomcat 3.2 b7 build broken???

2000-11-17 Thread Craig R. McClanahan
Stefán F. Stefánsson wrote: It can't be that... must be something on my side... but I keep getting the following error when I try to run build (doesn't matter if I do build or build dist). C:\jakarta\jakarta-tomcatbuild Buildfile: build.xml BUILD FAILED build.xml:33: Could not create

[Proposal] Tomcat 3.2b8

2000-11-17 Thread Craig R. McClanahan
Thanks for all the bug reports on 3.2b7! We've been so successful at identifying remaining bugs that I'd like to propose we do at least one more beta cycle (3.2b8) before calling it good. We need to make sure that we didn't introduce any regression errors with all the bug fixes -- and we need

Re: [Proposal] Tomcat 3.2b8

2000-11-17 Thread Craig R. McClanahan
Nacho wrote: Hola a todos: cycle (3.2b8) before calling it good. We need to make sure that we didn't introduce any regression errors with all the bug fixes -- and we need to resolve the JSP issues that Larry raised this morning. +1 to 3.2b8 +1 to Larry fix of jasper. I

Re: [PATCH] Bug 404 - EmbededTomcat and PoolTcpConnector

2000-11-17 Thread Craig R. McClanahan
Stefán F. Stefánsson wrote: Here is a patch for bug report 404. Stefán, Thanks for the patch! I've committed this fix, basically along the lines of what you proposed with a couple of tweaks that seemed to be missing. Please try it out (the fix will be included in beta-8 to be created on

Re: problem deploying J2EE RI-built EAR/WAR file

2000-11-17 Thread Craig R. McClanahan
Hi Tim, see intermixed. Tim Bond wrote: Hi, I'm trying to get a WAR file created with the J2EE reference implementation deployment tool to deploy on Tomcat 4.0. The new env-entry feature (as of 11/1) is working. Here's part of my web.xml file: servlet

Re: [ANNOUNCEMENT] Tomcat 3.2 Beta 7

2000-11-17 Thread Craig R. McClanahan
[EMAIL PROTECTED] wrote: 6.8 Container Managed Security Constraints Due to the way that Tomcat 3.2 is implemented, container managed security constraints are imposed both on the original request URI *and* on subrequests initiated to handle RequestDispatcher.forward() or

Re: [Proposal] Tomcat 3.2b8

2000-11-17 Thread Craig R. McClanahan
Gomez Henri wrote: I propose to do a 3.2b8 build on Monday afternoon (which should give us time to address the remaining b7 issues that I know about). What do you think? RPM will be release just after ;-) Thank you for faithfully doing these, by the way :-). Which are

Re: PageContext.include(..) flushing buffer

2000-11-20 Thread Craig R. McClanahan
Gary Albelli wrote: I was reading this bug report and could not find where the jsp spec indicates that the buffer should be flushed prior to processing the include. You're right ... the servlet spec does not require this behavior (although JSP 1.1 pages that use jsp:include page="/x"

Re: cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/facade HttpServletResponseFacade.java

2000-11-20 Thread Craig R. McClanahan
Hans Bergsten wrote: [EMAIL PROTECTED] wrote: craigmcc00/11/20 15:59:43 Modified:src/share/org/apache/tomcat/facade Tag: tomcat_32 HttpServletResponseFacade.java Log: Intra-document references (i.e. relative urls starting with "#") never

Re: [ANNOUNCEMENT] Tomcat 3.2 Beta 8

2000-11-21 Thread Craig R. McClanahan
GOMEZ Henri wrote: Hi, While building my RPM I notice that in server.xml in the SSL session the secure parameter is still missing : Normal or te be commited ? I did not know about this one. Go ahead and commit it, so we get it right in the final release. Craig - ---

Re: Where Can I Find ajp13 Documentation?

