The Apache Tomcat 5.5 Servlet/JSP Container

Changelog

Catalina

Fix logic error in UserDatbaseRealm.getprincipal() that caused user roles assigned via groups to be ignored. (markt)

Jasper

31804: Unnested tags within a tag file are now configured with the Tag represented by the containing tag file as their parent tag. (markt)

33356: Tag attributes that contained $ followed by 1 or more non-special characters and then a { character caused an exception. (markt)

33407: The string \$ in template text was reduced to $ when the isELIgnored page directive was set to true. (markt)

Tomcat 5.5.19 (fhanik)

General

Add multi attribute setting to jmx:set JMX remote ant task. Patch contributed by Didier Donsez (pero)

Catalina

30762: Re-fix this bug that was re-introduced by the fix to 37264. (markt)

37588: Fix JNDI realm creation through JMX. Patch contributed by TerryZhou (fhanik)

39704: The use of custom classloaders failed when the context was specified in server.xml. Correction of the fault will require setting the new loader attribute useSystemClassLoaderAsParent to false. (markt)

Coyote

40418: APR Endpoint socket evaluation (remm)

Webapps

31339: Admin app threw exceptions if a name other than Catalina was configured for the Engine. Patch based on a suggestion from Amila Suriarachchi. (markt)

Tomcat 5.5.18 (yoavs)

General

Change MD5 release signature files to have md5 (lowercase) extension instead of MD5 (uppercase), as suggested by Henk Penning and specified in the ASF release publishing guidelines. (yoavs)

Catalina

Fix that ManagerBase increment expireSessions counter at background task two times. (pero)

39406: Fix that StandardSession#getLastAccessedTime() uses correct exception message, suggested by Takayoshi Kimura. (pero)

39661: Add documentation on JULI FileHandler properties. (yoavs)

39657: Warn (and don't load jar) if JSP API is in webapp classloader repository, as suggested by David Sanchez Crespillo. (yoavs)

39674: Support JRockit JVM in service.bat script, as suggested by lizongbo. (yoavs)

39711: Update Loader configuration documentation, as suggested by Stephane Bailliez. (yoavs)

39865: Add Open Office mime types to conf/web.xml. (markt)

38814: Align CGI handling of indexed queries, parameters and POST content with other CGI providers. The changes: only provide parameters on the command line for indexed queries; always provide the query string via the QUERY_STRING environment variable; provide POST content unmodified to stdin; and never call getParameters(). (markt)

34801: Partial fix that adds handling of IOExceptions during long running CGI requests. Based on a patch by Chris Davey. (markt)

39689: Allow single quotes (') and backticks (`) as well as double quotes (") to be used to delimit SSI attribute values. (markt)

40053: Correct application deployment documentation so it agrees with the classloader documentation regarding shared lib and CATALINA_BASE. (markt)

39592: Stop HEAD requests for resources handled by SSI servlet or filter generating stack traces in the logs. (markt)

Improve handling of the ';' character in the URL so that it is now allowed if properly %xx encoded. (remm)

Coyote

Fix APR endpoint so that the acceptor thread now only processes socket accepts. (remm)

Webapps

39813: Correct handling of new line characters in JMX attributes. Patch provided by R Bramley. (markt)

37781: Make sure that StoreConfig save external referenced war files at context.xml correct. (pero)

39791: Use correct default for useNaming within a Context. (markt)

Correctly generate re-direct for admin app index.jsp to prevent login page being displayed twice when cookies are disabled. (markt)

Cluster

39473: Session timeout much shorter than setting at web.xml at cluster environment, suggested by Jin Jiang. (pero)

Tomcat 5.5.17 (yoavs)

General

Update to Xerces 2.8.0 (remm)

Update to tcnative 1.1.3 (remm)

Catalina

Fix SingleSignOn Valve and add Session.getLastAccessTimeInternal() without session invalidation test. (pero)

38814: CGIServlet correctly handles Shift_JIS output. (markt)

Add missing REQUEST_URI environment variable to CGI environment. (markt)

27617: Sync existing mime types with httpd. (keith)

38761: Handle relative symlinks to shell scripts as suggested by Adam Murray (keith)

38795: Associate more closely bind with a finally unbind in StandardContext start and stop, based on a patch by Darryl Miles (remm)

Improve undeployment robustness (remm)

Expand the semaphore valve (remm)

39021: Add back support for authentication only, submitted by Scott Stark (remm)

Revert fix for 38113, which does not seem a legitimate problem, and causes regressions (remm)

Correctly reset listeners when reloading a webapp (remm)

38194: Don't fail silently if -force is used without CATALINA_PID, submitted by Matthew Buckett. (yoavs)

38154: Avoid NPE in FileDirContext after webapp undeploy, reported by Jamie Maher. (yoavs)

38217: Added cautionary note about keystore password to SSL HowTo, as suggested by Ralf Hauser. (yoavs)

38262: Cleared ambiguity in host documentation, as suggested by Jeffrey Bennett. (yoavs)

38476: Modified check for null TLD stream, as suggested by Fabrizio Giustina. (yoavs)

38052: Use userName as userField default. User is at many databases a reserved keyword, as suggested by rik. (pero)

Fix handling of non matching if-range header (remm)

