Hi,
Seems there is low interest on JK 1.2.15 although it resolves
lots of issues compared with released 1.2.14.1 :(
So far, seems only Henri voted +1 (I hope I read his vote
properly).
Do you guys find something that would prevent 1.2.15 to
be declared as stable that I'm missing?
If not, pleas
William A. Rowe, Jr. wrote:
Do you guys find something that would prevent 1.2.15 to
be declared as stable that I'm missing?
I'll try to find cycles to test myself, next week. I know I'm having
alot of trouble with the apache 1.3 build on odd architectures, probably
because the clash of a libt
Henri Gomez wrote:
AJP 1.5 should support automatic discovery of tomcat backend, new
systems and new webapps.
That's the current need for many of us when adding tomcats / webapp
behind Apache 2 webservers. In such case we need to restart them and
it's sad.
How could it be accomplished, may be v
Peter Rossbach wrote:
Here my wishes list:
a) Clearer/better Loadbalancing Algo
- better understanding of domain/partition based strategy ( I have
detect some problemes here)
- busy strategy -
http://issues.apache.org/bugzilla/show_bug.cgi?id=36138
- real load strategy ( ask tomcat
Peter Rossbach wrote:
Has everyone more information about this bea admin console project:
http://www.bea.com/framework.jsp?CNT=pr01542.htm&FP=/content/news_events/press_releases/2005
Since I can not recall that there was an discussion on Tomcat dev or pmc
lists about that product, neither I
Costin Manolache wrote:
DBUS is a good example in IMO - I'm not
saying to use their impl, which doesn't fit, just the protocol spec.
The major power of AJP protocol is known-header-name indexing, and
IMHO there is no other protocol that is HTTP application focused.
If there is really a need for
Fenlason, Josh wrote:
Hey everybody!
I'm trying to build the native apr connector from Tomcat 5.5.12 on HPUX
Itanium and I'm running into a problem during the configure. APR 1.2.2
built fine. I built OpenSSL 0.9.8a as a static library (I couldn't get
it to build as a shared library.)
Have you
The Apache Tomcat team is pleased to announce the release of
version 1.2.15 of the Apache Tomcat mod_jk web server connector.
Tomcat is the reference implementation of a web application server
which implements the Java Servlet and JavaServer Pages specifications.
mod_jk is a connector which allo
Jean-Pierre Pelletier wrote:
https is fixed either by removing the native-1.dll file or by
replacing it by the AMD 64 bit version.
It looks like there is a bug in the Windows installer that installs the
32 bit version
instead of the 64 bit version on a 64 PC.
I am surprise that the 32 bit ver
Remy Maucherat wrote:
Costin Manolache wrote:
NIO is used AFAIK by Jetty and Resin, and probably others. And it's
the 'standard'
solution for select-like operations ( even if the standard is as usual
not the best solution ).
I think we need to organize a community vote then, so that I do not
Jess Holle wrote:
Mladen Turk wrote:
So, from my point of view I see this vote as useless, because
anyone can create a connector using what ever technology he prefers.
The only valid question would be, what to use as a default one,
but that's a minor issue thought.
As Mladen says, a
Yoav Shapira wrote:
I too vote both, and the classical style as well. Besides Costin's reasoning,
with which I largely agree, I have also been seeing more and more people use
Java web servers as the front-end, no less. And I want to keep the 100% pure
Java option available, preferably as the d
Hi,
I know, it's been only couple of days, but the 5.5.13 build is broken
because we did not tag the tomcat-native (APR) to 1.1.1 version, that
is required because of extra API.
Perhaps we can retag the 5.5.13 because the needed changes are in
nsi installer script and tomcat-native.tar.gz source
Yoav Shapira wrote:
This is probably a dumb question, but I'll ask anyways. Why isn't
this as simple as a user who downloaded 5.5.13 already going to
download the updated connectors/APR and plugging that in? Why does it
have to be integrated into the release of Tomcat itself, especially
since
Yoav Shapira wrote:
Hi,
Installer has an task for downloading binaries, so, since it poinits
to the old version it would be downloaded.