2000-11-21 Thread Craig R. McClanahan
Dan Milstein wrote: Does anyone know where can I find documentation on the ajp13 communication protocol? I'm looking for documentation about how the packets are laid out, what messages the server can send the servlet engine, etc. I am *not* looking for documentation on how to write config

Re: [TC4] multiple certificates

2000-11-21 Thread Craig R. McClanahan
Warner Onstine wrote: Hi all, It's been a while since I looked at the SSL stuff and I just received a request which I'm not sure how it would be handled in TC4. Would it be possible to handle multiple certificates for SSL per servlet? If this needs further clarification let me know. I

[PROPOSAL] Tomcat 4.0 Milestone 5

2000-11-22 Thread Craig R. McClanahan
Folks, I plan to cut a "milestone 5" release of Tomcat 4.0 this coming Friday (or, worst case, on Saturday). As a sneak preview of coming attractions, the following cool stuff will be included: * Initial version of the web connector for Apache * Substantial performance optimizations on the

Re: [Tomcat 3.2 beta 8] jsse ?

2000-11-24 Thread Craig R. McClanahan
Pilho Kim wrote: How can I test JSSE ? I have installed Tomcat 3.2 beta 8 on Win98. First, download JSSE (1.0.2) from the JavaSoft web site, and install it's JAR files on your classpath (or in the system extensions directory, $JAVA_HOME/jre/lib/ext on a Java2 platform). Next, edit your

Re: cvs commit: jakarta-tomcat-4.0/connector/src/webapplib wa.c wa.h wa_connection.c wa_connection.h wa_host.c wa_host.h wa_provider.c wa_provider.h wa_provider_info.c wa_request.c wa_request.h

2000-11-24 Thread Craig R. McClanahan
I would rather wait and include the connector stuff in the m5 milestone -- that way it will get more attention (and bug fixes :-). Also, I don't see any makefiles or other build scripts for the web connector, or for the invocation stuff. I'd be happy to integrate whatever is necessary into the

Re: [PROPOSAL] Tomcat 4.0 Milestone 5

2000-11-24 Thread Craig R. McClanahan
See intermixed below. GOMEZ Henri wrote: I plan to cut a "milestone 5" release of Tomcat 4.0 this coming Friday (or, worst case, on Saturday). As a sneak preview of coming attractions, the following cool stuff will be included: Nice... * Initial version of the web connector for Apache

Re: [PROPOSAL] Tomcat 4.0 Milestone 5

2000-11-27 Thread Craig R. McClanahan
A few short comments intermixed below. [EMAIL PROTECTED] wrote: [snip] Many of the ajp13 bugs seems to be fixed (even the dreaded ajp13 + RequestDispatcher). That's great! Even if you don't get them fixed in time for 3.2 final, rolling out a maintenance release with those fixes would be

[Tomcat 4.0] SOLARIS-isms and other problems in native code

2000-11-27 Thread Craig R. McClanahan
I'm trying to build the new native code stuff on my Linux box, and am running into the following SOLARIS-specific issues: service/src/native/jsvc.h - The header file sys/systeminfo.h is SOLARIS specific service/src/native/jsvc_unix.c - The sysinfo() system call, defined in sys/systeminfo.h is

Re: Now, am I stupid or what?

2000-11-27 Thread Craig R. McClanahan
"Pier P. Fumagalli" wrote: Ok, I don't know what's happening... I'm reading some of the messages to this list "in advance" (since I moderate and NOT all of you kids post with the same email address you are subscribed! GRRR!)... But, strangely enough, I've seen some messages talking about

Re: Recent Tomcat Download Stats

2000-11-27 Thread Craig R. McClanahan
Louis Tribble wrote: Presumably when 3.2 goes final, there will be a surge. That seems somewhat likely to me :-) Also, 4.0-m5 (this weekend or so) will be the first Tomcat 4.0 "milestone" (alpha) that has the connectors to run with Apache. Hmm, we might want to see about adding some

Re: [VOTE] Tomcat 3.2 Final Release (!) and Ongoing Maintenance Plan

2000-11-28 Thread Craig R. McClanahan
GOMEZ Henri wrote: (1) Build and release Tomcat 3.2 final on Wednesday 11/29/2000 +1 (known bugs to be fixed in 3.2.1 - Did you apply the patch from Clinton, Doug [[EMAIL PROTECTED]] Is that the fix for the RequestDispatcher.forward() problem? If so, then I have not done so. Are you

