RE: [RFC] Distributed sessions in Catalina

Keif, have you considered using JavaSpace's as a shared storage mechanism. I've just read some things on this and it seems like it might be a fit, but I've not played with this yet. Just a thought. BTW, there is a good article on this in one of the fairly recent Java Developer's Journal. -O

RE: [SECURITY] Security Vulnerabilities in Tomcat 3.1 and 3.2

I think that a 3.1.1 should also be updated and release. There are those of us out hear using 3.1 that cannot immediately upgrade to 3.2. In particular, I cannot upgrade right now because of my applications use the old xml parser for my applications (xml.jar) and 3.2 includes the new jax parser.

Question on changing the order that the classloader uses in 3.2

I have a problem with using 3.2. My servlets use the old "xml.jar" XML parser. They cannot be changed at this point in a timely fashion. I downloaded and installed the 3.2b7 release and tried my web application. Unfortunately, there is some incompatibility between the Sun parser that is in the

[PATCH] to jk_nt_service.c to fix a shutdown problem with jk_nt_service with the ajp12 protocol

There is a couple of bugs in jk_nt_service.c when using the ajp12 protocol which causes tomcat to be shutdown with extreme prejudice instead of waiting for it to be shutdown via the ajp12 shutdown message. Basically the bug is that the variable "rc" is defined in an outer code block and then defi