Issue with Perl code deployment in Tomcat7.x

["D, Dwarakesh" <Dw...@xerox.com>]

Hello,

We have deployed perl code in tomcat 7.0.27 and when running the URL, we are getting the perl code displayed in the UI itself.

The below changes were made in tomcat:

1)      ../tomcat/conf/Context.xml

è Added <Context privileged="true">

2)      ../tomcat/conf/web.xml

è Uncommented the servlet code for cgi

3)      Also added the servlets-cgi-4.1.36.jar under ../tomcat/lib directory.


Do we need to do changes in server.xml or other files . Please let us know how to resolve this issue.

Thanks,
Dwarak

Re: Issue with Perl code deployment in Tomcat7.x

[Christopher Schultz <ch...@christopherschultz.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dwarak,

On 3/26/15 10:54 AM, D, Dwarakesh wrote:
> We have deployed perl code in tomcat 7.0.27

Upgrade. There's bad stuff lurking in those old versions. 7.0.60!

> and when running the URL, we are getting the perl code displayed
> in the UI itself.
> 
> The below changes were made in tomcat:
> 
> 1)      ../tomcat/conf/Context.xml
> 
> è Added <Context privileged="true">

Stop.

Go back and undo that change.

> 2)      ../tomcat/conf/web.xml
> 
> è Uncommented the servlet code for cgi

Stop. Go back and undo that change.

> 3)      Also added the servlets-cgi-4.1.36.jar under ../tomcat/lib
> directory.

Stop. Go back and undo that change.

Where in the world did you get that JAR file, anyway? Are you
following some "CGI on Tomcat Guide" from 2004?

> Do we need to do changes in server.xml or other files . Please let
> us know how to resolve this issue.

You should only be editing META-INF/context.xml and WEB-INF/web.xml in
your own web application. Otherwise, you are enabling CGI for every
web application deployed to the container. Even if you only have a
single application, you should change the configuration to be
app-specific. Otherwise, you'll never remember having edited the
site-wide configuration on your current environment when you want to
move the application to another environment.

Start over, and read this before you start:
http://tomcat.apache.org/tomcat-7.0-doc/cgi-howto.html

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
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=hC7e
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org