Re: Tomcat JNDI

2000-11-06 Thread Craig R. McClanahan
"Roytman, Alex" wrote: I am trying to tie Tomcat with JNDI to use J2EE pattern to obtain resources: Context context = new InitialContext(); dataSource = (DataSource)context.lookup("java:comp/env/jdbc/myDataSource"); (I know Tomcat team is planning to have it for Tomcat 4 eventually)

[ANNOUNCEMENT] Tomcat 3.2 Beta 8

2000-11-20 Thread Craig R. McClanahan
Thanks to everyone for the bug reports (and patches)! You can now download "beta 8" of the Tomcat 3.2 servlet container from: http://jakarta.apache.org/builds/tomcat/release/v3.2-beta-8 Relative to "beta 7", a number of critical bugs have been fixed, and several configuration options

Re: Catalina-4M5 question: parameters?

2000-11-29 Thread Craig R. McClanahan
Matthew L Daniel wrote: If this is not the proper forum to be discussing Catalina related difficulties, please advise me and I will take this elsewhere. As some other kind soul reported, BugRat is exactly that. Even the usage page is broken. I am using the CVS build of Catalina 4.0M5. It

Re: Another note on creating Tomcat 3.2 Final source zip

2000-11-29 Thread Craig R. McClanahan
Larry Isaacs wrote: Craig, I overlooked this earlier. I plan on leaving out the CVS "bin" directory from the source zip. From what I can tell, all these binaries are out of date. Definitely. I totally forgot they were there. I'm also going to remove them from CVS as well, so we don't

[Tomcat 3.2] Calling For Native Code

2000-11-29 Thread Craig R. McClanahan
I'm getting ready to build the Java part of the 3.2 final build. It would be useful to have the native code pieces built for as many platforms as possible so that I can post them on the web site along with the distribution. Could developers who have environments to do this please help me out

Re: AccessLogValve performance fixes

2000-11-29 Thread Craig R. McClanahan
Jason Brittain wrote: It sounds like a good idea. While I was working on this valve I was thinking that it would be great to queue up the log messages for another thread, but I first wanted to quickly get these lighter optimization changes into the codebase. Sounds like a reasonable

Re: [Tomcat 3.2] User's Guide?

2000-11-29 Thread Craig R. McClanahan
Larry Isaacs wrote: It doesn't contain any 3.3 features that I know of because I don't/didn't know anything about what 3.3 will have versus 3.2 =) This is will help. However, there are some changes in the tomcat_32 "older" version that would need to be ported to the MAIN version before

Re: MVC problem

2000-11-30 Thread Craig R. McClanahan
"Aiken, David" wrote: That sounds workable.. i looked for an archive of this newsgroup but didn't have any luck - do you know where the relevant section in the JSP/servlet spec is? Do you mean the restriction on serving things from WEB-INF directly to the client? Servlet 2.2 Spec, Section

Re: Catalina-4M5 question: parameters?

2000-11-30 Thread Craig R. McClanahan
Matthew L Daniel wrote: To my knowledge, this is not a known issue. In fact, I've got tons of stuff that depends on request parameters working just fine in 4.0. I would be very interested in a simple test case that can reproduce what you're seeing. I have included a jar (the

Re: MVC problem

2000-11-30 Thread Craig R. McClanahan
n assigned. Doing this forces all requests to come through your controller servlet, because none of the JSP pages would be directly accessible. thanks! david Craig -Original Message----- From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 30, 2000 12:43

[ANNOUNCEMENT] Tomcat 3.2 Final Release

2000-11-29 Thread Craig R. McClanahan
The most anticipated release from the Jakarta project yet! We hereby announce the availability of the final release of version 3.2 of the Tomcat servlet container and JSP engine. Tomcat implements the Servlet 2.2 and JSP 1.1 specifications, and represents the most current release quality build

