DO NOT REPLY [Bug 37588] - Creating JNDIRealm through JMX is not correct.

2005-11-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 37588] New: - Creating JNDIRealm through JMX is not correct.

2005-11-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Create JNDIRealm in admin webapp is not correct.

2005-11-21 Thread Terry Zhou
Hi, gents, Regarding this mail, http://marc.theaimsgroup.com/?l=tomcat-user&m=113035775420898&w=2 I have tested both tomcat admin app and MBean createJNDIRealm can't create a realm successfully with Tomcat5.5.12. I have checked some code and found a bug in creating an JNDIRealm. The signature o

RE: svn commit: r348087 - /tomcat/container/tc5.5.x/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java

2005-11-21 Thread Nam T. Nguyen
Sorry, I'm just being dump here. My comment should be for r348091 instead of this r348087. Shamefully yours Nam -- Random humorous quote: Monday is an awful way to spend 1/7th of your life. -Original Message- From: Nam T. Nguyen [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 22, 200

svn commit: r348091 - /tomcat/container/tc5.5.x/catalina/src/share/org/apache/catalina/realm/RealmBase.java

2005-11-21 Thread billbarker
Author: billbarker Date: Mon Nov 21 21:18:05 2005 New Revision: 348091 URL: http://svn.apache.org/viewcvs?rev=348091&view=rev Log: Fix for a couple of (mostly silly) edge-cases in testing auth. If any security-contraint doesn't have a auth-constraint, then we pass. Otherwise, if any security-cons

RE: svn commit: r348087 - /tomcat/container/tc5.5.x/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java

2005-11-21 Thread Nam T. Nguyen
This is in accordance with both Servlet and JACC specs. JACC spec gives higher precedence to unchecked permissions than checked permissions. Complaints should go to both groups :D Cheers Nam -- Random humorous quote: Usually I try to take it one day at a time, but lately several have attacked

svn commit: r348087 - /tomcat/container/tc5.5.x/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java

2005-11-21 Thread billbarker
Author: billbarker Date: Mon Nov 21 21:06:40 2005 New Revision: 348087 URL: http://svn.apache.org/viewcvs?rev=348087&view=rev Log: The rule is that you authenticate if *all* security-constraints include an auth-constraint. If you have a problem with this, take it up with the Servlet expert-grou

Re: Bug in Combining Authorization Constraints

2005-11-21 Thread Bill Barker
This should be fixed in the SVN trunk, and will appear in 5.5.13. Thanks for reporting this! - Original Message - From: "Nam T. Nguyen" <[EMAIL PROTECTED]> To: Sent: Monday, November 21, 2005 1:21 AM Subject: Bug in Combining Authorization Constraints Hi I have two elements in my

DO NOT REPLY [Bug 37132] - Digest authentication does not work if the username or URI contain a comma

2005-11-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Re: How to turn the Digester off?

2005-11-21 Thread Remy Maucherat
anita kulshreshtha wrote: Since there was no reply, I am assuming that turning off the digester is not straightforward. Could someone please point me to the relevant code? Thanks Anita --- anita kulshreshtha <[EMAIL PROTECTED]> wrote: I am using tomcat as an embedded engine and the

Re: [VOTE] APR or NIO ?

2005-11-21 Thread Costin Manolache
On 11/21/05, Remy Maucherat <[EMAIL PROTECTED]> wrote: > Costin Manolache wrote: > > I hope you are not serious... Sorry if I sounded too critical of the > > APR code - it is a great > > piece of code in many ways, I just didn't like some (probably minor) things. > > Ok, but it helped make me reali

Re: How to turn the Digester off?

2005-11-21 Thread anita kulshreshtha
Since there was no reply, I am assuming that turning off the digester is not straightforward. Could someone please point me to the relevant code? Thanks Anita --- anita kulshreshtha <[EMAIL PROTECTED]> wrote: > I am using tomcat as an embedded engine and the > web.xml is parsed once by

svn commit: r345898 - /tomcat/connectors/trunk/http11/src/java/org/apache/coyote/http11/Http11AprProcessor.java

2005-11-21 Thread remm
Author: remm Date: Mon Nov 21 04:46:09 2005 New Revision: 345898 URL: http://svn.apache.org/viewcvs?rev=345898&view=rev Log: - Either I am completely mistaken, or the type used was wrong. Modified: tomcat/connectors/trunk/http11/src/java/org/apache/coyote/http11/Http11AprProcessor.java Modi

Re: [VOTE] APR or NIO ?

2005-11-21 Thread Oleg Kalnichevski
On Mon, Nov 21, 2005 at 11:55:08AM +0100, Remy Maucherat wrote: > Henri Gomez wrote: > >Well why so much noise about NIO/APR ? > > Because I don't want to have to support 20 different connector > technologies (you can call it a business requirement). So one has to be > labelled as "experimental"

Re: [VOTE] APR or NIO ?

2005-11-21 Thread Remy Maucherat
Henri Gomez wrote: Well why so much noise about NIO/APR ? Because I don't want to have to support 20 different connector technologies (you can call it a business requirement). So one has to be labelled as "experimental" or something. Similarly, the connector options right now are (for me) a

Re: [VOTE] APR or NIO ?

2005-11-21 Thread Remy Maucherat
Costin Manolache wrote: I hope you are not serious... Sorry if I sounded too critical of the APR code - it is a great piece of code in many ways, I just didn't like some (probably minor) things. Ok, but it helped make me realize I should maintain my own tree anyway, since my plans are a bit op

Re: [VOTE] APR or NIO ?

2005-11-21 Thread Henri Gomez
Well why so much noise about NIO/APR ? If some want to experiment APR or NIO, why can't they do their works on some sort of incubations projets and when stable enough give us benchmarks results. Benchmarks/tesings should give us information on : stability, speed, memory usage, IO usage and of co

RE: Bug in Combining Authorization Constraints

2005-11-21 Thread Nam T. Nguyen
Replying to my own post. Sorry, the attachment mysteriously disappeared. Anyway, the important part is here Index 1 /index.jsp * Index 2 /index.jsp Cheers Nam

Bug in Combining Authorization Constraints

2005-11-21 Thread Nam T. Nguyen
Hi I have two elements in my deployment descriptor. One has auth-constraint *, and the other does not have any . They both have a same . By SRV.12.8.1 Combining Constraints: A security constraints that does not contain an authorization constraint shall combine with authorization constraints t