Re: Jasper Exception when using Tomcat 9 but works with Tomcat 5.5

2018-01-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Sean,

On 1/12/18 11:34 AM, Sean Brett wrote:
> In case anyone else has such an issue, it appears that this was all
> caused by the rt.jar in the webapps WEB-INF/lib directory.
> 
> I removed that jar for one of the other webapps exhibiting the same
> issue and it resolved the issue.

I wonder what the problematic classes were, here. Tomcat is supposed
to prohibit loading certain classes from within the web application.
For example, it's not okay for a web application to provide its own
implementation of java.lang.Object or java.lang.String.

There are certain packages which are supposed to be "protected" (not
in the Java sense of the word, but in the "security" sense of the
word) from corruption by (broken) web applications.

Perhaps something is included in the rt.jar file that "shouldn't be"
but Tomcat is allowing it to load.

Could you post the manifest of the rt.jar file? Like this:

$ jar tf rt.jar

It will be a huge list, but that's okay: go ahead and post it, anyway.

- -chris

> On 12/01/2018 14:38, "Sean Brett" 
> wrote:
> 
>> Comments at the bottom.  (Spoiler alert: Good news!)
>> 
>> 
>> On 11/01/2018 22:38, "Christopher Schultz"
>>  wrote:
>> 
>>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
>>> 
>>> Sean,
>>> 
>>> On 1/11/18 11:58 AM, Sean Brett wrote:
 On 11/01/2018 15:48, "Christopher Schultz" 
  wrote:
 
 
> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
> 
> Sean,
> 
> (Thanks for moving to the mailing list; it's a much better
> forum for getting into a protracted discussion. See below
> for more, inline.)
> 
> On 1/10/18 9:08 AM, Sean Brett wrote:
>> I've been tasked with migrating a site from one
>> institution to another. As part of the process we are
>> attempting to update the versions the site uses.
>> 
>> Initially I was asked to use Java 8 with Tomcat 5.5 (on 
>> Linux), which led to issues - not to mention Tomcat 5
>> being 'out of support¹.  I have since tried to deploy the
>> webapps to Tomcat 9 with Java 8. Some of the webapps
>> appear to run fine (and resolve the issues I was having
>> with Tomcat5). However, the main app (and 2
>> similar/smaller web apps) throws a JasperException when I
>> go to the index.jsp - the same web apps deployed to
>> Tomcat 5.5 load without issue.
> 
> Moving to a later Tomcat version is best. We'll help you
> figure out these issues so you can use a current version
> and be better-equipped to stay current into the future.
> 
>> Most of the similar issues I have found have suggested
>> this would be related to the jar files and possibly some
>> sort of conflict. However, the lib structure for tomcat 9
>> is different to tomcat5 and I'm not sure which jars could
>> be causing this. e.g. 
>> https://stackoverflow.com/questions/22552244/tomcat-7-fails-to-co
mpi
>>>
>> 
le
> 
>> 
>>> - - -jsp-
>> 
>> 
> pages
> 
> JAR files might conflict, but that depends upon what you
> have done so far. Easy questions:
> 
> 1. Have you added anything to Tomcat's lib/ directory (that
> would be CATALINA_HOME/lib or CATALINA_BASE/lib -- or both)
> after installing Tomcat 8/9?
 
 Yes, I’ve added some jars.  Some I can’t remember why I’ve
 added them but doubt they’d be connected to the problem.
 Here’s a list of the CATALINA_HOME/lib directory: (the last 4
 being the ones that have been added)
 
 [snip]
 
