Re: [5] [jndi] Few comments

Costin Manolache wrote: > Few weeks ago we discussed about using a JNDI layer to abstract the > config data storage. > > In addition JNDI is already used to abstract the resource storage ( > the files served by tomcat ). > > I played a bit with the existing code, and I have few proposals: > >

Re: [OT] Re: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Bojan Smojver wrote: > Quoting Bill Barker <[EMAIL PROTECTED]>: > >> I'm agreeing with Costin. Please move this discussion to >> [EMAIL PROTECTED] It is off-topic here. > > Promise not to write a single byte on this topic on Tomcat-Dev list after > this e-mail. Please don't missunderstand th

DO NOT REPLY [Bug 13015] New: - tag can't include tag in conf/server.xml

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

cvs commit: jakarta-tomcat-connectors/jk/xdocs/jk2 configweb.xml

mturk 2002/09/25 23:22:06 Modified:jk/xdocs/jk2 configweb.xml Log: Just some additional installation info from Eugene Gluzberg. Revision ChangesPath 1.8 +13 -4 jakarta-tomcat-connectors/jk/xdocs/jk2/configweb.xml Index: configweb.xml ==

Re: [OT] Re: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Quoting Bill Barker <[EMAIL PROTECTED]>: > I'm agreeing with Costin. Please move this discussion to > [EMAIL PROTECTED] It is off-topic here. Promise not to write a single byte on this topic on Tomcat-Dev list after this e-mail. Bojan - This ma

RE: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Quoting Costin Manolache <[EMAIL PROTECTED]>: > Bojan Smojver wrote: > > > All right then, let's talk about JSP's. If I host my clients' JSP's on my > > server and a web designer puts this in (BTW, he wasn't forced, he simply > > decided he wanted to do it): > > And your proposed solution is ..

DO NOT REPLY [Bug 13014] New: - OS/390/USS - Invalid  in servlet mapping

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

[OT] Re: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

I'm agreeing with Costin. Please move this discussion to [EMAIL PROTECTED] It is off-topic here. - Original Message - From: "Bojan Smojver" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Wednesday, September 25, 2002 7:33 PM Subject: Re: [SECURITY] Apache Tom

RE: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Bojan Smojver wrote: > All right then, let's talk about JSP's. If I host my clients' JSP's on my > server and a web designer puts this in (BTW, he wasn't forced, he simply > decided he wanted to do it): And your proposed solution is ... ? Do you have a patch to solve this problem ? If so, sen

DO NOT REPLY [Bug 12968] - [Possible security hole?] package.access security in Catalina/CatalinaService

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

Re: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Not if: runtime.interpolate.string.literals = false Bojan Quoting Tim Funk <[EMAIL PROTECTED]>: > That's what code reviews are for and in absence of that - firing your > developers. > > Wouldn't I also get an out of memory with this in Velocity? > > #set($oom = "

Classloader issue, please help.

Hi, all: Recently I came cross a strange problem. And I have post an email at http://marc.theaimsgroup.com/?l=tomcat-user&m=103292834825643&w=2, but seems no reply. Today i saw a simliar post at axis-dev maillist, http://marc.theaimsgroup.com/?l=axis-dev&m=103298650718737&w=2 Seems this i

can't get context with uri that is sub-dir of current context

Can anyone shed some light on why the org.apache.catalina.core.ApplicationContext.getContext(uri) method was written to return the current context whenever the uri passed into it was a "sub-dir" of the current context's path? For example, calling getContext("/common") from within a context th

RE: help....please.....RE: java.lang.NoSuchMethodError after re-build ing

thanks for the help, started from scratch and had no probs -Original Message- From: Amy Roh [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 25, 2002 4:55 PM To: Tomcat Developers List Subject: Re: helpplease.RE: java.lang.NoSuchMethodError after re-build ing > I'm getti

Re: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

That's what code reviews are for and in absence of that - firing your developers. Wouldn't I also get an out of memory with this in Velocity? #set($oom = "" ) #foreach( $i in [-2147483648..2147483648] ) #set($oom = "$oom$oom$oom$oom$oom$oom$oo

RE: [SECURITY] Apache Tomcat 4.x JSP source disclosurevulnerability

With power comes responsibility. <% System.exit(1) %> -bob P.S. Yea, I know the SecurityManager can catch this, if enabled. On Wed, 2002-09-25 at 21:22, Bojan Smojver wrote: > Quoting Costin Manolache <[EMAIL PROTECTED]>: > > > And Velocity does have a mailing list where all this can be discu

RE: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Quoting Costin Manolache <[EMAIL PROTECTED]>: > And Velocity does have a mailing list where all this can be discussed. > > This is tomcat-dev - for servlet and jsp development. > > If you have any ideas on how to improve jasper - great, but please don't > waste our time with off topic subjects.

