Re: [VOTE] Release Apache Tomcat 8.0.2

2014-02-07 Thread Mark Thomas
On 07/02/2014 01:43, Konstantin Kolinko wrote:
> 2014-02-07 Ognjen Blagojevic :
>> On 6.2.2014 21:23, Mark Thomas wrote:
>>>
>>> - Update to the latest DBCP 2 snapshot
>>
>> (...)
>>>
>>> The proposed 8.0.2 release is:
>>> [X] Broken - do not release
>>>
>>> [ ] Alpha  - go ahead and release as 8.0.2 (alpha)
>>> [ ] Beta   - go ahead and release as 8.0.2 (beta)
>>> [ ] Stable - go ahead and release as 8.0.2 (stable)
>>
>>
>> (non-binding)
>>
>> All my webapps that are using DBCP2 are failing when I upgrade from 8.0.1 to
>> 8.0.2.
>>
>> root cause
>> java.lang.ClassNotFoundException:
>> org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory
>>
>> It seems that the whole package org.apache.tomcat.dbcp.dbcp2 is missing from
>> lib/tomcat-dbcp.jar shipped with 8.0.2.
>>
> 
> Thanks for the report!
> 
> [X] Broken - do not release
> 
> Should be fixed by
> http://svn.apache.org/r1565512
> (The classes are now there. I have not tested whether the pool itself works).

Hmm. The build should have failed in that case. I'll look into why it
didn't.

> For the record, for 8.0.2:
> Smoke testing OK.
> Testsuite passed successfully BIO, NIO, APR,
> on Win7 using 32-bit Java 7u51.
> 
> There is no digital signature on the Windows installer exe file
> (neither there was any in 8.0.1).

Do you mean the OpenPGP *.asc file (which should be present) or BZ56079?

The former would be a problem, the latter is expected.

Mark


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[VOTE][CANCELLED] Release Apache Tomcat 8.0.2

2014-02-07 Thread Mark Thomas
On 07/02/2014 00:56, Ognjen Blagojevic wrote:
> On 6.2.2014 21:23, Mark Thomas wrote:
>> - Update to the latest DBCP 2 snapshot
> (...)
>> The proposed 8.0.2 release is:
>> [X] Broken - do not release
>> [ ] Alpha  - go ahead and release as 8.0.2 (alpha)
>> [ ] Beta   - go ahead and release as 8.0.2 (beta)
>> [ ] Stable - go ahead and release as 8.0.2 (stable)
> 
> (non-binding)
> 
> All my webapps that are using DBCP2 are failing when I upgrade from
> 8.0.1 to 8.0.2.
> 
> root cause
> java.lang.ClassNotFoundException:
> org.apache.tomcat.dbcp.dbcp2.BasicDataSourceFactory
> 
> It seems that the whole package org.apache.tomcat.dbcp.dbcp2 is missing
> from lib/tomcat-dbcp.jar shipped with 8.0.2.

That isn't good. I'll re-roll the release.

Mark


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565603 - /tomcat/trunk/build.xml

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 10:00:09 2014
New Revision: 1565603

URL: http://svn.apache.org/r1565603
Log:
Add a check to the build to catch problems copying the DBCP resources

Modified:
tomcat/trunk/build.xml

Modified: tomcat/trunk/build.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/build.xml?rev=1565603&r1=1565602&r2=1565603&view=diff
==
--- tomcat/trunk/build.xml (original)
+++ tomcat/trunk/build.xml Fri Feb  7 10:00:09 2014
@@ -2757,6 +2757,18 @@ Apache Tomcat ${version} native binaries
   
 
 
+   
+
+
+
+  
+
+  
+
+  
+
+  
+
 

[jira] [Commented] (MTOMCAT-255) Getting "Target Unreachable, identifier 'pessoaBean' resolved to null" on tomcat:run but not in tomcat:run-war

2014-02-07 Thread Tamal Kanti Nath (JIRA)

[ 
https://issues.apache.org/jira/browse/MTOMCAT-255?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13894365#comment-13894365
 ] 

Tamal Kanti Nath commented on MTOMCAT-255:
--

Gilberto, yes, both of us are facing the same problem.

I think classpath scanning is not working at all for tomcat7:run goal. That's 
why annotations (@ManagedBean, @FacesValidator, @FacesConverter etc.) are not 
working. The root cause can be in JSF side as well.

> Getting "Target Unreachable, identifier 'pessoaBean' resolved to null" on 
> tomcat:run but not in tomcat:run-war
> --
>
> Key: MTOMCAT-255
> URL: https://issues.apache.org/jira/browse/MTOMCAT-255
> Project: Apache Tomcat Maven Plugin
>  Issue Type: Bug
>  Components: tomcat7
>Affects Versions: 2.2
> Environment: gilberto.andrade@A37710:~$ mvn -version
> Apache Maven 3.0.4 (r1232337; 2012-01-17 05:44:56-0300)
> Maven home: /home/gilberto.andrade/bin/maven
> Java version: 1.7.0_45, vendor: Oracle Corporation
> Java home: /usr/java/jdk1.7.0_45/jre
> Default locale: pt_BR, platform encoding: UTF-8
> OS name: "linux", version: "3.7.10-1.24-desktop", arch: "amd64", family: 
> "unix"
>Reporter: Gilberto C Andrade
>Assignee: Olivier Lamy (*$^¨%`£)
>Priority: Minor
> Attachments: MTOMCAT-255.zip
>
>
> Simple JSF 2.2 project with just one manage bean(PessoaMb) and one xhtml page.
> 1 Run mvn clean tomcat7:run 
> 2 hitting  http://localhost:8080/MTOMCAT-255/pessoaView.xhtml
> 3 enter some value on field or click the consultar button
> The same steps works when using tomcat7:run-war.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565605 - /tomcat/trunk/build.xml

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 10:09:40 2014
New Revision: 1565605

URL: http://svn.apache.org/r1565605
Log:
Tab police

Modified:
tomcat/trunk/build.xml

Modified: tomcat/trunk/build.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/build.xml?rev=1565605&r1=1565604&r2=1565605&view=diff
==
--- tomcat/trunk/build.xml (original)
+++ tomcat/trunk/build.xml Fri Feb  7 10:09:40 2014
@@ -2757,7 +2757,7 @@ Apache Tomcat ${version} native binaries
   
 
 
-   
+
 
 
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 8.0.2

2014-02-07 Thread Konstantin Kolinko
2014-02-07 Mark Thomas :
> On 07/02/2014 01:43, Konstantin Kolinko wrote:
>> 2014-02-07 Ognjen Blagojevic :
>>> On 6.2.2014 21:23, Mark Thomas wrote:
>>
>> There is no digital signature on the Windows installer exe file
>> (neither there was any in 8.0.1).
>
> Do you mean the OpenPGP *.asc file (which should be present) or BZ56079?
>
> The former would be a problem, the latter is expected.
>

The latter.
OK.

