You are viewing a plain text version of this content. The canonical link for it is here.
Posted to log4j-dev@logging.apache.org by Gary Gregory <ga...@gmail.com> on 2014/10/14 04:22:53 UTC
Hopefully last RC for 2.1 ?
Hi All:
I'm sure we are all busy (I am!) but do we have a plan for cutting what
will hopefully be the last 2.1 RC?
Gary
--
E-Mail: garydgregory@gmail.com | ggregory@apache.org
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <ra...@dslextreme.com>.
Yes. Probably later today.
Ralph
> On Oct 18, 2014, at 10:50 AM, Gary Gregory <ga...@gmail.com> wrote:
>
> Hi Ralph,
>
> Any chance for an RC this weekend?
>
> Gary
>
> On Wed, Oct 15, 2014 at 11:21 AM, Ralph Goers <ralph.goers@dslextreme.com <ma...@dslextreme.com>> wrote:
> I think we should. I don’t think that is a blocker for a release though.
>
> I have taken Matt’s suggestion and changed to use defaultThreadPool(). It seems to work fine in my limited testing. It allowed the Tomcat that was failing to start up to now start logging correctly. My Tomcat webapp in my test VM also started and shutdown correctly - although it just uses the default Tomcat configuration which, I believe, has no security manager.
>
> Hopefully I can get the release started tonight after work. That depends on how the day goes though.
>
> Ralph
>
> On Oct 15, 2014, at 7:49 AM, Gary Gregory <garydgregory@gmail.com <ma...@gmail.com>> wrote:
>
>> Should we include a Tomcat policy file as a sample in the distro?
>>
>> Gary
>>
>> On Wed, Oct 15, 2014 at 2:09 AM, Ralph Goers <ralph.goers@dslextreme.com <ma...@dslextreme.com>> wrote:
>> Well this is downright interesting. I started Tomcat 7 using “./startup.sh -security” and both manager and host-manager failed to start, although not with access control or security exceptions. The web app with Log4j did fail to start but it failed differently. In this case I think we would need to require that the catalina policy file be updated as not being able to get a ClassLoader is going to break everything. I do notice that catalina.policy has a bunch of permissions for JULI, including setContextClassLoader.
>>
>> I think we need to document what permissions we require.
>>
>> Ralph
>>
>> SEVERE: ContainerBase.addChild: start:
>> org.apache.catalina.LifecycleException: Failed to start component [StandardEngine[Catalina].StandardHost[localhost].StandardContext[/eztax]]
>> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154)
>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
>> at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:133)
>> at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:156)
>> at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:145)
>> at java.security.AccessController.doPrivileged(Native Method)
>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1083)
>> at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1880)
>> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
>> at java.util.concurrent.FutureTask.run(FutureTask.java:262)
>> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
>> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>> at java.lang.Thread.run(Thread.java:745)
>> Caused by: java.lang.ExceptionInInitializerError
>> at org.apache.logging.log4j.status.StatusLogger.<clinit>(StatusLogger.java:55)
>> at org.apache.logging.log4j.web.Log4jServletContainerInitializer.<clinit>(Log4jServletContainerInitializer.java:37)
>> at java.lang.Class.forName0(Native Method)
>> at java.lang.Class.forName(Class.java:270)
>> at org.apache.catalina.startup.WebappServiceLoader.loadServices(WebappServiceLoader.java:187)
>> at org.apache.catalina.startup.WebappServiceLoader.load(WebappServiceLoader.java:152)
>> at org.apache.catalina.startup.ContextConfig.processServletContainerInitializers(ContextConfig.java:1546)
>> at org.apache.catalina.startup.ContextConfig.webConfig(ContextConfig.java:1268)
>> at org.apache.catalina.startup.ContextConfig.configureStart(ContextConfig.java:876)
>> at org.apache.catalina.startup.ContextConfig.lifecycleEvent(ContextConfig.java:374)
>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
>> at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90)
>> at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5378)
>> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
>> ... 14 more
>> Caused by: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "getClassLoader")
>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
>> at java.security.AccessController.checkPermission(AccessController.java:559)
>> at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
>> at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1561)
>> at java.lang.ClassLoader.getSystemClassLoader(ClassLoader.java:1480)
>> at org.apache.logging.log4j.util.LoaderUtil.findUrlResources(LoaderUtil.java:192)
>> at org.apache.logging.log4j.util.LoaderUtil.findResources(LoaderUtil.java:183)
>> at org.apache.logging.log4j.util.PropertiesUtil.<init>(PropertiesUtil.java:90)
>> at org.apache.logging.log4j.util.PropertiesUtil.<clinit>(PropertiesUtil.java:36)
>> ... 28 more
>>
>>
>>
>>
>>
>> On Oct 14, 2014, at 10:07 PM, Ralph Goers <ralph.goers@dslextreme.com <ma...@dslextreme.com>> wrote:
>>
>>> See the javadoc for Executors.privilegedThreadFactory(). It is documented as checking for that permission and throwing an AccessControlException. Since it is called in the constructor of DefaultShutdownCallbackRegistry it definitely has the potential for throwing an exception, which then causes log4j initialization to fail. That just isn’t acceptable.
>>>
>>> Ralph
>>>
>>>
>>> On Oct 14, 2014, at 9:45 PM, Matt Sicker <boards@gmail.com <ma...@gmail.com>> wrote:
>>>
>>>> We never use setContextClassLoader though. I'm not sure why that security exception appears. I don't think there's any harm in fixing that.
>>>>
>>>> On 14 October 2014 22:59, Ralph Goers <ralph.goers@dslextreme.com <ma...@dslextreme.com>> wrote:
>>>> Well darn. Matt put an Assert.requiredNonNull on the Registry in Log4jContextFactory. So even if the exception is caught it can’t be ignored. Unless I can find a way around this that commit is going to have to be reverted.
>>>>
>>>> Ralph
>>>>
>>>> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <http://dslextreme.com/> <ralph.goers@dslextreme.com <ma...@dslextreme.com>> wrote:
>>>>
>>>>> I have an app that I was able to run successfully on a vanilla Tomcat. I need to check the security settings on te server. Regardless, this should not cause initialization to fail.
>>>>>
>>>>> Ralph
>>>>>
>>>>> On Tuesday, October 14, 2014, Gary Gregory <garydgregory@gmail.com <ma...@gmail.com>> wrote:
>>>>> IIRC, it looks something Matt was working on recently and he did mention working through security issues. Hopefully he will see this message and can help out.
>>>>>
>>>>> It sounds like we need at last one integration tests for Tomcat...
>>>>>
>>>>> Gary
>>>>>
>>>>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ralph.goers@dslextreme.com <>> wrote:
>>>>> I am having a bit of trouble with the latest code. Log4j won’t start in tomcat due to a security violation. I am not going to go forward with the release until I can determine what the problem is and fix it.
>>>>>
>>>>> Ralph
>>>>>
>>>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>>>> at java.lang.Class.newInstance0(Class.java:357)
>>>>> at java.lang.Class.newInstance(Class.java:310)
>>>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>>>
>>>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>>>
>>>>>
>>>>>
>>>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <boards@gmail.com <>> wrote:
>>>>>
>>>>>> Oh crap, you're right.
>>>>>>
>>>>>> On 14 October 2014 11:05, Gary Gregory <garydgregory@gmail.com <>> wrote:
>>>>>> Don't you have to login to Nexus to release though?
