RE: [ANNOUNCE] Tomcat 4.0 Beta 2

2001-03-30 Thread Kevin Jones
Bonza job guys, thank you :-) Kevin Jones DevelopMentor www.develop.com > -Original Message- > From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]] > Sent: 31 March 2001 08:27 > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; > [EMAIL PROTECTED] > Subject: [ANNOUNCE] T

[ANNOUNCE] Tomcat 4.0 Beta 2

2001-03-30 Thread Craig R. McClanahan
I'm pleased to announce the availability of the Beta 2 release of the next generation of the Tomcat servlet container, at: http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0-b2/ Tomcat 4.0 beta 2 has many new features, including: * Tomcat 4.0 can now run web applications out of an

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/naming/resources FileDirContext.java

2001-03-30 Thread remm
remm01/03/30 19:00:42 Modified:catalina/src/share/org/apache/naming/resources FileDirContext.java Log: - Fix problems under Windows where doing a request on /examples/.. would return a 500. Should now return a 404 instead. Revision ChangesPa

cvs commit: jakarta-tomcat-4.0/webapps/ROOT index.html

2001-03-30 Thread craigmcc
craigmcc01/03/30 17:20:00 Modified:catalina/src/share/org/apache/catalina Globals.java webapps/ROOT index.html Log: Update version numbers in preparation for beta 2 release. Revision ChangesPath 1.20 +5 -5 jakarta-tomcat-4.0/catalina/src/share/o

Behavior of new Server Side Include Functionality

2001-03-30 Thread Craig R. McClanahan
I've been reviewing the new Server Side Include functionality that Bip Thelin contributed, and comparing it to the NCSA docs at: http://hoohoo.ncsa.uiuc.edu/docs/tutorials/includes.html One place where our current behavior appears to vary from the documentation is on whether virtual paths ar

cvs commit: jakarta-tomcat-4.0 RELEASE-NOTES-4.0-B2.txt

2001-03-30 Thread craigmcc
craigmcc01/03/30 16:00:08 Modified:.RELEASE-NOTES-4.0-B2.txt Log: Update to reflect the version of Xerces that I tested with. Revision ChangesPath 1.6 +2 -2 jakarta-tomcat-4.0/RELEASE-NOTES-4.0-B2.txt Index: RELEASE-NOTES-4.0-B2.txt

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/core LocalStrings.properties StandardContext.java

2001-03-30 Thread craigmcc
craigmcc01/03/30 15:24:05 Modified:catalina/src/share/org/apache/catalina/core LocalStrings.properties StandardContext.java Log: Correctly assume that reload will be successful unless an error is encountered. Revision ChangesPath 1.28 +2 -0

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector HttpRequestBase.java

2001-03-30 Thread craigmcc
craigmcc01/03/30 15:23:19 Modified:catalina/src/share/org/apache/catalina/connector HttpRequestBase.java Log: Reverse the order of testing (check aliases first, then real roles) to conform to the servlet spec requirements. Submitted by: Bill Claypool

cvs commit: jakarta-tomcat-4.0/tester/src/tester/org/apache/tester Resources03.java

2001-03-30 Thread craigmcc
craigmcc01/03/30 15:19:15 Modified:tester/src/tester/org/apache/tester Resources03.java Log: Close the input stream when we are done with it. Revision ChangesPath 1.2 +2 -1 jakarta-tomcat-4.0/tester/src/tester/org/apache/tester/Resources03.java Index: Re

Re: cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connectorHttpRequestBase.java

2001-03-30 Thread Craig R. McClanahan
On Fri, 30 Mar 2001, Bill Claypool wrote: > On Fri, Mar 30, 2001 at 01:47:45PM -0800, Craig R. McClanahan wrote: > " On Fri, 30 Mar 2001, Bill Claypool wrote: > " > " > On Mon, Mar 26, 2001 at 08:02:18PM -, [EMAIL PROTECTED] wrote: > " > " craigmcc01/03/26 12:02:17 > " > " > " > " M

Re: Tomcat Feedback

2001-03-30 Thread Chandra Goliva
Hi Tomcat developer/user community, I am using Tomcat 3.2.1. Did you notice any problem while forwarding from a Servlet/JSP to a target JSP,which is a quite large in size? which may be something related to jsp comilation could not be finished in a certain time/ is too big in size to occupy run tim

cvs commit: jakarta-tomcat-4.0 RELEASE-NOTES-4.0-B2.txt

2001-03-30 Thread craigmcc
craigmcc01/03/30 14:43:53 Modified:.RELEASE-NOTES-4.0-B2.txt Log: Reflect the bugfix that Justyna just checked in. Revision ChangesPath 1.5 +4 -1 jakarta-tomcat-4.0/RELEASE-NOTES-4.0-B2.txt Index: RELEASE-NOTES-4.0-B2.txt ===

