Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Implemented
    • Affects Version/s: Trunk, 14.12.01
    • Fix Version/s: 14.12.01, 15.12.01
    • Component/s: ALL COMPONENTS
    • Labels:
      None
    • Sprint:
      Bug Crush Event - 21/2/2015

      Description

      Need to enhance security at web-app level.
      As per current implementation:

      • The cookie containing the session identifier is not secure
      • The session identifier is transmitted in the query string of the URL

      To fix these issue we have to add following session config otpions in web.xml

      <session-config>
      	<cookie-config>
      	    <http-only>true</http-only>
      	    <secure>true</secure>
      	</cookie-config>
      	<tracking-mode>COOKIE</tracking-mode>
      </session-config>
      

      Also we need to update the web-app servlet specification from 2.3 to 3.0

      <web-app version="3.0"
              xmlns="http://java.sun.com/xml/ns/javaee"
              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
              xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
                                  http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
      

      https://tomcat.apache.org/whichversion.html

      1. sessionConifg_ecommerce.patch
        16 kB
        Rahul bhammarker
      2. OFBIA-6655.applications.patch
        73 kB
        Rahul bhammarker
      3. OFBIZ-6655.framework_themes.patch
        23 kB
        Rahul bhammarker
      4. OFBIZ-6655_specialpurpose_leftover.patch
        20 kB
        Rahul bhammarker
      5. OFBIZ-6655-programmatically-session-cookies-plugins.patch
        16 kB
        Jacques Le Roux
      6. OFBIZ-6655-programmatically-session-cookies-trunk.patch
        18 kB
        Jacques Le Roux

        Issue Links

          Activity

          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Completed in trunk only: At revision: 1811041

          Show
          jacques.le.roux Jacques Le Roux added a comment - Completed in trunk only: At revision: 1811041
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Ha OK

          Show
          jacques.le.roux Jacques Le Roux added a comment - Ha OK
          Hide
          PradhanYashSharma Pradhan Yash Sharma added a comment -

          Pradhan is my title, You can call Yash that's my name

          Show
          PradhanYashSharma Pradhan Yash Sharma added a comment - Pradhan is my title, You can call Yash that's my name
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          I'll commit these patches in a week, please review, thanks

          Show
          jacques.le.roux Jacques Le Roux added a comment - I'll commit these patches in a week, please review, thanks
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Thanks for your review Pradhan (and not Yash as I used in dev ML, sorry)

          Show
          jacques.le.roux Jacques Le Roux added a comment - Thanks for your review Pradhan (and not Yash as I used in dev ML, sorry)
          Hide
          PradhanYashSharma Pradhan Yash Sharma added a comment -

          Patches look good to me.

          Show
          PradhanYashSharma Pradhan Yash Sharma added a comment - Patches look good to me.
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Reopen and assign to me, to introduce annotations for <session-config>

          Show
          jacques.le.roux Jacques Le Roux added a comment - Reopen and assign to me, to introduce annotations for <session-config>
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          I have attached 2 patches (trunk and plugin) to programmatically replaces the web.xml <session-config> declarations and uses the @WebListener annotation to start the process. This avoid to duplicates things everywhere in web.xml files. Since the web.xml files have precedence on annotations, the setting can be easily overriden when necessary.

          Now that we also use HTTPS in ecommerce the ecommerce session cookie is also secured.


          I also noted that we have 8 weird <session-timeout> declarations:

          • in solr component: <session-timeout>2</session-timeout>
          • in themes: <session-timeout>1</session-timeout>
            Does somebody know why?

          Also in Rainbowstone we lack the <cookie-config> and <tracking-mode> declarations. I think it's not good.

          We can easily resolve these points by simply removing the <session-config> in web.xml files of themes and Solr. Without answers that's what I'll do.

