[AOLSERVER] Servlets

2001-08-08 Thread Ali Elhajj

Hello,
   what do I need to do in order to have install a servlet engine on
AOLServer.  Are some aolserver versions more amenable to servlets? And
finally, are there problems/pitfalls one needs to keep in mind when working
with servlets?

Thanks,
Ali



[AOLSERVER] perms

2001-08-08 Thread Patrick Spence

How do I get Aolserver to recognize that a user has been manually updated in
the passwd file on disk without restarting/HUPing the server?   I have
"Skiplocks" set to off in my config file (if its on and I try ns_passwdcheck
it crashes the server hard without a log entry)...

It would be really nice to be able to check this without having to build a
proc to manually process the file each time a request is made and without
the connectivity downtime caused by a server reload...

Thanks



--
 Patrick Spence, Network Administrator
 Information System Dept.
 2401 South 24th Street, Phoenix, AZ  85034
 [EMAIL PROTECTED] - http://www.vitamist.com



Re: [AOLSERVER] perms

2001-08-08 Thread Jerry Asher

At 10:56 AM 8/8/01, you wrote:
>How do I get Aolserver to recognize that a user has been manually updated in
>the passwd file on disk without restarting/HUPing the server?   I have
>"Skiplocks" set to off in my config file (if its on and I try ns_passwdcheck
>it crashes the server hard without a log entry)...
>
>It would be really nice to be able to check this without having to build a
>proc to manually process the file each time a request is made and without
>the connectivity downtime caused by a server reload...
>
>Thanks

I think you will need to create a custom module to do this for you.  There
is no code I am aware of that reloads the files off disk.  Short of
checking on each request, you may consider:

A)  A scheduled proc that checks/reloads every five minutes
B)  A web interface to the passwd file that reloads the file after updating it
C)  A web page/url that shell scripts could use to get the file reloaded
for them:
 in other words if you have a shell script that updates the passwd file for
 you, the shell script could do an http request on something like
/passwd-reload
 to get a tcl script within aol server to reload the passwd file


Jerry
=
Jerry Asher   [EMAIL PROTECTED]
1678 Shattuck Avenue Suite 161Tel: (510) 549-2980
Berkeley, CA 94709Fax: (877) 311-8688



Re: [AOLSERVER] Servlets

2001-08-08 Thread Freddie Mendoza

Long time ago, I wrote a module to interface to Tomcat.
Then someone else wrote another module based on my module and
probably improved it more than I would have  since I did not
have the time to maintain it. I have not heard anything about
servlets on the mailing list lately but I think if you
look at the contributions page for aolserver, you will find them
there.

The problem is that the last module written was probably based
on an old version of Tomcat , JVM and mod_jk. You'll have to check
this for yourself to see if this is still a true statement.

What I have done is just run Apache  running  tomcat on another port.
And wrote some redirection rules to redirect acces
to the servlet engine via aolserver. Might be slower than having
a module access tomcat directly but it's enough for my use.

Simpler than having to fuzz around with modules for AOLSERVER etc.



>
> Hello,
>what do I need to do in order to have install a servlet engine on
> AOLServer.  Are some aolserver versions more amenable to servlets? And
> finally, are there problems/pitfalls one needs to keep in mind when working
> with servlets?
>
> Thanks,
> Ali
>


--
Freddie  Mendoza
[EMAIL PROTECTED]
Search Engine for Cheap Books
http://satori.com/cheapbooks



Re: [AOLSERVER] perms

2001-08-08 Thread Patrick Spence

- Original Message -
From: "Jerry Asher" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 08, 2001 11:03 AM
Subject: Re: [AOLSERVER] perms


> I think you will need to create a custom module to do this for you.  There
> is no code I am aware of that reloads the files off disk.  Short of
> checking on each request, you may consider:
>
> A)  A scheduled proc that checks/reloads every five minutes
> B)  A web interface to the passwd file that reloads the file after
updating it
> C)  A web page/url that shell scripts could use to get the file reloaded
> for them:
>  in other words if you have a shell script that updates the passwd
file for
>  you, the shell script could do an http request on something like
> /passwd-reload
>  to get a tcl script within aol server to reload the passwd file


But no matter which I would have to write a module that reloads it on
command?