The second is that the tomcat-native.tar.gz is also downloaded
during build, so again the old version is used, and the user
must use the version from SVN if h
Yoav Shapira wrote:
I'm planning to do it at 9am my time, which is 1400h UTC/GMT tomorrow,
December 6th.
Perfect.
By that time the mirrors will pick up
the new tomcat-native-1.1.1.tar.gz.
Regards,
Mladen.
-
To unsubscribe, e
Yoav Shapira wrote:
I'm planning to do it at 9am my time, which is 1400h UTC/GMT tomorrow,
December 6th.
OK.
I've committed the changes and tag the native.
The sources are at:
http://www.apache.org/dist/tomcat/tomcat-connectors/native/
They are also at:
http://ftp.heanet.ie/pub/tomcat/native/
Remy Maucherat wrote:
[EMAIL PROTECTED] wrote:
Author: mturk
Date: Mon Dec 5 08:29:19 2005
New Revision: 354093
URL: http://svn.apache.org/viewcvs?rev=354093&view=rev
Log:
Use tomcat-native-1.1.1 version.
Modified:
tomcat/build/tc5.5.x/build.properties.default
tomcat/build/tc5.5.x/to
Remy Maucherat wrote:
There are a couple problems remaining:
- the AprEndpoint should be updated to require version number 1.1.1 (I
did it, but see point 2)
- the binaries on the Ireland download site
(http://tomcat.heanet.ie/native/1.1.1/) are still numbered 1.1.0, so the
AprEndpoint check a
Andre Gebers wrote:
Hi,
newer versions of opera send the Cookie2-header along with the
Cookie-header which looks somewhat like this:
Right, but the patch would not work.
It would be a security hole, because the http rfc
diferentiates cookie from cookie2.
Right now the Cookie2 header is pas
Bill Barker wrote:
I agree that the patch is simply masking the real problem. With the current
mod_jk code what Tomcat sees is:
Cookie: myCookie=1234
Cookie: $Version=1
Huh, looking at the source I see the problem.
we are using:
'if (memcmp(p, "OOKIE", 5)'
so both cookie and cookie2 a
Bill Barker wrote:
Without actually checking, mod_jk/mod_proxy_ajp should only send an
unrequested initial bodyChunk if the client sends a CL. So if there is no
CL, Tomcat will send back GET_BODY_CHUNK message, and act on the response
from Httpd/IIS/SunOne.
For reading initial body mod_j
[EMAIL PROTECTED] wrote:
I want to unsuscribe
EACH email message contains a note how to unsubscribe!
Plese switch on your brain :)
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECT
Marsh David W Maj AFIT/ENG wrote:
Tomcat Developers,
While I understand that the libraries and extensions used by Tomcat
*should* provide that assurance, what would happen if someone
inadvertently wrote some code that could create a new object with rights
never intended by developers?
What I w
Marsh David W Maj AFIT/ENG wrote:
What I would consider useful is a 'compile time note'
There would have to be a way to capture design intent through explicit
markers (or perhaps an inference) identifying both the protected code
and those code segments that are allowed to access the protected
Bhargav Patel wrote:
Hay Friend,
What do you understand ?
You only have brain.
ROTFL
Obviously :)
It is not working .. Even I tried and sent lot of mails to the same address.
Can some one kick out those two morons, in case ezmlm was confused
with their inteligence ?
M A wrote:
I have issue with the APR not delivering a page that was approx 14KB in
size,
I did post it on here but no one responded.
The thing you've posted makes no sense without
some way how to reproduce the bug.
This means that you would need to give us the jsp
and the exact procedure how t
Yoav Shapira wrote:
[X] Stable - no major issues
Regards,
Mladen.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Bob Herrmann wrote:
seems you need both "ant1.5" and "ant1.5" to compile tomcat 5.0
Come one :)
I think you have a serious problems with your setup.
If you first run "ant1.5" (from a clean setup) you will get this error,
Well, lots of us are building Tomcat on a daily basis, so
I w
Hi,
There was lots of changes for Tomcat Native that needs a
new tag and release bump.
