svn commit: r520309 - /tomcat/connectors/trunk/jk/xdocs/reference/apache.xml

2007-03-20 Thread jfclere
Author: jfclere Date: Tue Mar 20 01:10:39 2007 New Revision: 520309 URL: http://svn.apache.org/viewvc?view=rev&rev=520309 Log: Typo. Modified: tomcat/connectors/trunk/jk/xdocs/reference/apache.xml Modified: tomcat/connectors/trunk/jk/xdocs/reference/apache.xml URL: http://svn.apache.org/vie

Re: [EMAIL PROTECTED]: Project jakarta-tomcat (in module jakarta-tomcat) failed

2007-03-20 Thread Jean-Frederic
On Mon, 2007-03-19 at 19:55 -0700, Stefan Bodewig wrote: > To whom it may engage... Fixed thanks Cheers Jean-Frederic > > This is an automated request, but not an unsolicited one. For > more information please visit http://gump.apache.org/nagged.html, > and/or contact the folk at [EM

svn commit: r520310 - in /tomcat/connectors/trunk/jk: native/common/jk_mt.h native/configure.in xdocs/miscellaneous/changelog.xml xdocs/webserver_howto/apache.xml

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 01:15:49 2007 New Revision: 520310 URL: http://svn.apache.org/viewvc?view=rev&rev=520310 Log: Add --enable-flock configure param for explicit compilation of flock() for shared memory locks Modified: tomcat/connectors/trunk/jk/native/common/jk_mt.h tomcat/co

svn commit: r520312 - /tomcat/connectors/trunk/jk/native/configure.in

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 01:18:30 2007 New Revision: 520312 URL: http://svn.apache.org/viewvc?view=rev&rev=520312 Log: Oops. Fix copy/paste typo. Modified: tomcat/connectors/trunk/jk/native/configure.in Modified: tomcat/connectors/trunk/jk/native/configure.in URL: http://svn.apache.or

svn commit: r520335 - in /tomcat/connectors/trunk/jk/native: apache-1.3/mod_jk.c apache-2.0/mod_jk.c

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 01:53:33 2007 New Revision: 520335 URL: http://svn.apache.org/viewvc?view=rev&rev=520335 Log: Log mod_jk version on initialization as INFO. Modified: tomcat/connectors/trunk/jk/native/apache-1.3/mod_jk.c tomcat/connectors/trunk/jk/native/apache-2.0/mod_jk.c

svn commit: r520336 - /tomcat/connectors/trunk/jk/native/apache-2.0/bldjk.qclsrc

2007-03-20 Thread hgomez
Author: hgomez Date: Tue Mar 20 01:54:06 2007 New Revision: 520336 URL: http://svn.apache.org/viewvc?view=rev&rev=520336 Log: Add optmizing compile option Modified: tomcat/connectors/trunk/jk/native/apache-2.0/bldjk.qclsrc Modified: tomcat/connectors/trunk/jk/native/apache-2.0/bldjk.qclsrc U

svn commit: r520337 - in /tomcat/connectors/trunk/jk/native: apache-1.3/mod_jk.c apache-2.0/mod_jk.c iis/jk_isapi_plugin.c

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 01:58:24 2007 New Revision: 520337 URL: http://svn.apache.org/viewvc?view=rev&rev=520337 Log: JK_EXPOSED_VERSION already contains mod_jk string. Modified: tomcat/connectors/trunk/jk/native/apache-1.3/mod_jk.c tomcat/connectors/trunk/jk/native/apache-2.0/mod_

svn commit: r520338 - /tomcat/connectors/trunk/jk/native/apache-2.0/bldjk.qclsrc

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 02:01:23 2007 New Revision: 520338 URL: http://svn.apache.org/viewvc?view=rev&rev=520338 Log: Remove the binary type from .qclsrc Modified: tomcat/connectors/trunk/jk/native/apache-2.0/bldjk.qclsrc (props changed) Propchange: tomcat/connectors/trunk/jk/native

svn commit: r520339 - /tomcat/connectors/trunk/jk/native/apache-2.0/bldjk.qclsrc

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 02:04:02 2007 New Revision: 520339 URL: http://svn.apache.org/viewvc?view=rev&rev=520339 Log: No function change. Just to check if the props are working Modified: tomcat/connectors/trunk/jk/native/apache-2.0/bldjk.qclsrc Modified: tomcat/connectors/trunk/jk/nat

