GSOC 2010

2010-02-11 Thread buddhika chamith
Hi all, I am Buddhika Chamith, a final year student from University of Moratuwa, Sri Lanka. I am hoping to participate in GSOC 2010 program. This would be my second GSOC. Last year I worked in and successfully completed Apache ODE project titled "Apache ODE integration in BPELUnit". [1] I would b

svn commit: r909215 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-02-11 Thread kkolinko
Author: kkolinko Date: Fri Feb 12 03:22:16 2010 New Revision: 909215 URL: http://svn.apache.org/viewvc?rev=909215&view=rev Log: proposal Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=

svn commit: r909212 - /tomcat/trunk/java/org/apache/catalina/loader/WebappClassLoader.java

2010-02-11 Thread kkolinko
Author: kkolinko Date: Fri Feb 12 03:19:31 2010 New Revision: 909212 URL: http://svn.apache.org/viewvc?rev=909212&view=rev Log: When the key is null (i.e., a stale entry), it cannot be removed with an explicit remove(key) call: you'll get an NPE. Those can be removed with expungeStaleEntries() c

Re: svn commit: r909097 - in /tomcat/trunk/java/org/apache/catalina/loader: LocalStrings.properties WebappClassLoader.java

2010-02-11 Thread Bill Barker
wrote in message news:20100211180956.bfd5f2388...@eris.apache.org... Author: markt Date: Thu Feb 11 18:09:08 2010 New Revision: 909097 URL: http://svn.apache.org/viewvc?rev=909097&view=rev Log: Improved memory leak prevention for resource ResourceBundle Modified: tomcat/trunk/java/org/ap

svn commit: r909206 - /tomcat/trunk/java/org/apache/catalina/loader/WebappClassLoader.java

2010-02-11 Thread kkolinko
Author: kkolinko Date: Fri Feb 12 02:22:23 2010 New Revision: 909206 URL: http://svn.apache.org/viewvc?rev=909206&view=rev Log: followup to r908002 Use the debug message (added in r908002) for debug output Modified: tomcat/trunk/java/org/apache/catalina/loader/WebappClassLoader.java Modified

svn commit: r909204 - /tomcat/trunk/java/org/apache/catalina/core/mbeans-descriptors.xml

2010-02-11 Thread kkolinko
Author: kkolinko Date: Fri Feb 12 02:01:41 2010 New Revision: 909204 URL: http://svn.apache.org/viewvc?rev=909204&view=rev Log: followup to r909134: correct a misprint Modified: tomcat/trunk/java/org/apache/catalina/core/mbeans-descriptors.xml Modified: tomcat/trunk/java/org/apache/catalina/

svn commit: r909189 - in /tomcat/site/trunk: docs/lists.html xdocs/lists.xml

2010-02-11 Thread kkolinko
Author: kkolinko Date: Fri Feb 12 00:34:46 2010 New Revision: 909189 URL: http://svn.apache.org/viewvc?rev=909189&view=rev Log: Rearrange the list of mail lists, using a DL list instead of UL list. Add several notes for the posters to tomcat-users. Modified: tomcat/site/trunk/docs/lists.html

Re: Tomcat 6 on solaris losing cookies

2010-02-11 Thread George Baxter
Well.. the JSESSIONID is one of the cookies we're losing... that's certainly a legal value. We're quoting all our cookies that have illegal values. The point is, there are NO cookies.. not any of ours or even the JSESSIONID cookie.. zip, zero, none. It's like tomcat just decided or failed to be

Re: Tomcat 6 on solaris losing cookies

2010-02-11 Thread Mark Thomas
On 11/02/2010 22:03, George Baxter wrote: By the way, we don't have this problem under Linux or MacOSx This is a question for the users list, not the dev list. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.