1. IPV6 support fix
2. Bind fix
3. sendb(b) fixes
I would like to tag the TOMCAT_NATIVE_1_1_2 later this
evening. Any objections?
Regards,
Mladen.
Hi,
Any objections for committing this patch?
It sets LD_LIBRARY_PATH to include CATALINA_HOME/native
if CATALINA_HOME/native/libtcnative-1.so is present.
Index: C:/U/SVN/tomcat/container/tc5.5.x/catalina/src/bin/catalina.sh
===
-
Tim Funk wrote:
I see the point of the native dir.
Right, anything but bin is OK.
lib/native/{platform}/
[EMAIL PROTECTED] wrote:
Author: mturk
protected long serverSockPool = 0;
-
+
I have an editor that removes trailing spaces sorry :).
-long inetAddress = Address.info(addressStr, Socket.APR_UNSPEC,
+int family = Socket.APR_INET;
+if (Library.APR_HAVE_IPV6)
Jim Jagielski wrote:
httpd uses APR_UNSPEC pretty much exclusively.
Well, if the APR was compiled on a host that does not have
defined APR_HAVE_IPV6, then when passing APR_UNSPEC to
apr_socket_bind fails for "0.0.0.0" address.
Seems that "0.0.0.0" is not acceptable with APR_UNSPEC.
Further t
Jim Jagielski wrote:
That's an APR bug you're hitting; it hits some httpd
sites as well, and we have a work-around documented
about that. I need to check on the status of
the fix in APR and which version the bug
exists.
In any case, your changes simply perform
a safe-enough test, so, even though
Eric Lenio wrote:
All -
Apologies in advance if this should go to tomcat-users but I'm
suspecting a problem with the way the source code is being distributed
so I'm starting here.
I downloaded the source file for 5.5.15 and built it. After installing
it I ran bin/version.sh which said I had ve
[EMAIL PROTECTED] wrote:
char sb[TCN_BUFFER_SZ];
if ((ss = (*s->net->recv)(s->opaque, sb, &nbytes)) == APR_SUCCESS)
-(*e)->SetByteArrayRegion(e, buf, offset, (jsize)nbytes, sb);
+(*e)->SetByteArrayRegion(e, buf, offset, (jsize)nbytes,
(jbyte*)sb);
T
Eric Lenio wrote:
Well if the RM must generate this file for each release
perhaps then it could be added to subversion?
That way any time 'svn update' is used to refresh sources
the current Tomcat version can be known.
Right, it might be useful to split the build.properties.default
to two fil
Pelikan Stephan wrote:
Hello,
I detected that the "FlushPackets" JkOption does not work. I could solve
the problem by the patch
FlushPacket works, and the patch is invalid.
The service ws_flush is invoked from ajp_common.
In theory there can be problems if there
is no content_body packets
Pelikan Stephan wrote:
Hallo Mladen,
FlushPacket works, and the patch is invalid.
The service ws_flush is invoked from ajp_common.
My original problem is that I produce a big servlet-response. This
servlet-response builds a progress-bar, so there are interruption (serversided
sleeps to wait
Peter Rossbach wrote:
I thing you mus set
JkOptions +FlushPackets
No need. Default is +.
Regards,
Mladen.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Rainer Jung wrote:
Hi Mladen,
are you sure? I have the impression default is
I meant that the '+' is default:
if (action == '-') {
conf->options &= ~opt;
}
else if (action == '+') {
conf->options |= opt;
}
else { /* for now +Opt == Opt */
conf->options |= opt;
}
George Sexton wrote:
This assumes that committers are an practically unlimited
resource, and they
Of course we have, because we actually own the Intellectual Property.
You are forgetting that we have PMC (Project Management Committee),
that is responsible to deal with all administrative stu
Remy Maucherat wrote:
[EMAIL PROTECTED] wrote:
Author: mturk
Date: Tue Feb 28 00:53:23 2006
New Revision: 381594
URL: http://svn.apache.org/viewcvs?rev=381594&view=rev
Log:
Use constants instead directly hard coded values.