DO NOT REPLY [Bug 41819] - JSF components does not work inside a JSP tag

2007-03-20 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 41901] New: - if custom component written in facelets include statement is called inside , if statement is now executed

2007-03-20 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 41901] - if custom component written in facelets include statement is called inside , if statement is now executed

2007-03-20 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 41819] - JSF components does not work inside a JSP tag

2007-03-20 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Re: [Fwd: Vendor Notification VU#239041 - apache-tomcat]

2007-03-20 Thread Remy Maucherat
Remy Maucherat wrote: -1 for the report summary posted at: http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html It is highly misleading. (moving to dev list since it's obviously not confidential) In particular, the beginnin

Re: [Fwd: Vendor Notification VU#239041 - apache-tomcat]

2007-03-20 Thread Yoav Shapira
Hi, On 3/20/07, Remy Maucherat <[EMAIL PROTECTED]> wrote: Due to the impossibility to guarantee that all URLs are handled by Tomcat as they are in proxy servers, Tomcat should always be secured as if no proxy restricting context access was used. Comments ? +1 to your reworked text, I like it.

Re: [Fwd: Vendor Notification VU#239041 - apache-tomcat]

2007-03-20 Thread Peter Rossbach
+1, Jep, this explain better the real problem :-) Peter Am 20.03.2007 um 15:10 schrieb Remy Maucherat: Remy Maucherat wrote: -1 for the report summary posted at: http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html It is

Re: [Fwd: Vendor Notification VU#239041 - apache-tomcat]

2007-03-20 Thread Mladen Turk
Remy Maucherat wrote: Tomcat permits both '\' and '%5C' as path delimiters. When Tomcat is used behind a proxy (including, but not limited to, Apache HTTP server with mod_proxy and mod_jk) configured to only proxy some contexts, a HTTP request containing strings like "/\../" may allow attacke

Re: [Fwd: Vendor Notification VU#239041 - apache-tomcat]

2007-03-20 Thread Remy Maucherat
Mladen Turk wrote: Remy Maucherat wrote: Tomcat permits both '\' and '%5C' as path delimiters. When Tomcat is used behind a proxy (including, but not limited to, Apache HTTP server with mod_proxy and mod_jk) configured to only proxy some contexts, a HTTP request containing strings like "/\..

svn commit: r520427 - in /tomcat/site/trunk: docs/security-4.html docs/security-5.html docs/security-6.html xdocs/security-4.xml xdocs/security-5.xml xdocs/security-6.xml

2007-03-20 Thread remm
Author: remm Date: Tue Mar 20 08:21:10 2007 New Revision: 520427 URL: http://svn.apache.org/viewvc?view=rev&rev=520427 Log: - Clarify the '\' security issue. Modified: tomcat/site/trunk/docs/security-4.html tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.html

Re: [Fwd: Vendor Notification VU#239041 - apache-tomcat]

2007-03-20 Thread William A. Rowe, Jr.
Mladen Turk wrote: > Remy Maucherat wrote: >> >> Tomcat permits both '\' and '%5C' as path delimiters. When Tomcat is >> used behind a proxy (including, but not limited to, Apache HTTP server >> with mod_proxy and mod_jk) configured to only proxy some contexts, a >> HTTP request containing strings

svn commit: r520518 - /tomcat/connectors/trunk/jni/native/src/sslcontext.c

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 11:48:25 2007 New Revision: 520518 URL: http://svn.apache.org/viewvc?view=rev&rev=520518 Log: Return APR_ENOTIMPL for a dummy SSLContext.free function Modified: tomcat/connectors/trunk/jni/native/src/sslcontext.c Modified: tomcat/connectors/trunk/jni/native/src