          Show
          jacques.le.roux Jacques Le Roux added a comment - I have attached 2 patches (trunk and plugin) to programmatically replaces the web.xml <session-config> declarations and uses the @WebListener annotation to start the process. This avoid to duplicates things everywhere in web.xml files. Since the web.xml files have precedence on annotations, the setting can be easily overriden when necessary. Now that we also use HTTPS in ecommerce the ecommerce session cookie is also secured. I also noted that we have 8 weird <session-timeout> declarations: in solr component: <session-timeout>2</session-timeout> in themes: <session-timeout>1</session-timeout> Does somebody know why? Also in Rainbowstone we lack the <cookie-config> and <tracking-mode> declarations. I think it's not good. We can easily resolve these points by simply removing the <session-config> in web.xml files of themes and Solr. Without answers that's what I'll do.
          Hide
          deepak.dixit Deepak Dixit added a comment - - edited

          Thanks Jacques,

          Show
          deepak.dixit Deepak Dixit added a comment - - edited Thanks Jacques,
          Hide
          jacques.le.roux Jacques Le Roux added a comment - - edited

          Hi Deepak,

          At r1722379 you reverted r1719762 (actually r1719939). You were right to do so for RequesHandler but not for the other files. Because it now does not handle security for cookies which are not session cookies. It's minor but still a risk, notably for autoLoginCookie

          At r1809687 I reapplied r1719762 for the other files to make other than session cookies secure. I will not backport. More to come soon...

          At r1809838 I slightly improved r1809687 by not securing cookies just before deleting them

          Show
          jacques.le.roux Jacques Le Roux added a comment - - edited Hi Deepak, At r1722379 you reverted r1719762 (actually r1719939). You were right to do so for RequesHandler but not for the other files. Because it now does not handle security for cookies which are not session cookies. It's minor but still a risk, notably for autoLoginCookie At r1809687 I reapplied r1719762 for the other files to make other than session cookies secure. I will not backport. More to come soon... At r1809838 I slightly improved r1809687 by not securing cookies just before deleting them
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Hi Deepak,

          You

          Reverted r1719762, as system fails to find the session cookie for ecommerce, will debug it in more detail but for now to fix this issue reverting r1719762 at r#1722379.

          Then you applied r1724940. Could you please explain in detail the issue you got with r1719762 that you did not get with r1724940? Was this not related to OFBIZ-6111 ? Or javascript not able to access the session cookie? Did you test using an OFBiz localhost instance? This questions because we will ultimately need to secure all OFBiz cookies, not only the session cookies.

          There are more considerations to take into account, notably that I have introduced strict-transport-security with r1719660 (OFBIZ-6766).
          The point is you should set <secure>true</secure> ONLY if you are only serving https content, for mixed content this setting in NOT recommended. But with the introduction of strict-transport-security things are blurred.

          Anyway I will soon open a new Jira for that and other related points or maybe simply another post to the "Performance over security, is that reasonable?" thread.

          Show
          jacques.le.roux Jacques Le Roux added a comment - Hi Deepak, You Reverted r1719762, as system fails to find the session cookie for ecommerce, will debug it in more detail but for now to fix this issue reverting r1719762 at r#1722379. Then you applied r1724940. Could you please explain in detail the issue you got with r1719762 that you did not get with r1724940? Was this not related to OFBIZ-6111 ? Or javascript not able to access the session cookie? Did you test using an OFBiz localhost instance? This questions because we will ultimately need to secure all OFBiz cookies, not only the session cookies. There are more considerations to take into account, notably that I have introduced strict-transport-security with r1719660 ( OFBIZ-6766 ). The point is you should set <secure>true</secure> ONLY if you are only serving https content, for mixed content this setting in NOT recommended. But with the introduction of strict-transport-security things are blurred. Anyway I will soon open a new Jira for that and other related points or maybe simply another post to the "Performance over security, is that reasonable?" thread.
          Hide
          deepak.dixit Deepak Dixit added a comment - - edited

          Added missing session tracking and secure cookie for scrum and solr component.
          Also fixed the Invalid content was found starting with element 'description' for manufacturing component for manufacturing component.

          This has been committed at
          Trunk at r#1724957
          15.12 at r#1724958
          14.12 at r#1724959

          Show
          deepak.dixit Deepak Dixit added a comment - - edited Added missing session tracking and secure cookie for scrum and solr component. Also fixed the Invalid content was found starting with element 'description' for manufacturing component for manufacturing component. This has been committed at Trunk at r#1724957 15.12 at r#1724958 14.12 at r#1724959
          Hide
          deepak.dixit Deepak Dixit added a comment -

          IMO we can close this issue, Crated new ticket OFBIZ-6807 for LocationResolver related issue.