37848: Only output catalina.sh diagnostic messages if we have a TTY, submitted by David Shaw. (yoavs)

38596: Minor performance optimization in DataSourceRealm, suggested by Sandy McArthur. (yoavs)

Coyote

Make the default cipher suites available for SSL the same as the set of cipher suites enabled by default rather than the set of all cipher suites. This prevents ciphers suites that do not provide confidentiality protection and/or server authentication being used by default. (markt)

Move AprEndpoint.getWorkerThread inside the try/catch for the main accept loop, to guard about an OOM (which would most likely doom the server anyway) (remm)

As exhibited in the ASF's JIRA installation, it seems EINTR is a status code that should be ignored as a result to a poll call (remm)

New APR connectors defaults (remm)

Add multiple threads for APR pollers, to work around Windows limitations (performance degrades very rapidly if poller sizes over 1024 are allowed when compiling APR) (remm)

New modes for firstReadTimeout (-1 being the new default) (remm)

Replace java.util.Stack usage with a simple array in the APR endpoint (remm)

tcnative jnilib.c now report correct compile flags for runtime Library.java checks like sendfile support default true/false (pero)

Jasper

38015: Remove misleading warnings logged in TagLibraryInfoImpl, as suggested by Andrew Houghton. (yoavs)

38376: Make sure body content stack is always properly aligned, as submitted by Tony Deigh. (yoavs)

Compatibility with JDT 3.2 (remm)

Webapps

39292: Update catalina.policy at demo balancer app. Fix provided by Kerry Sainsbury (pero)

36847: Fixed the manager app copy function to not overwrite fileA with fileB when fileA==fileB. Fix provided by Haroon Rafique (fhanik)

38508: Several enhancements to Host Manager application, including configurable manager app support and dialog box enhancements. Thanks to George Sexton for the patch. (yoavs)

37781: Make sure context config file is writeable, suggested by George Sexton. (yoavs,pero)

Cluster

Add at PooledSocketSender the jmx attributes inPoolSize and inUsePoolSize. (pero)

DeltaManager set session creationTime at backup node. (pero)

Add JvmRouteBinderValve documentation at cluster-howto.xml. (pero)

JvmRouteBinderValve now supports now sessionid's from request and cookies. Thanks to Brian Stansberry for reporting it. (pero)

38779 Fix wrong jmx message arg at SimpleTcpCluster at o.a.c.cluster.tcp.mbeans-descriptors.xml, submitted by Pawel Tucholski (pero)

Fix that not after every "Keep Alive Socket close" a log warning is generated at TcpReplicationThread (pero)

39178: Now ROOT.war deployment with FarmWarDeployer is possible (pero)

ReplicationValve not set primarySession flag when all backup nodes gone (pero)

Add DeltaSession.getLastAccessTimeInternal() without session invalidation test. (pero)

Tomcat 5.5.16 (yoavs)

General

Updated / enhanced docs to remove old FIXME references. (yoavs)

Required tcnative library version upgraded to 1.1.2 (remm)

Update to Eclipse JDT 3.1.2 (remm)

Catalina

23950: Context.listBindings() should return objects not references. (markt)

38124: Add support for Windows 20xx when reading environment variables in CGIServlet. (markt)

29214: response.containsHeader() now returns the correct value for Content-Type and Content-Length headers. (markt)

Allow using a custom ContextConfig when using JMX embedding of Tomcat, as is done by the regular deployer. (remm)

Add JMX serverInfo attribute to Server MBean, that we can identify the tomcat release remotely. (pero)

Fix the JMX MBeanFactory.createStandardHost signature at mbean-descriptors.xml (pero)

Fix some cases (for example with realm usage) where the container logger for a context would be retrieved using the wrong classloader (remm)

HttpSession.getId will no longer throw an ISE when the session is invalid (remm)

ore detailed errors for naming issues (remm)

Add documentation for the Transaction element (remm)

Add getContextPath to the internal servlet context implementation (remm)

Only null instances loaded by the webapp CL, submitted by Matt Jensen (remm)

Deploy folders which don't have a WEB-INF, and return an error when a context file does not contain a Context element (remm)

38653: Fix property name (remm)

Slightly modify the timing of the manager start, so that it is not started by a listener (remm)

Refresh loggers used by the digester (remm)

Use sendError instead of setStatus to send the 401 code. (billbarker)

Don't append the port for an SSL redirect if it is the default port. (billbarker)

Coyote

Log errors when setting socket options with debug priority rather than error. (remm)

38100: Make certain that a valid Host name is set, or none at all. (billbarker)

38485: Fix minor regression setting connection timeout (as well as linger and no delay) where the default value was always used when using the regular HTTP connector (remm)

Pass along more of the SSL related fields to OpenSSL (remm)

CharChunk now implements CharSequence (remm)

Fix coding error which could cause a rare crash when a poller error occurred and sockets where pending being added to the keepalive poller (remm)

Fix potential sync issues when restarting a poller (remm)

Update APR error reports, including the error codes (remm)

38726: Remove duplicate request group field causing blank statistics for the HTTP connector (remm)

Fix invalid length used by some AJP packets for the AJP APR connector, which could cause corruption, submitted by Rudiger Plum (jim)

38346: Fix problems with request.getReader().readLine(). Patch by Rainer Jung (billbarker)

Local address reuse for APR Endpoints (via APR_SO_REUSEADDR) now enabled (jim)

Don't write out the shutdown secret file if shutdown is disabled (the default) (billbarker)

Fix NPE when no sink is supplied. (billbarker)

APR Endpoints now IPv6 aware (jim)

Downgrade "Response already committed" logging entry to DEBUG. (billbarker)

38113: Return the empty String for an empty query-string instead of null. (billbarker)

Jasper

38389: Set correct JDT Compiler option to java 1.5 compliance. Patch from Olivier Thomann and Paul Hamer (pero)

Add some useful hints to jasper-howto. (pero).