Re: MVC problem

2000-11-30 Thread Craig R. McClanahan
See below. "Aiken, David" wrote: hi all.. We're hitting a problem with the MVC approach in tomcat. Our controller is designed to intercept all requests for URLs within our web application so that it can handle internationalization and security checks centrally. The problem is

Re: Compiling JSP with debug info

2000-12-01 Thread Craig R. McClanahan
Larry Isaacs wrote: Hi all, We have a need for a global way to have Jasper compile the JSP servlet source with debug information. I would propose defining a system property such as: jasper.compile.debug which if set to "true" would turn on the inclusion of debug info. Any

Re: [BUG TRACKING] Scarab schema and status etc.

2000-12-01 Thread Craig R. McClanahan
Nick Bauman wrote: Could someone with edit rights on Jakarta change the link to me as the Keeper of the Bugs from my yahoo email to this one? I'm talking about the link on: http://jakarta.apache.org/site/bugs.html Done. Also, what's up with the Scarab schema: it's gone (the link is

Re: BugRat Report #516 has been filed.

2000-12-04 Thread Craig R. McClanahan
Stefán F. Stefánsson wrote: woops... this bug should not have that severity or priority... I didn't notice any place where I should have set that now that I think of it... hmmm... weird... maybe it's a bug in the bug-tracking system? Yah, it is ... In response to the issue raised however,

Re: Tomcat 3.2 - Default web.xml not being read

2000-12-04 Thread Craig R. McClanahan
"Osmundsen, Helge" wrote: We have been running tomcat 3.1 for a while, and just downloaded 3.2 final to our test Unix server. We have our servlets defined in the home + "/conf/web.xml" file. This has not changed. 3.1 still works fine. 3.2 does not load the servlets in the default

Re: RPM for jakarta/xml apaches projects

2000-12-04 Thread Craig R. McClanahan
[EMAIL PROTECTED] wrote: I would be interested in hearing from folks here whether they percieve a need for Debian packaging, or whether they prefer to "roll their own"? I'd love to see up-to-date Debian packaging, but I think it would be a challenge to keep it quite as up-to-date

Re: RPM for jakarta/xml apaches projects

2000-12-04 Thread Craig R. McClanahan
[EMAIL PROTECTED] wrote: Costin, could you please move your upload directory for these nightly builds to someplace else? The problem is that you're confusing the people who wonder why the nightly builds have nothing to do with the current (3.2) code release. I can move them to

Re: Include Directive 3.1 Vs 3.2

2000-12-04 Thread Craig R. McClanahan
This issue was the topic of quite a lot of discussion on the expert group for the servlet 2.3 and JSP 1.2 specs. Tomcat 3.2 implements the result of what the expert group decided was the intended behavior. Craig McClanahan Shahed Ali wrote: I noticed that if I have an include directive

Re: Class loading classloader visibility test results

2000-12-06 Thread Craig R. McClanahan
Rob Shaw wrote: Tomcat 3.1 and 3.2. I haven't run the tests for 4.0. You will see the same results in 4.0, for the same reasons, on your simple test cases. However, there is a behavior difference in 4.0 related to the order in which class loaders are searched for classes -- see my upcoming

Re: Class loading classloader visibility test results

2000-12-06 Thread Craig R. McClanahan
Aron Kramlik wrote: Rob, This is great information. I wonder if you could explain why it is that I need to put xml4j.jar file under the $CLASSPATH (i.e. $TOMCAT_HOME/lib) that is loaded by an init() method of a servlet? Which version of Tomcat? There are different issues in each one of

Re: doPost() and concurreny issue/question

2000-12-06 Thread Craig R. McClanahan
"Heinemann, Andreas" wrote: Hi, i've got a question/problem concerning the doPost() method. As far as I know, whenever there is a new request, tomcat creates a new thread running through the doPost() method. This is not precisely correct in all circumstances. In both Tomcat 3.2 and 4.0,

Re: How to close a bug ? (was Re: BugRat Report #543 has been filed.)