>>>>>>
>>>>>> Gary
>>>>>>
>>>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <boards@gmail.com <>> wrote:
>>>>>> Question: if I start the release process with everything signed, can someone else complete it when the vote is done?
>>>>>>
>>>>>> On 13 October 2014 22:26, Ralph Goers <rgoers@apache.org <>> wrote:
>>>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>>>
>>>>>> Sent from my iPad
>>>>>>
>>>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <garydgregory@gmail.com <>> wrote:
>>>>>>
>>>>>>> Hi All:
>>>>>>>
>>>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>>>>>>>
>>>>>>> Gary
>>>>>>>
>>>>>>> --
>>>>>>> E-Mail: garydgregory@gmail.com <> | ggregory@apache.org <>
>>>>>>> Java Persistence with Hibernate, Second Edition <http://www.manning.com/bauer3/>
>>>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>>>> Blog: http://garygregory.wordpress.com <http://garygregory.wordpress.com/>
>>>>>>> Home: http://garygregory.com/ <http://garygregory.com/>
>>>>>>> Tweet! http://twitter.com/GaryGregory <http://twitter.com/GaryGregory>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Matt Sicker <boards@gmail.com <>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> E-Mail: garydgregory@gmail.com <> | ggregory@apache.org <>
>>>>>> Java Persistence with Hibernate, Second Edition <http://www.manning.com/bauer3/>
>>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>>> Blog: http://garygregory.wordpress.com <http://garygregory.wordpress.com/>
>>>>>> Home: http://garygregory.com/ <http://garygregory.com/>
>>>>>> Tweet! http://twitter.com/GaryGregory <http://twitter.com/GaryGregory>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Matt Sicker <boards@gmail.com <>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> E-Mail: garydgregory@gmail.com <> | ggregory@apache.org <>
>>>>> Java Persistence with Hibernate, Second Edition <http://www.manning.com/bauer3/>
>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>> Blog: http://garygregory.wordpress.com <http://garygregory.wordpress.com/>
>>>>> Home: http://garygregory.com/ <http://garygregory.com/>
>>>>> Tweet! http://twitter.com/GaryGregory <http://twitter.com/GaryGregory>
>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <boards@gmail.com <ma...@gmail.com>>
>>>
>>
>>
>>
>>
>> --
>> E-Mail: garydgregory@gmail.com <ma...@gmail.com> | ggregory@apache.org <ma...@apache.org>
>> Java Persistence with Hibernate, Second Edition <http://www.manning.com/bauer3/>
>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>> Spring Batch in Action <http://www.manning.com/templier/>
>> Blog: http://garygregory.wordpress.com <http://garygregory.wordpress.com/>
>> Home: http://garygregory.com/ <http://garygregory.com/>
>> Tweet! http://twitter.com/GaryGregory <http://twitter.com/GaryGregory>
>
>
>
> --
> E-Mail: garydgregory@gmail.com <ma...@gmail.com> | ggregory@apache.org <ma...@apache.org>
> Java Persistence with Hibernate, Second Edition <http://www.manning.com/bauer3/>
> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
> Spring Batch in Action <http://www.manning.com/templier/>
> Blog: http://garygregory.wordpress.com <http://garygregory.wordpress.com/>
> Home: http://garygregory.com/ <http://garygregory.com/>
> Tweet! http://twitter.com/GaryGregory <http://twitter.com/GaryGregory>
Re: Hopefully last RC for 2.1 ?
Posted by Gary Gregory <ga...@gmail.com>.
Hi Ralph,
Any chance for an RC this weekend?
Gary
On Wed, Oct 15, 2014 at 11:21 AM, Ralph Goers <ra...@dslextreme.com>
wrote:
> I think we should. I don’t think that is a blocker for a release though.
>
> I have taken Matt’s suggestion and changed to use defaultThreadPool(). It
> seems to work fine in my limited testing. It allowed the Tomcat that was
> failing to start up to now start logging correctly. My Tomcat webapp in my
> test VM also started and shutdown correctly - although it just uses the
> default Tomcat configuration which, I believe, has no security manager.
>
> Hopefully I can get the release started tonight after work. That depends
> on how the day goes though.
>
> Ralph
>
> On Oct 15, 2014, at 7:49 AM, Gary Gregory <ga...@gmail.com> wrote:
>
> Should we include a Tomcat policy file as a sample in the distro?
>
> Gary
>
> On Wed, Oct 15, 2014 at 2:09 AM, Ralph Goers <ra...@dslextreme.com>
> wrote:
>
>> Well this is downright interesting. I started Tomcat 7 using
>> “./startup.sh -security” and both manager and host-manager failed to start,
>> although not with access control or security exceptions. The web app with
>> Log4j did fail to start but it failed differently. In this case I think we
>> would need to require that the catalina policy file be updated as not being
>> able to get a ClassLoader is going to break everything. I do notice that
>> catalina.policy has a bunch of permissions for JULI, including
>> setContextClassLoader.
>>
>> I think we need to document what permissions we require.
>>
>> Ralph
>>
>> SEVERE: ContainerBase.addChild: start:
>> org.apache.catalina.LifecycleException: Failed to start component
>> [StandardEngine[Catalina].StandardHost[localhost].StandardContext[/eztax]]
>> at
>> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154)
>> at
>> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
>> at
>> org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:133)
>> at
>> org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:156)
>> at
>> org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:145)
>> at java.security.AccessController.doPrivileged(Native Method)
>> at
>> org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
>> at
>> org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
>> at
>> org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1083)
>> at
>> org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1880)
>> at
>> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
>> at java.util.concurrent.FutureTask.run(FutureTask.java:262)
>> at
>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
>> at
>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>> at java.lang.Thread.run(Thread.java:745)
>> Caused by: java.lang.ExceptionInInitializerError
>> at
>> org.apache.logging.log4j.status.StatusLogger.<clinit>(StatusLogger.java:55)
>> at
>> org.apache.logging.log4j.web.Log4jServletContainerInitializer.<clinit>(Log4jServletContainerInitializer.java:37)
>> at java.lang.Class.forName0(Native Method)
>> at java.lang.Class.forName(Class.java:270)
>> at
>> org.apache.catalina.startup.WebappServiceLoader.loadServices(WebappServiceLoader.java:187)
>> at
>> org.apache.catalina.startup.WebappServiceLoader.load(WebappServiceLoader.java:152)
>> at
>> org.apache.catalina.startup.ContextConfig.processServletContainerInitializers(ContextConfig.java:1546)
>> at
>> org.apache.catalina.startup.ContextConfig.webConfig(ContextConfig.java:1268)
>> at
>> org.apache.catalina.startup.ContextConfig.configureStart(ContextConfig.java:876)
>> at
>> org.apache.catalina.startup.ContextConfig.lifecycleEvent(ContextConfig.java:374)
>> at
>> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
>> at
>> org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90)
>> at
>> org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5378)
>> at
>> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
>> ... 14 more
>> Caused by: java.security.AccessControlException: access denied
>> ("java.lang.RuntimePermission" "getClassLoader")
>> at
>> java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
>> at
>> java.security.AccessController.checkPermission(AccessController.java:559)
>> at
>> java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
>> at
>> java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1561)
>> at
>> java.lang.ClassLoader.getSystemClassLoader(ClassLoader.java:1480)
>> at
>> org.apache.logging.log4j.util.LoaderUtil.findUrlResources(LoaderUtil.java:192)
>> at
>> org.apache.logging.log4j.util.LoaderUtil.findResources(LoaderUtil.java:183)
>> at
>> org.apache.logging.log4j.util.PropertiesUtil.<init>(PropertiesUtil.java:90)
>> at
>> org.apache.logging.log4j.util.PropertiesUtil.<clinit>(PropertiesUtil.java:36)
>> ... 28 more
>>
>>
>>
>>
>>
>> On Oct 14, 2014, at 10:07 PM, Ralph Goers <ra...@dslextreme.com>
>> wrote:
>>
>> See the javadoc for Executors.privilegedThreadFactory(). It is documented
>> as checking for that permission and throwing an AccessControlException.
