Re: [AOLSERVER] Ns_ModuleInit in nspostgres.so
Hi, That's because nspostgres.so is a database driver and not a module. See the docs on how to configure a database driver. There should be an example in there for how to load it. Kris --- Mohan Pakkurti [EMAIL PROTECTED] wrote: hi! I get the following error when trying to start aolserver. Using aolserver-4.0-beta3.src / sparc solaris 8 [20/Mar/2003:09:10:15][16284.1][-main-] Notice: nsmain: AOLserver/4.0 starting [20/Mar/2003:09:10:15][16284.1][-main-] Notice: nsmain: security info: uid=102, euid=102, gid=103, egid=103 [20/Mar/2003:09:10:15][16284.1][-main-] Notice: nsmain: max files: FD_SETSIZE = 1024, rl_cur = 1024, rl_max = 1024 [20/Mar/2003:09:10:15][16284.1][-main-] Notice: adp[dotlrn]: mapped /*.adp [20/Mar/2003:09:10:15][16284.1][-main-] Notice: adp[dotlrn]: mapped /*.u_adp [20/Mar/2003:09:10:15][16284.1][-main-] Notice: adp[dotlrn]: mapped /*.gb_adp [20/Mar/2003:09:10:15][16284.1][-main-] Notice: adp[dotlrn]: mapped /*.sjis_adp [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nssock.so' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nslog.so' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: nslog: opened '/space/local/aolserver4/servers/dotlrn/modules/nslog/access.log' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: nslog: opened '/space/local/aolserver4/servers/dotlrn/modules/nslog/access.log' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nssha1.so' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nscache.so' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: nscache module version 1.5 server: dotlrn [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nsrewrite.so' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nsxml.so' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: nsxml module starting [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nsdb.so' [20/Mar/2003:09:10:15][16284.1][-main-] Notice: modload: loading '/usr/local/aolserver4/bin/nspostgres.so' [20/Mar/2003:09:10:15][16284.1][-main-] Warning: modload: could not find Ns_ModuleInit in /usr/local/aolserver4/bin/nspostgres.so [20/Mar/2003:09:10:15][16284.1][-main-] Fatal: modload: failed to load module '/usr/local/aolserver4/bin/nspostgres.so' The output from ldd nspostgres.so $ldd bin/nspostgres.so libpq.so.2 =/usr/local/pgsql/lib/libpq.so.2 libnsthread.so = /usr/local/aolserver4//lib/libnsthread.so libnsd.so = /usr/local/aolserver4//lib/libnsd.so libtcl8.4.so = /usr/local/aolserver4//lib/libtcl8.4.so libdl.so.1 =/lib/libdl.so.1 libsocket.so.1 =/lib/libsocket.so.1 libnsl.so.1 = /lib/libnsl.so.1 libpthread.so.1 = /lib/libpthread.so.1 libm.so.1 = /lib/libm.so.1 librt.so.1 =/lib/librt.so.1 libresolv.so.2 =/lib/libresolv.so.2 libc.so.1 = /lib/libc.so.1 libmp.so.2 =/lib/libmp.so.2 libaio.so.1 = /lib/libaio.so.1 libthread.so.1 =/lib/libthread.so.1 /usr/platform/SUNW,Ultra-60/lib/libc_psr.so.1 Can someone give me suggestions about what could be wrong!?! Thanks /Mohan -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list: http://www.aolserver.com/listserv.html List information and options: http://listserv.aol.com/ -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list: http://www.aolserver.com/listserv.html List information and options: http://listserv.aol.com/
Re: [AOLSERVER] Netscape-Brew
I heard this was some fallout from the death of AOLSearch technology. All that was AOLSearch now ties directly into Google now. Kris --- Alexander Leykekh [EMAIL PROTECTED] wrote: On Tue, 18 Mar 2003 15:29:48 +, Oliver Bird [EMAIL PROTECTED] wrote: Netscape-Brew is a platform based off NES.. Brew, aka NPE, is no longer paired with NES. It is a Web/application server in its own right. -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list: http://www.aolserver.com/listserv.html List information and options: http://listserv.aol.com/ -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list: http://www.aolserver.com/listserv.html List information and options: http://listserv.aol.com/
Re: [AOLSERVER] Origins of the SQL features of the AOLServer API?