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[jira] [Commented] (MTOMCAT-255) Getting "Target Unreachable, identifier 'pessoaBean' resolved to null" on tomcat:run but not in tomcat:run-war

2014-02-07 Thread Tamal Kanti Nath (JIRA)

[ 
https://issues.apache.org/jira/browse/MTOMCAT-255?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13894441#comment-13894441
 ] 

Tamal Kanti Nath commented on MTOMCAT-255:
--

The root cause is: in tomcat7:run goal the resource path starts from 
/src/main/webapp and /WEB-INF/classes/ directory do not contain the compiled 
classes. It can easily be tested in a servlet:

request.getServletContext().getResourcePaths("/WEB-INF/classes/");

In tomcat7:run goal, the above code returns null. But In tomcat7:run-war goal, 
the above code returns packaged classes. If somebody can change 
ServletContext.getResourcePaths() to pick /target/classes/ for 
/WEB-INF/classes/, then the problem will be resolved.


> Getting "Target Unreachable, identifier 'pessoaBean' resolved to null" on 
> tomcat:run but not in tomcat:run-war
> --
>
> Key: MTOMCAT-255
> URL: https://issues.apache.org/jira/browse/MTOMCAT-255
> Project: Apache Tomcat Maven Plugin
>  Issue Type: Bug
>  Components: tomcat7
>Affects Versions: 2.2
> Environment: gilberto.andrade@A37710:~$ mvn -version
> Apache Maven 3.0.4 (r1232337; 2012-01-17 05:44:56-0300)
> Maven home: /home/gilberto.andrade/bin/maven
> Java version: 1.7.0_45, vendor: Oracle Corporation
> Java home: /usr/java/jdk1.7.0_45/jre
> Default locale: pt_BR, platform encoding: UTF-8
> OS name: "linux", version: "3.7.10-1.24-desktop", arch: "amd64", family: 
> "unix"
>Reporter: Gilberto C Andrade
>Assignee: Olivier Lamy (*$^¨%`£)
>Priority: Minor
> Attachments: MTOMCAT-255.zip
>
>
> Simple JSF 2.2 project with just one manage bean(PessoaMb) and one xhtml page.
> 1 Run mvn clean tomcat7:run 
> 2 hitting  http://localhost:8080/MTOMCAT-255/pessoaView.xhtml
> 3 enter some value on field or click the consultar button
> The same steps works when using tomcat7:run-war.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565633 - in /tomcat/trunk: build.properties.default res/maven/mvn.properties.default

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 12:37:50 2014
New Revision: 1565633

URL: http://svn.apache.org/r1565633
Log:
Prep for next release

Modified:
tomcat/trunk/build.properties.default
tomcat/trunk/res/maven/mvn.properties.default

Modified: tomcat/trunk/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/build.properties.default?rev=1565633&r1=1565632&r2=1565633&view=diff
==
--- tomcat/trunk/build.properties.default (original)
+++ tomcat/trunk/build.properties.default Fri Feb  7 12:37:50 2014
@@ -25,7 +25,7 @@
 # - Version Control Flags -
 version.major=8
 version.minor=0
-version.build=2
+version.build=3
 version.patch=0
 version.suffix=-dev
 

Modified: tomcat/trunk/res/maven/mvn.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/res/maven/mvn.properties.default?rev=1565633&r1=1565632&r2=1565633&view=diff
==
--- tomcat/trunk/res/maven/mvn.properties.default (original)
+++ tomcat/trunk/res/maven/mvn.properties.default Fri Feb  7 12:37:50 2014
@@ -35,7 +35,7 @@ maven.asf.release.repo.url=https://repos
 maven.asf.release.repo.repositoryId=apache.releases
 
 # Release version info
-maven.asf.release.deploy.version=8.0.2
+maven.asf.release.deploy.version=8.0.3
 
 #Where do we load the libraries from
 tomcat.lib.path=../../output/build/lib



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565634 - in /tomcat/tc8.0.x/tags/TOMCAT_8_0_3: ./ build.properties.default

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 12:39:22 2014
New Revision: 1565634

URL: http://svn.apache.org/r1565634
Log:
Tag 8.0.3

Added:
tomcat/tc8.0.x/tags/TOMCAT_8_0_3/
  - copied from r1565633, tomcat/trunk/
Modified:
tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default

Modified: tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default?rev=1565634&r1=1565633&r2=1565634&view=diff
==
--- tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default (original)
+++ tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default Fri Feb  7 
12:39:22 2014
@@ -27,7 +27,7 @@ version.major=8
 version.minor=0
 version.build=3
 version.patch=0
-version.suffix=-dev
+version.suffix=
 
 # - Build control flags -
 # Note enabling validation uses Checkstyle which is LGPL licensed



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565640 - /tomcat/trunk/build.xml

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 13:26:39 2014
New Revision: 1565640

URL: http://svn.apache.org/r1565640
Log:
Properties file move locations as well.