 -rw-r--r--. 1 tomcat tomcat  313898 Dec 20 13:57
 dom4j-1.6.1.jar -rw-r--r--. 1 tomcat tomcat  802494 Dec 20
 13:57 freemarker-2.3.8.jar -rw-r--r--. 1 tomcat tomcat
 355030 Dec 20 13:57 mail.jar -rw-r--r--. 1 tomcat tomcat
 713037 Dec 20 14:15 postgresql-42.1.4.jar
>>> 
>>> Yup, those look "foreign".
>>> 
>>> If possible, I'd move all of those except for the postgresql
>>> driver into your web application's WEB-INF/lib folder. We can
>>> move them back if absolutely necessary.
>>> 
>>> Is "mail.jar" the JavaMail API/implementation? You'd only need
>>> that in Tomcat's lib/ directory if you were asking Tomcat to
>>> provide mail session via JNDI -- such would appear somewhere in
>>> either your web applications' META-INF/context.xml file or some
>>> file under CATALINA_BASE/conf/*
>>> 
>>> Check your version of JavaMail. There are older versions which
>>> contain vulnerabilities that have been patched. The API is
>>> (AFAICT) 100% backward-compatible, so you should be able to
>>> upgrade to JavaMail.latest without any problems. YMMV.
>>> 
> 2. What JAR files are bundled with your application in 
> WEB-INF/lib ?
 
 -rw-r-. 1 root root   97703 Jan 11 15:05 servlet-api.jar
>>> 
>>> Remove that one. Tomcat should refuse to load it, but you
>>> should remove it 

Re: Jasper Exception when using Tomcat 9 but works with Tomcat 5.5

2018-01-12 Thread Sean Brett
In case anyone else has such an issue, it appears that this was all caused
by the rt.jar in the webapps WEB-INF/lib directory.

I removed that jar for one of the other webapps exhibiting the same issue
and it resolved the issue.



On 12/01/2018 14:38, "Sean Brett"  wrote:

>Comments at the bottom.  (Spoiler alert: Good news!)
>
>
>On 11/01/2018 22:38, "Christopher Schultz" 
>wrote:
>
>>-BEGIN PGP SIGNED MESSAGE-
>>Hash: SHA256
>>
>>Sean,
>>
>>On 1/11/18 11:58 AM, Sean Brett wrote:
>>> On 11/01/2018 15:48, "Christopher Schultz"
>>>  wrote:
>>> 
>>> 
 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
 
 Sean,
 
 (Thanks for moving to the mailing list; it's a much better forum
 for getting into a protracted discussion. See below for more,
 inline.)
 
 On 1/10/18 9:08 AM, Sean Brett wrote:
> I've been tasked with migrating a site from one institution to
> another. As part of the process we are attempting to update
> the versions the site uses.
> 
> Initially I was asked to use Java 8 with Tomcat 5.5 (on
> Linux), which led to issues - not to mention Tomcat 5 being
> 'out of support¹.  I have since tried to deploy the webapps to
> Tomcat 9 with Java 8. Some of the webapps appear to run fine
> (and resolve the issues I was having with Tomcat5). However,
> the main app (and 2 similar/smaller web apps) throws a
> JasperException when I go to the index.jsp - the same web apps
> deployed to Tomcat 5.5 load without issue.
 
 Moving to a later Tomcat version is best. We'll help you figure
 out these issues so you can use a current version and be
 better-equipped to stay current into the future.
 
> Most of the similar issues I have found have suggested this
> would be related to the jar files and possibly some sort of
> conflict. However, the lib structure for tomcat 9 is different
> to tomcat5 and I'm not sure which jars could be causing this.
> e.g. 
> https://stackoverflow.com/questions/22552244/tomcat-7-fails-to-compi
>>le

> 
>>- - -jsp-
> 
> 
 pages
 
 JAR files might conflict, but that depends upon what you have
 done so far. Easy questions:
 