DO NOT REPLY [Bug 13011] - mod_jk2.c (CVS v 1.53) compile messages

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 13011] New: - mod_jk2.c (CVS v 1.53) compile messages

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

Re: help....please.....RE: java.lang.NoSuchMethodError after re-building

> I'm getting the following error when trying to run tc 4, after having built > the current cvs version succesfully: > > java.lang.NoSuchMethodError: > javax.management.MBeanServerFactory.findMBeanServer(Ljava/lang/String;)Ljava > /util/List; > at org.apache.commons.modeler.Registry.getS

RE: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Bojan Smojver wrote: > On Wed, 2002-09-25 at 20:59, John Trollinger wrote: > >> Don't buy all the velocity hype.. It is not as great as they make it out >> to be. > > What hype? I don't follow here... > > Velocity is just a template language, plain, simple and relatively > small. It's "greatne

help....please.....RE: java.lang.NoSuchMethodError after re-building

I know you are all busy, but should I have posted this to the users list? -Ryan -Original Message- From: Smith, Ryan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 24, 2002 8:06 PM To: 'Tomcat Developers List' Subject: java.lang.NoSuchMethodError after re-building I'm getting t

RE: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

On Wed, 2002-09-25 at 20:59, John Trollinger wrote: > Don't buy all the velocity hype.. It is not as great as they make it out > to be. What hype? I don't follow here... Velocity is just a template language, plain, simple and relatively small. It's "greatness" comes from the fact that you canno

Re: [Off Topic] SecurityManager XML Policy questions/recommendations

Hi Glenn, see below... Glenn Nielsen wrote: > Hi Jean-Francois, > > My comments are intermixed below. > > Jean-Francois Arcand wrote: > >> Hi Glenn, here is a couple of questions regarding your >> SecurityManager XML works: >> >> (1) All permissions seems to be stored in class SecurityPolicyB

Re: JK2 logo

Nicely done! Bojan On Wed, 2002-09-25 at 19:30, Mladen Turk wrote: > Just a suggestion. > > > MT. > > > -- > To unsubscribe, e-mail: > For additional commands, e-mail: -- To unsubscribe, e-mail: For

Re: cvs commit: jakarta-tomcat-connectors/jk/native2/commonjk_requtil.c

On Wed, 2002-09-25 at 18:28, Henri Gomez wrote: > > Actually, Mladen already fixed it. It's just that he had another, different typo > > in the description of the fix, which was either: > > > > - a very good joke :-) > > - unintentional and therefore an even better joke ;-) > > What do you mea

DO NOT REPLY [Bug 13000] - tag file handler generation with complex attributes

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 13004] New: - Error in page compilation when comment is place at the end of scriptlet and the scriptlet is the last line in the jsp page.

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

Building jakarta-tomcat-connectors issue

Hi! I have been trying to follow the instructions (http://jakarta.apache.org/tomcat/tomcat-4.1-doc/BUILDING.txt) on how to build Tomcat from source. After awhile all needed packages was installed and the build.properties was configured properly. > ant dist BUILD FAILED /home/fwk/jakarta/j

Re: [Off Topic] SecurityManager XML Policy questions/recommendations

Hi Jean-Francois, My comments are intermixed below. Jean-Francois Arcand wrote: > Hi Glenn, here is a couple of questions regarding your SecurityManager > XML works: > > (1) All permissions seems to be stored in class SecurityPolicyBase. The > Map used to store permission is static, meaning