          Show
          deepak.dixit Deepak Dixit added a comment - IMO we can close this issue, Crated new ticket OFBIZ-6807 for LocationResolver related issue.
          Hide
          deepak.dixit Deepak Dixit added a comment -

          Added session tracking mode and made cookie secure for remaining special purposes component at
          Trunk at r#1724940
          15.12 at r#1724941
          14/12 at r#1724942

          Show
          deepak.dixit Deepak Dixit added a comment - Added session tracking mode and made cookie secure for remaining special purposes component at Trunk at r#1724940 15.12 at r#1724941 14/12 at r#1724942
          Hide
          deepak.dixit Deepak Dixit added a comment - - edited

          Thanks Rahul, specialpurpose letfover patch has been committed at
          Trunk r#1724930
          15.12 at r#1724938
          14.12 at r#1724939

          Show
          deepak.dixit Deepak Dixit added a comment - - edited Thanks Rahul, specialpurpose letfover patch has been committed at Trunk r#1724930 15.12 at r#1724938 14.12 at r#1724939
          Hide
          deepak.dixit Deepak Dixit added a comment -

          Reverted r1719762, as system fails to find the session cookie for ecommerce, will debug it in more detail but for now to fix this issue reverting r1719762 at r#1722379.

          Show
          deepak.dixit Deepak Dixit added a comment - Reverted r1719762, as system fails to find the session cookie for ecommerce, will debug it in more detail but for now to fix this issue reverting r1719762 at r#1722379.
          Hide
          rahul.bhammarker Rahul bhammarker added a comment - - edited

          I have added a patch ("OFBIZ-6655_specialpurpose_leftover.patch") for the leftover files of specialpurpose component.

          Show
          rahul.bhammarker Rahul bhammarker added a comment - - edited I have added a patch (" OFBIZ-6655 _specialpurpose_leftover.patch") for the leftover files of specialpurpose component.
          Hide
          gareth.carter Gareth Carter added a comment -

          FYI, most of the local DTD/schemas are found in servlet-api-3.0.jar. The LocalResolver in UtilXml will need to be changed or schema removed from all web.xml files.

          I believe tomcat OOTB uses this jar - see https://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/util/SchemaResolver.html, however I have not looked into it with any depth

          Show
          gareth.carter Gareth Carter added a comment - FYI, most of the local DTD/schemas are found in servlet-api-3.0.jar. The LocalResolver in UtilXml will need to be changed or schema removed from all web.xml files. I believe tomcat OOTB uses this jar - see https://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/util/SchemaResolver.html , however I have not looked into it with any depth
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          As said Pierre, we should not forget the specialpurpose components

          Show
          jacques.le.roux Jacques Le Roux added a comment - As said Pierre, we should not forget the specialpurpose components
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          BTW, I found this in log after r1719872

               [java] 2015-12-14 17:42:35,607 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:35,620 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:35,626 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:35,627 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:35,630 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:35,634 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:35,637 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:35,638 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:36,577 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:36,588 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:36,601 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:36,615 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:36,629 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:36,643 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:36,667 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:36,899 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:36,938 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:36,975 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:37,013 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:37,050 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:37,092 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:37,255 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:37,367 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:37,463 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:37,511 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:37,564 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:37,636 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:37,684 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:37,752 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:37,783 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:37,816 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:37,849 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:37,904 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:37,946 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:37,990 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:38,008 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,026 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,050 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:38,059 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:38,064 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,075 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,076 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:38,082 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,098 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:38,108 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,125 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:38,133 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,153 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:38,315 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:38,451 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:38,499 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:38,526 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:38,571 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:38,587 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,610 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:38,617 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:38,625 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:38,663 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:38,748 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:38,827 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:38,840 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:39,006 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,029 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,046 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,056 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:39,108 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,132 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,151 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:39,302 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,436 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:39,449 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:39,492 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:39,535 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:39,640 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:39,681 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:39,698 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,708 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:39,760 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:39,792 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:39,841 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:39,878 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:39,892 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:39,948 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,965 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,975 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:39,984 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:39,994 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:40,015 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:40,033 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,041 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:40,041 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:40,103 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,157 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,165 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-app_3_0.xsd]
               [java] 2015-12-14 17:42:40,177 |catalina-startup-3   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,328 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:40,361 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:40,412 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:40,494 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,507 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:40,539 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:40,552 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:40,585 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:40,742 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,759 |catalina-startup-6   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,773 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:40,825 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [web-common_3_0.xsd]
               [java] 2015-12-14 17:42:40,842 |catalina-startup-7   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:40,861 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:40,975 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:41,061 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:41,092 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:41,170 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:41,196 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:41,228 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:41,263 |catalina-startup-5   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:41,286 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:41,402 |catalina-startup-4   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:41,443 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:41,474 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:41,580 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:41,603 |catalina-startup-1   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:41,617 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_web_services_client_1_3.xsd]
               [java] 2015-12-14 17:42:41,702 |catalina-startup-8   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
               [java] 2015-12-14 17:42:41,753 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [jsp_2_2.xsd]
               [java] 2015-12-14 17:42:41,881 |catalina-startup-2   |UtilXml                       |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [null] and the file/resource is
           [javaee_6.xsd]
          