38776: Fix source file attribute, submitted by Olivier Thomann (remm)

Cluster

Update DeltaManager session access stats (pero)

DeltaSession getId will no longer throw an ISE when the session is invalid (pero)

Resurrected the "suspect" property so that the logs don't fill up with errors when member disappears or a connection is lost. Only useful for pooled mode (fhanik)

35710: Add session replication for cross context session changes. The portlet api need this support, see refactored ReplicationValve. (pero)

ReplicationValve reset DeltaSession when cluster node has no backup node. (pero)

DataSender close connection and throw exception also even if waitForAck is false. (pero)

Active cluster junit test again. (pero)

Webapps

Fix some XSS issues in the JSP examples. (markt)

Fix logos in the manager webapp (remm)

Tomcat 5.5.15 (yoavs)

General

32081: Remove the JDK requirement from the Win32 scripts. (keith)

Catalina

37852: Fix regression where the magic role '*' was denying all access. Patch by xrcat (billbarker)

37934: Don't ask for authentication if deny-from-all is in effect. (billbarker)

15570: auth-constraint of * was interpretted as all authenticated users rather than as all roles defined in web.xml. (markt)

Remove leftover static logger which was used to log application level messages in ApplicationContextFacade (remm)

38012: Where a CGI script sets a response code, use it. (markt)

37854: Extension-List checking was too strict. (markt)

Coyote

Report binding errors in the APR endpoint as strings rather than platform specific status codes (remm)

37934: Don't ask for authentication if deny-from-all is in effect. (billbarker)

38047: Handle the case where the Servlet attempts to read the Request body from the AJP/1.3 Connector, in the case that no body was sent. (billbarker)

38030: Unconditionally return EOS for an attempt to read the body of any request that doesn't send CL or TE. (remm, billbarker).

Jasper

35351: Fix problem using an inner class for a <jsp:useBean />. (kinman).

37929: Don't stop on the generic attribute methods just because the session is invalid. Patch by Pierre Delisle. (billbarker)

Add system properties org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER and org.apache.jasper.runtime.JspFactoryImpl.USE_POOL to allow configuring Jasper memory usage (remm)

37933: Restrict <jsp:getAttribute /> to only look in PAGE_SCOPE. (billbarker)

Cluster

37808: Fix ArrayIndexOutOfBoundsException inside XByteBuffer. Reported by Dietmar Mueller (pero)

37896DataSender starts new Socket after IOException. (pero)

Reduce memory usage at membership service. (pero)

Tomcat 5.5.14 (yoavs)

General

Update optional native APR connector version to 1.1.1. (mturk)

Update build.properties.default to get native connector from new location. (yoavs)

Catalina

13040: Fix getContext() when used to obtain a context that is a sub-context of the current context. Ported from TC4. (markt)

Jasper

37746: Remove extra space from StringTokenizer pattern in JspC, as suggested by Eric Hedstrom. (yoavs)

Coyote

36863: Strip quotes when parsing Cookie values, even for v0 Cookies. (billbarker)

37803: Don't claim that we have a string value in MessageBytes until we actually do. Patch by Doug Rand (billbarker)

Tomcat 5.5.13 (yoavs)

General

36711: Unused line of code. (yoavs)

Removed unused SAXPath, Jaxen dependencies. (yoavs)

Update log4j dependency to version 1.2.12, Struts to 1.2.7. (yoavs)

Removed JDBC 2.0 StdExt dependency (only class from there is javax.sql.XADataSource, which is present in JDK 1.4 and later. (yoavs)

37039: typo on JK Quick configuration how-to. (yoavs)

37035: Add a placeholder file in the temp directory for WinZip tar.gz handling. (yoavs)

Update JAF dependency to 1.0.2, JTA to 1.0.1b and JavaMail to 1.3.3_01. (markt)

Added Eclipse .project, .classpath, and associated files to make building Tomcat from Eclipse significantly easier. (markt)

37284: Guess JSE 5.0 location on Mac OS X, patch by Stepan Koltsov. (yoavs)

: Wrong class name in antlib.xml for JkStatusUpdateTask. (yoavs)

Catalina

36802: Fix problem of double-init when JMX-deploying a Context into a started Host. (billbarker)

36840: Provide information as to which web.xml is being processed on startup to help debug parsing errors. (yoavs)

34724: Ability to set domain for Single-Sign-On cookie. Patch by Oliver Rossmueller. (yoavs)

37044: RealmBase.hasResourcePermission needs to access the GenericPrincipal as set by the realm unless hasRole is overriden, which was no longer being done properly for the JAAS realm (remm)

37264: JNDI resources were no longer available when stopping listeners, submitted by Bogdan Calmac (remm)