No functional change.
Can you change your editor, or configure it prop
Remy Maucherat wrote:
Costin Manolache wrote:
Having a single source tree would also greatly simplify the ant file,
Obviously, the build script would be far far simpler. Personally, I am
also in favor of a single source tree, since it's simply much easier to
work with.
I hope this will
Apache Tomcat v5.5.16 is:
[X] Stable (no major issues)
[ ] Beta (at least one major issue: please provide details)
[ ] Alpha (multiple significant issues: please provide details)
Regards,
Mladen.
-
To unsubscribe, e-mail: [EM
Jean-frederic Clere wrote:
Sure... But my question was more why are the permission not ok in the
tar file?
Because I messed up ;)
They probably should have svn:executable set on them at some point.
Right.
Regards,
Mladen.
---
Fenlason, Josh wrote:
I should have checked this before the vote for 5.5.16 was closed, but I
just realized that in 5.5.16 the native connector is still at 1.1.1.
Me too :(
That's bad.
Does the Tomcat native connector have it's own release cycle?
Yes.
We would need to repack the 5.5.16 or r
Yoav Shapira wrote:
> The Apache Tomcat Team has voted to certify v5.5.16 as stable.
> Binding +1 votes were cast by Mladen Turk, Peter Rossbach, Remy
> Maucherat, Henri Gomez, Jeanfrancois Arcand, and myself.
>
Just figured out that the 5.5.16 was shipped with tomcat-native-1.1.1,
a
Jean-frederic Clere wrote:
Hi,
One of the patches I need to get TC working with JSP in EBCDIC is the
following:
Any comments?
Yes. Fix your clock. You live in the future :)
Cheers,
Mladen.
-
To unsubscribe, e-mail: [EMAI
Yoav Shapira wrote:
Hola,
The one thing I don't want to do is repackage 5.5.16. The do nothing
option is viable, as is just sending a message (ideally a response to
my stable vote announcement) to the mailing lists saying "by the way,
it's stable but it has native 1.1.1 just fyi." If you want t
Henri Gomez wrote:
We could comment how to build an APR 1.2.2 ready for static inclusion (easy).
But the configure/makefile of tcnative should be adapted
You have the commit rights, so what's the problem :)
Cheers,
Mladen.
---
José Iván González Vidal wrote:
Hi!!
I´m begining to use the apache-tomcat-5.5.16, I install it and start the
service but , when I try to open the page: http://127.0.0.1:8080 it doesn'
found, and if I go to see the process who are opening ports this doesn´t
open the port 8080...
!!! Thunderbi
William A. Rowe, Jr. wrote:
Fenlason, Josh wrote:
I should have checked this before the vote for 5.5.16 was closed, but I
just realized that in 5.5.16 the native connector is still at 1.1.1.
Question, does TC-Native 1.1.1 share the same flaw as mod_jk,
mod_proxy_ajp?
It's irrelevant.
5.5
Jim Jagielski wrote:
I'm thinking... the behavior we want is that non-Windows
OSs want the APR_SO_REUSEADDR before the bind; Windows
wants it after. So checking for (OS.IS_UNIX) at
one point (for the former) and then (OS.IS_WIN32 || OS.IS_WIN64)
(for the later) is misleading, and doesn't match wh
Hi all,
There is quite large list of fixed bugs for mod_jk
from the 1.2.15:
#37469: Fix shared memory close for forked childs.
#37332: Fix potential misuse of buffer length with snprintf.
#38859: Protect mod_jk against buggy or malicious AJP servers.
#38889: Use worker map sorting depending on t
[EMAIL PROTECTED] wrote:
Fix gcc 4.0.1 compiler warning at mac os x!
Man, your are really serious with macosx.
Now, since it runs on Intel, I should try
one for myself :)
Cheers,
Mladen.
-
To unsubscribe, e-mail: [EMAIL PROT
Peter Rossbach wrote:
The current os.c patch works well at mac os x. and currently the IS_UNIX
flag is enough.
But my research for more mac os x system info is hard. Help is needed...