Hi, As Bas mentions, the NaviServer database API was an original implementation from about 1994. The commands were originally centered around the Postgres database and shortly after that it was fitted to the Illustra database, which at the time was a commercial version of Postgres. Some of the newer commands that were added included stored procedures in Sybase. There are even more new commands in the newer Postgres driver and Arsdigita's Oracle driver. All of these commands are implemented in the database drivers themselves and aren't really considered part of AOLserver anymore, though they integrate themselves seamlessly. Kris --- Bas Scheffers [EMAIL PROTECTED] wrote: AOLserver, or rather NaviServer as it was called in its early days, pretty much invented this game. None of the current other DB implementations do the kind of things the AOLserver db layer has to do because they don't need to run in a pooled and multithreaded enviroment. IIRC, there is a project on sourceforge bringing AOLserver db connectivity to standard Tcl, but their search functionality is currently down. (when will websites learn there is no 'night time' for maintenance on the internet?) Do a search for 'aolserver' on sourceforge.net later on and you may get lucky. Cheers, Bas. Alex Liebowitz said: Where did the database commands come from? There are several Tcl SQL packages I've seen, does AS use the codebase from any of these, or vice versa? The AS database API is among the better I've seen, so I'm wondering whether it's available independently for non-web applications. I. To remove yourself from this list: Send a message to [EMAIL PROTECTED] with the following text in the BODY of your message: signoff aolserver II. For a complete list of listserv options please visit: http://listserv.aol.com/ III. For more AOLserver information please visit: http://www.aolserver.com/ I. To remove yourself from this list: Send a message to [EMAIL PROTECTED] with the following text in the BODY of your message: signoff aolserver II. For a complete list of listserv options please visit: http://listserv.aol.com/ III. For more AOLserver information please visit: http://www.aolserver.com/
[AOLSERVER] Good reading: Yahoo moving to PHP
At first glance it sounded like a practical joke but this article is worth reading, anyway. AOLserver does support PHP through a module that is distributed with PHP. http://public.yahoo.com/~radwin/talks/yahoo-phpcon2002.htm Kris
[AOLSERVER] libtcl8.4g.so and libtcl8.4.so mystery explained
The mystery between libtcl8.4g.so and libtcl8.4.so has been solved for those of us who were constantly distracted by failed installations of AOLserver 3.5 on multiple platforms. The g means debug symbols, implying that the library was built with the -g directive to the C compiler. On certain platforms the g version is used by default but we never really found out why and it made the Makefile stupid-looking. In any case you should be able to use --enable-symbols and --disable-symbols directives to the ./configure command to instruct Tcl to built itself as the correct version. I usually start out by builing the --enable-symbols and install it, then do a make clean and do --disable-symbols and then just copy the ./libtcl8.4.so directly into /usr/local/tcl8.4.0/lib. You can cheat and substitute either file for libtcl8.4.so so you don't have to re-link AOLserver when you want to use the debug version of libtcl. Kris
[AOLSERVER] Start script for AOLserver 3.5
Here is a startup script for AOLserver 3.5. It occurred to me that it is only a matter of time before these questions start filling up my inbox and voice mail so here is a good startup script to help you run AOLserver 3.5 with the new Tcl library. My example is for Linux on Red Hat 8.0 but can be used elsewhere with very minor tweaks at the top of the file. Notice here that I have installed libtcl8.4 and its files into /usr/local/tcl8.4.0. I highly recommend doing this as it removes any doubt that you are using the correct thread-enabled version of libtcl. I do not yet know the implications of moving the Tcl directory to a different location after building AOLserver so you should watch for errors that mention missing encoding files and other Tcl support files normally found with the tcl library--at the very least, UTF-8 encoders probably wouldn't work without knowing the correct path to the Tcl library. If you built AOLserver after you build Tcl then it should find it in the correct place but you may need to make sure that the TCLHOME variable, below, is pointing to the same place as well. ---cut here--- #!/bin/sh NSHOME=/export/home/nsadmin NSUSER=nsadmin NSGROUP=nsadmin TCLHOME=/usr/local/tcl8.4.0 LOGGER=/usr/bin/logger -t $NSUSER:$NSGROUP -p warning SLEEP=/bin/sleep SLEEPTIME=1 LD_LIBRARY_PATH=$NSHOME/lib:$TCLHOME/lib export LD_LIBRARY_PATH cd $NSHOME $LOGGER AOLserver is starting. ./bin/nsd -izt ./nsd.tcl -u $NSUSER -g $NSGROUP $LOGGER AOLserver has stopped. $SLEEP $SLEEPTIME ---cut here---
Re: [AOLSERVER] AOLserver and Red Hat 8
No, I don't have any idea how or if any of this applies to Mandrake 9. Kris [EMAIL PROTECTED] wrote: Kris Do you (or anyone) know if these multithreaded benefits are spcific to Redhat or some aspect of the kernel they are using. I've just downloaded Mandrake 9.0 which is using the 2.4.19 kernel and wondered if these changes would be seen here (I'll have a dig around myself but thought I'd ask in case the answers already known). Thanks Steve On Tue, 2002-10-01 at 05:00, Automatic digest processor wrote: From: Kriston Rehberg [EMAIL PROTECTED] Subject: AOLserver and Red Hat 8 Date: 30 Sep 2002 13:55:29 -0400 Hi! With today's release of Red Hat 8.0 there are significantly excellent changes to Red Hat to make life with multithreaded programs, like AOLserver, more convenient. 1) gcc-3.2 is used exclusively throughout Red Hat 8.0. This means that C89, C99, C++, ANSI C++, and friends will work together in harmony as AOLserver shared objects. Please note that there is an inconsistency in the Red Hat 8.0 release notes that claims that the C++ ABI will change in future releaes, but this directly contradicts the actual GCC 3.2 release notes that state clearly that the C++ ABI will not change in future releases. If you're a C++ head be sure to watch out for this but it's probably as easy as keeping your code easy for other people to recompile. 