 1. Have you added anything to Tomcat's lib/ directory (that would
 be CATALINA_HOME/lib or CATALINA_BASE/lib -- or both) after
 installing Tomcat 8/9?
>>> 
>>> Yes, I’ve added some jars.  Some I can’t remember why I’ve added
>>> them but doubt they’d be connected to the problem.  Here’s a list
>>> of the CATALINA_HOME/lib directory: (the last 4 being the ones that
>>> have been added)
>>> 
>>> [snip]
>>> 
>>> -rw-r--r--. 1 tomcat tomcat  313898 Dec 20 13:57 dom4j-1.6.1.jar
>>> -rw-r--r--. 1 tomcat tomcat  802494 Dec 20 13:57
>>> freemarker-2.3.8.jar -rw-r--r--. 1 tomcat tomcat  355030 Dec 20
>>> 13:57 mail.jar -rw-r--r--. 1 tomcat tomcat  713037 Dec 20 14:15
>>> postgresql-42.1.4.jar
>>
>>Yup, those look "foreign".
>>
>>If possible, I'd move all of those except for the postgresql driver
>>into your web application's WEB-INF/lib folder. We can move them back
>>if absolutely necessary.
>>
>>Is "mail.jar" the JavaMail API/implementation? You'd only need that in
>>Tomcat's lib/ directory if you were asking Tomcat to provide mail
>>session via JNDI -- such would appear somewhere in either your web
>>applications' META-INF/context.xml file or some file under
>>CATALINA_BASE/conf/*
>>
>>Check your version of JavaMail. There are older versions which contain
>>vulnerabilities that have been patched. The API is (AFAICT) 100%
>>backward-compatible, so you should be able to upgrade to
>>JavaMail.latest without any problems. YMMV.
>>
 2. What JAR files are bundled with your application in
 WEB-INF/lib ?
>>> 
>>> -rw-r-. 1 root root   97703 Jan 11 15:05 servlet-api.jar
>>
>>Remove that one. Tomcat should refuse to load it, but you should
>>remove it anyway.
>>
>>> -rw-r-. 1 root root 8356134 Jan 11 15:05 rt.jar
>>
>>Is that the Java JDK's runtime library? If so, remove that as well.
>>Tomcat should refuse to load classes over-top of the standard java.*,
>>javax.*, and a few other top-level packages but it's always possible
>>something might sneak in there and confuse everything.
>>
>>> -rw-r-. 1 root root  474746 Jan 11 15:05
>>> postgresql-8.3-603.jdbc4.jar> -rw-r-. 1 root root  355030 Jan
>>> 11 15:05 mail.jar
>>
>>If you have either (or both) of these in Tomcat's CATALINA_BASE/lib or
>>CATALINA_HOME/lib directories, you'll want to remove them from here.
>>
>>> -rw-r-. 1 root root  352668 Jan 11 15:05 log4j-1.2.8.jar
>>
>>Ok.
>>
>>> -rw-r-. 1 root root   55008 Jan 11 15:05 local-ldap-0.0.1.jar
>>> -rw-r-. 1 root root   38114 Jan 11 15:05 ldap-src-0.0.1.jar
>>> -rw-r-. 1 root root   38668 Jan 11 15:05 ldap.jar -rw-r-. 1
>>> root root   55827 Jan 11 15:05 ldap-0.0.1.jar
>>

Re: Jasper Exception when using Tomcat 9 but works with Tomcat 5.5

2018-01-12 Thread Sean Brett
Comments at the bottom.  (Spoiler alert: Good news!)


On 11/01/2018 22:38, "Christopher Schultz" 
wrote:

>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA256
>
>Sean,
>
>On 1/11/18 11:58 AM, Sean Brett wrote:
>> On 11/01/2018 15:48, "Christopher Schultz"
>>  wrote:
>> 
>> 
>>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
>>> 
>>> Sean,
>>> 
>>> (Thanks for moving to the mailing list; it's a much better forum
>>> for getting into a protracted discussion. See below for more,
>>> inline.)
>>> 
>>> On 1/10/18 9:08 AM, Sean Brett wrote:
 I've been tasked with migrating a site from one institution to
 another. As part of the process we are attempting to update
 the versions the site uses.
 
