You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by SomchaiDion <ls...@k3.dion.ne.jp> on 2002/07/28 11:34:38 UTC
Symlink problem
Dear sir,
I have some information on CD-ROM and want to add it into my homepage.
So, I setup tomcat to serve user webdirectory by using Listener. Then, I
create symlink in my homepage to the CD-ROM mounting directory. But, I
cannot access it. Does anyone know who to solve this problem. Please help
me.
Thanks,
Somchai
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Symlink problem
Posted by SomchaiDion <ls...@k3.dion.ne.jp>.
I am using Tomcat 4.1.3-LE-jdk1.4 with JSDK 1.4.0_01 on Linux(Mandrake 8.1).
And, there is no SecurityException.
I have my user homepage(~lsomchai) setting by <Listenner> tag in server.xml
file. it has Test subdirectory and the TestSymlink inside it. The
TestSymlink is mount to /mnt/cdrom directory.
if I access to ~lsomchai/Test, the homepage will list TestSymlink with
nothing at "Size" column and null at "Last Modified" column.
then, I access into TestSymlink. It show this message.
=============================
HTTP Status 404 - /%7Elsomchai/Test/TestSymlink/
----------------------------------------------------------------------------
----
type Status report
message /%7Elsomchai/Test/TestSymlink/
description The requested resource (/%7Elsomchai/Test/TestSymlink/) is not
available.
----------------------------------------------------------------------------
----
Apache Tomcat/4.1.3-LE-jdk14
======================================
Somchai
----- Original Message -----
From: "Bill Barker" <wb...@wilshire.com>
To: "Tomcat Developers List" <to...@jakarta.apache.org>;
<ls...@k3.dion.ne.jp>
Sent: Monday, July 29, 2002 3:37 PM
Subject: Re: Symlink problem
>
> ----- Original Message -----
> From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> To: "Michael E. Locasto" <lo...@cs.columbia.edu>; "Tomcat Developers
List"
> <to...@jakarta.apache.org>
> Sent: Sunday, July 28, 2002 10:54 PM
> Subject: Re: Symlink problem
>
>
> > Thank you for your information and sorry that I think tomcat-dev can
> answer
> > this problem better than tomcat-user.
>
> And, in this case, you would be wrong. Tomcat-user has many more people
> with experiance in obscure configurations than tomcat-dev has. If you are
> not getting a SecurityException, then I personally have no clue as to what
> is wrong.
>
> At the very least, Michael is right: You need to specify which version of
> Tomcat you are using, which JVM version you are using, and which O/S you
are
> using. Without these, I'm probably the very last person to every respond
to
> this :).
>
> >
> > Somchai
> > ----- Original Message -----
> > From: "Michael E. Locasto" <lo...@cs.columbia.edu>
> > To: "Tomcat Developers List" <to...@jakarta.apache.org>
> > Cc: <ls...@k3.dion.ne.jp>
> > Sent: Monday, July 29, 2002 1:54 PM
> > Subject: Re: Symlink problem
> >
> >
> > > Somchai,
> > >
> > > This would probably be better off asked to the tomcat-user mailing
list.
> > > Also, version numbers and specific information on Tomcat, your JVM, OS
> > would
> > > be useful in answering your question.
> > >
> > > This is from http://jakarta.apache.org/tomcat/tomcat-3.3-doc/faq
> > >
> > > * Five, on a Unix platform, you are attempting to access a file
> > > that is a symbolic link.
> > >
> > > The last three cases are caused by a test in
> > > org.apache.tomcat.core.DefaultServlet to see whether the absolute
> > > name of a file equals the canonical name. This test is intended
> > > to solve a serious security problem, where mixed case or additional
> > > characters in a file name can get Tomcat to serve the source
> > > file instead of the processed file for JSP files on a Windows
> > > platform. This test should be replaced with a solution that doesn't
> > > have the above side effects.
> > >
> > > Hope that helps you out.
> > >
> > > Regards,
> > > Michael Locasto
> > >
> > >
> > > ----- Original Message -----
> > > From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> > > To: "Tomcat Developers List" <to...@jakarta.apache.org>
> > > Sent: Sunday, July 28, 2002 5:37 AM
> > > Subject: Re: Symlink problem
> > >
> > >
> > > > > Does anyone know who to solve this problem.
> > > >
> > > > Sorry, it is "Does anyone know how to soleve this problem?
> > > >
> > > > Somchai
> > > > ----- Original Message -----
> > > > From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> > > > To: <to...@jakarta.apache.org>
> > > > Sent: Sunday, July 28, 2002 6:34 PM
> > > > Subject: Symlink problem
> > > >
> > > >
> > > > > Dear sir,
> > > > > I have some information on CD-ROM and want to add it into my
> > > homepage.
> > > > > So, I setup tomcat to serve user webdirectory by using Listener.
> Then,
> > I
> > > > > create symlink in my homepage to the CD-ROM mounting directory.
But,
> I
> > > > > cannot access it. Does anyone know who to solve this problem.
