You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Alexander Diedler <ad...@tecracer.de> on 2009/03/03 13:39:44 UTC

mod_jk and Named URLs

Hello,

There are a functionalliity, that I don´t understand. We have a Tomcat 6.0.18 installed with mod_jk connected to a IIS 5.0. The CMS uses namedURLs like http://[blabla]/company/menuitem1/ . In the Tomcat everything works fine but the IIS and mod_jk don´t serve the following URLS : The menuitem is called "Bugs/Features/"   the URL is now http://[blabla]/go/Bugs/Features/". So the slash between Bugs and Features will be interpreted as a Menuitem separator, but is not correct. In the mod_jk.log we can find:

[Tue Mar 03 12:29:55.075 2009] [4148:504] [emerg] HttpFilterProc::jk_isapi_plugin.c (1877): [/go/Bugs/Features/] contains forbidden escape sequences.

What we have to do that the IIS seems to look up for the coorect NamedURL?



Greetings

Alexander




Re: mod_jk and Named URLs

Posted by Rainer Jung <ra...@kippdata.de>.
On 05.03.2009 16:44, Alexander Diedler wrote:
> Hello, The trainer on a Tomcat Training told us, that Apache 2.2
> development project will be closed as it happens with mod_jk2. So the
> Apache 2.0.x should be the main development path and I found the
> Configuration in Apache 2.2 with many included files in the
> httpd.conf very difficult.

Sorry to be rude, but that's complete bullshit.

Have a look yourself at the release history and commit frequency.

2.2 is the active line of development and at the moment we are there at 
2.2.11, which is pretty stable.

1.3 and 2.0 only will get new releases, when serious security patches 
need to be applied (or for 2.0 maybe also for other serious problems).

The project is now actively working towards 2.4.

The httpd development versions are the odd version numbers, so 2.1 waqs 
development and 2.3 will be.

Either you misunderstood him, or he's got no idea.

Look at

http://httpd.apache.org/

which calls 2.0 "legacy release".

The developers for 1.3, 2.0 and 2.2 are the same.

Regards,

Rainer

> -----Ursprüngliche Nachricht----- Von: Rainer Jung
> [mailto:rainer.jung@kippdata.de] Gesendet: Donnerstag, 5. März 2009
> 16:35 An: Tomcat Users List Betreff: Re: mod_jk and Named URLs
>
> On 05.03.2009 16:10, Alexander Diedler wrote:
>> Hmm in Apache 2.0.xx and mod_jk same issue... That’s bad,.. it
>> should be possible to use "/" in URLS....
>
> I can only guess, since you didn't really answer mail mail, so I
> don't know, whether I'm on the right track here.
>
> When using Apache, you can allow encoded slashes with
>
> AllowEncodedSlashes
>
> See:
> http://httpd.apache.org/docs/2.2/mod/core.html#allowencodedslashes
>
> If you plan to use Apache, then why don't you directly move to
> Apache 2.2 instead of the old 2.0?
>
> Regards,
>
> Rainer
>
>> -----Ursprüngliche Nachricht----- Von: Rainer Jung
>> [mailto:rainer.jung@kippdata.de] Gesendet: Dienstag, 3. März 2009
>> 14:38 An: Tomcat Users List Betreff: Re: mod_jk and Named URLs
>>
>> On 03.03.2009 13:39, Alexander Diedler wrote:
>>> Hello,
>>>
>>> There are a functionalliity, that I don´t understand. We have a
>>> Tomcat 6.0.18 installed with mod_jk connected to a IIS 5.0. The
>>> CMS uses namedURLs like http://[blabla]/company/menuitem1/ . In
>>> the Tomcat everything works fine but the IIS and mod_jk don´t
>>> serve the following URLS : The menuitem is called
>>> "Bugs/Features/"   the URL is now
>>> http://[blabla]/go/Bugs/Features/". So the slash between Bugs
>>> and Features will be interpreted as a Menuitem separator, but is
>>> not correct. In the mod_jk.log we can find:
>>>
>>> [Tue Mar 03 12:29:55.075 2009] [4148:504] [emerg]
>>> HttpFilterProc::jk_isapi_plugin.c (1877): [/go/Bugs/Features/]
>>> contains forbidden escape sequences.
>>>
>>> What we have to do that the IIS seems to look up for the coorect
>>> NamedURL?
>> It seems your URLs contained either encoded slashes (%2f) or
>> encoded null bytes (%00). Both are not allowed by the iis isapi
>> redirector because of security reasons.
>>
>> Regards,
>>
>> Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