2) Multithreaded program support is getting better and better! The top and ps commands now only display the main (initial) thread of thread-aware processes. To show all threads, use the command ps -m or type H in top. 3) gdb seems to know what it's doing with multithreaded programs and core dumps--I think the jury is still out on this one. 4) The version of Tcl does not have thread support enabled so AOLserver 3.5 users will need to build their own copy of Tcl with --enable-threads --enable-shared. At runtime, AOLserver at this time does not detect that a proper version of Tcl with threads is installed but it's likely we can do this in a future release for all systems. 5) Long ago the default file descriptor limit on Linux was made configurable even if you don't have a 64-bit system. The default Linux installaion has about three zillion times more file descriptors than even Solaris 9. 6) ns_sendmail will work as long as you use localhost or 127.0.0.1 as your smtphost. Red Hat 8 only listens on localhost for security reasons. 7) OpenSSL should be rebuilt according to the documentation that comes with nsopenssl, otherwise nsopenssl will not recognize it. That's all I can think of right now. In the meantime, download Red Hat 8.0 and tell us what you think! Kris
[AOLSERVER] AOLserver 3.5.0 is available
AOLserver 3.5.0 is available at http://aolserver.sourceforge.net/. This version has several major improvements the Tcl library, memory management, and overall performance. Projects that already use the Tcl 8 interpreter on nsd8x can use AOLserver 3.5.0 with no changes. The Tcl library now needs to be obtained and built separately. See the README for more information. Kris
[AOLSERVER] Statement on DNS resolver usage in AOLserver
This is a statement on DNS resolver usage in AOLserver. 1) AOLserver 3 and better are not normally configured to perform any hostname or address resolution. 2) The nsperm, nslog, and nscgi modules can be specifically configured to use DNS resolution but are not normally configured to do so. 3) AOLserver 2.3.3 and older *do* regularly perform DNS resolution, but this point is moot since the AOLserver team explicitly forbids the use of the 2.x releases anywhere for any reason. 4) Applications written for AOLserver can and often do use DNS resolution. Course of action: Patch your operating system. Calls in AOLserver and its Tcl interpreter to use DNS resolution will always use the system libraries and they're always dynamically-linked. Therefore as long as the operating system itself is patched then AOLserver applications are protected from problems in the DNS resolver code provided by the operating system. Regards, Kris -- Kriston Rehberg America Online, Inc.
Re: [AOLSERVER] Building on HP-UX 11.00
I've tried to get this working but failed before running out of interest. It has something to do with the redefinition of the word signal and possibly other conflicting header files. It doesn't work on HP/UX 10.20 either. Kris On Fri, 19 Apr 2002 16:45:12 +1000, COLLINS Patrick [EMAIL PROTECTED] wrote: I am having great difficulty building any version of aolserver on HP-UX 11.00 using either the HP compiler or gcc. Has anyone actually built and run aolserver on HP-UX, if so what did you have to do to get it to work. Thanks. Patrick Collins Software Specialist - Middleware ENERGEX ITT mailto:[EMAIL PROTECTED] voice: +61 7 3407 4156 fax : +61 7 3407 4607 * This email message (including any file attachments transmitted with it) is for the sole use of the intended recipient(s) and may contain confidential and legally privileged information. Any unauthorised review, use, alteration, disclosure or distribution of this email (including any attachments) by an unintended recipient is prohibited. If you have received this email in error, please notify the sender by return email and destroy all copies of the original message. Any confidential or legal professional privilege is not waived or lost by any mistaken delivery of the email. ENERGEX accepts no responsibility for the content of any email which is sent by an employee which is of a personal nature. *
Re: [AOLSERVER] malformed bucket chain in Tcl_DeleteHashEntry
For me, the number of projects I have to deal with which still us ns_share is heinous. I just wish there were a drop-in replacement but there just isn't. Kris On Tue, 23 Apr 2002 09:41:49 +0100, Harry Moreau [EMAIL PROTECTED] wrote: On 22 Apr, Michael A. Cleverly wrote: On Thu, 18 Apr 2002, Rusty Brooks wrote: The point being, if I had a method to bring one of the shared variables into the current context, like ns_share did, then all other procedures downstream could be blissfully unaware if they were shared or not. How about using variable read/write traces to mimic the old ns_share behaviour using nsv's? Here's a quick lunch time first stab at it: ns_share is implemented using traces in AOLserver 3.x. This accounts for why it's a lot slower than nsv's. I haven't benchmarked it for a while, but in the 3.0 beta timeframe (when ns_shares included some tcl code for their implementation) there was an order of magnitude difference in the speed of ns_share and nsv's. -- --Harry Moreau
Re: [AOLSERVER] Itanium and AOLserver
I had been playing around with an Itanium Linux system in the Source Forge Compile Farm but it's been so long ago and I can't remember the hostname for the system anymore. I didn't think that the gcc compiler was 64-bit aware on Itanium (just like it is not 64-bit aware on Solaris SPARC, g...). Kris On Mon, 1 Apr 2002 20:57:18 -0500, Cameron Laird [EMAIL PROTECTED] wrote: 'Anyone hosting AOLserver on Itanium yet? Or, perhaps more intriguingly, hosting a datamanager backend on Itanium, ac- cessed by a more conventional AOLserver? This is a journalistic question; that is, I'm looking for experience of others on which I can report publicly. I wel- come e-mail to (for example) [EMAIL PROTECTED].