Modified:
tomcat/trunk/build.xml

Modified: tomcat/trunk/build.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/build.xml?rev=1565640&r1=1565639&r2=1565640&view=diff
==
--- tomcat/trunk/build.xml (original)
+++ tomcat/trunk/build.xml Fri Feb  7 13:26:39 2014
@@ -2737,6 +2737,11 @@ Apache Tomcat ${version} native binaries
 
   
 
+
+  
+
+  
+
 
 
 
   
 
+
+  
+
+  
+
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



7.0.51-dev async test failures (Was: Time for 7.0.51)

2014-02-07 Thread Konstantin Kolinko
2014-02-07 Konstantin Kolinko :
> 2014-02-05 Violeta Georgieva :
>> Hi,
>>
>> I want to start the release procedure for Tomcat 7.0.51.
>> If you would like to add something to this release please respond to this
>> mail.
>>
>
> Running testsuite BIO,NIO,APR on current 7.0.x (@ r1565513)
> Win7,  Java 6u45 (+7u51) 32-bit.
> (TC Native 1.1.29).
>
> Two test classes are failing:
>
> 1) TEST-org.apache.tomcat.websocket.TestWebSocketFrameClient.NIO.txt
> Testsuite: org.apache.tomcat.websocket.TestWebSocketFrameClient
> Tests run: 2, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 45,553 sec
>

On reruns this failure is reproducible, but not always. (3 out of 5 runs)

> Testcase: testBug56032 took 24,121 sec
> FAILED
> There are [1] connections still open
> junit.framework.AssertionFailedError: There are [1] connections still open
> at 
> org.apache.tomcat.websocket.TestWebSocketFrameClient.testBug56032(TestWebSocketFrameClient.java:164)
>
> 2) TEST-org.apache.catalina.core.TestAsyncContextImpl.APR.txt
> Testsuite: org.apache.catalina.core.TestAsyncContextImpl
> Tests run: 48, Failures: 17, Errors: 0, Skipped: 0, Time elapsed: 58,127 sec
>
> Here 17 tests of 48 failed.

On reruns this failure reproduces consistently.

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565669 - /tomcat/tc8.0.x/tags/TOMCAT_8_0_3/

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 14:58:25 2014
New Revision: 1565669

URL: http://svn.apache.org/r1565669
Log:
Drop 8.0.3 to pick up a further DBCP fix and a DBCP update I'd like to get into 
8.0.3

Removed:
tomcat/tc8.0.x/tags/TOMCAT_8_0_3/


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565721 - in /tomcat/trunk: build.properties.default webapps/docs/changelog.xml

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 16:51:05 2014
New Revision: 1565721

URL: http://svn.apache.org/r1565721
Log:
Update DBCP build to pick up version with SecurityManager improvements

Modified:
tomcat/trunk/build.properties.default
tomcat/trunk/webapps/docs/changelog.xml

Modified: tomcat/trunk/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/build.properties.default?rev=1565721&r1=1565720&r2=1565721&view=diff
==
--- tomcat/trunk/build.properties.default (original)
+++ tomcat/trunk/build.properties.default Fri Feb  7 16:51:05 2014
@@ -153,7 +153,7 @@ tomcat-native.win.2=${base-tomcat.loc.2}
 #commons-dbcp.home=${base.path}/commons-dbcp-${commons-dbcp.version}-src
 
#commons-dbcp-src.loc.1=${base-commons.loc.1}/dbcp/source/commons-dbcp-${commons-dbcp.version}-src.tar.gz
 
#commons-dbcp-src.loc.2=${base-commons.loc.2}/dbcp/source/commons-dbcp-${commons-dbcp.version}-src.tar.gz
-commons-dbcp.version=2.0-20140205.233744-168
+commons-dbcp.version=2.0-20140207.151643-170
 commons-dbcp.home=${base.path}/commons-dbcp2-2.0-SNAPSHOT-src
 
commons-dbcp-src.loc.1=https://repository.apache.org/content/repositories/snapshots/org/apache/commons/commons-dbcp2/2.0-SNAPSHOT/commons-dbcp2-${commons-dbcp.version}-src.tar.gz
 
commons-dbcp-src.loc.2=https://repository.apache.org/content/repositories/snapshots/org/apache/commons/commons-dbcp2/2.0-SNAPSHOT/commons-dbcp2-${commons-dbcp.version}-src.tar.gz

Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1565721&r1=1565720&r2=1565721&view=diff
==
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Fri Feb  7 16:51:05 2014
@@ -50,6 +50,12 @@
   
 Fix build of Apache Commons DBCP2 classes. (kkolinko)
   
+  
+Update Commons DBCP 2 to snapshot 170 dated 07 Feb 2014. This enables
+DBCP to work with a SecurityManager such that only DBCP needs to be
+granted the necessary permissions to communicate with the database.
+(markt)
+  
 
   
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565729 - in /tomcat/tc8.0.x/tags/TOMCAT_8_0_3: ./ build.properties.default

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 17:03:30 2014
New Revision: 1565729

URL: http://svn.apache.org/r1565729
Log:
Tag 8.0.3

Added:
tomcat/tc8.0.x/tags/TOMCAT_8_0_3/
  - copied from r1565725, tomcat/trunk/
Modified:
tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default

Modified: tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default
URL: 
http://svn.apache.org/viewvc/tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default?rev=1565729&r1=1565725&r2=1565729&view=diff
==
--- tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default (original)
+++ tomcat/tc8.0.x/tags/TOMCAT_8_0_3/build.properties.default Fri Feb  7 
17:03:30 2014
@@ -27,7 +27,7 @@ version.major=8
 version.minor=0
 version.build=3
 version.patch=0
-version.suffix=-dev
+version.suffix=
 
 # - Build control flags -
 # Note enabling validation uses Checkstyle which is LGPL licensed



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r4330 [2/2] - in /dev/tomcat/tomcat-8: v8.0.2/ v8.0.3/ v8.0.3/bin/ v8.0.3/bin/embed/ v8.0.3/bin/extras/ v8.0.3/src/

2014-02-07 Thread markt
Added: dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.tar.gz.md5
==
--- dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.tar.gz.md5 (added)
+++ dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.tar.gz.md5 Fri Feb  
7 17:36:14 2014
@@ -0,0 +1 @@
+7b58e1b2243b90950ec365038c7e7147 *apache-tomcat-8.0.3-src.tar.gz
\ No newline at end of file

Added: dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip
==
Binary file - no diff available.

