You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Henri Gomez <he...@gmail.com> on 2009/07/29 16:15:47 UTC
Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Hi to all,
The new i5/OS V6R1 use Apache 2.2 and APR 1.x.
The official IBM notice inform V6R1 admins that third party modules
for Apache 2.2.x should be updated.
They mention the Tomcat connector (mod_jk), the only Apache 2.2.x
third party module I know on such platform ;)
I still didn't get access to a V6R1 to test the current code, but I
feel a simple rebuild will be necessary.
IBM also remove support for Tomcat (pretty old 3.2.1) in its 5761-DG1
product and the old IBM JK connector will no more be provided.
So the JK directive wont be supported anymore by
Consequence :
i5/OS V6R1 admins using IBM Powered by Apache HTTPD instances and
Tomcat will have to use the mod_jk binaries provided by ASF..
I didn't know, yet, if IBM will provide on its Apache implementation
mod_proxy and proxy_ajp.
Regards
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Henri Gomez <he...@gmail.com>.
I'll open an incident ticket at IBM, hope they fix that miss.
2009/8/5 Henri Gomez <he...@gmail.com>:
>>> Why did we use unixd_set_global_mutex_perms/ap_unixd_set_global_mutex_perms
>>> since both call didn't exist in i5/OS V6R1 and I had to set
>>> JK_NEED_SET_MUTEX_PERMS to 0 to have them excluded.
>>
>> Because otherwise, root created file locking objects are inaccessible to the
>> child process running in a restricted security context.
>>
>> Clear enough?
>>
>> Perhaps the httpd/apr port is whacked.
>
> Very possibile since the AP_NEED_SET_MUTEX_PERMS is set to 1 but I
> couldn't find ap_unixd_set_global_mutex_perms in the various include.
>
> And since IBM didn't profide support anymore for Apache 'modules'
> developpers, I think it will be not be easy to get a reply about the
> APR 1.2 port on i5/OS.
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Henri Gomez <he...@gmail.com>.
>> Why did we use unixd_set_global_mutex_perms/ap_unixd_set_global_mutex_perms
>> since both call didn't exist in i5/OS V6R1 and I had to set
>> JK_NEED_SET_MUTEX_PERMS to 0 to have them excluded.
>
> Because otherwise, root created file locking objects are inaccessible to the
> child process running in a restricted security context.
>
> Clear enough?
>
> Perhaps the httpd/apr port is whacked.
Very possibile since the AP_NEED_SET_MUTEX_PERMS is set to 1 but I
couldn't find ap_unixd_set_global_mutex_perms in the various include.
And since IBM didn't profide support anymore for Apache 'modules'
developpers, I think it will be not be easy to get a reply about the
APR 1.2 port on i5/OS.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by "William A. Rowe, Jr." <wr...@rowe-clan.net>.
Henri Gomez wrote:
> The question here is :
>
> Why did we use unixd_set_global_mutex_perms/ap_unixd_set_global_mutex_perms
> since both call didn't exist in i5/OS V6R1 and I had to set
> JK_NEED_SET_MUTEX_PERMS to 0 to have them excluded.
Because otherwise, root created file locking objects are inaccessible to the
child process running in a restricted security context.
Clear enough?
Perhaps the httpd/apr port is whacked.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Henri Gomez <he...@gmail.com>.
The question here is :
Why did we use unixd_set_global_mutex_perms/ap_unixd_set_global_mutex_perms
since both call didn't exist in i5/OS V6R1 and I had to set
JK_NEED_SET_MUTEX_PERMS to 0 to have them excluded.
I'll commit the patches for i5/OS after I some testing on the mod_jk
1.2.28 built on the V6R1.
Regards
2009/8/4 Henri Gomez <he...@gmail.com>:
> Hi to all,
>
> I'm working right now on the V6R1 port (very needed for our company update).
>
> the unixd.h didn't exist under i5/OS.
>
> In mod_jk.c I could see :
>
> /* Yes; sorta sucks - with luck we will clean this up before httpd-2.2
> * ships, leaving AP_NEED_SET_MUTEX_PERMS def'd as 1 or 0 on all platforms.
> */
> #ifdef AP_NEED_SET_MUTEX_PERMS
> # define JK_NEED_SET_MUTEX_PERMS AP_NEED_SET_MUTEX_PERMS
> #else
> /* A special case for httpd-2.0 */
> # if !defined(OS2) && !defined(WIN32) && !defined(BEOS) &&
> !defined(NETWARE) && !defined(AS400)
> # define JK_NEED_SET_MUTEX_PERMS 1
> # else
> # define JK_NEED_SET_MUTEX_PERMS 0
> # endif
> #endif
>
> #if JK_NEED_SET_MUTEX_PERMS
> #include "unixd.h" /* for unixd_set_global_mutex_perms */
> #endif
>
> What's this AP_NEED_SET_MUTEX_PERMS ?