>> Since it is called in the constructor of DefaultShutdownCallbackRegistry it
>> definitely has the potential for throwing an exception, which then causes
>> log4j initialization to fail. That just isn’t acceptable.
>>
>> Ralph
>>
>>
>> On Oct 14, 2014, at 9:45 PM, Matt Sicker <bo...@gmail.com> wrote:
>>
>> We never use setContextClassLoader though. I'm not sure why that security
>> exception appears. I don't think there's any harm in fixing that.
>>
>> On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
>>
>>> Well darn. Matt put an Assert.requiredNonNull on the Registry in
>>> Log4jContextFactory. So even if the exception is caught it can’t be
>>> ignored. Unless I can find a way around this that commit is going to have
>>> to be reverted.
>>>
>>> Ralph
>>>
>>> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <
>>> ralph.goers@dslextreme.com> wrote:
>>>
>>> I have an app that I was able to run successfully on a vanilla Tomcat. I
>>> need to check the security settings on te server. Regardless, this should
>>> not cause initialization to fail.
>>>
>>> Ralph
>>>
>>> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com>
>>> wrote:
>>>
>>>> IIRC, it looks something Matt was working on recently and he did
>>>> mention working through security issues. Hopefully he will see this message
>>>> and can help out.
>>>>
>>>> It sounds like we need at last one integration tests for Tomcat...
>>>>
>>>> Gary
>>>>
>>>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <
>>>> ralph.goers@dslextreme.com> wrote:
>>>>
>>>>> I am having a bit of trouble with the latest code. Log4j won’t start
>>>>> in tomcat due to a security violation. I am not going to go forward with
>>>>> the release until I can determine what the problem is and fix it.
>>>>>
>>>>> Ralph
>>>>>
>>>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>>>> at java.lang.Class.newInstance0(Class.java:357)
>>>>> at java.lang.Class.newInstance(Class.java:310)
>>>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>>>
>>>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>>>
>>>>> Oh crap, you're right.
>>>>>
>>>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>>>>
>>>>>> Don't you have to login to Nexus to release though?
>>>>>>
>>>>>> Gary
>>>>>>
>>>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>>> Question: if I start the release process with everything signed, can
>>>>>>> someone else complete it when the vote is done?
>>>>>>>
>>>>>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>>>>>
>>>>>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>>>>>
>>>>>>>> Sent from my iPad
>>>>>>>>
>>>>>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>> Hi All:
>>>>>>>>
>>>>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting
>>>>>>>> what will hopefully be the last 2.1 RC?
>>>>>>>>
>>>>>>>> Gary
>>>>>>>>
>>>>>>>> --
>>>>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>>>>> Java Persistence with Hibernate, Second Edition
>>>>>>>> <http://www.manning.com/bauer3/>
>>>>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>>>>> Blog: http://garygregory.wordpress.com
>>>>>>>> Home: http://garygregory.com/
>>>>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> Matt Sicker <bo...@gmail.com>
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>>> Java Persistence with Hibernate, Second Edition
>>>>>> <http://www.manning.com/bauer3/>
>>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>>> Blog: http://garygregory.wordpress.com
>>>>>> Home: http://garygregory.com/
>>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Matt Sicker <bo...@gmail.com>
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>> Java Persistence with Hibernate, Second Edition
>>>> <http://www.manning.com/bauer3/>
>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>> Blog: http://garygregory.wordpress.com
>>>> Home: http://garygregory.com/
>>>> Tweet! http://twitter.com/GaryGregory
>>>>
>>>
>>>
>>
>>
>> --
>> Matt Sicker <bo...@gmail.com>
>>
>>
>>
>>
>
>
> --
> E-Mail: garydgregory@gmail.com | ggregory@apache.org
> Java Persistence with Hibernate, Second Edition
> <http://www.manning.com/bauer3/>
> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
> Spring Batch in Action <http://www.manning.com/templier/>
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
>
>
>
--
E-Mail: garydgregory@gmail.com | ggregory@apache.org
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <ra...@dslextreme.com>.
I think we should. I don’t think that is a blocker for a release though.
I have taken Matt’s suggestion and changed to use defaultThreadPool(). It seems to work fine in my limited testing. It allowed the Tomcat that was failing to start up to now start logging correctly. My Tomcat webapp in my test VM also started and shutdown correctly - although it just uses the default Tomcat configuration which, I believe, has no security manager.
Hopefully I can get the release started tonight after work. That depends on how the day goes though.
Ralph
On Oct 15, 2014, at 7:49 AM, Gary Gregory <ga...@gmail.com> wrote:
> Should we include a Tomcat policy file as a sample in the distro?
>
> Gary
>
> On Wed, Oct 15, 2014 at 2:09 AM, Ralph Goers <ra...@dslextreme.com> wrote:
> Well this is downright interesting. I started Tomcat 7 using “./startup.sh -security” and both manager and host-manager failed to start, although not with access control or security exceptions. The web app with Log4j did fail to start but it failed differently. In this case I think we would need to require that the catalina policy file be updated as not being able to get a ClassLoader is going to break everything. I do notice that catalina.policy has a bunch of permissions for JULI, including setContextClassLoader.
>
> I think we need to document what permissions we require.
>
> Ralph
>
> SEVERE: ContainerBase.addChild: start:
> org.apache.catalina.LifecycleException: Failed to start component [StandardEngine[Catalina].StandardHost[localhost].StandardContext[/eztax]]
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154)
> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
> at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:133)
> at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:156)
> at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:145)
> at java.security.AccessController.doPrivileged(Native Method)
> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1083)
> at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1880)
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
> at java.util.concurrent.FutureTask.run(FutureTask.java:262)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.ExceptionInInitializerError
> at org.apache.logging.log4j.status.StatusLogger.<clinit>(StatusLogger.java:55)
> at org.apache.logging.log4j.web.Log4jServletContainerInitializer.<clinit>(Log4jServletContainerInitializer.java:37)
> at java.lang.Class.forName0(Native Method)
> at java.lang.Class.forName(Class.java:270)
> at org.apache.catalina.startup.WebappServiceLoader.loadServices(WebappServiceLoader.java:187)
> at org.apache.catalina.startup.WebappServiceLoader.load(WebappServiceLoader.java:152)
> at org.apache.catalina.startup.ContextConfig.processServletContainerInitializers(ContextConfig.java:1546)
> at org.apache.catalina.startup.ContextConfig.webConfig(ContextConfig.java:1268)
> at org.apache.catalina.startup.ContextConfig.configureStart(ContextConfig.java:876)
> at org.apache.catalina.startup.ContextConfig.lifecycleEvent(ContextConfig.java:374)
> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
> at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90)
> at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5378)
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
> ... 14 more
> Caused by: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "getClassLoader")
> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
> at java.security.AccessController.checkPermission(AccessController.java:559)
> at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
> at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1561)
> at java.lang.ClassLoader.getSystemClassLoader(ClassLoader.java:1480)
> at org.apache.logging.log4j.util.LoaderUtil.findUrlResources(LoaderUtil.java:192)
> at org.apache.logging.log4j.util.LoaderUtil.findResources(LoaderUtil.java:183)
> at org.apache.logging.log4j.util.PropertiesUtil.<init>(PropertiesUtil.java:90)
> at org.apache.logging.log4j.util.PropertiesUtil.<clinit>(PropertiesUtil.java:36)
> ... 28 more
>
>
>
>
>
> On Oct 14, 2014, at 10:07 PM, Ralph Goers <ra...@dslextreme.com> wrote:
>
>> See the javadoc for Executors.privilegedThreadFactory(). It is documented as checking for that permission and throwing an AccessControlException. Since it is called in the constructor of DefaultShutdownCallbackRegistry it definitely has the potential for throwing an exception, which then causes log4j initialization to fail. That just isn’t acceptable.