[AOLSERVER] AOLserver 3.4.2 for Darwin Mac OS X 10.1 5.3 PPC MACH etc.
You will be pleased to notice intriguing binary executables for an even more intriguing operating system: http://sourceforge.net/project/showfiles.php?group_id=3152 You must read the README file or you will have stress. Don't forget to bring a towel! Enjoy, Kris
Re: [AOLSERVER] problem with Linux telnet and nscp
Darn it. I thought those IAC codes were turned off in the default build. Can someone check nscp.c and maybe ensure a bug is opened on SF about this? Kris On Wed, 3 Apr 2002 13:23:26 -0800, atfrost [EMAIL PROTECTED] wrote: --- Jeff Rogers [EMAIL PROTECTED] wrote: On Wed, 3 Apr 2002 10:12:22 -0800, atfrost [EMAIL PROTECTED] wrote: [-nscp:1-] Warning: nscp: unsupported telnet IAC code 252 received from client This is the WONT command, I believe? That's correct. On AOLServer 3.x, however, it looks like the session begins with some junk in the input buffer; the first command line always fails. The following message is logged: Error: invalid command name ÿü invalid command name ÿü while executing ÿü The ÿü is the same IAC WONT (dec 255 252) command, just the 3.x nscp doesn't try to grok telnet control commands. Maybe you have something in your .telnetrc that is trying to change settings (linemode perhaps)? Not sure what else would be going on there. -J Interesting. AFAIK, it's running in default mode - I haven't had a .telnetrc on this or any of the hosts that I've experienced this on. Trying to disable telnet's LINEMODE explicitly (setting mode character in a .telnetrc) doesn't seem to change things, either. I don't know enough about telnet's protocol to understand what's going on here. Do you know how I might be able to use the rest of the data in the buffer to see what telnet is trying to send to nscp? thanks, thomas __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://taxes.yahoo.com/
Re: [AOLSERVER] [[AOLSERVER] PHP?]
I can give you a confidence-builder. Some AOLserver architects have been following the PHP discussions and helping them out with their AOLserver module--which comes with PHP, by the way. Kris On Tue, 2 Apr 2002 14:53:00 -0700, Ron Patterson [EMAIL PROTECTED] wrote: Been using it fine here, though not pushing it real hard. Using it on both Solaris 2.6 and Mandrake-Linux platforms with PostgreSQL, MySQL, Oracle8, and ODBC database access. Ron Michael Roberts [EMAIL PROTECTED] wrote: Has anyone used PHP under AOLserver? I'm not expecting anything like a tight integration, just have some code written for PHP that I'd like to expose on a site already running AOLserver. Any comments or try starting here would be welcome. Michael === Ron Patterson | USA.NET [EMAIL PROTECTED] | 1155 Kelly Johnson Blvd 719-785-2328 | Colorado Springs, CO 80920 AOL/Yahoo IM: RonPDude |
Re: [AOLSERVER] AOLServer DB Proxy Daemon Format String Vulnerability
We already have a patch--it's the one you sent us. I've included it below. Again, thanks very much for your good work! Kris -- Kriston Rehberg America Online, Inc. --cut here-- diff -dru aolserver-3.4.2/nspd/log.c aolserver-3.4.2-patched/nspd/log.c --- aolserver-3.4.2/nspd/log.c Tue Aug 15 22:24:33 2000 +++ aolserver-3.4.2-patched/nspd/log.c Wed Jan 30 09:03:11 2002 -206,14 +206,13 char msgbuf[4096]; va_start(ap, format); -vsprintf(msgbuf, format, ap); +vsnprintf(msgbuf, sizeof (msgbuf), format, ap); va_end(ap); -syslog(priority, msgbuf); +syslog(priority, %s, msgbuf); } } } - /* *-- * --cut here-- -- Kriston Rehberg America Online, Inc.
Re: [AOLSERVER] Solaris 2.5.1 -- My God.
Without having any real metrics, the performance jump from Solaris 2.6 to 7 has been enormous. It's also much better in terms of the separation of the thread library (which is why Solaris 7 binaries don't run on Solaris 2.6) and sundry LWP changes that are not insignificant. You should be able to upgrade your older computer--Solaris 7 and 8 still run well on sun4m (a.k.a. SuperSparc, inside SparcStation 10s and 20s) but you'll need to adjust the AOLserver include/Makefile.global to use something other than ultrasparc and sparcv9 because everything we touch Sun-wise is sun4u and better. Kris
Re: [AOLSERVER] AOLserver.com relaunched!