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/core LocalStrings.properties

2001-03-30 Thread craigmcc
craigmcc01/03/30 14:41:13 Modified:catalina/src/share/org/apache/catalina/core LocalStrings.properties Log: Update message strings for the change to startup just checked in. Revision ChangesPath 1.27 +2 -0 jakarta-tomcat-4.0/catalina/sr

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/core StandardContext.java

2001-03-30 Thread craigmcc
craigmcc01/03/30 14:27:51 Modified:catalina/src/share/org/apache/catalina/core StandardContext.java Log: Any significant error that is encountered while starting a Context initially, or as part of a reload() call, will now cause the corresponding web appl

cvs commit: jakarta-tomcat-4.0/jasper/src/share/org/apache/jasper/compiler ParserXJspSaxHandler.java

2001-03-30 Thread horwat
horwat 01/03/30 14:26:37 Modified:jasper/src/share/org/apache/jasper/compiler ParserXJspSaxHandler.java Log: Fix jsp xml syntax processing. Handle end tag properly. Bugzilla #618 Revision ChangesPath 1.8 +4 -0 jakarta-tomcat-4.0

RE: Tomcat and IPv6

2001-03-30 Thread Craig R. McClanahan
On Fri, 30 Mar 2001, GOMEZ Henri wrote: > These question appeared some time ago and I think that Craig > said it depend on OS where java is running and certainly JVM support > on IPv6. > > Rigth question may be about JDK 1.3 support of IPv6 ? > On TOMCAT-USER, it was pointed out that Apache

Re: Catalina Compiling error. class/method name mismatch betweencatalina classes reference calls and javax.servlet classes

2001-03-30 Thread Craig R. McClanahan
On Fri, 30 Mar 2001, Hui Ye wrote: > > Hi, all, > > I downloaded latest catalina code off cvs and jakarta-servletapi-4.0-b1, > along with other required stuff, and tried to compile and build it. > However, there are class name and method mismatches between the two to > prevent compiling going

Re: cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connectorHttpRequestBase.java

2001-03-30 Thread Craig R. McClanahan
On Fri, 30 Mar 2001, Bill Claypool wrote: > On Mon, Mar 26, 2001 at 08:02:18PM -, [EMAIL PROTECTED] wrote: > " craigmcc01/03/26 12:02:17 > " > " Modified:catalina/src/share/org/apache/catalina/connector > " HttpRequestBase.java > " Log: > " Correct the i

cvs commit: jakarta-tomcat-4.0 RELEASE-NOTES-4.0-B2.txt

2001-03-30 Thread craigmcc
craigmcc01/03/30 13:42:52 Modified:.RELEASE-NOTES-4.0-B2.txt Log: Increase the visibility of the security vulnerabilities that were fixed, and add information about the increased scope of the second vulnerability, beyond what was originally reported. Revision Chang

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/authenticator AuthenticatorBase.java

2001-03-30 Thread craigmcc
craigmcc01/03/30 13:38:48 Modified:catalina/src/share/org/apache/catalina/authenticator AuthenticatorBase.java Log: Fix a further vulnerability related to the "may expose JSP source code" vulnerability. Creative use of URL-encoded characters would also cau

RE: Tomcat and IPv6

2001-03-30 Thread GOMEZ Henri
These question appeared some time ago and I think that Craig said it depend on OS where java is running and certainly JVM support on IPv6. Rigth question may be about JDK 1.3 support of IPv6 ? >-Original Message- >From: Ibrahim Haddad (LMC) [mailto:[EMAIL PROTECTED]] >Sent: Friday, Marc

cvs commit: jakarta-tomcat-4.0 README.txt

2001-03-30 Thread craigmcc
craigmcc01/03/30 13:23:25 Modified:.README.txt Log: Add a note about downloading JavaMail and the activation framework in order to build the mail-related object factories. Revision ChangesPath 1.15 +5 -0 jakarta-tomcat-4.0/README.txt Index: READM

cvs commit: jakarta-tomcat-4.0/tester/web/WEB-INF web.xml

2001-03-30 Thread craigmcc
craigmcc01/03/30 13:20:05 Modified:tester/src/bin tester.xml tester/web/WEB-INF web.xml Added: tester/src/tester/org/apache/tester Decoding01.java Log: Add unit tests to validate URL decoding of getServletPath() and getPathInfo() values. Revision Chang