37150: Turn off directory listing by default and add a warning regarding enabling listing of directories with many entries. (markt)

Add configurability for the amount of time that the container will wait for requests to complete when unloading servlets, using the unloadDelay property. (remm)

Add code to set to null fields in loaded classes when stopping a web application, as a possible workaround for suspicious garbage collection behavior. (remm)

Update messages and stack traces for classloading errors which may occur when removing a web application, and for stopped web applications. (remm)

37319: Fix catalina.bat reference to CATALINA_BASE for logging.properties. Thanks to Pierre-Yves Benzaken. (yoavs)

36852: Custom classloaders don't honor Contet privileged attribute. Thanks to Matt Brinkley for the analysis and patch. (yoavs)

Fix for a couple of (mostly silly) edge-cases in testing auth. Thanks to Nam T. Nguyen for the report. (billbarker)

37060: Actually copy the Request headers when replaying after Form auth. (billbarker)

37591: Typo in Engine configuration reference. (yoavs)

37668: Added note about JSP recompilation to Context configuration documentation. (yoavs)

37132: Have DigestAuthenticator Handle user names with commas. Thanks to Robert Wille for the patch. (yoavs)

37212: Better error reporting in Connector.java. Thanks to Ralf Hauser for the patch. (yoavs)

Coyote

Gracefully handle the case where some Socket options are disabled at the OS level for the AJP/1.3 Connector. (billbarker)

36366: Use rewritten deployer-howto page by Allistair Crossley. (remm)

36630: Added extra log output for class instantiation failure. (yoavs)

37121: Sendfile always needs to be given the length of data to write, which fixes ranged requests. (remm)

Optimized direct byte buffers association with the socket for APR connectors. (mturk)

Fix hidden NPEs when using the APR connectors and there's no host header. (pero, remm)

Http11Protocol now register RequestProcessor at JMX and show current usage inside manager app. (pero)

JkStatus Ant tasks for mod_jk 1.2.15. (pero)

Connection Timeout is normal, so reduce logging to DEBUG (billbarker)

Fix crash which could occur with the HTTP APR connector when accessing request JMX objects outside of the processing of the said request (remm)

37627: Fix buffering issue in the HTTP APR connector when a large buffer size was used for servlets (remm)

37673: Fix implementation of getLocalPort and getLocalAddr in the HTTP APR connector (remm)

Jasper

35252: Jasper PageDataImpl outputs malformed XML. Patch by Rahul Akolkar. (yoavs)

37062: Helpful JSP exception message containing file, line numbers. Patch by Tim Fennell at http://www.tfenne.com/jasper/. (yoavs)

37407: File descriptor leak in JspReader. Thanks to Fred for the patch. I also did some minor cleanup in the class. (yoavs)

37612: Add file location to JSP Validator error message. Thanks to Renaud Bruyeron for the patch. (yoavs)

Cluster

Fix that session replace messages are logged after node recovery get all session from master node. (pero)

37896 Fix that sendMessage signature at all DataSender subclasses must be changed. Now pooled and async modes working as expected. (pero)

Fix that socket at o.a.c.cluster.tcp.FastAsyncSocketSender can be disconnect/connect. (pero)

Fix cluster module build.xml script for new svn repository structure (pero)

Fix closed socket exceptions at normal server shutdown, reported by Olve Hansen (pero)

Fix closed socket exceptions inside async message transfer modes (pero)

34984: HttpSessionBindingEvent.getValue() get correct value (pero)

35916: send sessionCreated to SessionListener after cluster node recovery (pero)

36541: Used also Hashtable at DeltaSession (pero)

Better support cluster at engine level. (pero)

36866: Correct attribute name in conf/server.xml documentation for Cluster element. (yoavs)

37261: Allow xerces to know where the web.xml file is so that relative entities can be resolved.

37529: Fixed race condition in ReplicationLister#stopListening. Thanks to Chris Walker for the patch. (yoavs)

Webapps

Remove obsolete TagPlugin file from JSP examples (billbarker)

36019: Made clear the Host-Manager HowTo is coming soon, not ready yet. (yoavs)

36336: Check WAR extension in both upper and lower case, as suggested by A. Grasoff. (yoavs)

35982: Can't delete mail sessions in admin webapp. (yoavs)

36673: Similar to the one above, for data sources. (yoavs)

Tomcat 5.5.12 (yoavs)

General

Remove uneeded files in conf. (remm)

Change distribution file names from jakarta-* to apache-*. (remm)

Catalina

Add JMX Remote create and unregister ant tasks (pero)

36343: Only normalize out backslash on Windows platforms. (billbarker)

Allow configuring standard stream redirection. (remm)

36088: Add RUNNING.txt and RELEASE-NOTES.txt to fulldocs distro. (yoavs)

36534: fix equals for URLs returned by ServletContext.getResource() (luehe)

36558: Clear IntrospectionUtils cache when stopping a webapp, as it could leak to keeping a reference to the classloader (remm)

36113: Session persistence for objects with primitive types could fail in some rare cases (remm)

36541: Full synchronization for session objects attributes collections (remm)

35609: service.bat echo command when wrong arguments given [patch by Robert Longson] (yoavs)

34749: jsessionid dropped on trailing slash (/) redirect (remm)