Please
> > > help
> > > > > me.
> > > > >
> > > > > Thanks,
> > > > > Somchai
> > > > >
> > > > >
> > > > > --
> > > > > To unsubscribe, e-mail:
> > > > <ma...@jakarta.apache.org>
> > > > > For additional commands, e-mail:
> > > > <ma...@jakarta.apache.org>
> > > > >
> > > >
> > > >
> > > > --
> > > > To unsubscribe, e-mail:
> > > <ma...@jakarta.apache.org>
> > > > For additional commands, e-mail:
> > > <ma...@jakarta.apache.org>
> > >
> >
> >
> > --
> > To unsubscribe, e-mail:
> <ma...@jakarta.apache.org>
> > For additional commands, e-mail:
> <ma...@jakarta.apache.org>
> >
>
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>
>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Symlink problem
Posted by Bill Barker <wb...@wilshire.com>.
----- Original Message -----
From: "SomchaiDion" <ls...@k3.dion.ne.jp>
To: "Michael E. Locasto" <lo...@cs.columbia.edu>; "Tomcat Developers List"
<to...@jakarta.apache.org>
Sent: Sunday, July 28, 2002 10:54 PM
Subject: Re: Symlink problem
> Thank you for your information and sorry that I think tomcat-dev can
answer
> this problem better than tomcat-user.
And, in this case, you would be wrong. Tomcat-user has many more people
with experiance in obscure configurations than tomcat-dev has. If you are
not getting a SecurityException, then I personally have no clue as to what
is wrong.
At the very least, Michael is right: You need to specify which version of
Tomcat you are using, which JVM version you are using, and which O/S you are
using. Without these, I'm probably the very last person to every respond to
this :).
>
> Somchai
> ----- Original Message -----
> From: "Michael E. Locasto" <lo...@cs.columbia.edu>
> To: "Tomcat Developers List" <to...@jakarta.apache.org>
> Cc: <ls...@k3.dion.ne.jp>
> Sent: Monday, July 29, 2002 1:54 PM
> Subject: Re: Symlink problem
>
>
> > Somchai,
> >
> > This would probably be better off asked to the tomcat-user mailing list.
> > Also, version numbers and specific information on Tomcat, your JVM, OS
> would
> > be useful in answering your question.
> >
> > This is from http://jakarta.apache.org/tomcat/tomcat-3.3-doc/faq
> >
> > * Five, on a Unix platform, you are attempting to access a file
> > that is a symbolic link.
> >
> > The last three cases are caused by a test in
> > org.apache.tomcat.core.DefaultServlet to see whether the absolute
> > name of a file equals the canonical name. This test is intended
> > to solve a serious security problem, where mixed case or additional
> > characters in a file name can get Tomcat to serve the source
> > file instead of the processed file for JSP files on a Windows
> > platform. This test should be replaced with a solution that doesn't
> > have the above side effects.
> >
> > Hope that helps you out.
> >
> > Regards,
> > Michael Locasto
> >
> >
> > ----- Original Message -----
> > From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> > To: "Tomcat Developers List" <to...@jakarta.apache.org>
> > Sent: Sunday, July 28, 2002 5:37 AM
> > Subject: Re: Symlink problem
> >
> >
> > > > Does anyone know who to solve this problem.
> > >
> > > Sorry, it is "Does anyone know how to soleve this problem?
> > >
> > > Somchai
> > > ----- Original Message -----
> > > From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> > > To: <to...@jakarta.apache.org>
> > > Sent: Sunday, July 28, 2002 6:34 PM
> > > Subject: Symlink problem
> > >
> > >
> > > > Dear sir,
> > > > I have some information on CD-ROM and want to add it into my
> > homepage.
> > > > So, I setup tomcat to serve user webdirectory by using Listener.
Then,
> I
> > > > create symlink in my homepage to the CD-ROM mounting directory. But,
I
> > > > cannot access it. Does anyone know who to solve this problem. Please
> > help
> > > > me.
> > > >
> > > > Thanks,
> > > > Somchai
> > > >
> > > >
> > > > --
> > > > To unsubscribe, e-mail:
> > > <ma...@jakarta.apache.org>
> > > > For additional commands, e-mail:
> > > <ma...@jakarta.apache.org>
> > > >
> > >
> > >
> > > --
> > > To unsubscribe, e-mail:
> > <ma...@jakarta.apache.org>
> > > For additional commands, e-mail:
> > <ma...@jakarta.apache.org>
> >
>
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>
>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Symlink problem
Posted by SomchaiDion <ls...@k3.dion.ne.jp>.
Thank you for your information and sorry that I think tomcat-dev can answer
this problem better than tomcat-user.
Somchai
----- Original Message -----
From: "Michael E. Locasto" <lo...@cs.columbia.edu>
To: "Tomcat Developers List" <to...@jakarta.apache.org>
Cc: <ls...@k3.dion.ne.jp>
Sent: Monday, July 29, 2002 1:54 PM
Subject: Re: Symlink problem
> Somchai,
>
> This would probably be better off asked to the tomcat-user mailing list.