Re: JK 1.2.0 jni restricted to TC 3.3.1

Henri Gomez wrote: >>> Make the bridge class a parameter. >> >> >> That was the idea but we could have also to change method call > > Or may be a little better and more secure will be to specify bridge > target ie : > > tomcat 3.2, tomcat 3.3, tomcat 4.0, tomcat 4.1 or tomcat 5.0. > > The re

[5] [jndi] Few comments

Few weeks ago we discussed about using a JNDI layer to abstract the config data storage. In addition JNDI is already used to abstract the resource storage ( the files served by tomcat ). I played a bit with the existing code, and I have few proposals: 1. Consistent use of Name methods. As you

cvs commit: jakarta-tomcat-connectors/naming build.xml

costin 2002/09/25 12:32:17 Added: naming build.xml Log: Initial build file, with a bit of test and a target to lauch the example browser. Revision ChangesPath 1.1 jakarta-tomcat-connectors/naming/build.xml Index: build.xml =

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/conf - New directory

costin 2002/09/25 12:31:32 jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/conf - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/java - New directory

costin 2002/09/25 12:31:24 jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/java - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/memory - New directory

costin 2002/09/25 12:31:28 jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/memory - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/id - New directory

costin 2002/09/25 12:31:22 jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/id - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/fs - New directory

costin 2002/09/25 12:31:19 jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/fs - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/cache - New directory

costin 2002/09/25 12:31:16 jakarta-tomcat-connectors/naming/src/org/apache/naming/modules/cache - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/handler/jndi - New directory

costin 2002/09/25 12:31:09 jakarta-tomcat-connectors/naming/src/org/apache/naming/handler/jndi - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/handler - New directory

costin 2002/09/25 12:31:06 jakarta-tomcat-connectors/naming/src/org/apache/naming/handler - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/modules - New directory

costin 2002/09/25 12:30:55 jakarta-tomcat-connectors/naming/src/org/apache/naming/modules - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/util - New directory

costin 2002/09/25 12:30:52 jakarta-tomcat-connectors/naming/src/org/apache/naming/util - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/core - New directory

costin 2002/09/25 12:29:30 jakarta-tomcat-connectors/naming/src/org/apache/naming/core - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/ant JndiProperties.java JndiSet.java

costin 2002/09/25 12:29:18 Added: naming/src/org/apache/naming/ant JndiProperties.java JndiSet.java Log: 2 tasks for testing jndi and to enable manipulation of jndi tree from ant. [embed] ant is needed to support ${jndi:...} properties. Revisio

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming/ant - New directory

costin 2002/09/25 12:27:30 jakarta-tomcat-connectors/naming/src/org/apache/naming/ant - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache/naming - New directory

costin 2002/09/25 12:27:02 jakarta-tomcat-connectors/naming/src/org/apache/naming - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src/org/apache - New directory

costin 2002/09/25 12:26:59 jakarta-tomcat-connectors/naming/src/org/apache - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src jndi.properties

costin 2002/09/25 12:26:53 Added: naming/src jndi.properties Log: The new (experimental) jndi. jndi.properties is used by the new jndi to set properties automatically. ( sort-of discovery/autoconfiguration ) Revision ChangesPath 1.1 jakarta-tom

cvs commit: jakarta-tomcat-connectors/naming/src/org - New directory

costin 2002/09/25 12:25:55 jakarta-tomcat-connectors/naming/src/org - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming/src - New directory

costin 2002/09/25 12:25:50 jakarta-tomcat-connectors/naming/src - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-connectors/naming - New directory

costin 2002/09/25 12:25:32 jakarta-tomcat-connectors/naming - New directory -- To unsubscribe, e-mail: For additional commands, e-mail:

cvs commit: jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/compiler Generator.java

luehe 2002/09/25 12:15:24 Modified:jasper2/src/share/org/apache/jasper/compiler Generator.java Log: Fixed 13000: tag file handler generation with complex attributes Revision ChangesPath 1.104 +11 -7 jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper/com

Re: [PATCH] [JK2 docs] Minor patch to jk2 docs

Can anyone check this in? Eugene Gluzberg wrote: > Just some additional installation info. > > > > > Index: jk/xdocs/jk2/configweb.xml > === > RCS file: /hom