Coyote

Add support for secret for AJP APR (remm)

Jasper

Fix NPE with an error message when no Java compiler is available (remm)

Restrict System err stream capture to the Ant compiler, as the Eclipse compiler does not need it (remm)

JSP compilation speed improvement using tag library information caching, submitted by Xingbo Gao (remm)

Initial contribution of JSTL tag plugins supporting the core tag library of JSTL, submitted by Jing Li (remm)

Cluster

36541: Sync all session attribute access (read and write) at DeltaSession (pero)

36518: Classname typos for senders, submitted by Christoph Bachhuber-Haller (remm)

35613: Added FAQ question and answer about tcpListenAddress="auto" and /etc/hosts (yoavs)

Moved FAQ section for Clustering from Clustering HowTo page to its own FAQ page. (yoavs)

Webapps

36319: Fix broken link to DBCP docs, submitted by Xavier Poinsard (remm)

Brand new deployer specs, submitted by Allistair Crossley (remm)

Tomcat 5.5.11 (yoavs)

General

Update to Xerces 2.7.1 (remm)

Add ready to build bin/tomcat-native.tar.gz for the APR JNI wrapper library (remm)

35930: Bad logging config used by the Tomcat Windows service (remm)

33261: Windows installer now checks the user type and warns non-admins as needed. (yoavs)

The Windows installer will now optionally download a (32bit) Windows .dll for Tomcat native from HEAnet (remm)

Declaration of jspc Ant task to fix the deployer package (remm)

Catalina

Add concurrency control valve (o.a.c.valves.SemaphoreValve). As the Tomcat distribution is not built for Java 5, the valve will have to be compiled from the sources using Java 5 (remm)

35880: Ignore JSSE15SocketFactory when generating JavaDoc, as it breaks the JDK 1.4 JavaDoc tool. (yoavs)

35865: setclasspath.sh cannot be excutive under cygwin. (funkman)

33267: Set working path in service installer, as suggested by Dominik Drzewiecki. (yoavs)

34794: Update connector documentation to include clientAuth attribute. (yoavs)

35894, 36228: Fix CNFE when starting in a sandbox. (billbarker, remm)

Add version check for Tomcat native so that incompatible API changes are detected early (remm)

36020: Allow MemoryUserDatabase to work better on write protected mediums, submitted by Rainer Jung (remm)

35978: Bad handling of single range requests greater than 2GB in the DefaultServlet (remm)

35984: Client abort exceptions will now use getCause (remm)

Fix handling of non-file based includes with SSI, submitted by David Becker (markt)

Coyote

Fix default ports for http and https which are set in the request when the parsed hostname does not specify the port, and which were inverted (https was set as 80 and http as 443). (remm)

Add missing tomcatAuthentication attribute to the AJP APR implementation. (remm)

Check filename sendfile attribute only if sendfile is enabled. (remm)

Fix output buffering for APR AJP implementation. (remm)

35941: Fix getRemoteAddr for APR AJP implementation. (remm)

35942: Fix NPE retriving cipher suite attribute when no certificate was submitted (for example with no SSL). (remm)

Internationalization and code cleanups for APR AJP implementation. (remm)

Security exception in APR AJP implementation when running with the security manager enabled. (remm)

36173: Add missing sync in FastHttpDateFormat.formatDate, submitted by Alexei Krainiouk (remm)

Disable HTTP compression when sendfile is used for a resource (remm)

AJP secret attribute report only at trace level. (pero)

Jasper

36127: Validation compatibility with Xerces 2.7.1, submitted by Florent Benoit (remm)

Cluster

Fix NPE when cluster stops (pero)

36218: MemoryRealm now support also GenericPrincipal, but JAASRealm with cluster replication still has a problem, detected by Dirk Dekok (pero)

Webapps

Tomcat 5.5.10 (yoavs)

General

Add JMX remote ant task to control tomcat MBeanserver via ant scripts. Ant lib is included at "server/lib/catalina-ant-jmx.jar" and documentation is added to Monitoring and Managing Tomcat How-To (pero)

34361: Integrate better antlib and import support for catalina manager tasks [Modified patch from Daniel Santos] (pero)

StoreConfig save now the Connector.sslProtocol attribute. (pero)

Change log dir at service.bat to "$CATALINA_BASE/logs" for better multi instance support. (pero)

34237: Added note and links to context and host configuration references in JNDI DataSources HowTo to aid the clueless. (yoavs)

34248: Update JavaMail download instructions to include JAF. (yoavs)

Update to JDT from Eclipse 3.1, with support for Java 5 (remm)

Refactoring, redesign and extend the cluster module - Cluster can be configured as subelement from Engine and Host. - Optimized performance and reduce memory usage - Better JMX support - add a lot of JMX stats attribute for better monitoring - add a single element default cluster configuration - more config options LifecycleListener ClusterListener more than one cluster valves - better subclass support - change a lot of existing cluster API's (pero)

Add Apache Portable Runtime JNI wrapper and helper API (mturk)

Update JULI to provide support for taking over java.util.logging bootstrap configuration, and move the default properties file to ${catalina.base}/conf/logging.properties (remm)

34746: Updated catalina.properties instructions per Bill Edwards' suggestion. (yoavs)

35090: Minor documentation typo fix. (yoavs)