--
 Patrick Spence, Network Administrator
 Information System Dept.
 2401 South 24th Street, Phoenix, AZ  85034
 [EMAIL PROTECTED] - http://www.vitamist.com



Re: [AOLSERVER] perms

2001-08-08 Thread Scott Goodwin

I rolled my own in Tcl. It loads a file of usernames/passwords every 15
mins. It stores these in nsv arrays. Pretty simple, and fast enough. I have
a request processor registered at preauth that checks a urlacls file that
contains each ACL'd URL and causes a challenge to be issued based on the
info in it.

Why not use nsperms? Because it didn't fit my needs and was a bit too
restrictive for me. I need to be able to check for a client SSL certificate
first, then failover to username password.

/s.





> At 10:56 AM 8/8/01, you wrote:
> >How do I get Aolserver to recognize that a user has been manually
updated in
> >the passwd file on disk without restarting/HUPing the server?   I have
> >"Skiplocks" set to off in my config file (if its on and I try
ns_passwdcheck
> >it crashes the server hard without a log entry)...
> >
> >It would be really nice to be able to check this without having to build
a
> >proc to manually process the file each time a request is made and without
> >the connectivity downtime caused by a server reload...
> >
> >Thanks
>
> I think you will need to create a custom module to do this for you.  There
> is no code I am aware of that reloads the files off disk.  Short of
> checking on each request, you may consider:
>
> A)  A scheduled proc that checks/reloads every five minutes
> B)  A web interface to the passwd file that reloads the file after
updating it
> C)  A web page/url that shell scripts could use to get the file reloaded
> for them:
>  in other words if you have a shell script that updates the passwd
file for
>  you, the shell script could do an http request on something like
> /passwd-reload
>  to get a tcl script within aol server to reload the passwd file
>
>
> Jerry
> =
> Jerry Asher   [EMAIL PROTECTED]
> 1678 Shattuck Avenue Suite 161Tel: (510) 549-2980
> Berkeley, CA 94709Fax: (877) 311-8688
>
>
>



[AOLSERVER] thread bug or my bad code?

2001-08-08 Thread Nick Kaiho

Hi,

If I run "startThreadTest" , the script below will continue to run until the
server finally buffer overflows in "for {set i 1} {$i < 9} {incr i}  . The
number of times this will execute before crash seems to depend on the system.
I'm running aolserver3.4 (I also checked on 3.3) on some solaris 8  boxes and
my personal linux workstation. Also, i've noticed that the thread Id's are
incrementing with every loop, are they supposed to be re-used?. While this is
running, [ns_info threads] shows that the number of threads are not
increasing, lsof, shows open files are also not increasing, and ps -leaf
shows that server size is not growing. Any clues/suggestions?

-Nick


proc threadtest {i} {
# this proc really doesn't matter
ns_log notice "threadtest: sleeping $i"
after [expr $i * 100]
ns_log notice "done sleeping $i"
}

proc startThreadTest {} {
ns_log notice " script beginning"
for {set i 1} {$i < 9} {incr i} {
set tids($i) [ns_thread begin "threadtest $i"]
}

for {set i 1} {$i < 9} {incr i} {
ns_thread wait $tids($i)
}
ns_log notice "* script complete "
startThreadTest
}



Re: [AOLSERVER] perms

2001-08-08 Thread Patrick Spence

- Original Message -
From: "Scott Goodwin" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 08, 2001 11:11 AM
Subject: Re: [AOLSERVER] perms


> I rolled my own in Tcl. It loads a file of usernames/passwords every 15
> mins. It stores these in nsv arrays. Pretty simple, and fast enough. I
have
> a request processor registered at preauth that checks a urlacls file that
> contains each ACL'd URL and causes a challenge to be issued based on the
> info in it.
>
> Why not use nsperms? Because it didn't fit my needs and was a bit too
> restrictive for me. I need to be able to check for a client SSL
certificate
> first, then failover to username password.
>

It wouldn't be available for public consumption would it?

[sheepish smile]



--
 Patrick Spence, Network Administrator
 Information System Dept.
 2401 South 24th Street, Phoenix, AZ  85034
 [EMAIL PROTECTED] - http://www.vitamist.com



Re: [AOLSERVER] thread bug or my bad code?

2001-08-08 Thread Rusty Brooks

Your code:
> proc startThreadTest {} {
> 
> startThreadTest
> }

startThreadTest calls itself recursively, so you'll eventually run out of
stack space or reach the tcl maximum recursion level.  If you'd like to
avoid that you can do something like

proc startThreadTest {} {

after 10 startThreadTest
}

which if I'm not mistaken will fix your problem.

