RE: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and mod_jk

[Cris Berneburg - US]

Mark

Look for ***>>> for my response.

-----Original Message-----
From: Mark Eggers [mailto:its_toas...@yahoo.com.INVALID] 
Sent: Monday, July 13, 2015 2:13 PM
To: Tomcat Users List
Subject: Re: Form authentication with Tomcat 7.0.63 behind Apache HTTPD and 
mod_jk

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Folks,

I have resolved the issue:

On 7/10/2015 11:27 AM, Mark Eggers wrote:
> Now with the shipped examples goodness:
> 
> 
> On 7/9/2015 10:39 PM, Konstantin Kolinko wrote:
>> 2015-07-10 2:35 GMT+03:00 Mark Eggers
>> <its_toas...@yahoo.com.invalid>:
>>>
>>> Folks,
>>>
>>> I seem to be having a problem trying to use form-based 
>>> authentication. What worked in 7.0.62 no longer works in 7.0.63.
>>> Using 7.0.62 I can successfully authenticate in my toy application 
>>> and the latest version of Jenkins. Using 7.0.63 I end up on the form 
>>> error page in my toy application and the latest version of Jenkins.
>>>

[SNIP]

> 
> I'll try to start working through the code changes to see where the 
> likely culprit is.
> 
> . . . just my puzzled 2 cents
> /mde/

It would have helped (and not wasted everyone's time) if I had read the 
changelog carefully.

- From the changelog:

fix 57938: Correctly handle empty form fields when a form is submitted
           as multipart/form-data, the maxPostSize attribute of the
           Connector has been set to a negative value and the Context
           has been configured with a value of true for
           allowCasualMultipartParsing. The meaning of the value zero
           for the maxPostSize has also been changed to mean a limit of
           zero rather than no limit to align it with maxSavePostSize
           and to be more intuitive. (markt)

My AJP connector (since I have to support some oddly-written application
s):

<Connector URIEncoding="UTF-8"
           connectionTimeout="600000"
           maxPostSize="0"
           port="8009"
           protocol="AJP/1.3"
           redirectPort="8443" />

Since 0 now really means 0, I was not getting any POST parameters throug h.

It now reads:

<Connector URIEncoding="UTF-8"
connectionTimeout="600000"
maxPostSize="-1"
port="8009"
protocol="AJP/1.3"
redirectPort="8443" />

and everything works.

Sorry for the noise.

***>>> No problem - even your noise is educational for me.  :-)  <<<***

. . . documentation, it's not just for breakfast anymore /mde/ -----BEGIN PGP 
SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJVo/+3AAoJEEFGbsYNeTwtPn4IAK0tdY22hwq/LRr71ozShRgx
XiCiHB/X79P71VIbs8rQ5Ao3RNG6quEzsZQXWXFNvvWq4uSh3cUivRLd53LylST2
aGrdn1UhJCGOmI5zaLiPo+XOlhLkp2DdGVUwfMjwmO0g/4Ogfqq2NBR2BZ4JTwyd
tX0GraXUc04ORErFiJdHx2vxx9lf9ysbvjts4ARE+w2ugV2Us7ZziCmu7uiOEALm
5Fozif5GYbQb2npssyszgA4brI8UWIChlpcr8QQP6IpuKmZK3yeRNzV5yC9UyfCg
NhrOl6UDdStqekQTgxdORezgz5vJTxREnJbEHYKJ3XIB0nM9ObXhObwPA46Jx64=
=kKwI
-----END PGP SIGNATURE-----