 Initially I was asked to use Java 8 with Tomcat 5.5 (on
 Linux), which led to issues - not to mention Tomcat 5 being
 'out of support¹.  I have since tried to deploy the webapps to
 Tomcat 9 with Java 8. Some of the webapps appear to run fine
 (and resolve the issues I was having with Tomcat5). However,
 the main app (and 2 similar/smaller web apps) throws a
 JasperException when I go to the index.jsp - the same web apps
 deployed to Tomcat 5.5 load without issue.
>>> 
>>> Moving to a later Tomcat version is best. We'll help you figure
>>> out these issues so you can use a current version and be
>>> better-equipped to stay current into the future.
>>> 
 Most of the similar issues I have found have suggested this
 would be related to the jar files and possibly some sort of
 conflict. However, the lib structure for tomcat 9 is different
 to tomcat5 and I'm not sure which jars could be causing this.
 e.g. 
 https://stackoverflow.com/questions/22552244/tomcat-7-fails-to-compi
>le
>>>
 
>- - -jsp-
 
 
>>> pages
>>> 
>>> JAR files might conflict, but that depends upon what you have
>>> done so far. Easy questions:
>>> 
>>> 1. Have you added anything to Tomcat's lib/ directory (that would
>>> be CATALINA_HOME/lib or CATALINA_BASE/lib -- or both) after
>>> installing Tomcat 8/9?
>> 
>> Yes, I’ve added some jars.  Some I can’t remember why I’ve added
>> them but doubt they’d be connected to the problem.  Here’s a list
>> of the CATALINA_HOME/lib directory: (the last 4 being the ones that
>> have been added)
>> 
>> [snip]
>> 
>> -rw-r--r--. 1 tomcat tomcat  313898 Dec 20 13:57 dom4j-1.6.1.jar
>> -rw-r--r--. 1 tomcat tomcat  802494 Dec 20 13:57
>> freemarker-2.3.8.jar -rw-r--r--. 1 tomcat tomcat  355030 Dec 20
>> 13:57 mail.jar -rw-r--r--. 1 tomcat tomcat  713037 Dec 20 14:15
>> postgresql-42.1.4.jar
>
>Yup, those look "foreign".
>
>If possible, I'd move all of those except for the postgresql driver
>into your web application's WEB-INF/lib folder. We can move them back
>if absolutely necessary.
>
>Is "mail.jar" the JavaMail API/implementation? You'd only need that in
>Tomcat's lib/ directory if you were asking Tomcat to provide mail
>session via JNDI -- such would appear somewhere in either your web
>applications' META-INF/context.xml file or some file under
>CATALINA_BASE/conf/*
>
>Check your version of JavaMail. There are older versions which contain
>vulnerabilities that have been patched. The API is (AFAICT) 100%
>backward-compatible, so you should be able to upgrade to
>JavaMail.latest without any problems. YMMV.
>
>>> 2. What JAR files are bundled with your application in
>>> WEB-INF/lib ?
>> 
>> -rw-r-. 1 root root   97703 Jan 11 15:05 servlet-api.jar
>
>Remove that one. Tomcat should refuse to load it, but you should
>remove it anyway.
>
>> -rw-r-. 1 root root 8356134 Jan 11 15:05 rt.jar
>
>Is that the Java JDK's runtime library? If so, remove that as well.
>Tomcat should refuse to load classes over-top of the standard java.*,
>javax.*, and a few other top-level packages but it's always possible
>something might sneak in there and confuse everything.
>
>> -rw-r-. 1 root root  474746 Jan 11 15:05
>> postgresql-8.3-603.jdbc4.jar> -rw-r-. 1 root root  355030 Jan
>> 11 15:05 mail.jar
>
>If you have either (or both) of these in Tomcat's CATALINA_BASE/lib or
>CATALINA_HOME/lib directories, you'll want to remove them from here.
>
>> -rw-r-. 1 root root  352668 Jan 11 15:05 log4j-1.2.8.jar
>
>Ok.
>
>> -rw-r-. 1 root root   55008 Jan 11 15:05 local-ldap-0.0.1.jar
>> -rw-r-. 1 root root   38114 Jan 11 15:05 ldap-src-0.0.1.jar
>> -rw-r-. 1 root root   38668 Jan 11 15:05 ldap.jar -rw-r-. 1
>> root root   55827 Jan 11 15:05 ldap-0.0.1.jar
>
>Hmm. Does your application use LDAP directly?
>
>> -rw-r-. 1 root root  146718 Jan 11 15:05 jdom.jar -rw-r-. 1
>> root root  173211 Jan 11 15:05 IonoMap.jar -rw-r-. 1 root root
>> 457002 Jan 11 15:05 ibmjndi.jar -rw-r-. 1 root root   38015 Jan
>> 11 15:05 commons-logging-1.0.4.jar -rw-r-. 1 root root   87776
>> Jan 11 15:05 commons-io-1.3.2.jar -rw-r-. 1 root root   22379
>> Jan 11 15:05 