34931: Rewrote ROOT/index.jsp to be XHTML strict compliant, per Richard Beton's patch. (yoavs)

Catalina

20380: Access log timestamps now take account of Daylight Saving Time (DST). (markt)

34220: Provide better error message when server.xml can't be located. [Modified patch from Ralf Hauser] (yoavs)

Add MessageListener and LifecylceListener cluster saving to storeconfig module (<Cluster ... ><ClusterListener className="org.apache.catalina.cluster.session.JvmRouteSessionIDBinderListener" >) (pero)

33743: Add additional synchronization in webapp classloader to avoid possible race condition when defining a class (remm)

33711: Add events on passivate and activate to cleanup SSO, and recycle session objects when removing them from a manager (so that anyone keeping references to it would leak a minimal amount of memory) (remm)

Re-add patch causing Session.getId to throw an ISE, and make all internal components use a safe getIdInternal method (remm)

Store principal to be exposed for Request.getUserPrincipal inside the GenericPrincipal, to remove hacks from the JAAS realm (remm)

10385: SSI Servlet now includes better support for files that use character encodings other than the platform default.(markt)

Remove CopyParentClassLoader rule, which doesn't seem to be doing anything useful anymore. (remm)

Provide an ServletFilter implementation of Server Side Includes (SSI). This was submitted by David Becker under 33106. (markt)

Add sendfile support to default servlet, with a sendfileSize configuration attribute. (remm)

If APR as well as Tomcat's JNI wrapper for APR are present, use APRized protocol handlers instead of the regular ones (remm)

22617: When used with an EJB container and a realm that supports the concept of an unauthenticated user (J2EE.3.4.3) BASIC authentication was always authenticating users as the unauthenticated user without giving them a chance to supply a username and password. (markt)

Prevent facade objects cloning (remm)

Add missing CGI variables to SSI servlet. Patch submitted by Fritz Schneider. (markt)

34578: Updated JNDIRealm comment. (yoavs)

34273: Better Bootstrap warning message. [Path from Ralf Hauser] (yoavs)

34675: Updated Proxy-HowTo page with Servlet API calls. (yoavs)

34546: Fix problem where the "first" Valve couldn't be removed from a Pipeline. (billbarker)

Fix NPE when POST size exceeds limit defined by maxPostSize. (markt)

Fix FORM authentication so POSTed parameters are not assumed to be encoded with platform default encoding. A side effect of this fix is that the bodies of POST requests that require FORM authentication are now buffered and made available after a sucessful login. (markt)

34840: Better handling of external WARs redeployment, and ignore docBase specified in context file if within the Host appBase (remm)

Fix handling of symbolic links when the DefaultServlet is generating directory listings. (markt)

35769: Correct implementation of javax.naming.Context.composeName( Name, Name) in multiple places. Patch provided by Laurent Simon. (markt)

34805: Add warning for suspicious security patterns, as suggested by Ralf Hauser. (yoavs)

35819: Use getWorkPath for deleting work directory on context destroy, as suggested by Rob Steele. (yoavs)

Coyote

Add support for using "Smart Cards" as trust/keyStore. (billbarker)

Add some Mbean attributes and operations to ChannelSocket (pero)

Apache Portable Runtime based HTTP/1.1 protocol handler, with SSL support (remm)

Add support for simple file-based CRLs under JDK 1.5 (billbarker)

Add experimental NIO-Socket channel for the AJP/1.3 Connector (billbarker)

34648: Add configuration option to enable IP-based Virtual Hosts. (billbarker)

Refactor the AJP/1.3 Connector to be able to handle more advanced Actions. (billbarker)

Fix connector initialisation so sslProtocol is not required for SSL. (markt)

Add bufferSize option to the AJP/1.3 Java connector to control output buffering. (billbarker)

Apache Portable Runtime based AJP/1.3 protocol handler (remm)

Delay reading the inital request body packet by default for the AJP/1.3 Java connector. (billbarker)

Jasper

18477: Allow symbolic links when precompiling JSPs (markt)

34272: Allow specifying the Option class used by the Jasper engine, submitted by Scott Stark (remm)

Support for Java 5.0 in JSPs (remm)

Java 5 will be the source and target for JSPs when running on Java 5 (remm)

34652: Add the ability to get SMAPs when precompiling, submitted by Daryl Robbins (remm)

34465: Jspc failure if there is no web.xml (remm)

35696: Make certain that release is called for custom tags when tag-pooling is disabled. (billbarker)

35386: Make useBean resources use consistent spelling, from Kurt Huwig. (yoavs)

33522: Update jasper-howto to reflect use of javac switch. (yoavs)

35114: Add failOnError flag to JspC, by ziweth. (yoavs)

35410: Fixed NPE in JspWriterImpl. (yoavs)

35571: JspC resolved uriRoot relative to Ant project basedir, if any, as suggested by Jason Pettiss. (yoavs)

Cluster

Add that cluster can configure as Engine and Host element. (pero)

Add single cluster default configuration element - discussed at JAX 2005 conference Cluster Workshop. (pero)

Fix resend GET_ALL_SESSIONS when wait ACK failed at receiver side (pero)

ClusterValve now remove from container element when cluster stops and added with next start again. (pero)

Set timestamp only at first time inside SessionMessageImpl (pero)

