mod_jk2 allows for AF_UNIX connections to talk to Tomcat4.
(http://jakarta.apache.org/builds/jakarta-tomcat-connectors/jk2/doc/jk2/conf
igwebex.html)
So lets say we specify /tmp/jk2.socket as the AF_UNIX file socket for
communication
between mod_jk2 and Tomcat4. We can tell mod_jk2 in the
I have tried asking for this before (in vain)..but anyway ...
Can Tomcat listen (for AJP13 requests) on a file socket (AF_UNIX)
instead of the regular AF_INET socket ?
mod_jk2 allows configuration to specify the socket file.
However no documentation (or anything in the Tomcat source code)
Given that _anybody_ on the local machine could simply telnet to the
port and issue a SHUTDOWN command. Isnt the current shutdown mechanism in
Tomcat 4 a security issue ?
-- Roshan
-
To unsubscribe, e-mail: [EMAIL
Hi Remy,
Are these security bugs existing in all versions of Tomcat 4
prior to 4.1.27 ? Or was there a version of Tomcat where these
were introduced ? I couldnt find the reference to these security
issues on the tomcat web site section mentioning the 4.1.27 release.
This information will be very
mod_jk2 creates this error long entry each time apache starts up...
[Mon Dec 15 15:20:17 2003] [error] mod_jk child init 1 0
The relevant code printing the error is in function jk2_child_init() in
mod_jk2.c
static void jk2_child_init(apr_pool_t *pconf, server_rec *s)
{
//...
if(
Wonder why questions on jk2 often never get a response.
Are the relevant developers not active on this list ?
Even cc-ing the developers who are credited in the relevant source code
doesnt help !!
--Roshan
-Original Message-
From: NAIK,ROSHAN (HP-Cupertino,ex1) [mailto:[EMAIL
Tomcat is a child process (ProcessID=0) to HTTP Server
What is your specific concern?
-Martin
My specific concern is mentioned in the message below.. i have pasted
the relevant sections of code there.
--Roshan
-Original Message-
From: NAIK,ROSHAN (HP-Cupertino,ex1) [mailto