I wanted to avoid the inevitable political discussion but I guess it can't be avoided. We are being hosted by Source Forge for the same reasons that Savant, acWeb, tclhttpd, Throttled and other web hosting software is hosted there. It's a good site for collaborative software development. Everything is now in the same place and I'm grateful that I don't have to strain my back every time I need to update a file download or fix documentation errors. The old environment was technologically adverse to anything that has to do with open collaboration and it was a pain in the neck to administer ever since root access was withdrawn a couple of years ago. Aside from running AOLserver.com on Source Forge (which uses Apache), it uses PHP, which is a scripting language supported on AOLserver as well. I took the opportunity, however, to convert all the AOLserver documentation, which is the largest part of AOLserver.com, from ADP to plain-Jane HTML. I think this encourages good writing practices and documentation style and has the added benefit of allowing you to download the documentation locally, not to mention make it easier to edit and to put a working and easily updated search engine (coming soon). Finally, the file manager makes distributing software a whole lot more consistent. How many times have you looked on the old AOLserver ftp site just to see the butt-old 0.9 version of something that's had major revisions, like openssl? Anyway, I hope you like it. Kris
[AOLSERVER] REMINDER: Source Forge email updates
This is just a reminder that you should use the link in the email message to discuss the bug reports, patches, support requests, and feature requests. If you just reply to this list they probably won't be read. Kris -- Kriston Rehberg America Online, Inc.
Re: [AOLSERVER] closed mailing lists, old can of worms?
No, sorry. The AOLserver mailing list archives are only available to subscribers of the mailing list. Being a subscriber does not mean you have to get emails every day, it just means you are a registered user of the mailing list. This is the only way to protect the list and its subscribers from spam harvesters. You can set the mailing list settings to NOMAIL and you remain a subscriber but don't get any mail. Kris PS...This issue comes up every couple of months in our support queue. The policy is firm and is intended to protect the mailing list and its subscribers.
Re: [AOLSERVER] 502 Error Code
One version of the text of the 502 error reported by an Apache server says The server, while acting as a gateway or proxy, received an invalid response from the upstream server it accessed in attempting to fulfill the request. This may be a temporary or permanent condition, please try again at a later time. This is appropriate where the proxy server encounters a problem accessing the remote server where the remote server either 1) reports some sort of error or 2) is unreachable either temporarily or for an extended amount of time. The case of (2) is supposed to be a 503 - Service Unavailable or 504 - Gateway Timeout but I guess this is open to interpretation by the implementor of the proxy. Needless to say there are any number of things that can cause this, none of which necessarily place blame specifically on the proxy server, the internet connection between the proxy server and the remote server, and the remote server itself. AOLserver only reports 502, 503, and 504 errors when specifically instructed to do so. I've seen proxy code do this and some really weird server-to-server protocol handler stuff as well. Kris
Re: [AOLSERVER] [ aolserver-Bugs-446689 ] nsreturnredirect isn't
It's very possible for one to ns_write the wrong thing to a client, and be non-compliant. It's also possible for someone to do this: [ns_set put [ns_conn outputheaders] Location The Wrong Thing] ...and be non-compliant. It's also possible for someone to send out nonexistent error codes using ns_return. I do not believe that any purpose is being served by discussing the emotional impact of the rejection of patches, bug reports, feature requests, and support requests, on individuals or the community as a whole. Take it to another mailing list or the Wiki. Kris
Re: [AOLSERVER] Solaris 2.5.1 -- My God.
On Wed, 6 Feb 2002 02:28:28 -0500, Michael Roberts [EMAIL PROTECTED] wrote: ...the AOL team uses Solaris 2.6 as a test environment. The burning question uppermost in my mind (save one) is HOW DIFFERENT COULD IT BE?!?!?!? I can't really say what is different about it except for some truly major pthread/LWP changes, something to do with POSIX signalling, and the space of about three years. I just gave away my remaining Solaris 2.6 dev box so Solaris 7 is the low water mark now and I can't think of anything to say except a pithy upgrade your operating system remark. If you can, get gcc-2.95.3 and compile using -fPIC (gmake gccme=1) and pray for the best. Even better, download the recommended patch roll-up for 2.5.1, download the evaluation copy of the Sun C compiler and its requisite 2.5.1 patches, and start over, possibly doing gmake nativeme=1. Regards, Kris