>>
>> Ralph
>>
>>
>> On Oct 14, 2014, at 9:45 PM, Matt Sicker <bo...@gmail.com> wrote:
>>
>>> We never use setContextClassLoader though. I'm not sure why that security exception appears. I don't think there's any harm in fixing that.
>>>
>>> On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
>>> Well darn. Matt put an Assert.requiredNonNull on the Registry in Log4jContextFactory. So even if the exception is caught it can’t be ignored. Unless I can find a way around this that commit is going to have to be reverted.
>>>
>>> Ralph
>>>
>>> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <ra...@dslextreme.com> wrote:
>>>
>>>> I have an app that I was able to run successfully on a vanilla Tomcat. I need to check the security settings on te server. Regardless, this should not cause initialization to fail.
>>>>
>>>> Ralph
>>>>
>>>> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com> wrote:
>>>> IIRC, it looks something Matt was working on recently and he did mention working through security issues. Hopefully he will see this message and can help out.
>>>>
>>>> It sounds like we need at last one integration tests for Tomcat...
>>>>
>>>> Gary
>>>>
>>>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ra...@dslextreme.com> wrote:
>>>> I am having a bit of trouble with the latest code. Log4j won’t start in tomcat due to a security violation. I am not going to go forward with the release until I can determine what the problem is and fix it.
>>>>
>>>> Ralph
>>>>
>>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>>> at java.lang.Class.newInstance0(Class.java:357)
>>>> at java.lang.Class.newInstance(Class.java:310)
>>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>>
>>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>>
>>>>
>>>>
>>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>>
>>>>> Oh crap, you're right.
>>>>>
>>>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>>>> Don't you have to login to Nexus to release though?
>>>>>
>>>>> Gary
>>>>>
>>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>>> Question: if I start the release process with everything signed, can someone else complete it when the vote is done?
>>>>>
>>>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>>
>>>>> Sent from my iPad
>>>>>
>>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>>>>>
>>>>>> Hi All:
>>>>>>
>>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>>>>>>
>>>>>> Gary
>>>>>>
>>>>>> --
>>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>>> Java Persistence with Hibernate, Second Edition
>>>>>> JUnit in Action, Second Edition
>>>>>> Spring Batch in Action
>>>>>> Blog: http://garygregory.wordpress.com
>>>>>> Home: http://garygregory.com/
>>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Matt Sicker <bo...@gmail.com>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>> Java Persistence with Hibernate, Second Edition
>>>>> JUnit in Action, Second Edition
>>>>> Spring Batch in Action
>>>>> Blog: http://garygregory.wordpress.com
>>>>> Home: http://garygregory.com/
>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Matt Sicker <bo...@gmail.com>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>> Java Persistence with Hibernate, Second Edition
>>>> JUnit in Action, Second Edition
>>>> Spring Batch in Action
>>>> Blog: http://garygregory.wordpress.com
>>>> Home: http://garygregory.com/
>>>> Tweet! http://twitter.com/GaryGregory
>>>
>>>
>>>
>>>
>>> --
>>> Matt Sicker <bo...@gmail.com>
>>
>
>
>
>
> --
> E-Mail: garydgregory@gmail.com | ggregory@apache.org
> Java Persistence with Hibernate, Second Edition
> JUnit in Action, Second Edition
> Spring Batch in Action
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
Re: Hopefully last RC for 2.1 ?
Posted by Gary Gregory <ga...@gmail.com>.
Should we include a Tomcat policy file as a sample in the distro?
Gary
On Wed, Oct 15, 2014 at 2:09 AM, Ralph Goers <ra...@dslextreme.com>
wrote:
> Well this is downright interesting. I started Tomcat 7 using
> “./startup.sh -security” and both manager and host-manager failed to start,
> although not with access control or security exceptions. The web app with
> Log4j did fail to start but it failed differently. In this case I think we
> would need to require that the catalina policy file be updated as not being
> able to get a ClassLoader is going to break everything. I do notice that
> catalina.policy has a bunch of permissions for JULI, including
> setContextClassLoader.
>
> I think we need to document what permissions we require.
>
> Ralph
>
> SEVERE: ContainerBase.addChild: start:
> org.apache.catalina.LifecycleException: Failed to start component
> [StandardEngine[Catalina].StandardHost[localhost].StandardContext[/eztax]]
> at
> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154)
> at
> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
> at
> org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:133)
> at
> org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:156)
> at
> org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:145)
> at java.security.AccessController.doPrivileged(Native Method)
> at
> org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
> at
> org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
> at
> org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1083)
> at
> org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1880)
> at
> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
> at java.util.concurrent.FutureTask.run(FutureTask.java:262)
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
> at java.lang.Thread.run(Thread.java:745)
> Caused by: java.lang.ExceptionInInitializerError
> at
> org.apache.logging.log4j.status.StatusLogger.<clinit>(StatusLogger.java:55)
> at
> org.apache.logging.log4j.web.Log4jServletContainerInitializer.<clinit>(Log4jServletContainerInitializer.java:37)
> at java.lang.Class.forName0(Native Method)
> at java.lang.Class.forName(Class.java:270)
> at
> org.apache.catalina.startup.WebappServiceLoader.loadServices(WebappServiceLoader.java:187)
> at
> org.apache.catalina.startup.WebappServiceLoader.load(WebappServiceLoader.java:152)
> at
> org.apache.catalina.startup.ContextConfig.processServletContainerInitializers(ContextConfig.java:1546)
> at
> org.apache.catalina.startup.ContextConfig.webConfig(ContextConfig.java:1268)
> at
> org.apache.catalina.startup.ContextConfig.configureStart(ContextConfig.java:876)
> at
> org.apache.catalina.startup.ContextConfig.lifecycleEvent(ContextConfig.java:374)
> at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
> at
> org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90)
> at
> org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5378)
> at
> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
> ... 14 more
> Caused by: java.security.AccessControlException: access denied
> ("java.lang.RuntimePermission" "getClassLoader")
> at
> java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
> at
> java.security.AccessController.checkPermission(AccessController.java:559)
> at
> java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
> at
> java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1561)
> at
> java.lang.ClassLoader.getSystemClassLoader(ClassLoader.java:1480)
> at
> org.apache.logging.log4j.util.LoaderUtil.findUrlResources(LoaderUtil.java:192)
> at
> org.apache.logging.log4j.util.LoaderUtil.findResources(LoaderUtil.java:183)
> at
> org.apache.logging.log4j.util.PropertiesUtil.<init>(PropertiesUtil.java:90)
> at
> org.apache.logging.log4j.util.PropertiesUtil.<clinit>(PropertiesUtil.java:36)
> ... 28 more
>
>
>
>
>
> On Oct 14, 2014, at 10:07 PM, Ralph Goers <ra...@dslextreme.com>
> wrote:
>
> See the javadoc for Executors.privilegedThreadFactory(). It is documented
> as checking for that permission and throwing an AccessControlException.