Rainer made initial implementation for linux and solaris,
so he might have some ideas. Although this is prett
Peter Rossbach wrote:
Hey Malden,
I have found one compile error:
Can be that we must use
jk_shmem.attached instead jk_shmem.hdr.attached ?
Right, a stupid copy/paste error from the testing
linux box to a windows one I'm using for commits.
However, I saw you already commit a patch.
Thanks,
Remy Maucherat wrote:
+1, but make sure you test it (I see lots of last minute fixes).
Well, I hope I won't be the only one doing testing.
I'll create a private .tar.gz so everyone interested
(beside myself) could build and test it, before
official vote and release.
This is for those lazy to
Peter Rossbach wrote:
+1
Can you please create a windows binaries?
Sure. Already have them :)
I start testing at weekend and I hope Rainer can also do testing at
solaris.
I'll put that somewhere in the people.apache.org.
I'll let you know, when I upload the bins.
--
Mladen.
Jim Jagielski wrote:
Oh. I had thought that someone said that MaxOS did NOT
report itself as IS_UNIX (which would itself be a bug).
If that is no longer the case, then the MacOS side-benefit
is moot.
Right, and with the latest patch to the OS.java there is
no more 'Address already in use ...'
Remy Maucherat wrote:
About the rebinding issues, this is quite funny, I remember asking for
explanations to Mladen and Jim (who did apply a patch for it in the
native code, as far as I can remember, but it's not in tcnative 1.1.2),
and was ignored.
The problem was in OS.java, not in native.
William A. Rowe, Jr. wrote:
If there's any hope of waiting a day or few, I'd like to ensure this can
be configured and built to both 2.0 and 2.2 on windows and unix.
Sure, no problem.
I wish that we have at least a stable release as 1.2.15 was,
so what ever it takes :)
Regards,
Mladen.
Rainer Jung wrote:
While playing around with svn checkout of mod_jk trunk (1.2.16-dev) I
saw, that in jk/native/configure.in there is still a line
VERSION=1.2.14
Right, but it's irrelevant.
We have jk_version.h. I think this was
meant to be used for packaging tasks
that BTW doesn't exist.
KARNATI, SRINIVASA R [AG/1000] wrote:
I would like to extend AJP buffer size (in org.apache.jk.common.MsgAjp) as a
configurable option. We really needed the buffer above 8 kb (because of
Kerberos integration.)
-1.
Makes no sense because other side has no clue about that.
If you need larger pa
Henri Gomez wrote:
well client and server should be in phase about the buffer size and
the better way to accomplish that will be via AJP13 extensions (ie
AJP14), with connect time negociation datas like packet buffer size :)
Right. Extensions could contain packet size. The problem is that even
KARNATI, SRINIVASA R [AG/1000] wrote:
Possible. But, I have no idea why connector should be constraining this.
???
It is obvious by your comment that you have no clue how AJP
protocol works, and why it has a fixed packet size in the spec.
Also take a look at what protocol and specification
Jess Holle wrote:
Henri Gomez wrote:
We recently saw a customer run into this limitation in that all of their
headers, etc, would not fit in the first 8K.
Waiting for a new AJP version sounds like a non-starter. Can we just
have something like a JkOption that allows one to explicitly opt
Peter Rossbach wrote:
Hi,
I have test the sendfile apr connector feature with MAC OS X 10.4.5,
Java 1.5, APR 1.2.2, Tomcat svn head,
Every time as sendfile is use the AprEndpoint.add(SendfileData data)
Socket.sendfilen() L1417 returned code 70023 APR_ENOTIMPL
Not yet implemented?!
Looks l
Peter Rossbach wrote:
Arrg,
you are right! It seems that MAC OS X have no sendfile support. I have
search, but I can't find sys/sendfile.h
I don't understand why Library.APR_HAS_SENDFILE not set correctly :-(
apr.h is correct generate without sendfile support #define
APR_HAS_SENDFILE 0
S
Peter Rossbach wrote:
Ups, now I find the root of my strange problem...
Start with zero, but jnilib.c starts with one?!