Catalina Compiling error. class/method name mismatch between catalina classes reference calls and javax.servlet classes

2001-03-30 Thread Hui Ye
Title: Catalina Compiling error. class/method name mismatch between catalina classes reference calls and javax.servlet classes Hi, all, I downloaded latest catalina code off cvs and jakarta-servletapi-4.0-b1, along with other required stuff, and tried to compile and build it. However, ther

Re: cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/connector HttpRequestBase.java

2001-03-30 Thread Bill Claypool
On Mon, Mar 26, 2001 at 08:02:18PM -, [EMAIL PROTECTED] wrote: " craigmcc01/03/26 12:02:17 " " Modified:catalina/src/share/org/apache/catalina/connector " HttpRequestBase.java " Log: " Correct the implementation of HttpServletRequest.isUserInRole() so tha

Re: [VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed Security Vulnerability)

2001-03-30 Thread horwat
+1 Justy - Original Message - > I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release > tonight, based on the current CVS code base. The primary reason for the > expedited schedule is that this code will include a fix for the "Tomcat > may reveal script source code

RE: Stress Test problems with 3.2.1

2001-03-30 Thread Remy Maucherat
Quoting "Cozianu, Costin" <[EMAIL PROTECTED]>: > Hi there, > > I just wanted to report the same problem, apparently the situation is > improved in 3.2.2beta 2 . > > What I had is that under 3.1 and 3.2.1 when stress loaded with 50 > concurrent > users making request each second Tomcat leaked me

RE: Stress Test problems with 3.2.1

2001-03-30 Thread Cozianu, Costin
Hi there, I just wanted to report the same problem, apparently the situation is improved in 3.2.2beta 2 . What I had is that under 3.1 and 3.2.1 when stress loaded with 50 concurrent users making request each second Tomcat leaked memory. It would easily go to OutOfMemoryError, although I tried t

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/core StandardContextMapper.java

2001-03-30 Thread craigmcc
craigmcc01/03/30 12:44:21 Modified:catalina/src/share/org/apache/catalina/core StandardContextMapper.java Log: Use RequestUtil.URLDecode() instead of URLDecoder.decode() in order to deal with character encoding issues correctly. Submitted by: Remy Mauc

Re: [VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed Security Vulnerability)

2001-03-30 Thread Glenn Nielsen
"Craig R. McClanahan" wrote: > > I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release > tonight, based on the current CVS code base. The primary reason for the > expedited schedule is that this code will include a fix for the "Tomcat > may reveal script source code by URL t

cvs commit: jakarta-tomcat-4.0 RELEASE-NOTES-4.0-B2.txt

2001-03-30 Thread craigmcc
craigmcc01/03/30 12:31:53 Modified:.RELEASE-NOTES-4.0-B2.txt Log: Update beta-2 release notes to reflect changes made to date. Need to verify behavior of several of the new features (running Jasper using Xerces 1.3, compression filter, and server-side includes) before

Re: [VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed SecurityVulnerability)

2001-03-30 Thread Jon Stevens
on 3/30/01 11:36 AM, "Craig R. McClanahan" <[EMAIL PROTECTED]> wrote: > I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release > tonight, based on the current CVS code base. The primary reason for the > expedited schedule is that this code will include a fix for the "Tomcat >

Re: [VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed Security Vulnerability)

2001-03-30 Thread Amy Roh
- Original Message - From: "Craig R. McClanahan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 30, 2001 11:36 AM Subject: [VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed Security Vulnerability) > I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release

RE: Tomcat Feedback

2001-03-30 Thread cmanolache
On Fri, 30 Mar 2001, Marc Saegesser wrote: > 1. Classes loaded by the container take precedence over classes from Jar > files in WEB-INF/lib. In tomcat 3.x there really isn't anything we can do > about this. The Servlet 2.3 (Proposed Final Draft) specification allows > containers to let classe

Re: [VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed Security Vulnerability)

2001-03-30 Thread Remy Maucherat
> I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release > tonight, based on the current CVS code base. The primary reason for the > expedited schedule is that this code will include a fix for the "Tomcat > may reveal script source code by URL trickery" security vulnerability,

Re: cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/util RequestUtil.java

2001-03-30 Thread Remy Maucherat
> +relativeURI = URLDecoder.decode(relativeURI); That doesn't decode using the right format. Maybe it works in that case, but I suggest using RequestUtil.URLDecode instead. Remy