>
> On my Linux box I could see :
>
> /usr/include/apache2/os.h:#define AP_NEED_SET_MUTEX_PERMS 1
>
> See it also on i5/OS V6R1 :
>
> /QIBM/ProdData/HTTPA/Include/os.h :
>
> /* On platforms where AP_NEED_SET_MUTEX_PERMS is defined, modules
> #define AP_NEED_SET_MUTEX_PERMS 1 /* @A1A */
>
> Later I could see :
>
> #if JK_NEED_SET_MUTEX_PERMS
> #if (MODULE_MAGIC_NUMBER_MAJOR >= 20090208)
> rv = ap_unixd_set_global_mutex_perms(jk_log_lock);
> #else
> rv = unixd_set_global_mutex_perms(jk_log_lock);
> #endif
>
> MODULE_MAGIC_NUMBER_MAJOR is which version of Apache 2.2.x ?
>
>
> 2009/7/29 Henri Gomez <he...@gmail.com>:
>> We allready have a V6R1 partition available but some pre-requisite are
>> still missing (like OpenSSH).
>>
>> When they will, I'll do the build.
>>
>> BTW, ASF will have to provide two binaries, one for V5R3/V5R4 and one
>> for V6R1 ;)
>>
>>
>>
>>
>> 2009/7/29 Josh Gooding <jo...@gmail.com>:
>>> I never had V6. V5R3 and 4 are the last ones I had. I like the i5. I wish
>>> I could find one of the smaller ones with a small expansion cabinet to play
>>> with.
>>>
>>> On Wed, Jul 29, 2009 at 11:49 AM, Mladen Turk <mt...@apache.org> wrote:
>>>
>>>> On 29/07/09 17:25, Rainer Jung wrote:
>>>>
>>>>>
>>>>> Of course first you need to get access to V6R1...
>>>>>
>>>>>
>>>> I had V6 once, but it was Peugeot Coupe. Nasty beast :)
>>>>
>>>> Anyhow, perhaps Henri can upload some binaries
>>>> inside the dist if relevant.
>>>>
>>>>
>>>> Cheers
>>>> --
>>>> ^TM
>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
>>>> For additional commands, e-mail: dev-help@tomcat.apache.org
>>>>
>>>>
>>>
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Henri Gomez <he...@gmail.com>.
Hi to all,
I'm working right now on the V6R1 port (very needed for our company update).
the unixd.h didn't exist under i5/OS.
In mod_jk.c I could see :
/* Yes; sorta sucks - with luck we will clean this up before httpd-2.2
* ships, leaving AP_NEED_SET_MUTEX_PERMS def'd as 1 or 0 on all platforms.
*/
#ifdef AP_NEED_SET_MUTEX_PERMS
# define JK_NEED_SET_MUTEX_PERMS AP_NEED_SET_MUTEX_PERMS
#else
/* A special case for httpd-2.0 */
# if !defined(OS2) && !defined(WIN32) && !defined(BEOS) &&
!defined(NETWARE) && !defined(AS400)
# define JK_NEED_SET_MUTEX_PERMS 1
# else
# define JK_NEED_SET_MUTEX_PERMS 0
# endif
#endif
#if JK_NEED_SET_MUTEX_PERMS
#include "unixd.h" /* for unixd_set_global_mutex_perms */
#endif
What's this AP_NEED_SET_MUTEX_PERMS ?
On my Linux box I could see :
/usr/include/apache2/os.h:#define AP_NEED_SET_MUTEX_PERMS 1
See it also on i5/OS V6R1 :
/QIBM/ProdData/HTTPA/Include/os.h :
/* On platforms where AP_NEED_SET_MUTEX_PERMS is defined, modules
#define AP_NEED_SET_MUTEX_PERMS 1 /* @A1A */
Later I could see :
#if JK_NEED_SET_MUTEX_PERMS
#if (MODULE_MAGIC_NUMBER_MAJOR >= 20090208)
rv = ap_unixd_set_global_mutex_perms(jk_log_lock);
#else
rv = unixd_set_global_mutex_perms(jk_log_lock);
#endif
MODULE_MAGIC_NUMBER_MAJOR is which version of Apache 2.2.x ?