Re: [AOLSERVER] spat of SourceForge messages
What was up with all those SourceForge messages? Did Kris just do a mass-assign to himself for all the open tickets? Or did something else happen that I missed ... ? Sorry, this will start calming down shortly once I finish cleaning out the cobwebs. Kris
Re: [AOLSERVER] AOLServer DB Proxy Daemon Format String Vulnerability
This has been fixed in the current version in CVS branch nsd_v3_r3_p0 (post-AOLserver 3.4.2) and can be used for any affected version. See: http://sourceforge.net/tracker/?func=detailatid=103152aid=531946group_id=3152 Kris On Thursday, [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 SECURITY ADVISORYINTEXXIA(c) 30 01 2002 ID #1052-300102 TITLE : AOLServer DB Proxy Daemon Format String Vulnerability CREDITS : Guillaume Pelat / INTEXXIA SYSTEM AFFECTED === AOLServer 3.4.2 AOLServer 3.4.1 AOLServer 3.4 AOLServer 3.3.1 AOLServer 3.2.1 AOLServer 3.2 AOLServer 3.1 AOLServer 3.0 DESCRIPTION === The Laboratory intexxia found a format string vulnerability in the AOL Server external database driver proxy daemon API that could lead to a privilege escalation. DETAILS === AOL Server provides an API to develop external database driver proxy daemons. Those daemons are linked to a library (libnspd.a). The Laboratory intexxia found a format string and a buffer overflow vulnerability in the 'Ns_PdLog' function of the library. Successful exploitation of the bug could allow an attacker to execute code and get access on the system. As a result, all the External Driver Proxy Daemons using the 'Ns_PdLog' function with the 'Error' or 'Notice' parameter are potentially vulnerable. SOLUTION There is no official solution for the moment. However, the Laboratory intexxia developped a patch that address this issue. It is attached to this bulletin. VENDOR STATUS = 14-03-2002 : This bulletin was sent to the developpement team. LEGALS == AOL Server is a registered trademark. This advisory is being provided to you under the policy documentedat http://www.wiretrip.net/rfp/policy.html.You are encouraged to read this policy. However, in the interim, you have approximately a week to respond to this initial email. This policy encourages open communication, and we look forward to work with you on resolving the problem detailed above. Intexxia provides this information as a public service and as is. Intexxia will not be held accountable for any damage or distress caused by the proper or improper usage of these materials. (c) intexxia 2002. This information is classified confidential which means that you cannot redistribute it in its actual state outside your internal organisation and/or constituency (specifically involved in the incident). CONTACT === CERT intexxia [EMAIL PROTECTED] INTEXXIA http://www.intexxia.com 171, av. Georges Clemenceau Standard : +33 1 55 69 49 10 92024 Nanterre Cedex - FranceFax : +33 1 55 69 78 80 -BEGIN PGP SIGNATURE- Version: PGPfreeware 7.0.3 for non-commercial use http://www.pgp.com iQA/AwUBPJCVe02N8BNyNDXLEQLVEQCgyri4l/HZaZ4q9OH4JjczkbTSeJIAoIsU nyV8mUYXZdbmKDPnjsQ0Mbc7 =03WU -END PGP SIGNATURE- -- Kriston Rehberg America Online, Inc.
Re: [AOLSERVER] Any demand for AOLserver 3.4.2 for Win32?
I'll try to get one going, I'm finishing up a class on C++ that uses MS VC++ and I might be able to apply that knowledge to the Win32 build especially when it comes to getting those %*#Q$! extra modules like nscgi and nsssl built. For AOLserver 4.x, can anyone please try out building it with the current Cygwin? Kris -- Kriston Rehberg America Online, Inc.
[AOLSERVER] AOLserver Sidebar, Opera, and Even More Docs
Check out the new Tcl API documentation on AOLserver.com and let me know what you think. I need to add nsv docs to that area and it should be fairly completely and very much corrected and updated. If you have the Opera browser, you can use the AOLserver Sidebar inside it! Finally, a fast and efficient way to keep all your references in one place! Open the Hotlist, right-click on one of the tabs, and select Add Panel. The URL for the AOLserver Sidebar is simply http://aolserver.com/sidebar/;. The hotlist can be docked or you can even have it float on your desktop. Enjoye, Kris -- Kriston Rehberg America Online, Inc.
[AOLSERVER] Search on aolserver.com has finally re-indexed
Google.com's spider has finally re-indexed AOLserver.com. The search box on the site and in the Netscape 6 Sidebar is now hitting the right pages. Kris -- Kriston Rehberg America Online, Inc.
[AOLSERVER] AOLserver 3.4.2, 3.2.1, and NEW DOCS
AOLserver 3.4.2 and 3.2.1 have been released along with a totally new AOLserver.COM web site with new docs! Check it out at http://aolserver.com/ Kris -- Kriston Rehberg America Online, Inc.