Set timestamp from findsessions method call, when handling GET_ALL_SESSION to all SEND_SESSION_DATA and TRANSFER complete messages. (pero>

Drop all received message inside GET_ALL_SESSION message queue before state transfer message timestamp. (pero)

Cluster ping now transfer cluster domain information and DeltaManager only send and receive message from same domain members (pero)

JMX Support for McastService (Membership) (pero)

Redesign SimpleTcpCluster message receiving to ClusterReceiverBase (pero)

Cluster transfer all attributes to the generate session manager at addManager. Remove some unused attributes at SimpleTcpCluster and ReplicationTransmitter (pero)

Refactor DeltaManager: - createSession call now ManagerBase super class method - extract some long methods - send GET_ALL_SESSION with session blocks - don't sync sessions map when send all sessions (pero)

Add developer actions at to-do.txt (Proposal of changes) (pero)

Small refactorings at FastAsyncSocketSender (pero)

Redesign cluster message sending to lesser cpu and memory usage. Set at ReplicationTransmitter#compress=false as default. Change API from ClusterSender, ReplicaitonTransmitter, DataSender, SimpleTcpCluster (pero)

DeltaManager has now JMX expireAllLocalSessions and processExipre operation for better cluster node shutdown handling (usefull for testing only) (pero)

DataSender doWaitAckStats for better understanding wait ack problems (pero)

Refactor DeltaManager and add counter for cluster message send/receive message (pero)

34389:Porting Clustering fix pack to 5.5.10 code base. Remove synchonized from DataSender.pushMessage(). Very offen the complete cluster blocking after replicated a bulk of new session messages under heavy load. All cluster node standing for a lot of time and made nothing. Fix it for pooled, asynchronous and fastasyncqueue replication mode. Very bad thing, sorry! (pero)

Add notifySessionListenersOnReplication attribute to SimpleTcpCluster to stop notify event to SessionListener at backup nodes from create and destroy replicated session (pero)

Add compress attribute to ClusterSender and ClusterReceiver interface. Now compress config transfer from sender to receiver at SimpleTcpCluster. (pero)

Add ClusterValve interface and implement it as ReplicationValve and JvmRouteBinderValve. Now both Valves can be directly configured at server.xml Host/Cluster/Valve subelements. Also this configuration are correctly handled with the StoreConfig module. (pero)

Deactivate DataSender keepAliveMaxRequestCount change default to -1. Cluster replication sockets are fast and very stable! (pero)

Setup JvmRouteBinderValve as host valve instead context valve. Refactor the API a little bit. (pero)

Don't increment open socket counter before socket is really open. Add socket open failures counter (pero)

Add MessageListener support to cluster server.xml element (ClusterListener) to register your own cluster message receiver (pero)

Add LifecycleListener support to cluster server.xml element (Listener) and notify those listener from start/stop cluster, add/remove session manager, sending fault and start/stop member (pero)

Add active backgroundProcess keepAlive timeout and request count socket close check at ReplicationTransmitter. Check frequency can be change with attribute processSenderFrequency (default 2). (pero)

Remove useless Jdk13ReplicationListener,Jdk13ObjectReader. Add SocketReplicationListener and SocketObjectReader to have nativ socket ClusterReceiver. Also extract ClusterReceiverBase superclass for SocketReplicationListener and ReplicationListener (pero)

Add and update some API and the cluster howto documentation (pero)

Refactor ReplicationValve for better understanding and small optimization (pero)

Starting a unit test suite for cluster module - very much todo (pero)

Fix ant build.xml to direct compile at cluster module directory (pero)

Fix some I18N messages, but a lot of work is waiting for fix (pero)

Add ReplicationValve Mbeans stats attribute getter and resetStatistics operation (pero)

Webapps

35758: Admin webapp mishandling digest attribute of JDBCDataSourceRealm. (yoavs)

34250: Admin webapp Commit Changes button now asks for confirmation. (yoavs)

34818: Alternating row for apps in HTML manager, as suggested by Jeff Domeyer. (yoavs)

35379: Added commons-logging to build path of manager and host-manager apps, to make them build with Jikes, as suggested by Aaron Isotton. (yoavs)

Tomcat 5.5.9 (yoavs)

General

Add JULI, a java.util.logging implementation, used to provide sane defaults and configurability equivalent to Tomcat 4.0 for Tomcat 5.5 logging (remm)

Add JULI documentation to the logging page (remm)

Add host manager webapp (remm)

Add ant JkStatusUpdateTask for remote status worker handling ( >=mod_jk 1.2.9) (pero)

33739: Add reference to RUNNING.txt in setup.html. (yoavs)

33719: Update reference to Ant download page. (yoavs)

33883: Bad options in SSL-HowTo. (yoavs)

Update to MX4J 3.0.1 (pero)

34139: Updated Realm-HowTo to specify JMX, Commons-Logging jars for RealmBase. (yoavs)

33325: Added top-level clean target to Netbuild build.xml file. (yoavs)

33755: Clarified Postgresql JNDI datasource example. [patch submitted by Tom Witmer] (yoavs)

Catalina

Remove some instances of expanded folder removal (remm)

Don't call mkdirs if we're not going to save the configuration in StandardContext (remm)

Fix context classloader binding during loader initialization (it was set to null before) (remm)