Re: [POLL] aprize jk2

I am against only because many apache 1.3 users (who installed apache from RPMs, like me) will not be able to use jk2, unless there an easy way to install apr libs/includes, etc on top of apache1.3 Is there? -- To unsubscribe, e-mail: For additional commands,

DO NOT REPLY [Bug 13000] New: - tag file handler generation with complex attributes

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 12931] - Catalina eats System.out.println()

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 12931] - Catalina eats System.out.println()

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 12931] - Catalina eats System.out.println()

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 12931] - Catalina eats System.out.println()

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

cvs commit: jakarta-tomcat-connectors/jk/native2/common jk_uriMap.c

mturk 2002/09/25 07:42:51 Modified:jk/native2/common jk_uriMap.c Log: Change the order of mapping if the exact map is not found. Check the aliases prior to the *:port. Revision ChangesPath 1.44 +3 -3 jakarta-tomcat-connectors/jk/native2/common/jk_uriMap.c

cvs commit: jakarta-tomcat-connectors/jk/xdocs/images jk2.png jk2.gif

mturk 2002/09/25 07:31:40 Added: jk/xdocs/images jk2.png jk2.gif Log: Add jk2 logos. Hope that there will be no major objections about my artistic capabilities :-) Revision ChangesPath 1.1 jakarta-tomcat-connectors/jk/xdocs/images/jk2.png

Re: [SECURITY] Apache Tomcat 4.x JSP source disclosurevulnerability

on 2002/9/25 6:27 AM, "Costin Manolache" <[EMAIL PROTECTED]> wrote: > Well, this is not a very good policy IMO. Self-contained applications are > a good thing ( IMO ). Then store your templates in the WEB-INF directory. That is what we do with Scarab, which is 100% self contained. > And of cour

Re: [5.0] Build issue - where is jasper.runtime.el and why is it checked in as binary ?

Kin-Man Chung wrote: > >> Date: Wed, 25 Sep 2002 09:20:16 +0200 >> From: Remy Maucherat <[EMAIL PROTECTED]> >> Subject: Re: [5.0] Build issue - where is jasper.runtime.el and why is it > checked in as binary ? >> To: Tomcat Developers List <[EMAIL PROTECTED]> >> >> Costin Manolache wrote: >> >

cvs commit: jakarta-servletapi-5/jsr154/src/share/dtd j2ee_1_4.xsd web-app_2_4.xsd xml.xsd

kinman 2002/09/25 10:01:32 Modified:jsr154/src/share/dtd j2ee_1_4.xsd web-app_2_4.xsd xml.xsd Log: - Submitted by Mark Roth: "Attached is a patch to bring the other Servlet 2.4 XSD files up to date with the JSP patch I submitted on September 19." Revision Changes

DO NOT REPLY [Bug 12931] - Catalina eats System.out.println()

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

cvs commit: jakarta-tomcat-connectors/jk/xdocs/jk2 configweb.xml

mturk 2002/09/25 09:47:14 Modified:jk/xdocs/jk2 configweb.xml Log: Add more desription to the uri section. Please check the english used :) Revision ChangesPath 1.7 +26 -7 jakarta-tomcat-connectors/jk/xdocs/jk2/configweb.xml Index: configweb.xml

RE: [POLL] Tomcat 3.3.2 updates

> -Original Message- > From: Henri Gomez [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, September 25, 2002 5:55 AM > To: Tomcat Developers List > Subject: Re: [POLL] Tomcat 3.3.2 updates > > > > > > I take a look at this module and I

DO NOT REPLY [Bug 12968] - [Possible security hole?] package.access security in Catalina/CatalinaService

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

Re: [5.0] Build issue - where is jasper.runtime.el and why is itchecked in as binary ?