[AOLSERVER] Thread pooling (was Re: AOLserver operational issues)
Since the creation of threads is expensive we have put together a thread pooling system that lets thread-creating apps use a thread pool. The problems with creating/deletion of threads, if I understand everyone correctly, seems to be endemic to applications that need to create and delete threads themselves. The regular thread model for AOLserver's normal operation seems to be okay but correct me if I'm totally off-base on that. You can find nsthreadpool at aolserver.com in the modules area. Kris -- Kriston Rehberg mailto:[EMAIL PROTECTED] AOL Technology Development - Original Message - From: Automatic digest processor [EMAIL PROTECTED] To: Recipients of AOLSERVER digests [EMAIL PROTECTED] Sent: Fri, 09-21-01 12:00a Subject: AOLSERVER Digest - 19 Sep 2001 to 20 Sep 2001 (#2001-237) AOLSERVER Digest - 19 Sep 2001 to 20 Sep 2001 (#2001-237)AOLSERVER Digest - 19 Sep 2001 to 20 Sep 2001 (#2001-237) Table of contents: a.. Double Clicking b.. AOLserver operational issues (25) c.. using javascript in TCL!!! (3) d.. Oracle + Aolserver 3.4 charset problems e.. Reminder: AOLserver weekly chat today f.. POST of binary data (6) a.. Double Clicking a.. Re: Double Clicking (09/20) From: Dossy [EMAIL PROTECTED] b.. AOLserver operational issues a.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] b.. Re: AOLserver operational issues (09/20) From: Jim Wilcoxson [EMAIL PROTECTED] c.. Re: AOLserver operational issues (09/20) From: Constantin Teodorescu [EMAIL PROTECTED] d.. Re: AOLserver operational issues (09/20) From: Jim Wilcoxson [EMAIL PROTECTED] e.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] f.. Re: AOLserver operational issues (09/20) From: Jim Wilcoxson [EMAIL PROTECTED] g.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] h.. Re: AOLserver operational issues (09/20) From: Lamar Owen [EMAIL PROTECTED] i.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] j.. Re: AOLserver operational issues (09/20) From: Jim Wilcoxson [EMAIL PROTECTED] k.. Re: AOLserver operational issues (09/20) From: Lamar Owen [EMAIL PROTECTED] l.. Re: AOLserver operational issues (09/20) From: Lamar Owen [EMAIL PROTECTED] m.. Re: AOLserver operational issues (09/20) From: Jerry Asher [EMAIL PROTECTED] n.. Re: AOLserver operational issues (09/20) From: Rob Mayoff [EMAIL PROTECTED] o.. Re: AOLserver operational issues (09/20) From: Rob Mayoff [EMAIL PROTECTED] p.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] q.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] r.. Re: AOLserver operational issues (09/20) From: Jerry Asher [EMAIL PROTECTED] s.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] t.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] u.. Re: AOLserver operational issues (09/20) From: Jim Wilcoxson [EMAIL PROTECTED] v.. Re: AOLserver operational issues (09/20) From: Rob Mayoff [EMAIL PROTECTED] w.. Re: AOLserver operational issues (09/20) From: Peter M. Jansson [EMAIL PROTECTED] x.. Re: AOLserver operational issues (09/20) From: Zoran Vasiljevic [EMAIL PROTECTED] y.. Re: AOLserver operational issues (09/20) From: Rob Mayoff [EMAIL PROTECTED] c.. using javascript in TCL!!! a.. using javascript in TCL!!! (09/20) From: deepti [EMAIL PROTECTED] b.. Re: using javascript in TCL!!! (09/20) From: Jim Wilcoxson [EMAIL PROTECTED] c.. Re: using javascript in TCL!!! (09/20) From: Prakash Sinha [EMAIL PROTECTED] d.. Oracle + Aolserver 3.4 charset problems a.. Oracle + Aolserver 3.4 charset problems (09/20) From: Toni Vila [EMAIL PROTECTED] e.. Reminder: AOLserver weekly chat today a.. Reminder: AOLserver weekly chat today (09/20) From: [EMAIL PROTECTED] f.. POST of binary data a.. POST of binary data (09/20) From: Jerry Asher [EMAIL PROTECTED] b.. Re: POST of binary data (09/20) From: Rob Mayoff [EMAIL PROTECTED] c.. Re: POST of binary data (09/20) From: Jerry Asher [EMAIL PROTECTED] d.. Re: POST of binary data (09/20) From: Rob Mayoff [EMAIL PROTECTED] e.. Re: POST of binary data (09/20) From: Lee Teague [EMAIL PROTECTED] f.. Re: POST of binary data (09/20) From: Adam Zell [EMAIL PROTECTED] -- -- Browse the AOLSERVER online archives.
[AOLSERVER] AOLserver operational issues
Hello AOLserver folks, The current trend in service calls to the AOLserver Support team concerns systems that have been crashing for mysterious reasons unrelated to the release of the server. The common factors to all of these calls is that the machines had been changed to run 5 or more nsd processes per machine rather than just one or two. It's important to consider that AOLserver will aggressively use the resources available to it and running multiple nsd processes carelessly will affect the performance of your machine. This is due to resource limits in the operating system. Let's be smart about this and if the occasion comes around where you want to run multiple nsd's per machine, please closely watch your system parameters. Naturally, AOLserver will always effectively use *all* the processors on a multiprocessor machine, and starting up more than one nsd process should be considered with great care, study, and operational vigilence--something that is more detrimental than the predicted benefits might be. Assuming that everything was okay until now does not count! Especially since there has been some poor timing: increased load as a result of the Nimba worm, the increase of nsd processes per machine, and after-effects of current world events at the Pentagon and the Twin Towers. Thank you very much, and thanks for reading. Kris -- Kriston Rehberg mailto:[EMAIL PROTECTED] AOL Technology Development
[AOLSERVER] AOLserver mailing list suspended and now freed
The AOLserver mailing list was suspended for a few days due to excessive postings--the threshold of 50 messages per day was reached. I have freed the list. Thanks to Jerry Asher for pinging me about this. Kris
Re: [AOLSERVER] AOLserver Chat recommendations
Hmm, well, for one thing, we can't reach any of the irc.openprojects.net servers from inside our firewall. Sigh. Kris Hello, The AIM chat rooms are a fiasco. We end up in different rooms all the time. What do you think about using IRC instead? We could register a permanent channel on something like irc.openprojects.net. Kris
Re: [AOLSERVER] Easy way to get raw POST data into a tcl variable?