> Since it is called in the constructor of DefaultShutdownCallbackRegistry it
> definitely has the potential for throwing an exception, which then causes
> log4j initialization to fail. That just isn’t acceptable.
>
> Ralph
>
>
> On Oct 14, 2014, at 9:45 PM, Matt Sicker <bo...@gmail.com> wrote:
>
> We never use setContextClassLoader though. I'm not sure why that security
> exception appears. I don't think there's any harm in fixing that.
>
> On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
>
>> Well darn. Matt put an Assert.requiredNonNull on the Registry in
>> Log4jContextFactory. So even if the exception is caught it can’t be
>> ignored. Unless I can find a way around this that commit is going to have
>> to be reverted.
>>
>> Ralph
>>
>> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <
>> ralph.goers@dslextreme.com> wrote:
>>
>> I have an app that I was able to run successfully on a vanilla Tomcat. I
>> need to check the security settings on te server. Regardless, this should
>> not cause initialization to fail.
>>
>> Ralph
>>
>> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com>
>> wrote:
>>
>>> IIRC, it looks something Matt was working on recently and he did mention
>>> working through security issues. Hopefully he will see this message and can
>>> help out.
>>>
>>> It sounds like we need at last one integration tests for Tomcat...
>>>
>>> Gary
>>>
>>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ralph.goers@dslextreme.com
>>> > wrote:
>>>
>>>> I am having a bit of trouble with the latest code. Log4j won’t start
>>>> in tomcat due to a security violation. I am not going to go forward with
>>>> the release until I can determine what the problem is and fix it.
>>>>
>>>> Ralph
>>>>
>>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>>> at java.lang.Class.newInstance0(Class.java:357)
>>>> at java.lang.Class.newInstance(Class.java:310)
>>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>>
>>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>>
>>>>
>>>>
>>>>
>>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>>
>>>> Oh crap, you're right.
>>>>
>>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>>>
>>>>> Don't you have to login to Nexus to release though?
>>>>>
>>>>> Gary
>>>>>
>>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com>
>>>>> wrote:
>>>>>
>>>>>> Question: if I start the release process with everything signed, can
>>>>>> someone else complete it when the vote is done?
>>>>>>
>>>>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>>>>
>>>>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>>>>
>>>>>>> Sent from my iPad
>>>>>>>
>>>>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>> Hi All:
>>>>>>>
>>>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting
>>>>>>> what will hopefully be the last 2.1 RC?
>>>>>>>
>>>>>>> Gary
>>>>>>>
>>>>>>> --
>>>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>>>> Java Persistence with Hibernate, Second Edition
>>>>>>> <http://www.manning.com/bauer3/>
>>>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>>>> Blog: http://garygregory.wordpress.com
>>>>>>> Home: http://garygregory.com/
>>>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Matt Sicker <bo...@gmail.com>
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>> Java Persistence with Hibernate, Second Edition
>>>>> <http://www.manning.com/bauer3/>
>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>> Blog: http://garygregory.wordpress.com
>>>>> Home: http://garygregory.com/
>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <bo...@gmail.com>
>>>>
>>>>
>>>>
>>>
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>> Java Persistence with Hibernate, Second Edition
>>> <http://www.manning.com/bauer3/>
>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>> Spring Batch in Action <http://www.manning.com/templier/>
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>>
>>
>>
>
>
> --
> Matt Sicker <bo...@gmail.com>
>
>
>
>
--
E-Mail: garydgregory@gmail.com | ggregory@apache.org
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <ra...@dslextreme.com>.
Well this is downright interesting. I started Tomcat 7 using “./startup.sh -security” and both manager and host-manager failed to start, although not with access control or security exceptions. The web app with Log4j did fail to start but it failed differently. In this case I think we would need to require that the catalina policy file be updated as not being able to get a ClassLoader is going to break everything. I do notice that catalina.policy has a bunch of permissions for JULI, including setContextClassLoader.
I think we need to document what permissions we require.
Ralph
SEVERE: ContainerBase.addChild: start:
org.apache.catalina.LifecycleException: Failed to start component [StandardEngine[Catalina].StandardHost[localhost].StandardContext[/eztax]]
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:133)
at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:156)
at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:145)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1083)
at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1880)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
at java.util.concurrent.FutureTask.run(FutureTask.java:262)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.ExceptionInInitializerError
at org.apache.logging.log4j.status.StatusLogger.<clinit>(StatusLogger.java:55)
at org.apache.logging.log4j.web.Log4jServletContainerInitializer.<clinit>(Log4jServletContainerInitializer.java:37)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:270)
at org.apache.catalina.startup.WebappServiceLoader.loadServices(WebappServiceLoader.java:187)
at org.apache.catalina.startup.WebappServiceLoader.load(WebappServiceLoader.java:152)
at org.apache.catalina.startup.ContextConfig.processServletContainerInitializers(ContextConfig.java:1546)
at org.apache.catalina.startup.ContextConfig.webConfig(ContextConfig.java:1268)
at org.apache.catalina.startup.ContextConfig.configureStart(ContextConfig.java:876)
at org.apache.catalina.startup.ContextConfig.lifecycleEvent(ContextConfig.java:374)
at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90)
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5378)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
... 14 more
Caused by: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "getClassLoader")
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
at java.security.AccessController.checkPermission(AccessController.java:559)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1561)
at java.lang.ClassLoader.getSystemClassLoader(ClassLoader.java:1480)
at org.apache.logging.log4j.util.LoaderUtil.findUrlResources(LoaderUtil.java:192)
at org.apache.logging.log4j.util.LoaderUtil.findResources(LoaderUtil.java:183)
at org.apache.logging.log4j.util.PropertiesUtil.<init>(PropertiesUtil.java:90)
at org.apache.logging.log4j.util.PropertiesUtil.<clinit>(PropertiesUtil.java:36)
... 28 more
On Oct 14, 2014, at 10:07 PM, Ralph Goers <ra...@dslextreme.com> wrote:
> See the javadoc for Executors.privilegedThreadFactory(). It is documented as checking for that permission and throwing an AccessControlException. Since it is called in the constructor of DefaultShutdownCallbackRegistry it definitely has the potential for throwing an exception, which then causes log4j initialization to fail. That just isn’t acceptable.
>
> Ralph
>
>
> On Oct 14, 2014, at 9:45 PM, Matt Sicker <bo...@gmail.com> wrote:
>
>> We never use setContextClassLoader though. I'm not sure why that security exception appears. I don't think there's any harm in fixing that.
>>
>> On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
>> Well darn. Matt put an Assert.requiredNonNull on the Registry in Log4jContextFactory. So even if the exception is caught it can’t be ignored. Unless I can find a way around this that commit is going to have to be reverted.
>>
>> Ralph
>>
>> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <ra...@dslextreme.com> wrote:
>>
>>> I have an app that I was able to run successfully on a vanilla Tomcat. I need to check the security settings on te server. Regardless, this should not cause initialization to fail.
>>>
>>> Ralph
>>>
>>> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com> wrote:
>>> IIRC, it looks something Matt was working on recently and he did mention working through security issues. Hopefully he will see this message and can help out.
>>>
>>> It sounds like we need at last one integration tests for Tomcat...