> Date: Wed, 25 Sep 2002 09:20:16 +0200 > From: Remy Maucherat <[EMAIL PROTECTED]> > Subject: Re: [5.0] Build issue - where is jasper.runtime.el and why is it checked in as binary ? > To: Tomcat Developers List <[EMAIL PROTECTED]> > > Costin Manolache wrote: > > See the subject :-) > > > > I'm

DO NOT REPLY [Bug 12998] New: - HTTPS gets changed to HTTP://servername:443

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

RE: [POLL] Tomcat 3.3.2 updates

Larry Isaacs wrote: > A first pass implementation, derived from what you have > done, can be found here: > > Great ! However, I remain to the opinion that JMX is a fundamental API that should be available to all applications, and it should p

Re: [POLL] Tomcat 3.3.2 updates

Bill Barker wrote: > My first choice is still for split-jars in j-t-c util. In TC 4.1.x/5.0 > both > jars go to server/lib (same as 3.3 lib/container). So Costin's dream of > every servlet being able to access JMX still requires a [VOTE]. :-) In > 3.3 > we can send one to lib/container and one

Re: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Jon Scott Stevens wrote: > Unlike JSP, we don't store (or encourage people to store) .vm files in the > webroot. They can be anywhere on the fileystem and with custom resource > loaders could even be stored in a database on another machine somewhere. Well, this is not a very good policy IMO. Sel

Re: [POLL] aprize jk2

> I have just a question what happends with jni (we have to use the same > threads for JVM and Apache)? Yes. That's how the jni is designed to work - avoiding thread switching and doing all processing in the request thread ( just like mod_perl or mod_php would do it ) is important. However tha

Re: [VOTE] commit new Tomcat 4 SecurityManager XML Policy code to CVS

Glenn Nielsen wrote: > Costin, > > This is getting off topic from my original request. > (And I am partly responsible ;-) > > My proposal is for adding thr XML policy code to the current > existing Tomcat 4 HEAD branch. > > I would like to commit the code to CVS. Building Tomcat with this > s

Re: [5.0] Build issue - where is jasper.runtime.el and why is it checked in as binary ?

Remy Maucherat wrote: > Costin Manolache wrote: >> See the subject :-) >> >> I'm talking about jasper2/lib/jsp2el.jar - it contains >> org.apache.jasper.runtime.el classes. There is no reason to check in the >> binary and not the sources ! > > The source is in JSTL (unreleased version), and Kin

Re: Servlet API 2.2 & 2.3

on 2002/9/25 9:16 AM, "Adrian Almenar" <[EMAIL PROTECTED]> wrote: > Ok, but can you put a release on the servlet api ?? > > if i only want the servlet api, i need to download all tomcat tar.gz. > > how can i download a servlet 2.2, 2.3 api source without being a > nightly. Either grab it from

[Off Topic] SecurityManager XML Policy questions/recommendations

Hi Glenn, here is a couple of questions regarding your SecurityManager XML works: (1) All permissions seems to be stored in class SecurityPolicyBase. The Map used to store permission is static, meaning all permissions will be stored in (why all? doing permissions.implies will browse every p

Re: Servlet API 2.2 & 2.3

Ok, but can you put a release on the servlet api ?? if i only want the servlet api, i need to download all tomcat tar.gz. how can i download a servlet 2.2, 2.3 api source without being a nightly. On Wed, 2002-09-25 at 01:52, Bill Barker wrote: > > - Original Message - > From: "Adrian A

Connector not working in Tomcat 4.1.12

I've been working on a JMS Connector (for calling HTTPServlets via JMS) that was working under 4.0.3 and won't load under 4.1.12. Has org.apache.catalina.loader.StandardClassLoader changed? What classpath does this loader user when Tomcat boots up? I'm getting errors stating can't find classes

Re: jk 1.2.0 and cygwin (showstoper ?)

Henri Gomez wrote: > More on cygwin : > > libtool seems to need more works, but using makefile.apxs > in jk/native/apache-1.3 seems to works (after fixing socketvar.h > in jk_global.h) > > ./common/ -Ic:progra~1javasoft1.3.1/include > gcc --shared -o mod_jk.so jk_context.o jk_ajp_common.o jk_md5

RE: [POLL] aprize jk2

> From: Henri Gomez > > > > Nothing cannot use the JNI without APR even right now. > > We are attaching threads (that's the only way how it can be done). > > It's really a pain for example when using JNI from EBCDIC > systems like AS400 and BS2000 which need to have translation > of strings.