2009/7/29 Henri Gomez <he...@gmail.com>:
> We allready have a V6R1 partition available but some pre-requisite are
> still missing (like OpenSSH).
>
> When they will, I'll do the build.
>
> BTW, ASF will have to provide two binaries, one for V5R3/V5R4 and one
> for V6R1 ;)
>
>
>
>
> 2009/7/29 Josh Gooding <jo...@gmail.com>:
>> I never had V6. V5R3 and 4 are the last ones I had. I like the i5. I wish
>> I could find one of the smaller ones with a small expansion cabinet to play
>> with.
>>
>> On Wed, Jul 29, 2009 at 11:49 AM, Mladen Turk <mt...@apache.org> wrote:
>>
>>> On 29/07/09 17:25, Rainer Jung wrote:
>>>
>>>>
>>>> Of course first you need to get access to V6R1...
>>>>
>>>>
>>> I had V6 once, but it was Peugeot Coupe. Nasty beast :)
>>>
>>> Anyhow, perhaps Henri can upload some binaries
>>> inside the dist if relevant.
>>>
>>>
>>> Cheers
>>> --
>>> ^TM
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
>>> For additional commands, e-mail: dev-help@tomcat.apache.org
>>>
>>>
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Henri Gomez <he...@gmail.com>.
We allready have a V6R1 partition available but some pre-requisite are
still missing (like OpenSSH).
When they will, I'll do the build.
BTW, ASF will have to provide two binaries, one for V5R3/V5R4 and one
for V6R1 ;)
2009/7/29 Josh Gooding <jo...@gmail.com>:
> I never had V6. V5R3 and 4 are the last ones I had. I like the i5. I wish
> I could find one of the smaller ones with a small expansion cabinet to play
> with.
>
> On Wed, Jul 29, 2009 at 11:49 AM, Mladen Turk <mt...@apache.org> wrote:
>
>> On 29/07/09 17:25, Rainer Jung wrote:
>>
>>>
>>> Of course first you need to get access to V6R1...
>>>
>>>
>> I had V6 once, but it was Peugeot Coupe. Nasty beast :)
>>
>> Anyhow, perhaps Henri can upload some binaries
>> inside the dist if relevant.
>>
>>
>> Cheers
>> --
>> ^TM
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: dev-help@tomcat.apache.org
>>
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Josh Gooding <jo...@gmail.com>.
I never had V6. V5R3 and 4 are the last ones I had. I like the i5. I wish
I could find one of the smaller ones with a small expansion cabinet to play
with.
On Wed, Jul 29, 2009 at 11:49 AM, Mladen Turk <mt...@apache.org> wrote:
> On 29/07/09 17:25, Rainer Jung wrote:
>
>>
>> Of course first you need to get access to V6R1...
>>
>>
> I had V6 once, but it was Peugeot Coupe. Nasty beast :)
>
> Anyhow, perhaps Henri can upload some binaries
> inside the dist if relevant.
>
>
> Cheers
> --
> ^TM
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Mladen Turk <mt...@apache.org>.
On 29/07/09 17:25, Rainer Jung wrote:
>
> Of course first you need to get access to V6R1...
>
I had V6 once, but it was Peugeot Coupe. Nasty beast :)
Anyhow, perhaps Henri can upload some binaries
inside the dist if relevant.
Cheers
--
^TM
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: Notice : No more IBM support JK/Tomcat on i5/OS V6R1
Posted by Rainer Jung <ra...@kippdata.de>.
Hello Henri,
On 29.07.2009 16:15, Henri Gomez wrote:
> Hi to all,
>
> The new i5/OS V6R1 use Apache 2.2 and APR 1.x.
>
> The official IBM notice inform V6R1 admins that third party modules
> for Apache 2.2.x should be updated.
> They mention the Tomcat connector (mod_jk), the only Apache 2.2.x
> third party module I know on such platform ;)
>
> I still didn't get access to a V6R1 to test the current code, but I
> feel a simple rebuild will be necessary.
>
> IBM also remove support for Tomcat (pretty old 3.2.1) in its 5761-DG1
> product and the old IBM JK connector will no more be provided.
> So the JK directive wont be supported anymore by
>
> Consequence :
>
> i5/OS V6R1 admins using IBM Powered by Apache HTTPD instances and
> Tomcat will have to use the mod_jk binaries provided by ASF..
> I didn't know, yet, if IBM will provide on its Apache implementation
> mod_proxy and proxy_ajp.
>
> Regards
thanks for sharing that information. So those iSeries users will rely on
your service (providing binaries) in the future :)
Of course first you need to get access to V6R1...
Regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org