Re: Strangest thing I've ever seen: Manager doesn't like its allow clause.

James,

On 11/14/25 12:20 PM, James H. H. Lampert wrote:
> On 11/14/25 9:14 AM, Christopher Schultz wrote:
> 
>>> The "straight-out-of-the-box" allow clause for the 110 manager is
>>> allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1"
>>
>> Is it? Where did you find that?
> 
> <sheepishly> In the Manager's RemoteAddrValve. </sheepishly>

(No need to be sheepish. Just asking for clarity.)

Do you mean this one?

   <Valve className="org.apache.catalina.valves.RemoteAddrValve"
          allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />

Please note the className.

>>> Hmm! The "straight-out-of-the-box" allow clause for the 111 manager is
>>> allow="127.0.0.0/8,::1/128"
>>
>> Where do you see that, as well?
> 
> <sheepishly> In the Manager's RemoteCIDRValve.
> </sheepishly>

Do you mean this one?

   <Valve className="org.apache.catalina.valves.RemoteCIDRValve"
          allow="127.0.0.0/8,::1/128" />

Please note the className.

If you upgraded from 9.0.110 (far above) to 9.0.111 (above) and didn't 
modify your <Valve> configuration, then each version should have been 
happy with itself.

Is it possible that you ran one version with the configuration of 
another? The CIDR valve has never supported regular expressions for IP 
addresses. The RemoteAddrValve has always used regular expressions, and 
shouldn't have an issue with any.

But your error message at the start of this thread was logged by 
RemoteCIDRValve and complained about an obviously 
regular-expression-looking value.

So what's up?

-chris