I've been given to understand that it's because the functions that handle data coming in from the client gobble up the data and don't leave it behind in an intact form. AOLserver 4 is going to allow seeking around the incoming data, headers and all. Kris
Re: [AOLSERVER] Filtering logs
The thought never occurred to us that logging on a production server would be so extensive that it would require such filtering by severity. Usually production servers should only spew out the most interesting messages: Warning, Error and Fatal. If you're routinely logging on a production server with Notice you might want to reconsider the idea of development vs. production and how you report your server's activity. Just a thought. Kris
Re: [AOLSERVER] AOLSERVER Digest - 14 Jul 2001 to 15 Jul 2001 (#2001-178)
AOLserver can be instructed to set Expires: now on all pages. Investigate the enableexpires options: In the ns/server/servername/adp section: ns_param enableexpiretrue ;# Set Expires: now on all ADP's If you'd like this to be added to your *.html pages, too, map *.html to th ADP interpreter. Enjoy, Kris
Re: [AOLSERVER] MacOS X AOLserver
Has anyone figured out an elegant way to get AOLserver to respawn when running on MacOS X? The inittab is unfortunately not an option. Why is inittab not an option? Does MacOS X not use it? I use daemontools to monitor my AOLservers. It has several advantages over inittab. http://cr.yp.to/daemontools.html The BSD operating systems do not use inittab. AOLserver's -i option really has nothing to do with respawning the server. AOLserver never respawns itself if there is a failure--that's the responsibility of the caller. For Mac OS X and other BSD systems, you can use Daemontools as Rob suggested, or you can use this script (which effectively mimics what inittab does on SVR4 Unixes): #!/bin/ksh while /bin/true do /path/to/nsd -zit /path/to/config /var/run/nsd.log 21 /bin/sleep 5 done Kris -- Kriston Rehberg [EMAIL PROTECTED]
[AOLSERVER] nsodbc_v1 available for Generic and Red Brick ODBC
nsodbc_v1 available for Generic and Red Brick ODBC The nsodbc_v1 driver is now available for use with databases that speak ODBC, such as Microsoft SQL Server, Informix Red Brick Warehouse, SOLID, and Watcom/Sybase SQLAnywhere. This driver has been tested with Red Brick client libraries but should work with any ODBC-compliant client library. Set the environment variable REDBRICK to your Red Brick client directory. Set the environment variable ODBC to your ODBC client directory, e.g. FreeODBC. In AOLserver CVS, the module is nsodbc. The source code can also be found on http://aolserver.com/ in the AOLserver Module collection. Regards, Kris -- Kriston Rehberg -- [EMAIL PROTECTED] -- http://kriston.net/
[AOLSERVER] AOLserver for MacOS X available
Throngs of Macintosh fans emit joy as the MacOS X/Darwin PPC build of AOLserver 3.4 is ready for their enjoyment. Think different at ftp://ftp.aolserver.com/. Kris -- Kriston Rehberg -- [EMAIL PROTECTED] -- http://kriston.net/
[AOLSERVER] AOLserver Of The Day
Here is the line on which AOLserver releases to use. All AOLserver releases are fully upwardly-compatible in the series. Code written for any 3.x release works without change on all future 3.x releases--just drop the new AOLserver in place and restart. AOLserver of the Day: AOLserver/3.4 (nsd_v3_r4) Supported Releases: AOLserver/3.4 (nsd_v3_r4) AOLserver/3.3.1 (nsd_v3_r3_p1) Retired/Unsupported Releases:*=show-stopper bugs; see bugbase. *AOLserver/3.2 (nsd_v3_r2) *AOLserver/3.1 (nsd_v3_r1) AOLserver/3.0 (nsd_v3_r0) *AOLserver/2.3.3 (aolserver_2_3_3_patches) ((NOT AVAILABLE)) Legend: AOLserver of the Day-- The release to use on all new installations and all projects migrating from 2.3.3. This is the current production release that has passed QA. Supported Releases-- The releases for which support is provided. These are usually the current release plus the first prior release unless the prior release has show-stopper bugs. Retired/Unsupported Releases-- The releases for which support is NOT provided. Their use is STRONGLY discouraged. These older releases marked with an asterisk (*) have show-stopper bugs that are resolved in the Supported Releases.
Re: [AOLSERVER] SSL-enabled server
SSL is supported both in nsssl which comes with AOLserver binaries and nsopenssl which comes as source code from nsopenssl (see aolserver.com for the links). Where in the docs does it say SSL is not supported? We have to change that. Kris -- Kriston Rehberg -- [EMAIL PROTECTED] -- http://kriston.net/
Re: [AOLSERVER] PUT support
You protect the URLs with the nsperm module. It works for all methods -- PUT is an alias for POST unless you change it. Kris Brad Chick writes: AOLserver has a config option ns_param enableaolpress true/false that allows clients to use the HTTP PUT command successfully with AOLserver. The problem is that there is no security. It does not ask for a username/password. Am I just missing something? Or was this by design? Thanks