Or, you can do something like
while 1 {
startThreadTest
}

Rusty

--
Rusty Brooks : http://www.rustybrooks.org/
Spewing wisdom from every orifice
--



Re: [AOLSERVER] perms

2001-08-08 Thread Jerry Asher

>
>But no matter which I would have to write a module that reloads it on
>command?

Yes, but that should be pretty easy.  They are loaded into the system at
system startup by a tcl script, so I imagine all you need to do is cut and
paste portions of that tcl script into your proc.

Also, do consider Scott's comments and consider your actual
requirements.  I use nsperms for somethings and preauth filters for
others.  It's not always what people need, and it can be difficult to setup
correctly.

Jerry
=
Jerry Asher   [EMAIL PROTECTED]
1678 Shattuck Avenue Suite 161Tel: (510) 549-2980
Berkeley, CA 94709Fax: (877) 311-8688



Re: [AOLSERVER] perms

2001-08-08 Thread Patrick Spence

- Original Message -
From: "Scott Goodwin" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 08, 2001 11:11 AM
Subject: Re: [AOLSERVER] perms


Ooooh, found the code in init.tcl that initializes the nsperm module...
going to try it out



Re: [AOLSERVER] thread bug or my bad code?

2001-08-08 Thread Nick Kaiho

Yes, it calls itself recursivly. Am I mistaken that the [ns_thead wait] will
wait until the previouly spawned threads are done before calling itself again?

-Nick



[AOLSERVER] [ aolserver-Support Requests-449240 ] ns_perm question

2001-08-08 Thread Ms. Source Forge

Support Requests item #449240, was opened at 2001-08-08 11:50
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=203152&aid=449240&group_id=3152

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: David Mott (mottman)
Assigned to: Nobody/Anonymous (nobody)
Summary: ns_perm question

Initial Comment:
I have a question about perms.  I have understood that
there is an implicit Deny within perms.  For instance
if there is nothing stated indicating you have access
to a specific link, then you are automatically
denied.  How can this be implemented?  Right now
instead of Denying you, it reasks for your username
and password.  No matter what you put in, it gives a
page indicating an invalid username and password.

thanks
Dave Mott
[EMAIL PROTECTED]


--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=203152&aid=449240&group_id=3152



Re: [AOLSERVER] perms

2001-08-08 Thread Patrick Spence

- Original Message -
From: "Jerry Asher" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 08, 2001 11:25 AM
Subject: Re: [AOLSERVER] perms


> >
> >But no matter which I would have to write a module that reloads it on
> >command?
>
> Yes, but that should be pretty easy.  They are loaded into the system at
> system startup by a tcl script, so I imagine all you need to do is cut and
> paste portions of that tcl script into your proc.
>
> Also, do consider Scott's comments and consider your actual
> requirements.  I use nsperms for somethings and preauth filters for
> others.  It's not always what people need, and it can be difficult to
setup
> correctly.


Yeah, my partner and I just worked up a different way of doing things.. I am
going to use some of the code from the tcl script but load it into a
postgres table instead... and handle authentication from the table instead
of using ns_perm...

--
 Patrick Spence, Network Administrator
 Information System Dept.
 2401 South 24th Street, Phoenix, AZ  85034
 [EMAIL PROTECTED] - http://www.vitamist.com



[AOLSERVER] [ aolserver-Support Requests-449260 ] servlets

2001-08-08 Thread Ms. Source Forge

Support Requests item #449260, was opened at 2001-08-08 12:38
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=203152&aid=449260&group_id=3152

Category: Scripting: Other
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Ali Elhajj (elhajj33)
Assigned to: Nobody/Anonymous (nobody)
Summary: servlets

Initial Comment:
Hello,
  Are there any versions of AOLServer that support
Servlets?  Is there anything special one needs to do
in order to implement servlets (i.e. is support built-
in or does one need to install an additional module?)

Thanks,
Ali



--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=203152&aid=449260&group_id=3152



Re: [AOLSERVER] perms

2001-08-08 Thread Jerry Asher

>Yeah, my partner and I just worked up a different way of doing things.. I am
>going to use some of the code from the tcl script but load it into a
>postgres table instead... and handle authentication from the table instead
>of using ns_perm...

When you get this working, could you post it?