I think that isn't correct or every one at the middle decrement the
has() value! Can I change the Library.java ?
If you have a commit right, sure :)
It seems it's an typ
Peter Rossbach wrote:
Ups, now I find the root of my strange problem...
I think that isn't correct or every one at the middle decrement the
has() value! Can I change the Library.java ?
Sorry...
Fix the jnilib.c instead Library.java
--
Mladen.
Jeff Turner wrote:
On Sat, Apr 08, 2006 at 06:56:06PM +0200, Remy Maucherat wrote:
Jeff Turner wrote:
We experienced this before on the old issues.apache.org box, but Remy
said he fixed it (and it is fixed on that box):
Nothing unusual. Ubuntu 5.10, 1x2.8Ghz Xeon. Java is started with:
-Djav
Remy Maucherat wrote:
Yoav Shapira wrote:
I'm ready to do a 5.5.17 later this week, if the other committers
think this is a decent time.
We would need a new release of tcnative (1.1.3) as well, so some updates
are needed.
Right. I was hoping to have the native release by the end of the w
Yoav Shapira wrote:
I'm also OK with Friday morning / afternoon. Should we tentatively
plan on Mladen cutting tcnative 1.1.3 and updating the installer
dependency Friday morning, and then me tagging and cutting 5.5.17
Friday afternoon? (All times GMT)
+1.
1.1.3 will be out on Friday, by 12:
Rainer Jung wrote:
Hi List, hi Mladen (master of mod_jk):
I could supply a patch including documentation. I think that would be
low risk, because that patch would only influence how the load counters
are handled, and would not interfere with changing worker status and
decision logic.
Comme
Rainer Jung wrote:
Good news.
Will you cut another mod_jk version close to 5.5.17 (it will be to late
for that one), or are you planning to keep 1.2.16 in development for at
least 1-2 weeks further on?
We had a preliminary vote two weeks ago, and everyone agreed
to go for the 1.2.16, so if yo
Yoav Shapira wrote:
Never mind, it looks like the binaries are in www.apache.org/dist, I
(and the build script) was looking in archive.apache.org/dist. Will
tag and build 5.5.17 in a few minutes.
Right. I'm not sure when the files from /dist gets moved
to archive.apache.org
The sources and b
Yoav Shapira wrote:
We can codify it more formally in a VOTE thread from now on if need
be, I suppose there's no harm in that.
Although boring, if it's the ASF rule, there is no harm in that except
an additional "official" voting thread. Since like you said, we agree
on each release, the RM c
Yoav Shapira wrote:
Apache Tomcat v5.5.17 is:
[X] Stable - no major issues
Regards,
Mladen.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Hi,
The provided tomcat-users.xml is obviously used
as an example.
Can we tweak that so that it actually allows
the admin and manager users?
The purpose would be the same (example), but
it will allow to run the provided web apps without
additional editing.
Any objections if I put the 'real' val
Peter Rossbach wrote:
Yes, defaults are very fine, but secret parameter need active user
interaction.
I didn't say it will be enabled by default.
If commented out like in tc6, it would need an user intervention
anyhow, so the user uncommenting the credentials should be
aware of the consequenc
Remy Maucherat wrote:
Are you posting this proposal because some people find it too difficult ?
I'm posting that because I find it difficult.
I always forget the usernames and roles :)
Anyhow, It's not a big deal.
Sorry for the noise :)
Regards,
Mladen.
---
Javier Iglesias wrote:
Hi there,
sorry to disturb with such a silly question:
where can I find the Apache Tomcat logo in vector
format (svg, eps, pdf, ai, ...)?
It's still in Jakarta repository:
http://cvs.apache.org/viewcvs.cgi/jakarta/site/xdocs/images/logos/tomcat.eps?rev=126640&view=log
Javier Iglesias wrote:
Thanks Mladen,
> Good point! It should go to our svn thought.
I cleaned up the file, added the colors
according to tomcat.apache.org, converted to svg.
It would be nice to have colored .eps.
My Photoshop does not support .svg :)
Regards,
Mladen.