The webapp logger should only be retrieved when the context classloader is set to the webapp's classloader (remm)

34170: Add back retry logic in JDBC realm in case of a connection failure (remm)

22041: Support dynamic proxies as session objects. (markt)

Fix logger names for wrappers (remm)

34006: If antiResourceLocking was used, HostConfig considered the path as external, and web application resources were not correctly removed or tacked; also simplify the code a lot (remm)

34016: Save and restore docBase when using antiResourceLocking, for compatibility with the admin webapp (remm)

33636: Set lastModified attribute when expanding WAR files. (yoavs)

32938: Allow Salted SHA (SSHA) passwords in JNDIRealm. (yoavs)

31288: Allow SMTP authentication for JNDI MailSessionFactory. (yoavs)

Harmonize processing of the context.xml defaults with the way web.xml is processed (remm)

Ignore ';' if it is in the query string (remm)

private to protected for the webapp classloader (remm)

Improve logging of filters and listeners startup errors (remm)

33774: Retry once in JNDI realm authenticate failure regardless of the exception message (remm)

33961: Don't encode '~' in context paths (remm)

32866: Propagate distributable property from context to manager (yoavs)

32867: Reset distributable attribute in context for clean reload handling (yoavs)

Fix some RealmBase/JNDIRealm log.isXXXEnabled (pero)

34161: Harmonize StandardContext.stop with ContainerBase.stop (remm)

Coyote

33971: Set remoteHost to null when Apache doesn't send one. (billbarker)

Fix calculation of threadRatio for the ms thread pool, and fix setting the updated timeout value (remm)

Update the ms thread pool so that we allocate a worker before accepting a new socket, and wait a little if the pool is exhausted; this should make low maxThreads values work a lot better (remm)

33857: Update information on automatic mod_jk configuration in Apache-HowTo (yoavs)

Fix sync block placement in Mapper.addContext (remm)

32741: Fix spelling of "committed" [patch from Ben Souther] (yoavs)

34133: Make setHeader clear multi-valued headers (billbarker)

Jasper

34034: Jasper does not respect external entities (billbarker)

33810: Incorrect recycling of BodyContent if close is called (remm)

Per instance loggers in Jasper (remm)

Cluster

Fix JvmRouteBinderValve primary failover attribute to org.apache.catalina.cluster.session.JvmRouteOrignalSessionID (pero)

Change attribute name waitForAck to sendAck at ReplicationListener (pero)

Integrate new fastasyncqueue cluster sender mode. Support queue size limitation, get all queued objects and send it to the backup node, no queue thread lock contention under high replication load, submitted by Rainer Jung (pero)

Add compress attribute to Sender and Receiver to transfer data uncompressed. At high cluster load this option consume lesser cpu and memory. Implement the compress handling to ReplicationTransmitter, ReplicationListener, XByteBuffer and Jdk13ReplicationListener (pero)

Add doProcessingStats to synchronous, asynchronous and fastqueueasync sender modes to get min, avg, max processing times as IDataSender JMX MBeans (pero)

TcpThreadPool use constant ACK byte array instead create new 3 byte buffer for every message ack (pero)

Refactor ReplicationTransmitter and ReplicationListener (pero)

add getCatalinaCluster() to ClusterReceiver and SimpleTcpCluster (pero)

Update the Api documentation (pero)

Webapps

Use the standard struts taglib URIs in admin JSPs. (billbarker)

Add more host parameters to create new host with host-manager (pero)

34033: Fix quoting related bugs (remm)

33713: Add Struts init code in frameset.jsp as well (remm)

Tomcat 5.5.8 (yoavs)

General

33204: Fixed SSL HowTo page. (yoavs)

33351: Fix silent uninstallation. (remm)

33489: Missing space in uninstaller message. (yoavs)

Catalina

Unregister host mbean and all context mbeans at remove a host, s. StandardHost.destroy() and MBeanFactory.createStandardHost/removeHost(,) detected by Thorsten Kamann (pero)

make it possible to restart connector, now serversocket recreated after stop,start (pero)

change mbean names from Mapper and ProtocolHandler to connector naming style (pero)

Add some log.isXXXEnabled (pero)

Deregister MapperListener after remove connector (pero)

Remove host only at own domain with same name at all services, detected by Thorsten Kamann (pero)

33187: Remove any logging of the password in the JAAS realm, submitted by Andrew Jaquith (remm)

33033: Don't do anything to the response in the ErrorReportValve if data has already been written (remm)

Add charset support for the URLs used by the tasks, to remove deprecation (remm)

26135: Workaround for memory leak when reloading Struts based web applications by clearing the bean instrospector cache of the JVM on classloader stop, submitted by Tobias Lofstrand. (remm)

Ensure that if CLASSPATH is declared on startup - it is not used. (funkman)

Add back use of deployOnStartup in HostConfig (remm)

Ant tasks docs patches, submitted by Gabriele Garuglieri. (remm)

Use NIO for the raw copying operation, as it is faster (a little under 30%), and decreases a little the impact of antiResourceLocking. (remm)

33357: Fix connection leaks with the DataSourceRealm, as well as improve efficiency, submitted by Dominik Drzewiecki. (remm)

Improve a little logging of servlet exceptions, which should all log the root cause. (remm)

</