AW: mod_jk and Named URLs

Posted by Alexander Diedler <ad...@tecracer.de>.
Hello,
The trainer on a Tomcat Training told us, that Apache 2.2 development project will be closed as it happens with mod_jk2. So the Apache 2.0.x should be the main development path and I found the Configuration in Apache 2.2 with many included files in the httpd.conf very difficult.



-----Ursprüngliche Nachricht-----
Von: Rainer Jung [mailto:rainer.jung@kippdata.de] 
Gesendet: Donnerstag, 5. März 2009 16:35
An: Tomcat Users List
Betreff: Re: mod_jk and Named URLs

On 05.03.2009 16:10, Alexander Diedler wrote:
> Hmm in Apache 2.0.xx and mod_jk same issue... That’s bad,.. it should be possible to use "/" in URLS....

I can only guess, since you didn't really answer mail mail, so I don't 
know, whether I'm on the right track here.

When using Apache, you can allow encoded slashes with

AllowEncodedSlashes

See: http://httpd.apache.org/docs/2.2/mod/core.html#allowencodedslashes

If you plan to use Apache, then why don't you directly move to Apache 
2.2 instead of the old 2.0?

Regards,

Rainer

> -----Ursprüngliche Nachricht-----
> Von: Rainer Jung [mailto:rainer.jung@kippdata.de]
> Gesendet: Dienstag, 3. März 2009 14:38
> An: Tomcat Users List
> Betreff: Re: mod_jk and Named URLs
>
> On 03.03.2009 13:39, Alexander Diedler wrote:
>> Hello,
>>
>> There are a functionalliity, that I don´t understand. We have a
>> Tomcat 6.0.18 installed with mod_jk connected to a IIS 5.0. The CMS
>> uses namedURLs like http://[blabla]/company/menuitem1/ . In the
>> Tomcat everything works fine but the IIS and mod_jk don´t serve the
>> following URLS : The menuitem is called "Bugs/Features/"   the URL is
>> now http://[blabla]/go/Bugs/Features/". So the slash between Bugs and
>> Features will be interpreted as a Menuitem separator, but is not
>> correct. In the mod_jk.log we can find:
>>
>> [Tue Mar 03 12:29:55.075 2009] [4148:504] [emerg]
>> HttpFilterProc::jk_isapi_plugin.c (1877): [/go/Bugs/Features/]
>> contains forbidden escape sequences.
>>
>> What we have to do that the IIS seems to look up for the coorect
>> NamedURL?
>
> It seems your URLs contained either encoded slashes (%2f) or encoded
> null bytes (%00). Both are not allowed by the iis isapi redirector
> because of security reasons.
>
> Regards,
>
> Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: mod_jk and Named URLs

Posted by Rainer Jung <ra...@kippdata.de>.
On 05.03.2009 16:10, Alexander Diedler wrote:
> Hmm in Apache 2.0.xx and mod_jk same issue... That’s bad,.. it should be possible to use "/" in URLS....

I can only guess, since you didn't really answer mail mail, so I don't 
know, whether I'm on the right track here.

When using Apache, you can allow encoded slashes with

AllowEncodedSlashes

See: http://httpd.apache.org/docs/2.2/mod/core.html#allowencodedslashes

If you plan to use Apache, then why don't you directly move to Apache 
2.2 instead of the old 2.0?