Re: Tomcat 6 on solaris losing cookies

2010-02-11 Thread Pid
On 11/02/2010 21:59, George Baxter wrote: Hello, We're running into an issue with tomcat 6.0.18 running on solaris. Occasionally a request will come through that has cookies in the header, but the request.getCookies() returns no cookies. This causes the user to lose session and other bad bad t

Re: Tomcat 6 on solaris losing cookies

2010-02-11 Thread George Baxter
By the way, we don't have this problem under Linux or MacOSx -- View this message in context: http://old.nabble.com/Tomcat-6-on-solaris-losing-cookies-tp27555458p2721.html Sent from the Tomcat - Dev mailing list archive at Nabble.com. --

Tomcat 6 on solaris losing cookies

2010-02-11 Thread George Baxter
Hello, We're running into an issue with tomcat 6.0.18 running on solaris. Occasionally a request will come through that has cookies in the header, but the request.getCookies() returns no cookies. This causes the user to lose session and other bad bad things. It seems to happen randomly, across

buildbot success in ASF Buildbot on tomcat-trunk

2010-02-11 Thread buildbot
The Buildbot has detected a restored build of tomcat-trunk on ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/98 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: Build Source Stamp: [branch tomcat/trunk] 90

svn commit: r909134 - in /tomcat/trunk/java/org/apache/catalina: core/StandardHost.java core/mbeans-descriptors.xml loader/WebappClassLoader.java

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 20:32:09 2010 New Revision: 909134 URL: http://svn.apache.org/viewvc?rev=909134&view=rev Log: Add rudimentary detection for PermGen memory leaks on web application reload. Only available via JMX for now. Next step is to add it to the manager app. Modified: tomc

svn commit: r909106 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 19:00:38 2010 New Revision: 909106 URL: http://svn.apache.org/viewvc?rev=909106&view=rev Log: New proposal Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev

buildbot failure in ASF Buildbot on tomcat-trunk

2010-02-11 Thread buildbot
The Buildbot has detected a new failure of tomcat-trunk on ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/96 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: Build Source Stamp: [branch tomcat/trunk] 90907

svn commit: r909097 - in /tomcat/trunk/java/org/apache/catalina/loader: LocalStrings.properties WebappClassLoader.java

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 18:09:08 2010 New Revision: 909097 URL: http://svn.apache.org/viewvc?rev=909097&view=rev Log: Improved memory leak prevention for resource ResourceBundle Modified: tomcat/trunk/java/org/apache/catalina/loader/LocalStrings.properties tomcat/trunk/java/org/apa

DO NOT REPLY [Bug 48729] New: JNDIRealm.java not parsing roles correctly

2010-02-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48729 Summary: JNDIRealm.java not parsing roles correctly Product: Tomcat 6 Version: 6.0.24 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2

svn commit: r909072 - in /tomcat/trunk/java/org/apache: catalina/loader/WebappClassLoader.java jasper/servlet/JspServletWrapper.java

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 16:55:26 2010 New Revision: 909072 URL: http://svn.apache.org/viewvc?rev=909072&view=rev Log: Revert simple ResourceBundle fix On reflection (no pun intended) a reflection based will be better since - it can be implemented at a single point - it can easily be ported

Re: svn commit: r909018 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-02-11 Thread Mark Thomas
On 11/02/2010 16:19, Konstantin Kolinko wrote: > 2010/2/11 : >> Author: markt >> Date: Thu Feb 11 15:16:55 2010 >> New Revision: 909018 >> >> URL: http://svn.apache.org/viewvc?rev=909018&view=rev >> Log: >> Proposal >> >> Modified: >>tomcat/tc6.0.x/trunk/STATUS.txt >> > >> + >> +* More memory

svn commit: r909061 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 16:32:26 2010 New Revision: 909061 URL: http://svn.apache.org/viewvc?rev=909061&view=rev Log: Withdraw proposal Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.tx

Re: svn commit: r909018 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-02-11 Thread Konstantin Kolinko
2010/2/11 : > Author: markt > Date: Thu Feb 11 15:16:55 2010 > New Revision: 909018 > > URL: http://svn.apache.org/viewvc?rev=909018&view=rev > Log: > Proposal > > Modified: >    tomcat/tc6.0.x/trunk/STATUS.txt > > + > +* More memory leak prevention - clear the resource bundle cache > +  http://s

svn commit: r909018 - /tomcat/tc6.0.x/trunk/STATUS.txt

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 15:16:55 2010 New Revision: 909018 URL: http://svn.apache.org/viewvc?rev=909018&view=rev Log: Proposal Modified: tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=909

svn commit: r909017 - in /tomcat/trunk/java/org/apache: catalina/loader/WebappClassLoader.java jasper/servlet/JspServletWrapper.java