Thanks,


Jerry

=
Jerry Asher   [EMAIL PROTECTED]
1678 Shattuck Avenue Suite 161Tel: (510) 549-2980
Berkeley, CA 94709Fax: (877) 311-8688



Re: [AOLSERVER] perms

2001-08-08 Thread Patrick Spence

- Original Message -
From: "Jerry Asher" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 08, 2001 12:57 PM
Subject: Re: [AOLSERVER] perms


> >Yeah, my partner and I just worked up a different way of doing things.. I
am
> >going to use some of the code from the tcl script but load it into a
> >postgres table instead... and handle authentication from the table
instead
> >of using ns_perm...
>
> When you get this working, could you post it?
>
> Thanks,


Certainly...  what I am working on is as close to live updating as possible
of users for a subscription based website.. we are using a third party to
charge cards and generate the accounts for us, so I have to work around that
difficulty.. but I think we are going to have as close to live as I am going
to need..  and when I get it done I will be glad to post it...  though I
will likely be using Daniel Stasinskis database code that comes in his
NS/Admin replacement code for some of it, so you will need that
(www.scriptkitties.com)

--
 Patrick Spence, Network Administrator
 Information System Dept.
 2401 South 24th Street, Phoenix, AZ  85034
 [EMAIL PROTECTED] - http://www.vitamist.com



[AOLSERVER] [ aolserver-Bugs-425401 ] supplementary groups not set/cleared

2001-08-08 Thread Ms. Source Forge

Bugs item #425401, was opened at 2001-05-19 01:42
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=425401&group_id=3152

Category: Architecture: Server (nsd)
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Anchor Systems Pty Ltd (anchorsystems)
Assigned to: Nobody/Anonymous (nobody)
Summary: supplementary groups not set/cleared

Initial Comment:
nsd/nsmain.c does not drop/set supplementary groups
before changing user ID. This can lead to a security
breach.

Patch attached.


--

Comment By: Cynthia Kiser (ckiser)
Date: 2001-08-08 14:41

Message:
Logged In: YES
user_id=292930

Think that changing user id is missing additional steps. I have AOLServer 3.2 + ad12 
running as user nsadmin
- but the umask for operations done by the server is not the 002 that is nsadmin's 
umask, but instead 022
like root. I tried setting umask by including it in the wrapper script I use to set 
Oracle environment
variables:

#!/bin/sh

umask 002
. /etc/shell-mods.sh
exec `dirname $0`/nsd $*

And operatons like opening a file handle, writing a file, and closing the handle give 
me files with group write
permission. nscp gives me a file without group write. In both cases, the group for the 
file is set correctly (is
the group set by the -g flag, not root's group "other").

--

Comment By: Nobody/Anonymous (nobody)
Date: 2001-07-19 16:52

Message:
Logged In: NO

Yes, all UNIX platforms are affected.

--

Comment By: Kris Rehberg (kriston)
Date: 2001-07-19 07:49

Message:
Logged In: YES
user_id=16427

Which versions of Unix?  All?


--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=425401&group_id=3152



[AOLSERVER] [ aolserver-Bugs-449356 ] shutdownPending is never initialized

2001-08-08 Thread Ms. Source Forge

Bugs item #449356, was opened at 2001-08-08 17:57
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152

Category: None
Group: aolserver3_3
Status: Open
Resolution: None
Priority: 5
Submitted By: Jerry Asher (jerryasher)
Assigned to: Nobody/Anonymous (nobody)
Summary: shutdownPending is never initialized

Initial Comment:
this is broken in aolserver 3.3 and 3.4.

look at nssock/sock.cpp: shutdownPending is never
initialized (presumably to zero.)



--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152



[AOLSERVER] [ aolserver-Bugs-449356 ] shutdownPending is never initialized

2001-08-08 Thread Ms. Source Forge

Bugs item #449356, was opened at 2001-08-08 17:57
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152

Category: None
Group: aolserver3_3
Status: Open
Resolution: None
Priority: 5
Submitted By: Jerry Asher (jerryasher)
Assigned to: Nobody/Anonymous (nobody)
Summary: shutdownPending is never initialized

Initial Comment:
this is broken in aolserver 3.3 and 3.4.

look at nssock/sock.cpp: shutdownPending is never
initialized (presumably to zero.)



--

>Comment By: Jerry Asher (jerryasher)
Date: 2001-08-08 18:01

Message:
Logged In: YES
user_id=20647

and just to be clear SockThread uses it, uninitialized.
(So does SockStop).