Propchange: dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip
--
svn:mime-type = application/octet-stream

Added: dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip.asc
==
--- dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip.asc (added)
+++ dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip.asc Fri Feb  7 
17:36:14 2014
@@ -0,0 +1,17 @@
+-BEGIN PGP SIGNATURE-
+Version: GnuPG v1.4.9 (MingW32)
+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+=5LmI
+-END PGP SIGNATURE-

Added: dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip.md5
==
--- dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip.md5 (added)
+++ dev/tomcat/tomcat-8/v8.0.3/src/apache-tomcat-8.0.3-src.zip.md5 Fri Feb  7 
17:36:14 2014
@@ -0,0 +1 @@
+3456c3ae0b955b13a7b77f050fe3ad80 *apache-tomcat-8.0.3-src.zip
\ No newline at end of file



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[VOTE] Release Apache Tomcat 8.0.3

2014-02-07 Thread Mark Thomas
The proposed Apache Tomcat 8.0.3 release is now available for voting.

The main changes since 8.0.2 are:
- Fix DBCP build
- Update DBCP version to include recent fix for running under a
  security manager without needed to grant additional permissions
  to web applications

The main changes since 8.0.1 are:
- Fix CVE-2014-0050, a DoS related to multi-part processing
- Enable non-blocking reads to take place on non-container threads
- Update to the latest DBCP 2 snapshot
- Fix WebDAV support broken by resources refactoring

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.3/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1005/
The svn tag is:
http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_3/

The proposed 8.0.3 release is:
[ ] Broken - do not release
[ ] Alpha  - go ahead and release as 8.0.3 (alpha)
[ ] Beta   - go ahead and release as 8.0.3 (beta)
[ ] Stable - go ahead and release as 8.0.3 (stable)

Cheers,

Mark

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



ContributorRequest

2014-02-07 Thread dahu

hi

seems i was wrong asking directly to the owner of the PowerBy page to 
add my product to not poluate this mailing :(


So, I've build a "personnality check" on a big servlet based on the 
Exist XML DataBase running on a Tomcat. Every day , my servlet collect 
the data on my public webserver, download it and work to generate all 
the average based on 900 000 rows. Then, it push it back on my public 
webserver. The website is in french but, to explain, its not a simple 
personnality check, it "compare" your results with all other, i mean 
All, over 130 questions. (the web : fichedepersonnalite.com)


So, after month working on my servlet and finally get it work fine, 
browsing regulary the wiki, i saw the PowerBy and wonder now it's 
finished to mention my product on it.


I saw that the powerby page is a big spammy page. So, understanding that 
i have a good face of spammy guy, i decided to contribute and not just 
ask a contributorGroup  status.


So, i cleaned the page with this methodology :

1- listing all external link with a free tool like 
http://smallseotools.com/website-links-count-checker/


2- checking all http header with the php get_headers function()
=> CSV attached with all html headers (no header=timeout)

3 - Generating  well MoinMoin formated (using MoinMoin sandbox) url list 
(only header code 200,301,302)


4 - Cleaning double(triple!) domain  + Keeping all articles, valuable 
url even if same url


5 - Removing all logo (because pointing on external url)

6 - Copy past all missing text

7 - Designing in a list like DMOZ style and automated list numbers syntax

8 - Added my product fichedepersonnalite.com

9 - Done. the text file attached is the MoinMoin code of the clean list 
(poweredBy-moinmoin.txt)


10 - Enjoy !

 You just have to verify that all is right and copy/paste the code

Hope you will appreciate my contribution and give a chance to my work

Whatever your decision, be aware that it's a real strange page with 
really many outdated links and many keyword optimizations... May be 
consider to just put this page down ? or put all links in "nofollow" ?


regards

LAINE pierre-jean
wikiaccount PierreJean




-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565755 - in /tomcat/site/trunk: docs/lists.html xdocs/lists.xml

2014-02-07 Thread kkolinko
Author: kkolinko
Date: Fri Feb  7 18:36:01 2014
New Revision: 1565755

URL: http://svn.apache.org/r1565755
Log:
Add link to ASF-wide announcements list.

Modified:
tomcat/site/trunk/docs/lists.html
tomcat/site/trunk/xdocs/lists.xml

Modified: tomcat/site/trunk/docs/lists.html
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/docs/lists.html?rev=1565755&r1=1565754&r2=1565755&view=diff
==
--- tomcat/site/trunk/docs/lists.html (original)
+++ tomcat/site/trunk/docs/lists.html Fri Feb  7 18:36:01 2014
@@ -456,6 +456,11 @@ Tomcat questions to Eric or Rick themsel
 other project announcements.
 
 
+
+Note: You may be also interested in
+https://www.apache.org/foundation/mailinglists.html#foundation-announce";>ASF
 news and announcements list.
+
+
 
  
 

Modified: tomcat/site/trunk/xdocs/lists.xml
URL: 
http://svn.apache.org/viewvc/tomcat/site/trunk/xdocs/lists.xml?rev=1565755&r1=1565754&r2=1565755&view=diff
==
--- tomcat/site/trunk/xdocs/lists.xml (original)
+++ tomcat/site/trunk/xdocs/lists.xml Fri Feb  7 18:36:01 2014
@@ -178,6 +178,9 @@ Tomcat questions to Eric or Rick themsel
 The list is used to announce Tomcat releases, security vulnerabilities and
 other project announcements.
 
+Note: You may be also interested in
+https://www.apache.org/foundation/mailinglists.html#foundation-announce";>ASF
 news and announcements list.
+
 
  
   Volume:



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Tomcat Wiki] Update of "ContributorsGroup" by KonstantinKolinko

2014-02-07 Thread Apache Wiki
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The "ContributorsGroup" page has been changed by KonstantinKolinko:
https://wiki.apache.org/tomcat/ContributorsGroup?action=diff&rev1=16&rev2=17

Comment:
Add Pierre-Jean Laine, as requested on dev list

  #acl AdminGroup:read,write,admin,revert,delete All:read
  '''Contributors''' with permission to edit the Tomcat wiki – read, write, 
delete and revert pages or individual changes. 
- To be added to this group, please send a brief request with your Wiki 
username to the Tomcat developer list or Tomcat user list, see 
[[http://tomcat.apache.org/lists.html|mailing lists]] page.
+ To be added to this group, please send a brief request with your Wiki 
username to the Tomcat developers' mailing list or Tomcat users' mailing list, 
see [[http://tomcat.apache.org/lists.html|mailing lists]] page.
  