Re: [POLL] aprize jk2

Henri Gomez wrote: > Mladen Turk wrote: > >> >>> -Original Message- >>> From: jean-frederic clere >>> I have always supported the use of APR. We should use it every where! >>> >>> I have just a question what happends with jni (we have to use the >>> same threads for JVM and Apache)? >>>

Re: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Yes I agree that some sort of JSP Tagging can be beneficial but at times it is overkill. I think the ultimate solution would be a combination of both. --- Bojan Smojver <[EMAIL PROTECTED]> wrote: > On Wed, 2002-09-25 at 07:31, Matt Fury wrote: > > > What's easier though? Upgrading a Tomcat serv

RE: [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

Don't buy all the velocity hype.. It is not as great as they make it out to be. Please no flames from the velocity disiples as I will not respond. > -Original Message- > From: Bojan Smojver [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, September 24, 2002 6:23 PM > To: Tomcat Dev List > Su

DO NOT REPLY [Bug 12931] - Catalina eats System.out.println()

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 12931] - Catalina eats System.out.println()

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 12755] - welcome file for jsp does not work

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

DO NOT REPLY [Bug 11849] - Nested includes with JSTL1.0EA do not work

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_b

Re: [POLL] Tomcat 3.3.2 updates

> I take a look at this module and I really like it. What about using it and remove MxInterceptor ? Could we bundle this module in TC 3.3.2 ? -- To unsubscribe, e-mail: For additional commands, e-mail:

Re: [POLL] aprize jk2

Mladen Turk wrote: > >>-Original Message- >>From: jean-frederic clere >> >>I have always supported the use of APR. We should use it every where! >> >>I have just a question what happends with jni (we have to use >>the same threads >>for JVM and Apache)? >> > > > Nothing cannot use th

Re: JK2 logo

Mladen Turk wrote: > Just a suggestion. +1, It's way better than those I provided for JK 1.2.0 (I never be a decent graphist) Good works Mladen -- To unsubscribe, e-mail: For additional commands, e-mail:

RE: [POLL] aprize jk2

> -Original Message- > From: jean-frederic clere > > I have always supported the use of APR. We should use it every where! > > I have just a question what happends with jni (we have to use > the same threads > for JVM and Apache)? > Nothing cannot use the JNI without APR even righ

JK2 logo

Just a suggestion. MT. jk2.png Description: PNG image -- To unsubscribe, e-mail: For additional commands, e-mail:

Re: [POLL] aprize jk2

Mladen Turk wrote: > I would like to make a poll (something non-obligatory as a vote) about > using apr/apr-util inside the jk2. The reason is quite simple, we have > lots of extra code that we either duplicate or just mimic. Since the APR > is already default for Apache2 and IIS, IMO there is no

Re: JTC tagged JK_1_2_0

Henri Gomez wrote: > Ignacio J. Ortega wrote: > >>> De: Henri Gomez [mailto:[EMAIL PROTECTED]] >>> Enviado el: 25 de septiembre de 2002 0:54 >> >> >> >> I will move the tag in the isapi_redirector.c file, to port some fixes >> done in jk2, this fixes involve to tighten the security measures for I

cvs commit: jakarta-tomcat-connectors/jk/native2/common jk_pool.c

hgomez 2002/09/25 01:44:20 Modified:jk/native2/common jk_pool.c Log: Correct typos before Mladen or Bojan detect them ;) Revision ChangesPath 1.13 +4 -4 jakarta-tomcat-connectors/jk/native2/common/jk_pool.c Index: jk_pool.c =

cvs commit: jakarta-tomcat-connectors/jk/native/common jk_jni_worker.c

hgomez 2002/09/25 01:33:04 Modified:jk/native/common jk_jni_worker.c Log: remove use of #pragma and use dynamic ebcdic->ascii conversion, make it less iSeries specific Revision ChangesPath 1.21 +14 -41jakarta-tomcat-connectors/jk/native/common/jk_jni_worker.

Re: cvs commit: jakarta-tomcat-connectors/jk/native2/common jk_requtil.c

Bojan Smojver wrote: > Quoting Henri Gomez <[EMAIL PROTECTED]>: > > >>Bojan Smojver wrote: >> >>>Quoting [EMAIL PROTECTED]: >>> >>> >>> In the C language we use #ifdef not #ifef :-) >>> >>> >>>Only if something like this works: >>> >>>#define #ifef #idef >>> >>>;-) >> >>Oups, I'll fix the t

  1   2   >