          Show
          jacques.le.roux Jacques Le Roux added a comment - BTW, I found this in log after r1719872 [java] 2015-12-14 17:42:35,607 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:35,620 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:35,626 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:35,627 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:35,630 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:35,634 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:35,637 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:35,638 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:36,577 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:36,588 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:36,601 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:36,615 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:36,629 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:36,643 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:36,667 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:36,899 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:36,938 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:36,975 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:37,013 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:37,050 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:37,092 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:37,255 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:37,367 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:37,463 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:37,511 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:37,564 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:37,636 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:37,684 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:37,752 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:37,783 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:37,816 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:37,849 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:37,904 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:37,946 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:37,990 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:38,008 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,026 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,050 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:38,059 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:38,064 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,075 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,076 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:38,082 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,098 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:38,108 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,125 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:38,133 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,153 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:38,315 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:38,451 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:38,499 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:38,526 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:38,571 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:38,587 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,610 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:38,617 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:38,625 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:38,663 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:38,748 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:38,827 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:38,840 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:39,006 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,029 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,046 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,056 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:39,108 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,132 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,151 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:39,302 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,436 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:39,449 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:39,492 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:39,535 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:39,640 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:39,681 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:39,698 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,708 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:39,760 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:39,792 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:39,841 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:39,878 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:39,892 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:39,948 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,965 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,975 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:39,984 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:39,994 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:40,015 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:40,033 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,041 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:40,041 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:40,103 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,157 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,165 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-app_3_0.xsd] [java] 2015-12-14 17:42:40,177 |catalina-startup-3 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,328 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:40,361 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:40,412 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:40,494 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,507 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:40,539 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:40,552 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:40,585 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:40,742 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,759 |catalina-startup-6 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,773 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:40,825 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [web-common_3_0.xsd] [java] 2015-12-14 17:42:40,842 |catalina-startup-7 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:40,861 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:40,975 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:41,061 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:41,092 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:41,170 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:41,196 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:41,228 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:41,263 |catalina-startup-5 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:41,286 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:41,402 |catalina-startup-4 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:41,443 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:41,474 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:41,580 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:41,603 |catalina-startup-1 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:41,617 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_web_services_client_1_3.xsd] [java] 2015-12-14 17:42:41,702 |catalina-startup-8 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd] [java] 2015-12-14 17:42:41,753 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [jsp_2_2.xsd] [java] 2015-12-14 17:42:41,881 |catalina-startup-2 |UtilXml |W| [UtilXml.LocalResolver.resolveEntity] could not find LOCAL DTD/Schema with publicId [ null ] and the file/resource is [javaee_6.xsd]
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Deepak, I reassign to you, thanks

          Show
          jacques.le.roux Jacques Le Roux added a comment - Deepak, I reassign to you, thanks
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          I reapplied (committed) r1719762 at revision: 1719939

          Show
          jacques.le.roux Jacques Le Roux added a comment - I reapplied (committed) r1719762 at revision: 1719939
          Hide
          jacques.le.roux Jacques Le Roux added a comment - - edited