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 15:14:55 2010 New Revision: 909017 URL: http://svn.apache.org/viewvc?rev=909017&view=rev Log: More memory leak prevention - ResourceBundle Modified: tomcat/trunk/java/org/apache/catalina/loader/WebappClassLoader.java tomcat/trunk/java/org/apache/jasper/servl

DO NOT REPLY [Bug 48716] Embedded Tomcat JULI aggressively resetting default logging configuration

2010-02-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=48716 --- Comment #6 from Konstantin Kolinko 2010-02-11 14:04:05 UTC --- For reference: the current users@ thread discussing this: http://marc.info/?t=12655851733&r=1&w=2 -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.c

DO NOT REPLY [Bug 46323] NTLM Authentication for Microsoft Active Directory controlled Intranet

2010-02-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=46323 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

svn commit: r908955 - in /tomcat/trunk/webapps/docs: project.xml security-howto.xml

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 13:17:05 2010 New Revision: 908955 URL: http://svn.apache.org/viewvc?rev=908955&view=rev Log: Convert my ApacheCon securing Tomcat presentation to a how to Added: tomcat/trunk/webapps/docs/security-howto.xml (with props) Modified: tomcat/trunk/webapps/docs

buildbot success in ASF Buildbot on tomcat-trunk

2010-02-11 Thread buildbot
The Buildbot has detected a restored build of tomcat-trunk on ASF Buildbot. Full details are available at: http://ci.apache.org/builders/tomcat-trunk/builds/93 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: bb-vm_ubuntu Build Reason: Build Source Stamp: [branch tomcat/trunk] 90

DO NOT REPLY [Bug 46323] NTLM Authentication for Microsoft Active Directory controlled Intranet

2010-02-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=46323 --- Comment #5 from Christophe Dupriez 2010-02-11 13:05:59 UTC --- I cannot check the password because I would then need to make a "bind" from Tomcat. This bind would be originating from the server (and, if I remember well, would be seen a

DO NOT REPLY [Bug 45794] Patch causes JNDIRealm to bind with user entered credentials

2010-02-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45794 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

DO NOT REPLY [Bug 45794] Patch causes JNDIRealm to bind with user entered credentials

2010-02-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=45794 --- Comment #3 from Candid Dauth 2010-02-11 12:43:43 UTC --- This patch has been included in the Tomcat distribution since version 6.0.21. I guess the bug can be closed? -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.

DO NOT REPLY [Bug 46323] NTLM Authentication for Microsoft Active Directory controlled Intranet

2010-02-11 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=46323 --- Comment #4 from Candid Dauth 2010-02-11 12:38:42 UTC --- If I understand it right, an NTLM token (or whatever you call it) consists of the encrypted username and password (and in NTLMv2 the hostname you authenticate to). When I want to

svn commit: r908942 - /tomcat/trunk/webapps/docs/config/systemprops.xml

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 12:23:36 2010 New Revision: 908942 URL: http://svn.apache.org/viewvc?rev=908942&view=rev Log: This is no longer security related as unsafe usage is blocked Modified: tomcat/trunk/webapps/docs/config/systemprops.xml Modified: tomcat/trunk/webapps/docs/config/sys

Re: svn commit: r907390 - in /tomcat/site/trunk: docs/whoweare.html xdocs/whoweare.xml

2010-02-11 Thread Mark Thomas
On 07/02/2010 07:33, t...@apache.org wrote: > Author: timw > Date: Sun Feb 7 07:33:25 2010 > New Revision: 907390 > > URL: http://svn.apache.org/viewvc?rev=907390&view=rev > Log: > Adding timw to committers list. Tim when you did svn up on people.a.o you didn't set your umask first. You are now

svn commit: r908937 - in /tomcat/site/trunk: docs/security-5.html docs/security-6.html xdocs/security-5.xml xdocs/security-6.xml

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 11:42:48 2010 New Revision: 908937 URL: http://svn.apache.org/viewvc?rev=908937&view=rev Log: Fix svn revs for CVE-2009-3555 Make wording more consistent with outher entries Modified: tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.h

Re: svn commit: r908917 - in /tomcat/site/trunk: docs/security-6.html xdocs/security-6.xml

2010-02-11 Thread Mark Thomas
On 11/02/2010 11:23, Konstantin Kolinko wrote: > 2010/2/11 : >> Author: markt >> Date: Thu Feb 11 10:37:24 2010 >> New Revision: 908917 > > 1. rev.881774 mentioned in the text, but the link points to rev.891292. I was trying to avoid referencing the old fix that didn't work. I'll take another lo

