Serious security problem with mod_jk?

2008-12-16 Thread Payne, George (ghp5h)
This is a problem I've seen reported on very old versions of mod_jk, but it seems (apparently) to have a new life in 1.2.27 and possibly other recent versions. If a user puts a double slash (http://mysite.com//myapp/myjsp.jsp) instead of a single slash in a url, apache does not recognize it as

RE: Serious security problem with mod_jk?

2008-12-17 Thread Payne, George (ghp5h)
. Maybe I'm missing something, it wouldn't be the first time... George -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Tuesday, December 16, 2008 4:42 PM To: Tomcat Users List Subject: Re: Serious security problem with mod_jk? Payne, George (ghp5h) wrote

RE: Serious security problem with mod_jk?

2008-12-18 Thread Payne, George (ghp5h)
syntax. Thanks, George Payne -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, December 17, 2008 5:52 PM To: Tomcat Users List Subject: Re: Serious security problem with mod_jk? On 16.12.2008 18:53, Payne, George (ghp5h) wrote: This is a problem I've

JNDIRealm and roleNested

2009-07-31 Thread Payne, George (ghp5h)
I've discovered that there is apparently a fairly recent patch (3 mos old now) to JNDIRealm to allow searches for nested ldap groups, which sounds like a functionality I very much need to be able use my domino server's ldap. My question, for someone wiser in the ways of tomcat releases, is how

FW: JNDIRealm and roleNested

2009-08-01 Thread Payne, George (ghp5h)
})) I can't get this to work. I suspect it's illegal/unsupported, but I'm not sure. From: Payne, George (ghp5h) Sent: Friday, July 31, 2009 9:17 AM To: users@tomcat.apache.org Subject: JNDIRealm and roleNested I’ve discovered that there is apparently a fairly

RE: FW: JNDIRealm and roleNested

2009-08-05 Thread Payne, George (ghp5h)
, August 03, 2009 12:36 PM To: Tomcat Users List Subject: Re: FW: JNDIRealm and roleNested Mark Thomas wrote: --- Original Message --- From: Payne, George (ghp5h) gh...@eservices.virginia.edu I still don't know the answer to the questions I originally posed below, if anyone can help

Can a connector be nested in a context?

2009-08-10 Thread Payne, George (ghp5h)
I've been unable to get this to work (nesting a connector in a context), though I cannot find a definitive answer about whether it SHOULD be possible or not. The docs say the container element is usually an Engine, but don't say if the other options include a context or not. The purpose to

RE: Can a connector be nested in a context?

2009-08-11 Thread Payne, George (ghp5h)
be nested in a context? Payne, George (ghp5h) wrote: I've been unable to get this to work (nesting a connector in a context), though I cannot find a definitive answer about whether it SHOULD be possible or not. The docs say the container element is usually an Engine, but don't say if the other