Regards,

Rainer

> -----Ursprüngliche Nachricht-----
> Von: Rainer Jung [mailto:rainer.jung@kippdata.de]
> Gesendet: Dienstag, 3. März 2009 14:38
> An: Tomcat Users List
> Betreff: Re: mod_jk and Named URLs
>
> On 03.03.2009 13:39, Alexander Diedler wrote:
>> Hello,
>>
>> There are a functionalliity, that I don´t understand. We have a
>> Tomcat 6.0.18 installed with mod_jk connected to a IIS 5.0. The CMS
>> uses namedURLs like http://[blabla]/company/menuitem1/ . In the
>> Tomcat everything works fine but the IIS and mod_jk don´t serve the
>> following URLS : The menuitem is called "Bugs/Features/"   the URL is
>> now http://[blabla]/go/Bugs/Features/". So the slash between Bugs and
>> Features will be interpreted as a Menuitem separator, but is not
>> correct. In the mod_jk.log we can find:
>>
>> [Tue Mar 03 12:29:55.075 2009] [4148:504] [emerg]
>> HttpFilterProc::jk_isapi_plugin.c (1877): [/go/Bugs/Features/]
>> contains forbidden escape sequences.
>>
>> What we have to do that the IIS seems to look up for the coorect
>> NamedURL?
>
> It seems your URLs contained either encoded slashes (%2f) or encoded
> null bytes (%00). Both are not allowed by the iis isapi redirector
> because of security reasons.
>
> Regards,
>
> Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


AW: mod_jk and Named URLs

Posted by Alexander Diedler <ad...@tecracer.de>.
Hello,
Hmm in Apache 2.0.xx and mod_jk same issue... That’s bad,.. it should be possible to use "/" in URLS....

Alex


-----Ursprüngliche Nachricht-----
Von: Rainer Jung [mailto:rainer.jung@kippdata.de] 
Gesendet: Dienstag, 3. März 2009 14:38
An: Tomcat Users List
Betreff: Re: mod_jk and Named URLs

On 03.03.2009 13:39, Alexander Diedler wrote:
> Hello,
>
> There are a functionalliity, that I don´t understand. We have a
> Tomcat 6.0.18 installed with mod_jk connected to a IIS 5.0. The CMS
> uses namedURLs like http://[blabla]/company/menuitem1/ . In the
> Tomcat everything works fine but the IIS and mod_jk don´t serve the
> following URLS : The menuitem is called "Bugs/Features/"   the URL is
> now http://[blabla]/go/Bugs/Features/". So the slash between Bugs and
> Features will be interpreted as a Menuitem separator, but is not
> correct. In the mod_jk.log we can find:
>
> [Tue Mar 03 12:29:55.075 2009] [4148:504] [emerg]
> HttpFilterProc::jk_isapi_plugin.c (1877): [/go/Bugs/Features/]
> contains forbidden escape sequences.
>
> What we have to do that the IIS seems to look up for the coorect
> NamedURL?

It seems your URLs contained either encoded slashes (%2f) or encoded 
null bytes (%00). Both are not allowed by the iis isapi redirector 
because of security reasons.

Regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: mod_jk and Named URLs

Posted by Rainer Jung <ra...@kippdata.de>.
On 03.03.2009 13:39, Alexander Diedler wrote:
> Hello,
>
> There are a functionalliity, that I don´t understand. We have a
> Tomcat 6.0.18 installed with mod_jk connected to a IIS 5.0. The CMS
> uses namedURLs like http://[blabla]/company/menuitem1/ . In the
> Tomcat everything works fine but the IIS and mod_jk don´t serve the
> following URLS : The menuitem is called "Bugs/Features/"   the URL is
> now http://[blabla]/go/Bugs/Features/". So the slash between Bugs and
> Features will be interpreted as a Menuitem separator, but is not
> correct. In the mod_jk.log we can find:
>
> [Tue Mar 03 12:29:55.075 2009] [4148:504] [emerg]
> HttpFilterProc::jk_isapi_plugin.c (1877): [/go/Bugs/Features/]
> contains forbidden escape sequences.
>
> What we have to do that the IIS seems to look up for the coorect
> NamedURL?

It seems your URLs contained either encoded slashes (%2f) or encoded 
null bytes (%00). Both are not allowed by the iis isapi redirector 
because of security reasons.

Regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org