ng-security-web-4.1.0.RELEASE.jar:4.1.0.RELEASE]
>
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(
> FilterChainProxy.java:331)
> ~[spring-security-web-4.1.0.RELEASE.jar:4.1.0.RELEASE]
>
> at org.pac4j.springframework.security.web.SecurityFilter.lambda
On Wed, May 3, 2023 at 8:01 AM wrote:
> Sure Ill run it.
>
> - Jeremy
>
> > On May 3, 2023, at 7:05 AM, Christopher Schultz <
> ch...@christopherschultz.net> wrote:
> >
> >
> > Jeremy,
> >
> >> On 5/2/23 22:27, Jeremy Nguyen wrote:
> &g
hodAccessorImpl.invoke0(Native
> Method)
>
> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
>
> at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
>
> at java.base/java.lang.refle
ty-web-4.1.0.RELEASE.jar:4.1.0.RELEASE]
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
> ~[spring-security-web-4.1.0.RELEASE.jar:4.1.0.RELEASE]
> at
> org.pac4j.springframework.security.web.SecurityFilter.lambda$doFilter$1(Se
Confirmed that running 8.5.34 resolves the issue. I'll have no choice but
to run this version until the issue is resolved, or a workaround is found.
Thanks all!
On Mon, May 1, 2023 at 2:46 PM Jeremy Nguyen wrote:
> I noticed this change was introduced:
> https://bz.apache.o
I noticed this change was introduced:
https://bz.apache.org/bugzilla/show_bug.cgi?id=62868
https://github.com/apache/tomcat/blame/8.5.x/java/org/apache/catalina/loader/WebappClassLoaderBase.java#L1122
I'll try running 8.5.34 and report back.
Jeremy
On Mon, May 1, 2023 at 2:12 PM Rob Sa
bcontainer/src/org/cg/dao/webcontainer/tomcat/TomcatWrapper.java#L185
I posted my web.xml and error trace here as well:
https://stackoverflow.com/questions/76139108/web-xml-configuration-is-broken-when-upgrading-to-tomcat-8-5-and-spring-5-1
Thanks,
Jeremy
>
>
> > Tomcat uses the same code for static and class loader resources but it
> > is meant to distinguish between the two. However, it looks like there is
> > a bug in Tomcat's resource handling that hides this resource once the
> > static look-up fails. I need to dig into this some more.
>
> Yes,
of getResourceAsStream(path) on our part so
we're looking for advice.
Thanks,
Jeremy
--
JEREMY COLLINS
PERFECTSENSE // BRIGHTSPOT
www.perfectsensedigital.com
www.brightspot.com
O 703-956-5815
The Apache Tomcat team announces the immediate availability of Apache Standard
Taglib 1.2.5.
Apache Standard Taglib is an open source software implementation of the JSP
Standard Tag Library (JSTL) technology.
This release supports JSTL version 1.2 and includes minor bug-fixes to the
previous 1
CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags
Severity: Important
Vendor:
The Apache Software Foundation
Versions Affected:
Standard Taglibs 1.2.1
The unsupported 1.0.x and 1.1.x versions may also be affected.
Description:
When an application uses or tags to process untrusted
The Apache Tomcat team announces the immediate availability of Apache Standard
Taglib 1.2.3.
Apache Standard Taglib is an open source software implementation of the JSP
Standard Tag Library (JSTL) technology.
This release supports JSTL version 1.2 and includes bug-fixes and improvements
on the
?
Thanks
Jeremy
signature.asc
Description: Message signed with OpenPGP using GPGMail
The Apache Tomcat team announces the immediate availability of Apache Standard
Taglib 1.2.1.
Apache Standard Taglib is an open source software implementation of the JSP
Standard Tag Library (JSTL) technology.
This release supports JSTL version 1.2 along with numerous bug-fixes and
improvements
onsible for the makeover the Tomcat web site and
> Tomcat 8 documentation has received.
Welcome!
Cheers
Jeremy
signature.asc
Description: Message signed with OpenPGP using GPGMail
Thanks Mark. I ended up doing something similar (added a context
parameter to the context files) which are being generated by the build
process.
Jeremy
On 8/1/13 1:19 PM, "Mark Thomas" wrote:
>On 01/08/2013 17:45, Majors, Jeremy wrote:
>> I've seen multiple posting
ee if
there was a way to get the docBase parameter from the context file, but all the
postings for that said to use request.getServletContext().getRealPath(), which
is returning null.
Any guidance would be greatly appreciated.
Thanks,
Jeremy
Thanks Chris for the suggestions. At this point I think it will be good
enough for our needs. Your comments have helped me understand the
process/inner-workings better.