> Also, version numbers and specific information on Tomcat, your JVM, OS
would
> be useful in answering your question.
>
> This is from http://jakarta.apache.org/tomcat/tomcat-3.3-doc/faq
>
> * Five, on a Unix platform, you are attempting to access a file
> that is a symbolic link.
>
> The last three cases are caused by a test in
> org.apache.tomcat.core.DefaultServlet to see whether the absolute
> name of a file equals the canonical name. This test is intended
> to solve a serious security problem, where mixed case or additional
> characters in a file name can get Tomcat to serve the source
> file instead of the processed file for JSP files on a Windows
> platform. This test should be replaced with a solution that doesn't
> have the above side effects.
>
> Hope that helps you out.
>
> Regards,
> Michael Locasto
>
>
> ----- Original Message -----
> From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> To: "Tomcat Developers List" <to...@jakarta.apache.org>
> Sent: Sunday, July 28, 2002 5:37 AM
> Subject: Re: Symlink problem
>
>
> > > Does anyone know who to solve this problem.
> >
> > Sorry, it is "Does anyone know how to soleve this problem?
> >
> > Somchai
> > ----- Original Message -----
> > From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> > To: <to...@jakarta.apache.org>
> > Sent: Sunday, July 28, 2002 6:34 PM
> > Subject: Symlink problem
> >
> >
> > > Dear sir,
> > > I have some information on CD-ROM and want to add it into my
> homepage.
> > > So, I setup tomcat to serve user webdirectory by using Listener. Then,
I
> > > create symlink in my homepage to the CD-ROM mounting directory. But, I
> > > cannot access it. Does anyone know who to solve this problem. Please
> help
> > > me.
> > >
> > > Thanks,
> > > Somchai
> > >
> > >
> > > --
> > > To unsubscribe, e-mail:
> > <ma...@jakarta.apache.org>
> > > For additional commands, e-mail:
> > <ma...@jakarta.apache.org>
> > >
> >
> >
> > --
> > To unsubscribe, e-mail:
> <ma...@jakarta.apache.org>
> > For additional commands, e-mail:
> <ma...@jakarta.apache.org>
>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Symlink problem
Posted by "Michael E. Locasto" <lo...@cs.columbia.edu>.
Somchai,
This would probably be better off asked to the tomcat-user mailing list.
Also, version numbers and specific information on Tomcat, your JVM, OS would
be useful in answering your question.
This is from http://jakarta.apache.org/tomcat/tomcat-3.3-doc/faq
* Five, on a Unix platform, you are attempting to access a file
that is a symbolic link.
The last three cases are caused by a test in
org.apache.tomcat.core.DefaultServlet to see whether the absolute
name of a file equals the canonical name. This test is intended
to solve a serious security problem, where mixed case or additional
characters in a file name can get Tomcat to serve the source
file instead of the processed file for JSP files on a Windows
platform. This test should be replaced with a solution that doesn't
have the above side effects.
Hope that helps you out.
Regards,
Michael Locasto
----- Original Message -----
From: "SomchaiDion" <ls...@k3.dion.ne.jp>
To: "Tomcat Developers List" <to...@jakarta.apache.org>
Sent: Sunday, July 28, 2002 5:37 AM
Subject: Re: Symlink problem
> > Does anyone know who to solve this problem.
>
> Sorry, it is "Does anyone know how to soleve this problem?
>
> Somchai
> ----- Original Message -----
> From: "SomchaiDion" <ls...@k3.dion.ne.jp>
> To: <to...@jakarta.apache.org>
> Sent: Sunday, July 28, 2002 6:34 PM
> Subject: Symlink problem
>
>
> > Dear sir,
> > I have some information on CD-ROM and want to add it into my
homepage.
> > So, I setup tomcat to serve user webdirectory by using Listener. Then, I
> > create symlink in my homepage to the CD-ROM mounting directory. But, I
> > cannot access it. Does anyone know who to solve this problem. Please
help
> > me.
> >
> > Thanks,
> > Somchai
> >
> >
> > --
> > To unsubscribe, e-mail:
> <ma...@jakarta.apache.org>
> > For additional commands, e-mail:
> <ma...@jakarta.apache.org>
> >
>
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Symlink problem
Posted by SomchaiDion <ls...@k3.dion.ne.jp>.
> Does anyone know who to solve this problem.
Sorry, it is "Does anyone know how to soleve this problem?
Somchai
----- Original Message -----
From: "SomchaiDion" <ls...@k3.dion.ne.jp>
To: <to...@jakarta.apache.org>
Sent: Sunday, July 28, 2002 6:34 PM
Subject: Symlink problem
> Dear sir,
> I have some information on CD-ROM and want to add it into my homepage.
> So, I setup tomcat to serve user webdirectory by using Listener. Then, I
> create symlink in my homepage to the CD-ROM mounting directory. But, I
> cannot access it. Does anyone know who to solve this problem. Please help
> me.
>
> Thanks,
> Somchai
>
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>
>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>