DO NOT REPLY [Bug 41909] New: - JK2 build should allow building for Apache 2.0 and 1.3 simultaneously

2007-03-20 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

svn commit: r520556 - in /tomcat/site/trunk: docs/security-4.html docs/security-5.html docs/security-6.html xdocs/security-4.xml xdocs/security-5.xml xdocs/security-6.xml

2007-03-20 Thread remm
Author: remm Date: Tue Mar 20 13:28:25 2007 New Revision: 520556 URL: http://svn.apache.org/viewvc?view=rev&rev=520556 Log: - Some additional tweaks. Modified: tomcat/site/trunk/docs/security-4.html tomcat/site/trunk/docs/security-5.html tomcat/site/trunk/docs/security-6.html tomc

Re: [Fwd: Vendor Notification VU#239041 - apache-tomcat]

2007-03-20 Thread Remy Maucherat
William A. Rowe, Jr. wrote: Mladen Turk wrote: Remy Maucherat wrote: Tomcat permits both '\' and '%5C' as path delimiters. When Tomcat is used behind a proxy (including, but not limited to, Apache HTTP server with mod_proxy and mod_jk) configured to only proxy some contexts, a HTTP request cont

Re: CometEvent.END will never be called

2007-03-20 Thread Remy Maucherat
Filip Hanik - Dev Lists wrote: Since apps are shutdown before the connectors, all CometProcessors are marked unavailable by the time the connector wants to invoke CometEvent.END when thinking about it, the servlet developer can piggy back on the Servlet.destroy method, but should we enable thi

svn commit: r520693 - /tomcat/tc6.0.x/trunk/java/org/apache/tomcat/util/net/NioEndpoint.java

2007-03-20 Thread fhanik
Author: fhanik Date: Tue Mar 20 18:34:07 2007 New Revision: 520693 URL: http://svn.apache.org/viewvc?view=rev&rev=520693 Log: don't give the selector infinite time to shutdown Modified: tomcat/tc6.0.x/trunk/java/org/apache/tomcat/util/net/NioEndpoint.java Modified: tomcat/tc6.0.x/trunk/java/

Re: CometEvent.END will never be called

2007-03-20 Thread Filip Hanik - Dev Lists
Remy Maucherat wrote: Filip Hanik - Dev Lists wrote: Since apps are shutdown before the connectors, all CometProcessors are marked unavailable by the time the connector wants to invoke CometEvent.END when thinking about it, the servlet developer can piggy back on the Servlet.destroy method,

Re: CometEvent.END will never be called

2007-03-20 Thread Filip Hanik - Dev Lists
Filip Hanik - Dev Lists wrote: Remy Maucherat wrote: Filip Hanik - Dev Lists wrote: Since apps are shutdown before the connectors, all CometProcessors are marked unavailable by the time the connector wants to invoke CometEvent.END when thinking about it, the servlet developer can piggy back

svn commit: r520777 - /tomcat/connectors/trunk/jk/native/common/jk_lb_worker.c

2007-03-20 Thread mturk
Author: mturk Date: Tue Mar 20 23:58:38 2007 New Revision: 520777 URL: http://svn.apache.org/viewvc?view=rev&rev=520777 Log: Make sure that any change to shared memory is protected by shm lock if the pessimistic locking is configured. Modified: tomcat/connectors/trunk/jk/native/common/jk_lb_

svn commit: r520780 - /tomcat/connectors/trunk/jk/native/common/jk_lb_worker.c

2007-03-20 Thread mturk
Author: mturk Date: Wed Mar 21 00:20:50 2007 New Revision: 520780 URL: http://svn.apache.org/viewvc?view=rev&rev=520780 Log: Simplify the add_lig_items by adding local function for filling the common values. Modified: tomcat/connectors/trunk/jk/native/common/jk_lb_worker.c Modified: tomcat/