   * AdminGroup
   * AndreaBrugiolo
@@ -21, +21 @@

   * RoseHosting
   * JonLucas
   * StevenHeckler
+  * PierreJean
  

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: ContributorRequest

2014-02-07 Thread Konstantin Kolinko
2014-02-07 dahu :
> hi
>
> seems i was wrong asking directly to the owner of the PowerBy page to add my
> product to not poluate this mailing :(
>

"What did not happen on a mailing list, did not happen at all".

> So, I've build a "personnality check" on a big servlet based on the Exist
> XML DataBase running on a Tomcat. Every day , my servlet collect the data on
> my public webserver, download it and work to generate all the average based
> on 900 000 rows. Then, it push it back on my public webserver. The website
> is in french but, to explain, its not a simple personnality check, it
> "compare" your results with all other, i mean All, over 130 questions. (the
> web : fichedepersonnalite.com)
>
> So, after month working on my servlet and finally get it work fine, browsing
> regulary the wiki, i saw the PowerBy and wonder now it's finished to mention
> my product on it.
>
> I saw that the powerby page is a big spammy page. So, understanding that i
> have a good face of spammy guy, i decided to contribute and not just ask a
> contributorGroup  status.
>
> So, i cleaned the page with this methodology :
>
> 1- listing all external link with a free tool like
> http://smallseotools.com/website-links-count-checker/
>
> 2- checking all http header with the php get_headers function()
> => CSV attached with all html headers (no header=timeout)
>
> 3 - Generating  well MoinMoin formated (using MoinMoin sandbox) url list
> (only header code 200,301,302)

A 301/302 response is a valid response. Where the redirection goes?

>
> 4 - Cleaning double(triple!) domain  + Keeping all articles, valuable url
> even if same url

What do you mean by triple domain?

The issues that I know might be there:
a) Hosting providers placing their ads in a wrong section
b) Broken links
c) Sites taken over by squatters

Any such links can be thrown away immediately.

> 5 - Removing all logo (because pointing on external url)
>
> 6 - Copy past all missing text
>
> 7 - Designing in a list like DMOZ style and automated list numbers syntax
>
> 8 - Added my product fichedepersonnalite.com
>
> 9 - Done. the text file attached is the MoinMoin code of the clean list
> (poweredBy-moinmoin.txt)
>

Huh.  A lot to review.

For a newcomer (like I was a few years ago), the images are good, they
make the page look better.  For the current me, removing all them
starts sound like a good idea, but I am not convinced yet.

Anyway, a broken image is usually an indication that a site has gone.

> 10 - Enjoy !
>
>  You just have to verify that all is right and copy/paste the code
>
> Hope you will appreciate my contribution and give a chance to my work
>
> Whatever your decision, be aware that it's a real strange page with really
> many outdated links and many keyword optimizations... May be consider to
> just put this page down ? or put all links in "nofollow" ?

The links are generated by MoinMoin. It would be better to make
MoinMoin itself mark them as "nofollow".  It might be even easier to
put "nofollow" into META tag in the head section of the page, or in an
HTTP response header.

> wikiaccount PierreJean

Done.

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Tomcat Wiki] Update of "FrontPage" by KonstantinKolinko

2014-02-07 Thread Apache Wiki
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change 
notification.

The "FrontPage" page has been changed by KonstantinKolinko:
https://wiki.apache.org/tomcat/FrontPage?action=diff&rev1=36&rev2=37

Comment:
Discourage personal mails.

  
  This is the Wiki for Apache Tomcat, a Servlet and Java Server Pages container 
developed under the Apache License. The main documentation for this product is 
at [[http://tomcat.apache.org|tomcat.apache.org]]. Below is a list of some 
useful pages: we encourage everyone to contribute to these pages or start new 
ones as desired. But before you do, please check out the main documentation 
site as well as the [[FAQ]] and the 
[[http://tomcat.apache.org/lists.html|mailing lists]] (whose archives are 
searchable).
  
- If you do decide to contribute, you will need to create a Wiki login name and 
then send an e-mail to the Tomcat developer list or [[FAQ/Tomcat_User|Tomcat 
user list]], see [[http://tomcat.apache.org/lists.html|mailing lists]] page for 
details, asking to be added to the ContributorsGroup. Please remember to 
provide your Wiki name. Apologies for this extra step, but it's necessary to 
combat spam.
+ If you do decide to contribute, you will need to create a Wiki login name and 
then send an e-mail to the Tomcat developers' mailing list or 
[[FAQ/Tomcat_User|Tomcat users' mailing list]], see 
[[http://tomcat.apache.org/lists.html|mailing lists]] page for details, asking 
to be added to the ContributorsGroup. Please remember to provide your Wiki 
name. (Do not send personal e-mails to committers. Ask on a mailing list, so 
that a public record of this remains in an archive.) Apologies for this extra 
step, but it's necessary to combat spam.
  
   * '''[[GettingStarted|Getting Started]]''' - Getting started with Tomcat.
   * '''[[TomcatVersions|Tomcat versions]]''' - A list of every Tomcat version 
and its current status.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565781 - in /tomcat/trunk: bin/service.bat webapps/docs/changelog.xml

2014-02-07 Thread markt
Author: markt
Date: Fri Feb  7 19:59:08 2014
New Revision: 1565781

URL: http://svn.apache.org/r1565781
Log:
Fix a secondary issue identified in 
https://issues.apache.org/bugzilla/show_bug.cgi?id=56079