>>>
>>> Gary
>>>
>>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ra...@dslextreme.com> wrote:
>>> I am having a bit of trouble with the latest code. Log4j won’t start in tomcat due to a security violation. I am not going to go forward with the release until I can determine what the problem is and fix it.
>>>
>>> Ralph
>>>
>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>> at java.lang.Class.newInstance0(Class.java:357)
>>> at java.lang.Class.newInstance(Class.java:310)
>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>
>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>
>>>
>>>
>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>
>>>> Oh crap, you're right.
>>>>
>>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>>> Don't you have to login to Nexus to release though?
>>>>
>>>> Gary
>>>>
>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>> Question: if I start the release process with everything signed, can someone else complete it when the vote is done?
>>>>
>>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>
>>>> Sent from my iPad
>>>>
>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>>>>
>>>>> Hi All:
>>>>>
>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>>>>>
>>>>> Gary
>>>>>
>>>>> --
>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>> Java Persistence with Hibernate, Second Edition
>>>>> JUnit in Action, Second Edition
>>>>> Spring Batch in Action
>>>>> Blog: http://garygregory.wordpress.com
>>>>> Home: http://garygregory.com/
>>>>> Tweet! http://twitter.com/GaryGregory
>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <bo...@gmail.com>
>>>>
>>>>
>>>>
>>>> --
>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>> Java Persistence with Hibernate, Second Edition
>>>> JUnit in Action, Second Edition
>>>> Spring Batch in Action
>>>> Blog: http://garygregory.wordpress.com
>>>> Home: http://garygregory.com/
>>>> Tweet! http://twitter.com/GaryGregory
>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <bo...@gmail.com>
>>>
>>>
>>>
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>> Java Persistence with Hibernate, Second Edition
>>> JUnit in Action, Second Edition
>>> Spring Batch in Action
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>
>>
>>
>>
>> --
>> Matt Sicker <bo...@gmail.com>
>
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <ra...@dslextreme.com>.
What are the implications of that? I am assuming there is a reason you wanted to use privilegedThreadFactory.
Ralph
On Oct 14, 2014, at 10:54 PM, Matt Sicker <bo...@gmail.com> wrote:
> Ah ok. Two options: catch the exception and fall back to Executors.defaultThreadFactory(), or just use Executors.defaultThreadFactory() by default and allow it to be overridden via the protected constructor.
>
> On 15 October 2014 00:07, Ralph Goers <ra...@dslextreme.com> wrote:
> See the javadoc for Executors.privilegedThreadFactory(). It is documented as checking for that permission and throwing an AccessControlException. Since it is called in the constructor of DefaultShutdownCallbackRegistry it definitely has the potential for throwing an exception, which then causes log4j initialization to fail. That just isn’t acceptable.
> Ralph
>
>
>
> On Oct 14, 2014, at 9:45 PM, Matt Sicker <bo...@gmail.com> wrote:
>
>> We never use setContextClassLoader though. I'm not sure why that security exception appears. I don't think there's any harm in fixing that.
>>
>> On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
>> Well darn. Matt put an Assert.requiredNonNull on the Registry in Log4jContextFactory. So even if the exception is caught it can’t be ignored. Unless I can find a way around this that commit is going to have to be reverted.
>>
>> Ralph
>>
>> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <ra...@dslextreme.com> wrote:
>>
>>> I have an app that I was able to run successfully on a vanilla Tomcat. I need to check the security settings on te server. Regardless, this should not cause initialization to fail.
>>>
>>> Ralph
>>>
>>> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com> wrote:
>>> IIRC, it looks something Matt was working on recently and he did mention working through security issues. Hopefully he will see this message and can help out.
>>>
>>> It sounds like we need at last one integration tests for Tomcat...
>>>
>>> Gary
>>>
>>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ra...@dslextreme.com> wrote:
>>> I am having a bit of trouble with the latest code. Log4j won’t start in tomcat due to a security violation. I am not going to go forward with the release until I can determine what the problem is and fix it.
>>>
>>> Ralph
>>>
>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>> at java.lang.Class.newInstance0(Class.java:357)
>>> at java.lang.Class.newInstance(Class.java:310)
>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>
>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>
>>>
>>>
>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>
>>>> Oh crap, you're right.
>>>>
>>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>>> Don't you have to login to Nexus to release though?
>>>>
>>>> Gary
>>>>
>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>> Question: if I start the release process with everything signed, can someone else complete it when the vote is done?
>>>>
>>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>
>>>> Sent from my iPad
>>>>
>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>>>>
>>>>> Hi All:
>>>>>
>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>>>>>
>>>>> Gary
>>>>>
>>>>> --
>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>> Java Persistence with Hibernate, Second Edition
>>>>> JUnit in Action, Second Edition
>>>>> Spring Batch in Action
>>>>> Blog: http://garygregory.wordpress.com
>>>>> Home: http://garygregory.com/
>>>>> Tweet! http://twitter.com/GaryGregory
>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <bo...@gmail.com>
>>>>
>>>>
>>>>
>>>> --
>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>> Java Persistence with Hibernate, Second Edition
>>>> JUnit in Action, Second Edition
>>>> Spring Batch in Action
>>>> Blog: http://garygregory.wordpress.com
>>>> Home: http://garygregory.com/
>>>> Tweet! http://twitter.com/GaryGregory
>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <bo...@gmail.com>
>>>
>>>
>>>
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>> Java Persistence with Hibernate, Second Edition
>>> JUnit in Action, Second Edition
>>> Spring Batch in Action
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>
>>
>>
>>
>> --
>> Matt Sicker <bo...@gmail.com>
>
>
>
>
> --
> Matt Sicker <bo...@gmail.com>
Re: Hopefully last RC for 2.1 ?
Posted by Matt Sicker <bo...@gmail.com>.
Ah ok. Two options: catch the exception and fall back to
Executors.defaultThreadFactory(), or just use
Executors.defaultThreadFactory() by default and allow it to be overridden
via the protected constructor.
On 15 October 2014 00:07, Ralph Goers <ra...@dslextreme.com> wrote:
> See the javadoc for Executors.privilegedThreadFactory(). It is documented
> as checking for that permission and throwing an AccessControlException.
> Since it is called in the constructor of DefaultShutdownCallbackRegistry it
> definitely has the potential for throwing an exception, which then causes
> log4j initialization to fail. That just isn’t acceptable.
>
> Ralph
>
>
>
> On Oct 14, 2014, at 9:45 PM, Matt Sicker <bo...@gmail.com> wrote:
>
> We never use setContextClassLoader though. I'm not sure why that security
> exception appears. I don't think there's any harm in fixing that.
>
> On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
>
>> Well darn. Matt put an Assert.requiredNonNull on the Registry in
>> Log4jContextFactory. So even if the exception is caught it can’t be
>> ignored. Unless I can find a way around this that commit is going to have
>> to be reverted.
>>
>> Ralph
>>
>> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <
>> ralph.goers@dslextreme.com> wrote:
>>
>> I have an app that I was able to run successfully on a vanilla Tomcat. I
>> need to check the security settings on te server. Regardless, this should
>> not cause initialization to fail.
>>
>> Ralph
>>
>> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com>
>> wrote:
>>
>>> IIRC, it looks something Matt was working on recently and he did mention
>>> working through security issues. Hopefully he will see this message and can
>>> help out.
>>>
>>> It sounds like we need at last one integration tests for Tomcat...