Re: Jasper Exception when using Tomcat 9 but works with Tomcat 5.5

2018-01-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Sean,

On 1/11/18 11:58 AM, Sean Brett wrote:
> On 11/01/2018 15:48, "Christopher Schultz"
>  wrote:
> 
> 
>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
>> 
>> Sean,
>> 
>> (Thanks for moving to the mailing list; it's a much better forum
>> for getting into a protracted discussion. See below for more,
>> inline.)
>> 
>> On 1/10/18 9:08 AM, Sean Brett wrote:
>>> I've been tasked with migrating a site from one institution to 
>>> another. As part of the process we are attempting to update
>>> the versions the site uses.
>>> 
>>> Initially I was asked to use Java 8 with Tomcat 5.5 (on
>>> Linux), which led to issues - not to mention Tomcat 5 being
>>> 'out of support¹.  I have since tried to deploy the webapps to
>>> Tomcat 9 with Java 8. Some of the webapps appear to run fine
>>> (and resolve the issues I was having with Tomcat5). However,
>>> the main app (and 2 similar/smaller web apps) throws a
>>> JasperException when I go to the index.jsp - the same web apps
>>> deployed to Tomcat 5.5 load without issue.
>> 
>> Moving to a later Tomcat version is best. We'll help you figure
>> out these issues so you can use a current version and be
>> better-equipped to stay current into the future.
>> 
>>> Most of the similar issues I have found have suggested this
>>> would be related to the jar files and possibly some sort of
>>> conflict. However, the lib structure for tomcat 9 is different
>>> to tomcat5 and I'm not sure which jars could be causing this.
>>> e.g. 
>>> https://stackoverflow.com/questions/22552244/tomcat-7-fails-to-compi
le
>>
>>> 
- - -jsp-
>>> 
>>> 
>> pages
>> 
>> JAR files might conflict, but that depends upon what you have
>> done so far. Easy questions:
>> 
>> 1. Have you added anything to Tomcat's lib/ directory (that would
>> be CATALINA_HOME/lib or CATALINA_BASE/lib -- or both) after
>> installing Tomcat 8/9?
> 
> Yes, I’ve added some jars.  Some I can’t remember why I’ve added
> them but doubt they’d be connected to the problem.  Here’s a list
> of the CATALINA_HOME/lib directory: (the last 4 being the ones that
> have been added)
> 
> [snip]
> 
> -rw-r--r--. 1 tomcat tomcat  313898 Dec 20 13:57 dom4j-1.6.1.jar 
> -rw-r--r--. 1 tomcat tomcat  802494 Dec 20 13:57
> freemarker-2.3.8.jar -rw-r--r--. 1 tomcat tomcat  355030 Dec 20
> 13:57 mail.jar -rw-r--r--. 1 tomcat tomcat  713037 Dec 20 14:15
> postgresql-42.1.4.jar

Yup, those look "foreign".

If possible, I'd move all of those except for the postgresql driver
into your web application's WEB-INF/lib folder. We can move them back
if absolutely necessary.