---
Remy Maucherat wrote:
Mladen Turk wrote:
It would be nice to have colored .eps.
My Photoshop does not support .svg :)
Bleh. I would recommend using Gimp (and svg) instead, and I think it's a
great contribution from Javier.
Right, The GIMP rulez ... removing Photoshop :)
Of course, t
Remy Maucherat wrote:
According to the release process, the 6.0.13 tag is:
[ ] Broken
[ ] Alpha
[ ] Beta
[X] Stable
BTW, can you repack the binaries with the latest
tomcat6.exe. At least it allows a thread dump to
the stdout.log for standard log level.
If it would require a new tag, just forg
Hi,
Right now we are only shipping windows 32-bit binaries
inside .zip distro. Can we modify the build so the
zip contains windows 64-bit amd64/emt64 and ia64
binaries as well. It would increase the .zip
only by 200K. I'll also try to modify the service.bat
script so that install detects if the J
Peter Rossbach wrote:
All my tests are working... :-)
You have a lousy tests!
Sorry, I simply couldn't resist :)
Anyhow according to the Ferengi rule #16
A deal is a deal ... until a better one comes along.
Just replace the 'deal' with the 'release', and
you'll got the eternal truth about our
[EMAIL PROTECTED] wrote:
Rearrange configure.in, such that in case we
got with-apxs we detect CC from apxs and warn,
if the CC environment variable differs.
Is this really needed?
I mean having that the apxs wouldn't work for
any custom module thought.
I think that instead fixing other people
Rainer Jung wrote:
Still vetoing?
No, I just said that I don't like the way we
try to fix other peoples faults.
I'm sure it would leads us to no where pretty soon.
What I'm saying is that the problem you fixed
is not something all of our users are seeing.
It is *platform* dependent, and that
Filip Hanik - Dev Lists wrote:
+1
Sure, I'd prefer the new branch, it's a good idea in the scenario where
the new changes may not be complete and we have to do a security
fix/release 6.0
But then 6.0 should be frozen for any API change.
6.1.x would work
If the 6.2 stable branch will fo
Rainer Jung wrote:
Hello to all Tomcat project members,
Apache Tomcat Connectors 1.2.23 is:
[X] Stable - no major issues, no regressions
[ ] Beta - at least one significant issue -- tell us what it is
[ ] Alpha - multiple significant issues -- tell us what they are
Tested on Linux and Windoze
Rainer Jung wrote:
Hi,
now that we changed the default way how to forward URIs from mod_jk to
Tomcat (mod_jk 1.2.23) because of a directory traversal issue, I want to
propose a better long term solution.
My proposal is that we make our own decoder if the URI is encoded
and then do a match
Rainer Jung wrote:
Mladen Turk wrote:
My proposal is that we make our own decoder if the URI is encoded
and then do a match and forward that.
As far as I understand you suggestion, this would not help.
There's nothing wrong with "our" decoder (the httpd decoder), what's
Jean-Frederic wrote:
What about url like /context-a/../context-b/?
There could be a problem if the goal is not to map /context-b.
Should we normalise /context-a/../context-b/ to /context-b and then do
the mapping.
Yes. It would require some programming of course, but
it'll solve the issues wi
Rainer Jung wrote:
Mladen Turk wrote:
You got me wrong. I suggest we decode the encoded uri, do mapping,
remove ;jsessionid=xxx and send that to the Tomcat.
This way tomcat won't have double encoding issue.
And it's completely legitimate if we comply to the RFC.
This would also solve
Rainer Jung wrote:
OK Mladen, I understand that, but I think it's not correct.
Might be.
But: none of the existing options does the right thing. That's why I
suggested another way of handling the forward. I think my sugeggested
variant "forward r->uri with encoded '%'" is the right way of
Rainer Jung wrote:
Mladen Turk wrote:
Can you write a simple example of the uris that make the problem
and why we would need to encode the %.
How it is passed now, and how it would be passed with your
proposal.
Original URI:
/myapp/%252e%252e/otherapp/danger
JkMount /myapp/*
Apache httpd
1 - 100 of 1263 matches
Mail list logo