Jeremy
On 7/11/13 10:39 AM, "Christopher Schultz"
wrote:
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA256
On 7/8/13 10:52 PM, "Christopher Schultz"
wrote:
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA256
>
>Jeremy,
>
>On 7/5/13 11:24 AM, Majors, Jeremy wrote:
>> For a simple web application, what is the expected delay when
>> switching to new version o
et me know if I haven't been clear.
Thanks,
Jeremy
I manually
deployed.
Thanks,
Jeremy
On 7/2/13 2:10 PM, "Christopher Schultz"
wrote:
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA256
>
>Jeremy,
>
>On 7/2/13 12:09 PM, Majors, Jeremy wrote:
>> When I run Jmeter requests consistently against website1 and th
and if so, how would I mimic what is happening in regards
to the automatic migration of users to new versions while using the folder
deployment approach.
Thank you very much for your assistance,
Jeremy
text Name is Different than the WAR Name
>>
>>> Assuming the file above is called website1##001.xml
>>
>>> then you should be able to add website1##002.xml with the following
>>> content: >> sessionCookiePath="/"
>>> docBase="/Use
On 7/1/13 2:27 PM, "Mark Thomas" wrote:
>On 01/07/2013 19:30, Majors, Jeremy wrote:
>> The application I am working on currently runs in production under
>> multiple contexts within tomcat and we are doing so by creating
>> separate context.xml files for ea
anyone know if our current context configuration can work with the
parallel deployment process and if so, how would that be accomplished?
Thanks in advance for your guidance.
Jeremy
apologize, but my
search terms haven't found an answer as of yet. I'm hoping someone on here can
help:
How do I go about setting up server side logging to gain more detailed
information about ssl connections when using tomcat with apache tomcat native,
apr, and openssl for https?
Thanks!
-Jeremy
On Tue, Oct 9, 2012 at 5:46 PM, Christopher Schultz
wrote:
> Are you sure you're not just getting the "global" driver and it
> happens to work properly?
There is no "global" driver because I took the jar out of
$CATALINA_HOME/lib before running the test and restarted the server.
>
> - -chris
--
On Tue, Oct 9, 2012 at 4:56 PM, Andrew Todd wrote:
>
> On Tue, Oct 9, 2012 at 10:37 AM, Jeremy Heiler
> wrote:
> > Every resource I've read thus far has said that the driver jar must be
> > in $CATALINA_HOME/lib or DBCP wont work.
>
> Can you provide a link for th
appears to work
just fine. Perhaps I am missing something? Are there other consequences for
putting the driver in each individual webapp (when having Tomcat manage
connections) and not in $CATALINA_HOME/lib?
Thanks,
//Jeremy
problem is with APR, most likely with the
installation rather than a bug in APR itself. I'd try recompiling APR (and
installing the recompiled version).
=Jeremy=
On Sun, Nov 20, 2011 at 6:44 PM, Eric Kemp wrote:
> Below is my entire server.xml (minus commented lin
by setting:
socket_timeout=90
socket_connection_timeout=5000
retry_options=25
unless someone has a better idea.
Thanks!
=Jeremy=
On Wed, Nov 16, 2011 at 5:29 PM, Jeremy wrote:
> OK, I know this seems crazy, but I've looked long and hard and cannot
> explain this as othe
Mark Thomas wrote:
> On 17/11/2011 01:29, Jeremy wrote:
> > OK, I know this seems crazy, but I've looked long and hard and cannot
> > explain this as other than a Tomcat bug. I'm more than willing to dig up
> > extra information where I can, but this is a very rare pr
one request is handled exclusively in one thread and what
the logs are showing is a violation of that contract. Which is why I think
it is a Tomcat (or Apache or mod_jk or AJP) bug.
=Jeremy=
On Wed, Nov 16, 2011 at 10:25 PM, Caldarale, Charles R <
chuck.caldar...@unisys.com> wrote:
> > Fr
request?
How can we detect this as opposed to the user legitimately sending the same
request twice?
Thanks for your help!
=Jeremy=
Found a java guy here locally that helped me with this. It looks like HexUtils
was moved to tomcat-coyote.jar. Added that to my classpath and it works now.
The url I mentioned below should probably be updated though.
Windows Server 2003
Thanks,
Jeremy C.
C:\Code\tomcattest>java -version
java version "1.6.0_26"
Java(TM) SE Runtime Environment (build 1.6.0_26-b03)
Java HotSpot(TM) Client VM (build 20.1-b02, mixed mode, sharing)
C:\Code\tomcattest>dir /ad /b
apache-tomcat-7.0.11
apache-tomca
OK, so in conclusion, there is no way to reproduce the way tomcat 5.0
worked (on that particular topic) on tomcat 7.0.
Thanks for your help
Jeremy
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
Fo
On Mon, Dec 13, 2010 at 2:07 PM, Mark Thomas wrote:
> On 13/12/2010 13:02, Jeremy Monnet wrote:
>> Hi,
>>
>> I try since last friday to use a context file on tomcat 7, without any
>> success.