[VOTE] Tomcat 4.0 Beta 2 Release Tonight (Fixed Security Vulnerability)

2001-03-30 Thread Craig R. McClanahan
I'd like to propose that we create and publish a Tomcat 4.0 beta 2 release tonight, based on the current CVS code base. The primary reason for the expedited schedule is that this code will include a fix for the "Tomcat may reveal script source code by URL trickery" security vulnerability, as well

cvs commit: jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/util RequestUtil.java

2001-03-30 Thread craigmcc
craigmcc01/03/30 11:33:39 Modified:catalina/src/share/org/apache/catalina/core LocalStrings.properties StandardContextMapper.java StandardContextValve.java StandardWrapperValve.java catalina/src/share/org/apache/catalina/uti

RE: Stress Test problems with 3.2.1

2001-03-30 Thread Marc Saegesser
Could you please try this test with Tomcat 3.2.2 beta 2? I believe this problem has been fixed in this release. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Friday, March 30, 2001 1:08 PM > To: [EMAIL PROTECTED] > Subject: Stress Test problems with 3.

RE: Tomcat Feedback

2001-03-30 Thread Marc Saegesser
Ben, Thanks for your feedback. I'll try to respond to your issues below. Also, if at all possible, try using the Tomcat 3.2.2b2 release to see if it addresses any of your concerns. 1. Classes loaded by the container take precedence over classes from Jar files in WEB-INF/lib. In tomcat 3.x th

Stress Test problems with 3.2.1

2001-03-30 Thread tomcat-dev-list
Hello, I have tc 3.2.1 installed on w2k server with iis5, sun hotspot 2.0 server mode and jdk 1.3. I have been running this implementation successfully for the past several months with no problems. I decided to perform a stress test to see how tc would handle it. 1. First test. 100 concurrent c

RE: FW: Tomcat may reveal script source code by URL trickery

2001-03-30 Thread Marc Saegesser
Tomcat 3.1.x and 3.2.x do not suffer from this problem. > -Original Message- > From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]] > Sent: Friday, March 30, 2001 12:26 PM > To: [EMAIL PROTECTED] > Subject: Re: FW: Tomcat may reveal script source code by URL trickery > > > > > On Fri, 30

Re: FW: Tomcat may reveal script source code by URL trickery

2001-03-30 Thread Craig R. McClanahan
On Fri, 30 Mar 2001, Renzo Toma wrote: > > Just in case you missed it. > I'm working on this ... (compiling as I type). Craig > -Original Message- > From: Bugtraq List [mailto:[EMAIL PROTECTED]]On Behalf Of Sverre > H. Huseby > Sent: donderdag 29 maart 2001 10:12 > To: [EMAIL PROT

Re: More naming woes...

2001-03-30 Thread T. Park
Hi Craig, I agree with you - bundling the javax.naming... is a bit of a problem waiting to happen. The original reason was as a 'convenience' for end-users that weren't on JDK 1.3, as it was the same classes from JSEE 1.2.1 there wasn't a conflict. Of course who knows what the future will brin

Tomcat Feedback

2001-03-30 Thread Ben Hutchison
Hi Tomcat Developers,   I work at Finetix London, a technical consultancy working with a lot of J2EE and XML/XSL technology. Over the last weeks, my colleage and I have been using Tomcat 3.2.1 for JSP/Servlet development, and we encountered a couple of glitches/issues which I describe below.

FW: Tomcat may reveal script source code by URL trickery

2001-03-30 Thread Renzo Toma
Just in case you missed it. -Original Message- From: Bugtraq List [mailto:[EMAIL PROTECTED]]On Behalf Of Sverre H. Huseby Sent: donderdag 29 maart 2001 10:12 To: [EMAIL PROTECTED] Subject: Tomcat may reveal script source code by URL trickery Tomcat may reveal script source code by URL

tomcat 4.0 b1/apache 1.3.12: trouble with sessions

2001-03-30 Thread a . wille
Hi, I'm just evaluating tomcat 4.0 b1 and apache 1.3.12 on a solaris 2.6 system. After installing tomcat (as stand-alone) and successfully testing the examples, I tried to connect tomcat and apache using mod_webapp. This works also fine. But testing the session servlet example fails. It seems tha

RE: Running Tomcat without tools.jar (javac) after precompiling my jsp's.