2000-12-07 Thread Craig R. McClanahan
Arieh Markel wrote: I want to close this (543) bug. I believe that this is not a bug (as I explained in the attached message on which I replied to the bug filing). You're right ... it's not a bug. I think I cannot close a bug on the bugrat database. You have to have a BugRat

Re: TC 4.0M5 / TC 3.2.1

2000-12-08 Thread Craig R. McClanahan
GOMEZ Henri wrote: Hi, 1) any date for TC 4.0 M5 ? As soon as I can get the Apache connector to compile and run on my Linux system (and understand it enough to explain to others how to configure it, which should be really easy thanks to Pier's hard work :-), I will cut a M5 release --

Re: [PROPOSAL] JSSI for Tomcat

2000-12-09 Thread Craig R. McClanahan
Jon Stevens wrote: on 12/9/2000 3:55 PM, "Hans Bergsten" [EMAIL PROTECTED] wrote: I know the migration of Java Apache projects has been discussed, but I have not seen a formal decision being made by PMC. So I like to run it by the PMC anyway, but based on what you say it sounds like it

Re: cvs commit:jakarta-tomcat/src/examples/WEB-INF/classes/examples ShowSource.java

2000-12-09 Thread Craig R. McClanahan
Jon Stevens wrote: on 12/9/2000 7:07 PM, "[EMAIL PROTECTED]" [EMAIL PROTECTED] wrote: +(jspFile.toUpperCase().indexOf("/WEB-INF/") != 0) || +(jspFile.toUpperCase().indexOf("/META-INF/") != 0)) Seems like it would be better to define this as a constant

[SECURITY] Security Vulnerabilities in Tomcat 3.1 and 3.2

2000-12-11 Thread Craig R. McClanahan
Over the last three days, a review of published and soon-to-be-published reports of security vulnerabilities in Tomcat has uncovered a series of problems in the 3.1 final release, and a couple of less serious (but still significant) problems in 3.2. Please vote (quickly) on the following two

Re: [SECURITY] Security Vulnerabilities in Tomcat 3.1 and 3.2

2000-12-11 Thread Craig R. McClanahan
Hans Bergsten wrote: "Craig R. McClanahan" wrote: [...] Proposal #1: Release a Tomcat 3.1.1 that fixes *only* the security problems +0. Is removing TC 3.1 from the download pages an alternative? There shouldn't be any reason for anyone to use TC 3.1 now when 3.2 is released.

Re: Compiling JSP's with debugging info in Tomcat 3.3

2000-12-12 Thread Craig R. McClanahan
Larry Isaacs wrote: In addition to specifying these JSP options, I'm looking for a way to alter the defaults that get used when these options aren't specified in server.xml. My target is to be able run Tomcat in debugging and non-debugging situations using the same server.xml and without

Re: [TC 4 m4] How can I build ?

2000-12-12 Thread Craig R. McClanahan
Kief Morris wrote: Pilho Kim typed the following on 23:23 12/12/2000 +0900 I cannot download JMX (Java Management Extensions), because I reside outside USA. I was able to download it from here (UK) without any problem. I had to register, but it worked. The "README.txt" file in Tomcat 4.0

Re: cvs commit: jakarta-tomcat-4.0/jasper/src/share/org/apache/jasper Constants.java

2000-12-12 Thread Craig R. McClanahan
Danno Ferrin wrote: I think that keeping the import list to what is required by the spec and refrencing all of the other object we need to compile by the fully qualified name will result in less un-intended colissions. +1 for importing exactly, and only, the "default import list" defined

Re: [ANNOUNCEMENT] Security Related Updates - Tomcat 3.1.1 and Tomcat 3.2.1

2000-12-12 Thread Craig R. McClanahan
Aron Kramlik wrote: Has there been a definitive list of these security problems with TC 3.1 or TC 3.2? The definitive lists of what vulnerabilities were fixed are in the release notes document for each version (file "doc/readme" in the download). Subscribers to TOMCAT-DEV also saw the CVS

