On 03/13/2014 08:06 AM, Emmanuel Bourg wrote: > Le 05/03/2014 07:17, tony mancill a écrit : > >> Thanks for reporting this. I checked and it looks like this class was >> recently added to tomcat6, and is connected with the response to >> CVE-2013-4590. 6.0.37 does not contain it. >> >> I suspect we have conflicting implementations of that class on the >> classpath that need to be ironed out for the classloader. > > LocalResolver is in tomcat-coyote.jar. We just have to add it to the > solr classpath. It's a bit odd to put a Tomcat connector in the > classpath of a web application though. > > This issue also prevents the lucene-solr package from building.
I didn't have much (any) luck adding it to solr, either by adding it to WEB-INF/lib, or trying to setup a ContextHandler that would load the jar. (This is probably on me; I didn't find the documentation that easy to follow. Theoretically, it's possible.) What did work right away is add /usr/share/java/tomcat-coyote.jar to /etc/jetty/start.config. However, this would mean a change to the jetty package to have a tomcat6 JAR in its classpath - that seems odd. I think maybe it would be better to spend some time and get solr working with jetty8. Also, solr-tomcat works fine with tomcat6-6.0.39 tony
signature.asc
Description: OpenPGP digital signature