Modified:
tomcat/trunk/bin/service.bat
tomcat/trunk/webapps/docs/changelog.xml

Modified: tomcat/trunk/bin/service.bat
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/bin/service.bat?rev=1565781&r1=1565780&r2=1565781&view=diff
==
--- tomcat/trunk/bin/service.bat (original)
+++ tomcat/trunk/bin/service.bat Fri Feb  7 19:59:08 2014
@@ -137,9 +137,20 @@ rem Set the client jvm from JAVA_HOME
 set "PR_JVM=%JRE_HOME%\bin\client\jvm.dll"
 if exist "%PR_JVM%" goto foundJvm
 set PR_JVM=auto
+set PR_STDOUTPUT=auto
+set PR_STDERROR=auto
 :foundJvm
 echo Using JVM:  "%PR_JVM%"
-"%EXECUTABLE%" //IS//%SERVICE_NAME% --StartClass 
org.apache.catalina.startup.Bootstrap --StopClass 
org.apache.catalina.startup.Bootstrap --StartParams start --StopParams stop
+"%EXECUTABLE%" //IS//%SERVICE_NAME% ^
+--StartClass org.apache.catalina.startup.Bootstrap ^
+--StopClass org.apache.catalina.startup.Bootstrap ^
+--StartParams start ^
+--StopParams stop ^
+--JvmOptions 
"-Dcatalina.base=%CATALINA_BASE%;-Dcatalina.home=%CATALINA_HOME%;-Djava.endorsed.dirs=%CATALINA_HOME%\endorsed;-Djava.io.tmpdir=%CATALINA_BASE%\temp;-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager;-Djava.util.logging.config.file=%CATALINA_BASE%\conf\logging.properties"
 ^
+--StartMode jvm ^
+--StopMode jvm ^
+--JvmMs 128 ^
+--JvmMx 256
 if not errorlevel 1 goto installed
 echo Failed installing '%SERVICE_NAME%' service
 goto end
@@ -151,13 +162,6 @@ set PR_INSTALL=
 set PR_LOGPATH=
 set PR_CLASSPATH=
 set PR_JVM=
-rem Set extra parameters
-"%EXECUTABLE%" //US//%SERVICE_NAME% --JvmOptions 
"-Dcatalina.base=%CATALINA_BASE%;-Dcatalina.home=%CATALINA_HOME%;-Djava.endorsed.dirs=%CATALINA_HOME%\endorsed"
 --StartMode jvm --StopMode jvm
-rem More extra parameters
-set "PR_LOGPATH=%CATALINA_BASE%\logs"
-set PR_STDOUTPUT=auto
-set PR_STDERROR=auto
-"%EXECUTABLE%" //US//%SERVICE_NAME% ++JvmOptions 
"-Djava.io.tmpdir=%CATALINA_BASE%\temp;-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager;-Djava.util.logging.config.file=%CATALINA_BASE%\conf\logging.properties"
 --JvmMs 128 --JvmMx 256
 echo The service '%SERVICE_NAME%' has been installed.
 
 :end

Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1565781&r1=1565780&r2=1565781&view=diff
==
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Fri Feb  7 19:59:08 2014
@@ -44,6 +44,19 @@
   They eventually become mixed with the numbered issues. (I.e., numbered
   issues to not "pop up" wrt. others).
 -->
+
+  
+
+  
+Use a single call to tomcat8.exe to install the Windows
+service from service.bat rather than three calls. This is
+preparatory work for fixing 56079 as each time
+tomcat8.exe is called, a UAC dialog is displayed if UAC is
+enabled. (markt)
+  
+
+  
+
 
   
 



-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 56079] Digitally sign the Windows binaries

2014-02-07 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56079

--- Comment #10 from Mark Thomas  ---
I've fixed the issue with service.bat calling tomcat8.exe three times. It now
calls it once.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: ContributorRequest

2014-02-07 Thread dahu
Le 07/02/2014 20:01, Konstantin Kolinko a écrit : seems i was wrong 
asking directly to the owner of the PowerBy page to add my product to 
not poluate this mailing :(

"What did not happen on a mailing list, did not happen at all".

now i know


So, I've build a "personnality check" on a big servlet based on the Exist
XML DataBase running on a Tomcat. Every day , my servlet collect the data on
my public webserver, download it and work to generate all the average based
on 900 000 rows. Then, it push it back on my public webserver. The website
is in french but, to explain, its not a simple personnality check, it
"compare" your results with all other, i mean All, over 130 questions. (the
web : fichedepersonnalite.com)

So, after month working on my servlet and finally get it work fine, browsing
regulary the wiki, i saw the PowerBy and wonder now it's finished to mention
my product on it.

I saw that the powerby page is a big spammy page. So, understanding that i
have a good face of spammy guy, i decided to contribute and not just ask a
contributorGroup  status.

So, i cleaned the page with this methodology :

1- listing all external link with a free tool like
http://smallseotools.com/website-links-count-checker/

2- checking all http header with the php get_headers function()
=> CSV attached with all html headers (no header=timeout)

3 - Generating  well MoinMoin formated (using MoinMoin sandbox) url list
(only header code 200,301,302)

A 301/302 response is a valid response. Where the redirection goes?


i didn't take time to check every link. The only way to do that 
effeciently is to use a web service of webpage screenshot thumb and 
check visualy if the thumb is not a chinese or domain squater page. I 
can do it , but i need a bit time.




4 - Cleaning double(triple!) domain  + Keeping all articles, valuable url
even if same url
What do you mean by triple domain?

The issues that I know might be there:
a) Hosting providers placing their ads in a wrong section
b) Broken links
c) Sites taken over by squatters

Any such links can be thrown away immediately.


well.
add d) : keyword optimisation  =
Blabla.com-> blabla company
blabla.com/greatproduct.html => blabla optimized keyword
etc. x3, x4 , and one did it x5

There was more than 10 using this. But i didn't touch it, because i have 
no autority to do this. (ok. On some that were too explicit, i cleaned 
them :) )


In fact, the DMOZ solution was a great idea: One link, one description. 
Thats all.



5 - Removing all logo (because pointing on external url)

6 - Copy past all missing text

7 - Designing in a list like DMOZ style and automated list numbers syntax

8 - Added my product fichedepersonnalite.com

9 - Done. the text file attached is the MoinMoin code of the clean list
(poweredBy-moinmoin.txt)


Huh.  A lot to review.