2001-03-30 Thread Szegedi, Attila
You should run jspc with -webinc switch. It will generate an XML fragment that you should add to your web.xml file (either by copy/paste or by including it as an entity); It will look like this: com.mycompany.foo.myjsppage com.mycompany.foo.myjsppage /com/mycompany/foo/

Tomcat and IPv6

2001-03-30 Thread Ibrahim Haddad (LMC)
Hello, I am working on IPv6 at Ericsson Research Canada. I would like to check if Tomcat has support for IPv6 addressing format. I would really appreciate your feedback. Thank you. -- Ibrahim Haddad Open Architecture Research Lab

Re: SendMailFactory.java breaks compile

2001-03-30 Thread Remy Maucherat
> I've just tried to compile the latest CVS of Tomcat 4 and I'm missing some > classes trying to compile SendMailFactory.java. > > /Users/stuart/OpenSource/jakarta-tomcat-4.0/catalina/src/share/org/apache/ > naming/factory/SendMailFactory.java:0: Class javax.activation.DataSource > not found in cl

Re: SendMailFactory.java breaks compile

2001-03-30 Thread Craig R. McClanahan
On Fri, 30 Mar 2001, Stuart Roebuck wrote: > I've just tried to compile the latest CVS of Tomcat 4 and I'm missing some > classes trying to compile SendMailFactory.java. > > /Users/stuart/OpenSource/jakarta-tomcat-4.0/catalina/src/share/org/apache/ > naming/factory/SendMailFactory.java:0: Cla

Re: [PATCH] build.xml instead of build.sh

2001-03-30 Thread Craig R. McClanahan
On Fri, 30 Mar 2001, Matthew L Daniel wrote: > I (personally) hate setting all those crazy environmental variables to build > Catalina, and since Ant is kind enough to ignore the "property file" tag if > the file does not exist, I feel this can be safely included for general use. > I've had p

Re: More naming woes...

2001-03-30 Thread Craig R. McClanahan
On Thu, 29 Mar 2001, T. Park wrote: > Remy, > > thanks, that's good to hear - I'm still having a nightmare of a time resolving > one last issue. > > I have a large jar file that contains, amongst other things (e.g. an ejb > container, a namingservice etc) javax.naming package. > Are you inc

RE: TC3.3 Proposal: Refactoring org.apache.jasper.servlet

2001-03-30 Thread cmanolache
On Fri, 30 Mar 2001, Mel Martinez wrote: > I don't have the time to do much more than that! That > Damn Day Job(tm) keeps getting in the way! :-) Yea, believe me, I know what you mean, you're not the only one :-) Costin

RE: TC3.3 Proposal: Refactoring org.apache.jasper.servlet

2001-03-30 Thread Mel Martinez
--- [EMAIL PROTECTED] wrote: > On Fri, 30 Mar 2001, Mel Martinez wrote: > > > --- Steve Downey <[EMAIL PROTECTED]> > wrote: > > > > I must admit to not being totally sure whether > > co-opting the current 'Constants' and 'Options' > class > > families is the best naming for this, but they do > >

RE: TC3.3 Proposal: Refactoring org.apache.jasper.servlet

2001-03-30 Thread cmanolache
On Fri, 30 Mar 2001, Mel Martinez wrote: > --- Steve Downey <[EMAIL PROTECTED]> wrote: > > I must admit to not being totally sure whether > co-opting the current 'Constants' and 'Options' class > families is the best naming for this, but they do > clearly indicate the difference in scope. I coul

RE: TC3.3 Proposal: Refactoring org.apache.jasper.servlet

2001-03-30 Thread Mel Martinez
--- Steve Downey <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: [EMAIL PROTECTED] > > > > On Thu, 29 Mar 2001, Mel Martinez wrote: > > > > > activities that should be orthogonal. The only > > > dependency should be that the Compiler is a > consumer > > > of the products of

RE: TC3.3 Proposal: Refactoring org.apache.jasper.servlet

2001-03-30 Thread Steve Downey
It's one of the alternate names for Abstract Factory, from the GoF book. AKA toolkit. The idea is that you have a an abstract class with methods such as createThing1 and createThing2, which return abstract Thing1s and Thing2s. A concrete implementation of the factory, xFactory, returns an xThin

SendMailFactory.java breaks compile

2001-03-30 Thread Stuart Roebuck
I've just tried to compile the latest CVS of Tomcat 4 and I'm missing some classes trying to compile SendMailFactory.java. /Users/stuart/OpenSource/jakarta-tomcat-4.0/catalina/src/share/org/apache/ naming/factory/SendMailFactory.java:0: Class javax.activation.DataSource not found in class javax