>>>
>>> Gary
>>>
>>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ralph.goers@dslextreme.com
>>> > wrote:
>>>
>>>> I am having a bit of trouble with the latest code. Log4j won’t start
>>>> in tomcat due to a security violation. I am not going to go forward with
>>>> the release until I can determine what the problem is and fix it.
>>>>
>>>> Ralph
>>>>
>>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>>> at java.lang.Class.newInstance0(Class.java:357)
>>>> at java.lang.Class.newInstance(Class.java:310)
>>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>>
>>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>>
>>>>
>>>>
>>>>
>>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>>
>>>> Oh crap, you're right.
>>>>
>>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>>>
>>>>> Don't you have to login to Nexus to release though?
>>>>>
>>>>> Gary
>>>>>
>>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com>
>>>>> wrote:
>>>>>
>>>>>> Question: if I start the release process with everything signed, can
>>>>>> someone else complete it when the vote is done?
>>>>>>
>>>>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>>>>
>>>>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>>>>
>>>>>>> Sent from my iPad
>>>>>>>
>>>>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>> Hi All:
>>>>>>>
>>>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting
>>>>>>> what will hopefully be the last 2.1 RC?
>>>>>>>
>>>>>>> Gary
>>>>>>>
>>>>>>> --
>>>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>>>> Java Persistence with Hibernate, Second Edition
>>>>>>> <http://www.manning.com/bauer3/>
>>>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>>>> Blog: http://garygregory.wordpress.com
>>>>>>> Home: http://garygregory.com/
>>>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Matt Sicker <bo...@gmail.com>
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>> Java Persistence with Hibernate, Second Edition
>>>>> <http://www.manning.com/bauer3/>
>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>> Blog: http://garygregory.wordpress.com
>>>>> Home: http://garygregory.com/
>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <bo...@gmail.com>
>>>>
>>>>
>>>>
>>>
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>> Java Persistence with Hibernate, Second Edition
>>> <http://www.manning.com/bauer3/>
>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>> Spring Batch in Action <http://www.manning.com/templier/>
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>>
>>
>>
>
>
> --
> Matt Sicker <bo...@gmail.com>
>
>
>
--
Matt Sicker <bo...@gmail.com>
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <ra...@dslextreme.com>.
See the javadoc for Executors.privilegedThreadFactory(). It is documented as checking for that permission and throwing an AccessControlException. Since it is called in the constructor of DefaultShutdownCallbackRegistry it definitely has the potential for throwing an exception, which then causes log4j initialization to fail. That just isn’t acceptable.
Ralph
On Oct 14, 2014, at 9:45 PM, Matt Sicker <bo...@gmail.com> wrote:
> We never use setContextClassLoader though. I'm not sure why that security exception appears. I don't think there's any harm in fixing that.
>
> On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
> Well darn. Matt put an Assert.requiredNonNull on the Registry in Log4jContextFactory. So even if the exception is caught it can’t be ignored. Unless I can find a way around this that commit is going to have to be reverted.
>
> Ralph
>
> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <ra...@dslextreme.com> wrote:
>
>> I have an app that I was able to run successfully on a vanilla Tomcat. I need to check the security settings on te server. Regardless, this should not cause initialization to fail.
>>
>> Ralph
>>
>> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com> wrote:
>> IIRC, it looks something Matt was working on recently and he did mention working through security issues. Hopefully he will see this message and can help out.
>>
>> It sounds like we need at last one integration tests for Tomcat...
>>
>> Gary
>>
>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ra...@dslextreme.com> wrote:
>> I am having a bit of trouble with the latest code. Log4j won’t start in tomcat due to a security violation. I am not going to go forward with the release until I can determine what the problem is and fix it.
>>
>> Ralph
>>
>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>> at java.lang.Class.newInstance0(Class.java:357)
>> at java.lang.Class.newInstance(Class.java:310)
>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>> at java.lang.reflect.Method.invoke(Method.java:597)
>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>
>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>
>>
>>
>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>
>>> Oh crap, you're right.
>>>
>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>> Don't you have to login to Nexus to release though?
>>>
>>> Gary
>>>
>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>>> Question: if I start the release process with everything signed, can someone else complete it when the vote is done?
>>>
>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>> Matt can't do it so I will. It will be in the next couple of days.
>>>
>>> Sent from my iPad
>>>
>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>>>
>>>> Hi All:
>>>>
>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>>>>
>>>> Gary
>>>>
>>>> --
>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>> Java Persistence with Hibernate, Second Edition
>>>> JUnit in Action, Second Edition
>>>> Spring Batch in Action
>>>> Blog: http://garygregory.wordpress.com
>>>> Home: http://garygregory.com/
>>>> Tweet! http://twitter.com/GaryGregory
>>>
>>>
>>>
>>> --
>>> Matt Sicker <bo...@gmail.com>
>>>
>>>
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>> Java Persistence with Hibernate, Second Edition
>>> JUnit in Action, Second Edition
>>> Spring Batch in Action
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>>
>>>
>>>
>>> --
>>> Matt Sicker <bo...@gmail.com>
>>
>>
>>
>>
>> --
>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>> Java Persistence with Hibernate, Second Edition
>> JUnit in Action, Second Edition
>> Spring Batch in Action
>> Blog: http://garygregory.wordpress.com
>> Home: http://garygregory.com/
>> Tweet! http://twitter.com/GaryGregory
>
>
>
>
> --
> Matt Sicker <bo...@gmail.com>
Re: Hopefully last RC for 2.1 ?
Posted by Matt Sicker <bo...@gmail.com>.
We never use setContextClassLoader though. I'm not sure why that security
exception appears. I don't think there's any harm in fixing that.
On 14 October 2014 22:59, Ralph Goers <ra...@dslextreme.com> wrote:
> Well darn. Matt put an Assert.requiredNonNull on the Registry in
> Log4jContextFactory. So even if the exception is caught it can’t be
> ignored. Unless I can find a way around this that commit is going to have
> to be reverted.
>
> Ralph
>
> On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <
> ralph.goers@dslextreme.com> wrote:
>
> I have an app that I was able to run successfully on a vanilla Tomcat. I
> need to check the security settings on te server. Regardless, this should
> not cause initialization to fail.
>
> Ralph
>
> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com> wrote:
>
>> IIRC, it looks something Matt was working on recently and he did mention
>> working through security issues. Hopefully he will see this message and can
>> help out.
>>
>> It sounds like we need at last one integration tests for Tomcat...
>>
>> Gary
>>
>> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ra...@dslextreme.com>
>> wrote:
>>
>>> I am having a bit of trouble with the latest code. Log4j won’t start in
>>> tomcat due to a security violation. I am not going to go forward with the
>>> release until I can determine what the problem is and fix it.
>>>
>>> Ralph
>>>
>>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>>> at java.lang.Class.newInstance0(Class.java:357)
>>> at java.lang.Class.newInstance(Class.java:310)
>>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>>
>>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>>
>>>
>>>
>>>
>>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>
>>> Oh crap, you're right.
>>>
>>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>>>
>>>> Don't you have to login to Nexus to release though?
>>>>
>>>> Gary
>>>>
>>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>>>>
>>>>> Question: if I start the release process with everything signed, can
>>>>> someone else complete it when the vote is done?
>>>>>
>>>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>>>
>>>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>>>
>>>>>> Sent from my iPad
>>>>>>
>>>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>> Hi All:
>>>>>>
>>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting
>>>>>> what will hopefully be the last 2.1 RC?
