Nate,<div>Thank you very much. This helps.</div><div>Leads to another question, Is there a CVE number for 'parsing specification-compliant cookies' with Tomcat5?</div><div>The reason for my question is Redhat/CentOS platform specific builds have regular updates on Tomcat5, so may be this problem the developer mentioned is not applicable. I can look at the tomcat5 package changeLog from Redhat or ask the developer about this issue. But i need CVE reference.</div>
<div><br></div><div>I don't think i am the only one, interested in running CentOS/Redhat platform. </div><div>Doing a 'yum' install using the Standard repo is always preferred method, instead of downloading a generic package. I think.</div>
<div><br></div><div>thanks</div><div>dhiva</div><div><br></div><div><br></div><div><br></div><div><div class="gmail_quote">On Wed, Jan 25, 2012 at 10:19 AM, Nate Klingenstein <span dir="ltr"><<a href="mailto:ndk@internet2.edu">ndk@internet2.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>
<div bgcolor="#ffffff" text="#000000">
Dhiva,<br>
<br>
I asked the lead developer of the IdP for details as to why Tomcat 5
is not supported. Apparently Tomcat 5 has a problem parsing
specification-compliant cookies that they have chosen to not fix,
with the suggested remedy of "upgrade to 6." As a result, we can
only support Tomcat 6.<br>
<br>
Tomcat 6 packages are available directly from the Tomcat project's
website:<br>
<br>
<a href="http://tomcat.apache.org/download-60.cgi" target="_blank">http://tomcat.apache.org/download-60.cgi</a><br>
<br>
Future distributions of the IdP with an embedded servlet container
would hopefully reduce the amount of package management you'll need
to do.<br>
<br>
Hope this answers your question,<br>
Nate.<div><div class="h5"><br>
<br>
On 1/25/2012 17:37, Dhiva wrote:
<blockquote type="cite">>>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall</a><br>
<div><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px">>>
The Shibboleth Identity Provider, version 2, is a standard
Java web application based on the Servlet 2.4 specification.</span><br>
</div>
<div><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px"><br>
</span></div>
<div><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px">>>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare</a><br>
</span></div>
<div><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px">>>
Apache Tomcat 6.0.17 or greater (NOT 7)<br>
</span></div>
<div><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px">>> </span><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px">Java
5 or greater (Java 6 recommended )</span></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px"><br>
</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px">My issue
here is that Redhat/CentOS machines does have Tomcat 5
packages, but NOT tomcat 6.</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px">But the
servlet specification is indeed 2.4, which matches with Shib
requirement.</span></font></div>
<div><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px">I
have used jpackage.repo in the past, but it is not
consistently providing tomcat 6 packages for Redhat/CentOS.</span><br>
</div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px"><br>
</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px">I would
like to stay with Redhat/CentOS Package Repository, so i
wanted to know if Tomcat 5 along with the OpenJDK.</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px"><br>
</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px"><br>
</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px">thanks</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px">dhiva</span></font></div>
<div><font color="#333333" face="Helvetica, Arial, sans-serif"><span style="line-height:17px"> </span></font></div>
<div><span style="color:rgb(51,51,51);font-family:Helvetica,Arial,sans-serif;line-height:17px"><br>
</span></div>
</blockquote>
<br>
</div></div></div>
</blockquote></div><br></div>