          OK, I changed my mind. I will not apply the sessionConifg_ecommerce.patch because of the bug and I wonder about the other patches because they give a false sense of security. So I will reapply r1719762.
          This for 3 reasons:

          1. Tomcat protects the cookies which it cares about (session and SSO cookies) but not all. Notably the OFBiz specific cookies, like visitorCookie. I guess also trackableCookie, billableCookie, siteIdCookie, updatedTimeStampCookie, guestShoppingListCookie, usernameCookieName and autoLoginCookie are not secured. The data in those cookies are less sensible than jsessionId but anyway it's safer to have them all secured.
          2. I don't want to debug the ecommerce issue I reported above. And if I don't use the sessionConifg_ecommerce.patch but rather reapply r1719762 then it's OK (if I also locally revert r1686574 done for OFBIz-6111, still waiting on this one...)
          3. I see no reasons why someone would not want her cookies secured, as recommended by OWASP and others

          Even if it"s belt and suspenders, we can still keep the others the patches. Notably because they also introduce the <tracking-mode>COOKIE</tracking-mode> stuff.
          Once debugged we can commit the the sessionConifg_ecommerce.patch, anyway in the meantime it will be safe w/o it.

          Show
          jacques.le.roux Jacques Le Roux added a comment - - edited OK, I changed my mind. I will not apply the sessionConifg_ecommerce.patch because of the bug and I wonder about the other patches because they give a false sense of security. So I will reapply r1719762. This for 3 reasons: Tomcat protects the cookies which it cares about (session and SSO cookies) but not all. Notably the OFBiz specific cookies, like visitorCookie. I guess also trackableCookie, billableCookie, siteIdCookie, updatedTimeStampCookie, guestShoppingListCookie, usernameCookieName and autoLoginCookie are not secured. The data in those cookies are less sensible than jsessionId but anyway it's safer to have them all secured. I don't want to debug the ecommerce issue I reported above. And if I don't use the sessionConifg_ecommerce.patch but rather reapply r1719762 then it's OK (if I also locally revert r1686574 done for OFBIz-6111, still waiting on this one...) I see no reasons why someone would not want her cookies secured, as recommended by OWASP and others Even if it"s belt and suspenders, we can still keep the others the patches. Notably because they also introduce the <tracking-mode>COOKIE</tracking-mode> stuff. Once debugged we can commit the the sessionConifg_ecommerce.patch, anyway in the meantime it will be safe w/o it.
          Hide
          jacques.le.roux Jacques Le Roux added a comment - - edited

          At least, the ecommerce issue is unrelated with OFBIZ-6111...WIP...

          Or rather it's not directly related

          Show
          jacques.le.roux Jacques Le Roux added a comment - - edited At least, the ecommerce issue is unrelated with OFBIZ-6111 ...WIP... Or rather it's not directly related
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Yes all concerned specialpurpose components indeed (not POS for instance)

          Show
          jacques.le.roux Jacques Le Roux added a comment - Yes all concerned specialpurpose components indeed (not POS for instance)
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          >Index: applications/order/widget/ordermgr/OrderMenus.xml (makes sens I'll apply later: conflict anyway)
          Already applied

          Show
          jacques.le.roux Jacques Le Roux added a comment - >Index: applications/order/widget/ordermgr/OrderMenus.xml (makes sens I'll apply later: conflict anyway) Already applied
          Hide
          pfm.smits Pierre Smits added a comment -

          And cmssite, of course.

          Show
          pfm.smits Pierre Smits added a comment - And cmssite, of course.
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Committed in
          trunk r1719872
          R14.12 r1719874

          Too much conflicts in older releases.

          Still ecommerce webapps to fix...