>>
>> I have a webapp running on an old tomcat 5.0, and i want
can't fin what ? Of
course, renaming the war myapp.war works, and also linking
webapps/myapp to webapps/MYAPP ...
Thanks for your help,
Jeremy
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional c
g the proc, check activity monitor or run top to check
for java processes
-jeremy
SISU Works
---
Hi,
I downloaded apache-tomcat-5.5.25.zip and copied it to a directory,
after
setting up all the environment variables, it runs. but when I try to
open
it: http://localhost:8080, i
Thank you very much for trying. I could not make it work either. It's
a simple task, as you say, of simply making the cookie be attached to
the domain name .localhost ... Oh well. I'll have to figure something
out.
Thanks again,
Jeremy
On Apr 22, 2007, at 7:42 AM, Johnny
ent, thus the localhost, and I've
defined many other "hostnames" in my hosts file, like
host1.localhost, host2.localhost, host3.localhost. My app is working
great and responding to those correctly, but the cookie is being set
as localhost, not .localhost.
Jeremy
On Apr 21
Greetings!
I have domain.com and my app uses hosts under that domain, like
abc.domain.com, def.domain.com... When the user logs in, the session
is valid only on domain.com... How can I make that session also valid
under the other hostnames?
Thanks,
Jeremy
Thanks, that will do the trick!
Jeremy
On Apr 20, 2007, at 3:10 AM, Pid wrote:
Jeremy Cowgar wrote:
Is it possible to do a wildcard on the server alias? I have
something like username.hostname.com instead of hostname.com/
~username/ ... I have a wildcard in DNS so I do not define each
.
Can I do something similar w/Tomcat?
Thanks,
Jeremy
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Using a Mac OS 10.4 system w/ Tomcat 5.5.23...
Exactly where (what line location) do you use in the catalina.sh file to place
memory arguments?
(JAVA_OPTS="-Xmx12000m -Xms1m")
Thanks,
jeremy
-
To start a new top
Hassan Schroeder wrote:
On 1/9/07, Jeremy <[EMAIL PROTECTED]> wrote:
I'm trying to set up a tomcat 5.0.28 instance (on Debian) to achieve
redirecting accesses to site1.company.com through to newsite1.org, using
the balancer app. rather than apache webserver and the AJP conne
ork again!
Anyone have any clues or hints or ideas (apart from using apache
webserver and the AJP setup)? I'd be very grateful if so!
Cheers
Jeremy
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-
Simple concept that I didn't think about. Only question is can I have 2
different connectors (which validate against their own individual certs)
run off a single host with multiple aliases?
__
Jeremy Nix
Senior Application Developer
Southwest Financial Services
't seem to roleover, it just resets each day). Are
there other options available?
Thanks for any help.
--
__
Jeremy Nix
Senior Application Developer
Southwest Financial Services, Ltd.
-
To start
errors indicated in
catalina.out, yet I can not access anything via HTTPS. (I have changed
the connector port from 8443 to 443, but it's not working either way.)
Requests eventually time out. HTTP requests work just fine.
Any help is greatly appreciated. Please mail me directly at
[EMA
singleton-like application context. You can also use it to help you
configure things like internationalization. I'd highly recommend a Spring /
Hibernate combo, or even just Spring if you already have a persistence layer
you don't want / need to change.
Jeremy Thomerson
eBay
ld work just as well.
Jeremy Thomerson
- Original Message -
From: "Wade Chandler" <[EMAIL PROTECTED]>
To: "Tomcat Users List"
Sent: Monday, December 26, 2005 9:15 PM
Subject: Re: detecting a new file
--- Khawaja Shams <[EMAIL PROTECTED]> wrote:
Hello all
I followed what Slide did when writing my module:
http://cvs.apache.org/viewcvs.cgi/jakarta-slide/src/jaas/org/apache/slide/ja
as/spi/SlideLoginModule.java?rev=1.2&view=markup
On 11/17/05 3:29 AM, "Markus Plail" <[EMAIL PROTECTED]> wrote:
> Hi Jeremy!
>
> Jer
Can you supply the relevant sections of your web.xml? I am using FORM-based
authentication--tested with both the Memory and JAAS realms--but maybe this
will give you some hints:
...
home page
/index.jsp
GET
POST
myrole
FORM
/login.jsp
/loginError.jsp
rst call is made. Now when
> the subsequent calls are made connection is made via the ORB listner port
> only.
> When one of the App Server fails... it still tries to connect to bootstrap
> port (2809) of first app server. ideally it shoulde try to connect to the
> new app server b
Tomcat to not cache the
HomeHandle but instead always delegate Home interface creation to my object
factory. I could handle the caching and any retry logic in a ServiceLocator.
Is this possible?
Thank you!
--jeremy
-
To
57 matches
Mail list logo