Re: JSSE redistribution

2000-12-12 Thread Craig R. McClanahan
Aaron Knauf wrote: Is there any reason why we can't compile tomcat against JSSE and include the jars in the tomcat lib directory as part of the standard binary distribution? This would make it much easier for people to get HTTPS support from tomcat. I believe that the Sun licence allows

[ANNOUNCEMENT] Security Related Updates - Tomcat 3.1.1 and Tomcat 3.2.1

2000-12-12 Thread Craig R. McClanahan
Recent investigations and reports have revealed security vulnerabilities in both Tomcat 3.1 and Tomcat 3.2 final releases. To deal with these problems, the Tomcat team has developed maintenance releases, and recommended actions, for each major version. (Tomcat 4.0 milestone 4 shares one of

Re: Réf. : RE: X509 client certificate

2000-12-13 Thread Craig R. McClanahan
You need to upgrade to at least jakarta-tomcat-4.0-m4 for this to work -- earlier versions returned the JSSE internal object for a certificate, rather than converting it to java.security.cert.X509Certificate as the spec requires. This has been fixed. Craig McClanahan [EMAIL PROTECTED] wrote:

Re: [C2] C2 and Tomcat 4.0 CVS (Class javax/servlet/http/HttpServletRequest violates loader constraints)

2000-12-13 Thread Craig R. McClanahan
"Schmitt, Christian" wrote: Hi all, I had Cocoon 2 and Tomcat 4 (CVS) working for a couple of days, but since yesterday I'm getting a strange error (see subject), and frankly I don't know what's causing it. Anyway, here's the offending XSP page: ?xml version="1.0" encoding="ISO-8859-1"?

[ANNOUNCEMENT] Tomcat 4.0 Milestone 5

2000-12-14 Thread Craig R. McClanahan
The latest milestone release of Tomcat 4.0, milestone 5, has just been made available at: http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-m5/ This release includes two major new areas of functionality (the initial release of a web connector for Apache, and a JNDI naming

Re: [ANNOUNCEMENT] Tomcat 4.0 Milestone 5

2000-12-14 Thread Craig R. McClanahan
GOMEZ Henri wrote: Warning The following files are invalid : http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-m5/src/jaka rta-servletapi-4.0-m5-src.tar http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-m5/src/jaka rta-servletapi-4.0-m5-src.tar.gz The

Re: [tomcat-4.0] building is hard

2000-12-14 Thread Craig R. McClanahan
Punky Tse wrote: Hi, Craig and Pier: Let's fix it! We have a beautiful build tool (Ant) , why can't we have a good build system? Agreed. One of the reasons Tomcat 4 is complex is actually Jon's fault :-). He wanted a way to build just the servlet container portion (Catalina), which

Re: [PROPOSAL] building is easy (was: Re: [tomcat-4.0] building ishard)

2000-12-14 Thread Craig R. McClanahan
See intermixed. Jon Stevens wrote: Hi All, I spent a few hours last night mucking with the build process and found out that the main problem primarily stems from the fact that the Ant build scripts are not written to take advantage of Ant 1.2's new features with regards to setting up the

Re: [ANNOUNCEMENT] Security Related Updates - Tomcat 3.1.1 and Tomcat 3.2.1

2000-12-14 Thread Craig R. McClanahan
GOMEZ Henri wrote: * This release fixes ***only*** the identified security vulnerabilities. It does not address any of the other bugs, or feature requests, related to Tomcat 3.2 final. These issues will be dealt with in future maintenance releases of Tomcat 3.2 as appropriate.

Re: [ANNOUNCEMENT] Security Related Updates - Tomcat 3.1.1 and Tomcat 3.2.1

2000-12-14 Thread Craig R. McClanahan
Gomez Henri wrote: I've asked some days ago about the 'Attic ?'... Sorry, I thought that got answered. The "attic" is CVS's way of dealing with files that are on one branch of a repository, but not another -- or cases where you deleted a file, but you might want to go back to a previously

  1   2   3   4   5   6   7   8   9   10   >