Re: svn commit: r908917 - in /tomcat/site/trunk: docs/security-6.html xdocs/security-6.xml

2010-02-11 Thread Konstantin Kolinko
2010/2/11 : > Author: markt > Date: Thu Feb 11 10:37:24 2010 > New Revision: 908917 > > URL: http://svn.apache.org/viewvc?rev=908917&view=rev > Log: > Add a note on where to find the "not a vulnerability section" > Add the missing severity and svn reference for CVE-2009-3555 > Remove the reference

JK 1.2.29-dev Available for testing

2010-02-11 Thread Mladen Turk
Hi, Test snapshot for 1.2.29 is available at http://tomcat.apache.org/dev/dist/tomcat-connectors/jk/ Sources can be found inside source/jk-1.2.29 directories while the windows binaries are inside: binaries/win32/jk-1.2.29 and binaries/win64/jk-1.2.29 documentation is inside docs/jk-1.2.29 Pleas

svn commit: r908918 - in /tomcat/site/trunk: docs/security-7.html docs/security.html xdocs/security-7.xml xdocs/security.xml

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 10:40:47 2010 New Revision: 908918 URL: http://svn.apache.org/viewvc?rev=908918&view=rev Log: Add a page for Tomcat 7. Link it from the main pager and fix some typos Move Tomcat 4 to archived list Added: tomcat/site/trunk/docs/security-7.html (with props)

svn commit: r908917 - in /tomcat/site/trunk: docs/security-6.html xdocs/security-6.xml

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 10:37:24 2010 New Revision: 908917 URL: http://svn.apache.org/viewvc?rev=908917&view=rev Log: Add a note on where to find the "not a vulnerability section" Add the missing severity and svn reference for CVE-2009-3555 Remove the reference to CVE-2009-3555 from the fix

svn commit: r908916 - in /tomcat/site/trunk: docs/security-5.html xdocs/security-5.xml

2010-02-11 Thread markt
Author: markt Date: Thu Feb 11 10:35:55 2010 New Revision: 908916 URL: http://svn.apache.org/viewvc?rev=908916&view=rev Log: Add a note on where to find the "not a vulnerability section" Add the missing severity and svn reference for CVE-2009-3555 Modified: tomcat/site/trunk/docs/security-5.h

Re: [VOTE] Release Apache Tomcat Native 1.1.20

2010-02-11 Thread jean-frederic clere
On 02/10/2010 11:19 AM, Mladen Turk wrote: > Hi, > > Native 1.1.20 is available for testing. > Compared with 1.1.19 and earlier versions it has a bug fix that > prevents crashing JVM on shutdown. > > If you want to take a look, the final source distribution can be > downloaded from: > http://tomc

svn commit: r908882 - /tomcat/jk/trunk/native/netscape/Makefile.vc

2010-02-11 Thread mturk
Author: mturk Date: Thu Feb 11 08:55:31 2010 New Revision: 908882 URL: http://svn.apache.org/viewvc?rev=908882&view=rev Log: Add exported Makefile Modified: tomcat/jk/trunk/native/netscape/Makefile.vc (contents, props changed) Modified: tomcat/jk/trunk/native/netscape/Makefile.vc URL: htt

svn commit: r908881 - /tomcat/jk/trunk/native/netscape/Makefile.vc

2010-02-11 Thread mturk
Author: mturk Date: Thu Feb 11 08:54:31 2010 New Revision: 908881 URL: http://svn.apache.org/viewvc?rev=908881&view=rev Log: Add exported Makefile Added: tomcat/jk/trunk/native/netscape/Makefile.vc Added: tomcat/jk/trunk/native/netscape/Makefile.vc URL: http://svn.apache.org/viewvc/tomcat/j

svn commit: r908870 - /tomcat/jk/trunk/tools/jkrelease.sh

2010-02-11 Thread mturk
Author: mturk Date: Thu Feb 11 08:26:15 2010 New Revision: 908870 URL: http://svn.apache.org/viewvc?rev=908870&view=rev Log: Fix jkrelease. We have changed the svn layout Modified: tomcat/jk/trunk/tools/jkrelease.sh Modified: tomcat/jk/trunk/tools/jkrelease.sh URL: http://svn.apache.org/vie