For a newcomer (like I was a few years ago), the images are good, they
make the page look better.  For the current me, removing all them
starts sound like a good idea, but I am not convinced yet.
Yep, i understand. Yep, it's better look. Only when pict are not huge. 
Too work to resize i think.


/ Anyway, a broken image is usually an indication that a site has gone.

Firefox don't show anymore broken image as IE does it with a transparent 
square, and i hate IE.



10 - Enjoy !

  You just have to verify that all is right and copy/paste the code

Hope you will appreciate my contribution and give a chance to my work

Whatever your decision, be aware that it's a real strange page with really
many outdated links and many keyword optimizations... May be consider to
just put this page down ? or put all links in "nofollow" ?

The links are generated by MoinMoin. It would be better to make
MoinMoin itself mark them as "nofollow".  It might be even easier to
put "nofollow" into META tag in the head section of the page, or in an
HTTP response header.


I do not think that moinmoin offer this type of custom link. 
(rel=nofollow), but i think that like mediawiki does it, it will come in 
futur version.
by the way, i think it's cool to help tiny project by a DoFollow. It's 
always the same problem: restrict 95 cool user because of 5 bad user.

Well. Choose your way.

I better think to an hard discouragement text such as : "all newly added 
links are immediatly checked. SEO, dont loose your time."

or something like that.


wikiaccount PierreJean

Done.


thank you very much.

Do i apply my new version ?

Can i add exist-db to honor them ?

Do i pass an hard eye on it ? (one product=one link at all , on compagny 
name keyword only ) ?


Let me know.

PJ

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[jira] [Created] (MTOMCAT-258) There is a high memory utilization issue on tomcat7 version

2014-02-07 Thread Shailesh (JIRA)
Shailesh created MTOMCAT-258:


 Summary: There is a high memory utilization issue on tomcat7 
version 
 Key: MTOMCAT-258
 URL: https://issues.apache.org/jira/browse/MTOMCAT-258
 Project: Apache Tomcat Maven Plugin
  Issue Type: Bug
  Components: tomcat7
 Environment: VMWare Virtual Windows
Reporter: Shailesh
Assignee: Olivier Lamy (*$^¨%`£)
Priority: Blocker






--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



svn commit: r1565794 - in /tomcat/tc7.0.x/trunk: ./ webapps/docs/appdev/build.xml.txt webapps/docs/config/cluster.xml webapps/docs/realm-howto.xml

2014-02-07 Thread rjung
Author: rjung
Date: Fri Feb  7 20:34:17 2014
New Revision: 1565794

URL: http://svn.apache.org/r1565794
Log:
Remove mentioning of TC 6 from docs.
Remove doClusterLog and clusterLogName description
from cluster docs, those no longer exist.

Backport of r1565788 from trunk.

Modified:
tomcat/tc7.0.x/trunk/   (props changed)
tomcat/tc7.0.x/trunk/webapps/docs/appdev/build.xml.txt
tomcat/tc7.0.x/trunk/webapps/docs/config/cluster.xml
tomcat/tc7.0.x/trunk/webapps/docs/realm-howto.xml

Propchange: tomcat/tc7.0.x/trunk/
--
  Merged /tomcat/trunk:r1561025,1565788

Modified: tomcat/tc7.0.x/trunk/webapps/docs/appdev/build.xml.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/appdev/build.xml.txt?rev=1565794&r1=1565793&r2=1565794&view=diff
==
--- tomcat/tc7.0.x/trunk/webapps/docs/appdev/build.xml.txt (original)
+++ tomcat/tc7.0.x/trunk/webapps/docs/appdev/build.xml.txt Fri Feb  7 20:34:17 
2014
@@ -17,7 +17,7 @@
 
 

svn commit: r1565788 - in /tomcat/trunk/webapps/docs: appdev/build.xml.txt config/cluster.xml realm-howto.xml

2014-02-07 Thread rjung
Author: rjung
Date: Fri Feb  7 20:31:13 2014
New Revision: 1565788

URL: http://svn.apache.org/r1565788
Log:
Remove mentioning of TC 6 from docs.
Remove doClusterLog and clusterLogName description
from cluster docs, those no longer exist.

Modified:
tomcat/trunk/webapps/docs/appdev/build.xml.txt
tomcat/trunk/webapps/docs/config/cluster.xml
tomcat/trunk/webapps/docs/realm-howto.xml

Modified: tomcat/trunk/webapps/docs/appdev/build.xml.txt
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/appdev/build.xml.txt?rev=1565788&r1=1565787&r2=1565788&view=diff
==
--- tomcat/trunk/webapps/docs/appdev/build.xml.txt (original)
+++ tomcat/trunk/webapps/docs/appdev/build.xml.txt Fri Feb  7 20:31:13 2014
@@ -17,7 +17,7 @@
 
 

[jira] [Updated] (MTOMCAT-258) There is a high memory utilization issue on tomcat7 version

2014-02-07 Thread Shailesh (JIRA)

 [ 
https://issues.apache.org/jira/browse/MTOMCAT-258?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Shailesh updated MTOMCAT-258:
-

Description: also please let me know if there is any ftp site where i can 
upload the logs

> There is a high memory utilization issue on tomcat7 version 
> 
>
> Key: MTOMCAT-258
> URL: https://issues.apache.org/jira/browse/MTOMCAT-258
> Project: Apache Tomcat Maven Plugin
>  Issue Type: Bug
>  Components: tomcat7
> Environment: VMWare Virtual Windows
>Reporter: Shailesh
>Assignee: Olivier Lamy (*$^¨%`£)
>Priority: Blocker
>
> also please let me know if there is any ftp site where i can upload the logs



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[jira] [Commented] (MTOMCAT-258) There is a high memory utilization issue on tomcat7 version

2014-02-07 Thread Shailesh (JIRA)

[ 
https://issues.apache.org/jira/browse/MTOMCAT-258?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13895039#comment-13895039
 ] 

Shailesh commented on MTOMCAT-258:
--

Can you please let me know whom should I contact for this issue? Please give me 
the email add of support group of tomcat if u have

Regards,
Shailesh Jain
Suncor MW



> There is a high memory utilization issue on tomcat7 version 
> 
>
> Key: MTOMCAT-258
> URL: https://issues.apache.org/jira/browse/MTOMCAT-258
> Project: Apache Tomcat Maven Plugin
>  Issue Type: Bug
>  Components: tomcat7
> Environment: VMWare Virtual Windows
>Reporter: Shailesh
>Priority: Blocker
>
> also please let me know if there is any ftp site where i can upload the logs



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[jira] [Resolved] (MTOMCAT-258) There is a high memory utilization issue on tomcat7 version

2014-02-07 Thread Mark Thomas (JIRA)

 [ 
https://issues.apache.org/jira/browse/MTOMCAT-258?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mark Thomas resolved MTOMCAT-258.
-

Resolution: Invalid
  Assignee: (was: Olivier Lamy (*$^¨%`£))

JIra is not a support forum. Use the Apache Tomcat user's mailing list.