          Show
          jacques.le.roux Jacques Le Roux added a comment - Committed in trunk r1719872 R14.12 r1719874 Too much conflicts in older releases. Still ecommerce webapps to fix...
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          I reviewed the patches

          OFBIA-6655.applications.patch, there are 2 undesired parts:
          Index: applications/order/build.xml (wrong)
          Index: applications/order/widget/ordermgr/OrderMenus.xml (makes sens I'll apply later: conflict anyway)

          OFBIZ-6655.framework_themes.patch
          Index: applications/order/build.xml (wrong)

          Else applying them seems good and I confirm r1719762 at r1719764 are not needed. I will commit them

          Show
          jacques.le.roux Jacques Le Roux added a comment - I reviewed the patches OFBIA-6655.applications.patch, there are 2 undesired parts: Index: applications/order/build.xml (wrong) Index: applications/order/widget/ordermgr/OrderMenus.xml (makes sens I'll apply later: conflict anyway) OFBIZ-6655 .framework_themes.patch Index: applications/order/build.xml (wrong) Else applying them seems good and I confirm r1719762 at r1719764 are not needed. I will commit them
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Except proved otherwise I see no reasons to not apply the "OFBIZ-6655.framework_themes.patch" and "OFBIA-6655.applications.patch". I will though test we have not the same side effect than on ecommerce on order manager side...WIP...

          Show
          jacques.le.roux Jacques Le Roux added a comment - Except proved otherwise I see no reasons to not apply the " OFBIZ-6655 .framework_themes.patch" and "OFBIA-6655.applications.patch". I will though test we have not the same side effect than on ecommerce on order manager side...WIP...
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          I reverted r1719762 at r1719764, I wonder if the ecommerce issue is not related with OFBIZ-6111

          Show
          jacques.le.roux Jacques Le Roux added a comment - I reverted r1719762 at r1719764, I wonder if the ecommerce issue is not related with OFBIZ-6111
          Hide
          jacques.le.roux Jacques Le Roux added a comment - - edited

          Ha no indeed, this is not Tomcat 7 specific but Servlet 3.0 standard. So it's clearly a better way because it's configurable. I will revert my change, review the attached patches and hopefully apply them before trying to fix the ecommerce issue...

          Show
          jacques.le.roux Jacques Le Roux added a comment - - edited Ha no indeed, this is not Tomcat 7 specific but Servlet 3.0 standard. So it's clearly a better way because it's configurable. I will revert my change, review the attached patches and hopefully apply them before trying to fix the ecommerce issue...
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          After reading https://tomcat.apache.org/migration-7.html#Session_cookie_configuration I see that http-only is now by defaut in Tomcat 7. Still my r1719762 might secure those who would want to use another app server. I will check if the issue we have in ecommerce is not related to JavaScript trying to use cookies...

          Show
          jacques.le.roux Jacques Le Roux added a comment - After reading https://tomcat.apache.org/migration-7.html#Session_cookie_configuration I see that http-only is now by defaut in Tomcat 7. Still my r1719762 might secure those who would want to use another app server. I will check if the issue we have in ecommerce is not related to JavaScript trying to use cookies...
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          At r1719762 I have secured cookies where needed with setCookie (setSecure(true) and setHttpOnly(true)). It has the advantage of securing cookies the same way but not only in Tomcat7+.

          I though see no reason why not using

          {config}
          <session-config>
          	<cookie-config>
          	    <http-only>true</http-only>
          	    <secure>true</secure>
          	</cookie-config>
          	<tracking-mode>COOKIE</tracking-mode>
          </session-config>
          {config}
          
          	    <http-only>true</http-only>
          	    <secure>true</secure>
          

          Can be seen as redundant but only OOTB. So better to set it indeed, same for tracking-mode. Those should be the only changes... At least in a 1st step. All other changes, if really necessary, should be done separately, even better in another Jira...

          OK I just checked, I need to do more work because the same issues than in my comment above arise. This time I will not revert, but will ASAP fix the reason we get issues when securing cookies :/

          Show
          jacques.le.roux Jacques Le Roux added a comment - At r1719762 I have secured cookies where needed with setCookie (setSecure(true) and setHttpOnly(true)). It has the advantage of securing cookies the same way but not only in Tomcat7+. I though see no reason why not using {config} <session-config> <cookie-config> <http-only> true </http-only> <secure> true </secure> </cookie-config> <tracking-mode>COOKIE</tracking-mode> </session-config> {config} <http-only> true </http-only> <secure> true </secure> Can be seen as redundant but only OOTB. So better to set it indeed, same for tracking-mode. Those should be the only changes... At least in a 1st step. All other changes, if really necessary, should be done separately, even better in another Jira... OK I just checked, I need to do more work because the same issues than in my comment above arise. This time I will not revert, but will ASAP fix the reason we get issues when securing cookies :/
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          I reverted r1715506 at revision: 1716036. The issues I crossed:

          Get to localhost:8080/ecommerce/control/main
          Add a product, instead of stating on the main page you get to the cart page despite having the "Always View Cart After Adding An Item. " not checked. Then eg:

          Scenario 1
          Use the Recalculate option at top => You get "Your Shopping Cart Empty"

          Scenario 2
          Use the Continue Shopping option at top => your cart is empty

          Scenario 3
          Use the checkout link on top
          Login with DemoCustomer
          Use the Quick Checkout option
          Use the main link on top => your cart is empty

          Show
          jacques.le.roux Jacques Le Roux added a comment - I reverted r1715506 at revision: 1716036. The issues I crossed: Get to localhost:8080/ecommerce/control/main Add a product, instead of stating on the main page you get to the cart page despite having the "Always View Cart After Adding An Item. " not checked. Then eg: Scenario 1 Use the Recalculate option at top => You get "Your Shopping Cart Empty" Scenario 2 Use the Continue Shopping option at top => your cart is empty Scenario 3 Use the checkout link on top Login with DemoCustomer Use the Quick Checkout option Use the main link on top => your cart is empty
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          OK, not a big deal, I guess/hope Eclipse will tell us to update it when needed

          Show
          jacques.le.roux Jacques Le Roux added a comment - OK, not a big deal, I guess/hope Eclipse will tell us to update it when needed
          Hide
          rahul.bhammarker Rahul bhammarker added a comment -

          This is the patch for ecommerce, ecomseo and ecomclone webapps, and I will soon provide the patch for all the webapps.

          Show
          rahul.bhammarker Rahul bhammarker added a comment - This is the patch for ecommerce, ecomseo and ecomclone webapps, and I will soon provide the patch for all the webapps.
          Hide
          deepak.dixit Deepak Dixit added a comment - - edited

          Jacques, eclipse xml validation says version is required field for web-app element so we need to add version on it.

          Show
          deepak.dixit Deepak Dixit added a comment - - edited Jacques, eclipse xml validation says version is required field for web-app element so we need to add version on it.
          Hide
          deepak.dixit Deepak Dixit added a comment -

          You are right Jacques, we don't need add the version="3.0", I'll commit the changes ASAP

          Show
          deepak.dixit Deepak Dixit added a comment - You are right Jacques, we don't need add the version="3.0", I'll commit the changes ASAP
          Hide
          deepak.dixit Deepak Dixit added a comment -

          Let me check.

          Show
          deepak.dixit Deepak Dixit added a comment - Let me check.
          Hide
          jacques.le.roux Jacques Le Roux added a comment - - edited

          Hi Deepak,

          I don't think we need to put

           <web-app version="3.0"
          

          in our web.xml files (see https://tomcat.apache.org/tomcat-7.0-doc/appdev/web.xml.txt and https://download.oracle.com/otn-pub/jcp/servlet-3.0-fr-oth-JSpec/servlet-3_0-final-spec.pdf chapter 14
          The issue I foresee is, if we don't, when we will upgrade Tomcat we will not need to update, it it will be automatically done.

          On the other hand we could keep the rest (xmlns, etc.). Did I miss something?

          Show
          jacques.le.roux Jacques Le Roux added a comment - - edited Hi Deepak, I don't think we need to put <web-app version= "3.0" in our web.xml files (see https://tomcat.apache.org/tomcat-7.0-doc/appdev/web.xml.txt and https://download.oracle.com/otn-pub/jcp/servlet-3.0-fr-oth-JSpec/servlet-3_0-final-spec.pdf chapter 14 The issue I foresee is, if we don't, when we will upgrade Tomcat we will not need to update, it it will be automatically done. On the other hand we could keep the rest (xmlns, etc.). Did I miss something?

            People

            • Assignee:
              jacques.le.roux Jacques Le Roux
              Reporter:
              deepak.dixit Deepak Dixit
            • Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development

                  Agile