Is "mail.jar" the JavaMail API/implementation? You'd only need that in
Tomcat's lib/ directory if you were asking Tomcat to provide mail
session via JNDI -- such would appear somewhere in either your web
applications' META-INF/context.xml file or some file under
CATALINA_BASE/conf/*

Check your version of JavaMail. There are older versions which contain
vulnerabilities that have been patched. The API is (AFAICT) 100%
backward-compatible, so you should be able to upgrade to
JavaMail.latest without any problems. YMMV.

>> 2. What JAR files are bundled with your application in
>> WEB-INF/lib ?
> 
> -rw-r-. 1 root root   97703 Jan 11 15:05 servlet-api.jar

Remove that one. Tomcat should refuse to load it, but you should
remove it anyway.

> -rw-r-. 1 root root 8356134 Jan 11 15:05 rt.jar

Is that the Java JDK's runtime library? If so, remove that as well.
Tomcat should refuse to load classes over-top of the standard java.*,
javax.*, and a few other top-level packages but it's always possible
something might sneak in there and confuse everything.

> -rw-r-. 1 root root  474746 Jan 11 15:05
> postgresql-8.3-603.jdbc4.jar> -rw-r-. 1 root root  355030 Jan
> 11 15:05 mail.jar

If you have either (or both) of these in Tomcat's CATALINA_BASE/lib or
CATALINA_HOME/lib directories, you'll want to remove them from here.

> -rw-r-. 1 root root  352668 Jan 11 15:05 log4j-1.2.8.jar

Ok.

> -rw-r-. 1 root root   55008 Jan 11 15:05 local-ldap-0.0.1.jar 
> -rw-r-. 1 root root   38114 Jan 11 15:05 ldap-src-0.0.1.jar 
> -rw-r-. 1 root root   38668 Jan 11 15:05 ldap.jar -rw-r-. 1
> root root   55827 Jan 11 15:05 ldap-0.0.1.jar

Hmm. Does your application use LDAP directly?

> -rw-r-. 1 root root  146718 Jan 11 15:05 jdom.jar -rw-r-. 1
> root root  173211 Jan 11 15:05 IonoMap.jar -rw-r-. 1 root root
> 457002 Jan 11 15:05 ibmjndi.jar -rw-r-. 1 root root   38015 Jan
> 11 15:05 commons-logging-1.0.4.jar -rw-r-. 1 root root   87776
> Jan 11 15:05 commons-io-1.3.2.jar -rw-r-. 1 root root   22379
> Jan 11 15:05 commons-fileupload.jar -rw-r-. 1 root root   57779
> Jan 11 15:05 commons-fileupload-1.2.1.jar -rw-r-. 1 root root
> 559366 Jan 11 15:05 commons-collections-3.1.jar -rw-r-. 1 root
> root   58735 Jan 11 15:05 common-piims-src.jar -rw-r-. 1 root
> root  

Re: Jasper Exception when using Tomcat 9 but works with Tomcat 5.5

2018-01-11 Thread Sean Brett
Thanks for the input Chris, I’ve responded inline...

On 11/01/2018 15:48, "Christopher Schultz" 
wrote:


>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA256
>
>Sean,
>
>(Thanks for moving to the mailing list; it's a much better forum for
>getting into a protracted discussion. See below for more, inline.)
>
>On 1/10/18 9:08 AM, Sean Brett wrote:
>> I've been tasked with migrating a site from one institution to
>> another. As part of the process we are attempting to update the
>> versions the site uses.
>> 
>> Initially I was asked to use Java 8 with Tomcat 5.5 (on Linux),
>> which led to issues - not to mention Tomcat 5 being 'out of
>> support¹.  I have since tried to deploy the webapps to Tomcat 9
>> with Java 8. Some of the webapps appear to run fine (and resolve
>> the issues I was having with Tomcat5). However, the main app (and 2
>> similar/smaller web apps) throws a JasperException when I go to the
>> index.jsp - the same web apps deployed to Tomcat 5.5 load without
>> issue.
>
>Moving to a later Tomcat version is best. We'll help you figure out
>these issues so you can use a current version and be better-equipped
>to stay current into the future.
>
>> Most of the similar issues I have found have suggested this would
>> be related to the jar files and possibly some sort of conflict.
>> However, the lib structure for tomcat 9 is different to tomcat5 and
>> I'm not sure which jars could be causing this. e.g.
>> https://stackoverflow.com/questions/22552244/tomcat-7-fails-to-compile
>- -jsp-
>>
>> 
>pages
>
>JAR files might conflict, but that depends upon what you have done so
>far. Easy questions:
>
>1. Have you added anything to Tomcat's lib/ directory (that would be
>CATALINA_HOME/lib or CATALINA_BASE/lib -- or both) after installing
>Tomcat 8/9?