FYI, the same OP also contacted security@.a.o about this as well. That too was 
bounced.

> There is a high memory utilization issue on tomcat7 version 
> 
>
> Key: MTOMCAT-258
> URL: https://issues.apache.org/jira/browse/MTOMCAT-258
> Project: Apache Tomcat Maven Plugin
>  Issue Type: Bug
>  Components: tomcat7
> Environment: VMWare Virtual Windows
>Reporter: Shailesh
>Priority: Blocker
>
> also please let me know if there is any ftp site where i can upload the logs



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 8.0.3

2014-02-07 Thread Ognjen Blagojevic

Mark,

On 7.2.2014 19:16, Mark Thomas wrote:

The proposed Apache Tomcat 8.0.3 release is now available for voting.

...

The proposed 8.0.3 release is:
[ ] Broken - do not release
[ ] Alpha  - go ahead and release as 8.0.3 (alpha)
[ ] Beta   - go ahead and release as 8.0.3 (beta)
[X] Stable - go ahead and release as 8.0.3 (stable)


Tested .zip distribution on Windows 7 64-bit, and .tar.gz on CentOS 5 
64-bit:


- Tested TLS/SSL connectivity for BIO, NIO and APR connectors (Windows).

- Crawled all links (except /manager, /host-manager and 
/examples/async*). No broken links found, except links to JavaDocs 
(Windows).


- Smoke tests of BIO, NIO and APR, with and without TLS, all passed 
(Windows).


- Tested with several webapps that are in active development (Linux).


-Ognjen


-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: [VOTE] Release Apache Tomcat 8.0.3

2014-02-07 Thread Konstantin Kolinko
2014-02-07 Mark Thomas :
> The proposed Apache Tomcat 8.0.3 release is now available for voting.
>
> The main changes since 8.0.2 are:
> - Fix DBCP build
> - Update DBCP version to include recent fix for running under a
>   security manager without needed to grant additional permissions
>   to web applications
>
> The main changes since 8.0.1 are:
> - Fix CVE-2014-0050, a DoS related to multi-part processing
> - Enable non-blocking reads to take place on non-container threads
> - Update to the latest DBCP 2 snapshot
> - Fix WebDAV support broken by resources refactoring
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.0.3/
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1005/
> The svn tag is:
> http://svn.apache.org/repos/asf/tomcat/tc8.0.x/tags/TOMCAT_8_0_3/
>
> The proposed 8.0.3 release is:
> [ ] Broken - do not release
> [ ] Alpha  - go ahead and release as 8.0.3 (alpha)
> [x] Beta   - go ahead and release as 8.0.3 (beta)
> [ ] Stable - go ahead and release as 8.0.3 (stable)


Smoke testing OK.
Testsuite with BIO, NIO, APR - OK.
On Windows 7, using Java 7u51 32-bit.

Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



Re: support for salted passwords

2014-02-07 Thread Ognjen Blagojevic

Chris,

On 6.2.2014 15:28, Christopher Schultz wrote:

3. option 2 with salt


Adding a salt would be trivial given the changes I have proposed. I'd
love to enable salting by default when using a hash, but that may be
surprising to some users. I suppose the salt could be separated from the
salted-hashed-password by some obvious delimiter such as ":". See below
for the "sync" problem.


Linux, I think, uses "$" as salt separator. I don't know about other 
implementations. Maybe you could consider using "$" as separator users 
are accustomed at?


Default salting is relevant only when storing password hash (e.g. 
changing password), not when validating it, right? Validating part is 
part of Realm. Realm checks for separator in the password hash. If the 
separator exists, password is salted.


So, default salting and default salt length would be only important when 
storing password hash. But that is not part of Tomcat's Realm 
implementation. Or, am I missing something?




4. password-based key derivation functions (e.g. bcrypt, scrypt, pbkdf2)


This would also be trivial given such changes.


Great.



I also think that if the user selects anything other then option 4,
Tomcat should log a gentle warning during startup with suggestion that
there is a more secure solution for storing passwords.


Well, using a PBKDF is best, but how can Tomcat know if you are using one?


TBH, I have no idea. It is just on my wishlist. At first thought every 
Realm implementation would need to somehow inform Tomcat is what kind of 
password protection does it use (none, hash, salted hash, pbkdf, 
unknown), and Tomcat would act accordingly (log a warning message, if 
needed).




Tomcat already suggests that APR is superior connector, why wouldn't it
also suggest what is the best practice for other things like passwords?


There is another problem: the credential-verification system needs to be
in sync with whatever system sets the passwords in the first place. For
example, nobody uses Tomcat's Realms to actually change the password for
their users: they do their own hashing, and write the new password to
the database. If those processes are out of sync with each other,
everything breaks.


Absolutely.



So, if Tomcat suddenly starts wanting to use salts, you won't get the
benefit unless you have your own software actually using the salts.


Well, Tomcat would start to *support* salts, and user must decide 
whether to use it, and change the way password hashes are stored. That 
is similar to adding new hash function, for instance.


-Ognjen

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 50944] JSF: java.lang.NullPointerException at com.sun.faces.context.flash.ELFlash.loggingGetPhaseMapForWriting

2014-02-07 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=50944

sherry slover  changed:

   What|Removed |Added

 Status|RESOLVED|VERIFIED

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org