--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152



[AOLSERVER] [ aolserver-Bugs-449356 ] shutdownPending is never initialized

2001-08-08 Thread Ms. Source Forge

Bugs item #449356, was opened at 2001-08-08 17:57
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152

Category: None
Group: aolserver3_3
Status: Open
Resolution: None
Priority: 5
Submitted By: Jerry Asher (jerryasher)
Assigned to: Nobody/Anonymous (nobody)
Summary: shutdownPending is never initialized

Initial Comment:
this is broken in aolserver 3.3 and 3.4.

look at nssock/sock.cpp: shutdownPending is never
initialized (presumably to zero.)



--

Comment By: Adam Zell (zellster)
Date: 2001-08-08 18:28

Message:
Logged In: YES
user_id=152749

Unassigned [global|static] variables are implicitly
initialized to zero, which in this case, is the desired effect.

--

Comment By: Jerry Asher (jerryasher)
Date: 2001-08-08 18:01

Message:
Logged In: YES
user_id=20647

and just to be clear SockThread uses it, uninitialized.
(So does SockStop).

--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152



[AOLSERVER] [ aolserver-Bugs-449356 ] shutdownPending is never initialized

2001-08-08 Thread Ms. Source Forge

Bugs item #449356, was opened at 2001-08-08 17:57
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152

Category: None
Group: aolserver3_3
>Status: Closed
>Resolution: Invalid
Priority: 5
Submitted By: Jerry Asher (jerryasher)
Assigned to: Nobody/Anonymous (nobody)
Summary: shutdownPending is never initialized

Initial Comment:
this is broken in aolserver 3.3 and 3.4.

look at nssock/sock.cpp: shutdownPending is never
initialized (presumably to zero.)



--

>Comment By: Jerry Asher (jerryasher)
Date: 2001-08-08 18:38

Message:
Logged In: YES
user_id=20647

Well Adam, that sent me back to my copy of Harbison and
Steele, and yep, you're right of course.



--

Comment By: Adam Zell (zellster)
Date: 2001-08-08 18:28

Message:
Logged In: YES
user_id=152749

Unassigned [global|static] variables are implicitly
initialized to zero, which in this case, is the desired effect.

--

Comment By: Jerry Asher (jerryasher)
Date: 2001-08-08 18:01

Message:
Logged In: YES
user_id=20647

and just to be clear SockThread uses it, uninitialized.
(So does SockStop).

--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=449356&group_id=3152



Re: [AOLSERVER] perms

2001-08-08 Thread Yon Derek

> Certainly...  what I am working on is as close to live
> updating as possible of users for a subscription based
> website.. we are using a third party to charge cards and
> generate the accounts for us, so I have to work around that
> difficulty..

I'm interested in the on-line billing options. Would you care to share
who's doing the credit card charing and your experiences so far? I would
appreciate any real-life info.

Regards,



[AOLSERVER] [ aolserver-Support Requests-449260 ] servlets

2001-08-08 Thread Ms. Source Forge

Support Requests item #449260, was opened at 2001-08-08 12:38
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=203152&aid=449260&group_id=3152

Category: Scripting: Other
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Ali Elhajj (elhajj33)
Assigned to: Nobody/Anonymous (nobody)
Summary: servlets

Initial Comment:
Hello,
  Are there any versions of AOLServer that support
Servlets?  Is there anything special one needs to do
in order to implement servlets (i.e. is support built-
in or does one need to install an additional module?)

Thanks,
Ali



--

Comment By: Yon Derek (yond)
Date: 2001-08-08 21:32

Message:
Logged In: YES
user_id=237811

Take a look at nstomcat module
(http://www.cs.pub.ro/~gaburici/nstomcat/). It should work
with any AOLServer after 3.0

--

You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=203152&aid=449260&group_id=3152



[AOLSERVER] CodeRed web logs

2001-08-08 Thread Rusty Brooks

Hi Guys,

I made a cheezmo little Code Red Tracker at
http://www.rustybrooks.org/html/CodeRed.tcl

The reason I'm posting this here is that I thought it might be fun to make
some kind of AOLServer based CGI-type solution for this.  I could
distribute a CGI-type program, you'd install it on your webserver, and I
could poll it once a day or so to update the number of code red attacks on
my status page, per domain.

If this sounds interesting to anyone, I'd sure like to try it.

Rusty

--
Rusty Brooks : http://www.rustybrooks.org/
Spewing wisdom from every orifice
--