Yes, I’ve added some jars.  Some I can’t remember why I’ve added them but
doubt they’d be connected to the problem.  Here’s a list of the
CATALINA_HOME/lib directory:
(the last 4 being the ones that have been added)

-rw-r-. 1 tomcat tomcat   36940 Sep 27 18:32 websocket-api.jar
-rw-r-. 1 tomcat tomcat  216799 Sep 27 18:32 tomcat-websocket.jar
-rw-r-. 1 tomcat tomcat  203098 Sep 27 18:32 tomcat-util-scan.jar
-rw-r-. 1 tomcat tomcat  132773 Sep 27 18:32 tomcat-util.jar
-rw-r-. 1 tomcat tomcat   34540 Sep 27 18:32 tomcat-jni.jar
-rw-r-. 1 tomcat tomcat  144927 Sep 27 18:32 tomcat-jdbc.jar
-rw-r-. 1 tomcat tomcat   42274 Sep 27 18:32 tomcat-i18n-ja.jar
-rw-r-. 1 tomcat tomcat   39391 Sep 27 18:32 tomcat-i18n-fr.jar
-rw-r-. 1 tomcat tomcat   65452 Sep 27 18:32 tomcat-i18n-es.jar
-rw-r-. 1 tomcat tomcat  251863 Sep 27 18:32 tomcat-dbcp.jar
-rw-r-. 1 tomcat tomcat  792447 Sep 27 18:32 tomcat-coyote.jar
-rw-r-. 1 tomcat tomcat   10643 Sep 27 18:32 tomcat-api.jar
-rw-r-. 1 tomcat tomcat  277812 Sep 27 18:32 servlet-api.jar
-rw-r-. 1 tomcat tomcat   61763 Sep 27 18:32 jsp-api.jar
-rw-r-. 1 tomcat tomcat   26859 Sep 27 18:32 jaspic-api.jar
-rw-r-. 1 tomcat tomcat  547928 Sep 27 18:32 jasper.jar
-rw-r-. 1 tomcat tomcat  163671 Sep 27 18:32 jasper-el.jar
-rw-r-. 1 tomcat tomcat   81575 Sep 27 18:32 el-api.jar
-rw-r-. 1 tomcat tomcat 2450404 Sep 27 18:32 ecj-4.6.3.jar
-rw-r-. 1 tomcat tomcat  285214 Sep 27 18:32 catalina-tribes.jar
-rw-r-. 1 tomcat tomcat   75123 Sep 27 18:32 catalina-storeconfig.jar
-rw-r-. 1 tomcat tomcat 1607874 Sep 27 18:32 catalina.jar
-rw-r-. 1 tomcat tomcat  119105 Sep 27 18:32 catalina-ha.jar
-rw-r-. 1 tomcat tomcat   54233 Sep 27 18:32 catalina-ant.jar
-rw-r-. 1 tomcat tomcat   18253 Sep 27 18:32 annotations-api.jar
-rw-r--r--. 1 tomcat tomcat  313898 Dec 20 13:57 dom4j-1.6.1.jar
-rw-r--r--. 1 tomcat tomcat  802494 Dec 20 13:57 freemarker-2.3.8.jar
-rw-r--r--. 1 tomcat tomcat  355030 Dec 20 13:57 mail.jar
-rw-r--r--. 1 tomcat tomcat  713037 Dec 20 14:15 postgresql-42.1.4.jar



>
>2. What JAR files are bundled with your application in WEB-INF/lib ?

-rw-r-. 1 root root   97703 Jan 11 15:05 servlet-api.jar
-rw-r-. 1 root root 8356134 Jan 11 15:05 rt.jar
-rw-r-. 1 root root  474746 Jan 11 15:05 postgresql-8.3-603.jdbc4.jar
-rw-r-. 1 root root  355030 Jan 11 15:05 mail.jar
-rw-r-. 1 root root  352668 Jan 11 15:05 log4j-1.2.8.jar
-rw-r-. 1 root root   55008 Jan 11 15:05 local-ldap-0.0.1.jar
-rw-r-. 1 root root   38114 Jan 11 15:05 ldap-src-0.0.1.jar
-rw-r-. 1 root root   38668 Jan 11 15:05 ldap.jar
-rw-r-. 1 root root   55827 Jan 11 15:05 ldap-0.0.1.jar
-rw-r-. 1 root root  146718 Jan 11 15:05 jdom.jar
-rw-r-. 1 root root  173211 Jan 11 15:05 IonoMap.jar
-rw-r-. 1 root root  457002 Jan 11 15:05 ibmjndi.jar
-rw-r-. 1 root root   38015 Jan 11 15:05 commons-logging-1.0.4.jar
-rw-r-. 1 root root   87776 Jan 11 15:05 commons-io-1.3.2.jar
-rw-r-. 1 root root   22379 Jan 11 15:05 commons-fileupload.jar
-rw-r-. 1 root root   57779 Jan 11 15:05 

Re: Jasper Exception when using Tomcat 9 but works with Tomcat 5.5

2018-01-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Sean,

(Thanks for moving to the mailing list; it's a much better forum for
getting into a protracted discussion. See below for more, inline.)

On 1/10/18 9:08 AM, Sean Brett wrote:
> I've been tasked with migrating a site from one institution to
> another. As part of the process we are attempting to update the
> versions the site uses.
> 
> Initially I was asked to use Java 8 with Tomcat 5.5 (on Linux),
> which led to issues - not to mention Tomcat 5 being 'out of
> support¹.  I have since tried to deploy the webapps to Tomcat 9
> with Java 8. Some of the webapps appear to run fine (and resolve
> the issues I was having with Tomcat5). However, the main app (and 2
> similar/smaller web apps) throws a JasperException when I go to the
> index.jsp - the same web apps deployed to Tomcat 5.5 load without
> issue.

Moving to a later Tomcat version is best. We'll help you figure out
these issues so you can use a current version and be better-equipped
to stay current into the future.

> Most of the similar issues I have found have suggested this would
> be related to the jar files and possibly some sort of conflict.
> However, the lib structure for tomcat 9 is different to tomcat5 and
> I'm not sure which jars could be causing this. e.g. 
> https://stackoverflow.com/questions/22552244/tomcat-7-fails-to-compile
- -jsp-
>
> 
pages

JAR files might conflict, but that depends upon what you have done so
far. Easy questions:

1. Have you added anything to Tomcat's lib/ directory (that would be
CATALINA_HOME/lib or CATALINA_BASE/lib -- or both) after installing
Tomcat 8/9?

2. What JAR files are bundled with your application in WEB-INF/lib ?

> I've also tried changing the index.jsp into a simpler (HelloWorld)
> form - removing any code. And tried deleting the 'work' directory
> before restarting Tomcat 
> (http://grokbase.com/t/tomcat/users/072v2kf60h/java-permission-denied-
error
>
> 
- -in-tomcat).  In both cases the exception is still thrown.

Can you post the full text of HelloWorld.jsp?

I'm wondering if you have some odd syntax or are expecting to use a
"custom base JSP servlet class" or something like that which is no
longer compatible with Tomcat's current JSP servlet. If so, we'll try
to figure out why the custom code was necessary and make arrangements
to replace it.

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=W9Le
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org