>>>>>>
>>>>>> Gary
>>>>>>
>>>>>> --
>>>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>>>> Java Persistence with Hibernate, Second Edition
>>>>>> <http://www.manning.com/bauer3/>
>>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>>> Blog: http://garygregory.wordpress.com
>>>>>> Home: http://garygregory.com/
>>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Matt Sicker <bo...@gmail.com>
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>> Java Persistence with Hibernate, Second Edition
>>>> <http://www.manning.com/bauer3/>
>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>> Blog: http://garygregory.wordpress.com
>>>> Home: http://garygregory.com/
>>>> Tweet! http://twitter.com/GaryGregory
>>>>
>>>
>>>
>>>
>>> --
>>> Matt Sicker <bo...@gmail.com>
>>>
>>>
>>>
>>
>>
>> --
>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>> Java Persistence with Hibernate, Second Edition
>> <http://www.manning.com/bauer3/>
>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>> Spring Batch in Action <http://www.manning.com/templier/>
>> Blog: http://garygregory.wordpress.com
>> Home: http://garygregory.com/
>> Tweet! http://twitter.com/GaryGregory
>>
>
>
--
Matt Sicker <bo...@gmail.com>
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <ra...@dslextreme.com>.
Well darn. Matt put an Assert.requiredNonNull on the Registry in Log4jContextFactory. So even if the exception is caught it can’t be ignored. Unless I can find a way around this that commit is going to have to be reverted.
Ralph
On Oct 14, 2014, at 7:57 PM, ralph.goers @dslextreme.com <ra...@dslextreme.com> wrote:
> I have an app that I was able to run successfully on a vanilla Tomcat. I need to check the security settings on te server. Regardless, this should not cause initialization to fail.
>
> Ralph
>
> On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com> wrote:
> IIRC, it looks something Matt was working on recently and he did mention working through security issues. Hopefully he will see this message and can help out.
>
> It sounds like we need at last one integration tests for Tomcat...
>
> Gary
>
> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ra...@dslextreme.com> wrote:
> I am having a bit of trouble with the latest code. Log4j won’t start in tomcat due to a security violation. I am not going to go forward with the release until I can determine what the problem is and fix it.
>
> Ralph
>
> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
> at java.lang.Class.newInstance0(Class.java:357)
> at java.lang.Class.newInstance(Class.java:310)
> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> at java.lang.reflect.Method.invoke(Method.java:597)
> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>
> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>
>
>
> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>
>> Oh crap, you're right.
>>
>> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>> Don't you have to login to Nexus to release though?
>>
>> Gary
>>
>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>> Question: if I start the release process with everything signed, can someone else complete it when the vote is done?
>>
>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>> Matt can't do it so I will. It will be in the next couple of days.
>>
>> Sent from my iPad
>>
>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>>
>>> Hi All:
>>>
>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>>>
>>> Gary
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>> Java Persistence with Hibernate, Second Edition
>>> JUnit in Action, Second Edition
>>> Spring Batch in Action
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>
>>
>>
>> --
>> Matt Sicker <bo...@gmail.com>
>>
>>
>>
>> --
>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>> Java Persistence with Hibernate, Second Edition
>> JUnit in Action, Second Edition
>> Spring Batch in Action
>> Blog: http://garygregory.wordpress.com
>> Home: http://garygregory.com/
>> Tweet! http://twitter.com/GaryGregory
>>
>>
>>
>> --
>> Matt Sicker <bo...@gmail.com>
>
>
>
>
> --
> E-Mail: garydgregory@gmail.com | ggregory@apache.org
> Java Persistence with Hibernate, Second Edition
> JUnit in Action, Second Edition
> Spring Batch in Action
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
Re: Hopefully last RC for 2.1 ?
Posted by "ralph.goers @dslextreme.com" <ra...@dslextreme.com>.
I have an app that I was able to run successfully on a vanilla Tomcat. I
need to check the security settings on te server. Regardless, this should
not cause initialization to fail.
Ralph
On Tuesday, October 14, 2014, Gary Gregory <ga...@gmail.com> wrote:
> IIRC, it looks something Matt was working on recently and he did mention
> working through security issues. Hopefully he will see this message and can
> help out.
>
> It sounds like we need at last one integration tests for Tomcat...
>
> Gary
>
> On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ralph.goers@dslextreme.com
> <javascript:_e(%7B%7D,'cvml','ralph.goers@dslextreme.com');>> wrote:
>
>> I am having a bit of trouble with the latest code. Log4j won’t start in
>> tomcat due to a security violation. I am not going to go forward with the
>> release until I can determine what the problem is and fix it.
>>
>> Ralph
>>
>> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
>> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
>> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
>> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
>> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
>> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
>> at java.lang.Class.newInstance0(Class.java:357)
>> at java.lang.Class.newInstance(Class.java:310)
>> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
>> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
>> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
>> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
>> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
>> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
>> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
>> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
>> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
>> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
>> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
>> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
>> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
>> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
>> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
>> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
>> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
>> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
>> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
>> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
>> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
>> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>> at java.lang.reflect.Method.invoke(Method.java:597)
>> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
>> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>>
>> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
>> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>>
>>
>>
>>
>> On Oct 14, 2014, at 9:16 AM, Matt Sicker <boards@gmail.com
>> <javascript:_e(%7B%7D,'cvml','boards@gmail.com');>> wrote:
>>
>> Oh crap, you're right.
>>
>> On 14 October 2014 11:05, Gary Gregory <garydgregory@gmail.com
>> <javascript:_e(%7B%7D,'cvml','garydgregory@gmail.com');>> wrote:
>>
>>> Don't you have to login to Nexus to release though?
>>>
>>> Gary
>>>
>>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <boards@gmail.com
>>> <javascript:_e(%7B%7D,'cvml','boards@gmail.com');>> wrote:
>>>
>>>> Question: if I start the release process with everything signed, can
>>>> someone else complete it when the vote is done?
>>>>
>>>> On 13 October 2014 22:26, Ralph Goers <rgoers@apache.org
>>>> <javascript:_e(%7B%7D,'cvml','rgoers@apache.org');>> wrote:
>>>>
>>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>>
>>>>> Sent from my iPad
>>>>>
>>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <garydgregory@gmail.com
>>>>> <javascript:_e(%7B%7D,'cvml','garydgregory@gmail.com');>> wrote:
>>>>>
>>>>> Hi All:
>>>>>
>>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting
>>>>> what will hopefully be the last 2.1 RC?
>>>>>
>>>>> Gary
>>>>>
>>>>> --
>>>>> E-Mail: garydgregory@gmail.com
>>>>> <javascript:_e(%7B%7D,'cvml','garydgregory@gmail.com');> | ggregory@apache.org
>>>>> <javascript:_e(%7B%7D,'cvml','ggregory@apache.org');>
>>>>> Java Persistence with Hibernate, Second Edition
>>>>> <http://www.manning.com/bauer3/>
>>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>>> Blog: http://garygregory.wordpress.com
>>>>> Home: http://garygregory.com/
>>>>> Tweet! http://twitter.com/GaryGregory
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> Matt Sicker <boards@gmail.com
>>>> <javascript:_e(%7B%7D,'cvml','boards@gmail.com');>>
>>>>
>>>
>>>
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com
>>> <javascript:_e(%7B%7D,'cvml','garydgregory@gmail.com');> | ggregory@apache.org
>>> <javascript:_e(%7B%7D,'cvml','ggregory@apache.org');>
>>> Java Persistence with Hibernate, Second Edition
>>> <http://www.manning.com/bauer3/>
>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>> Spring Batch in Action <http://www.manning.com/templier/>
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>>
>>
>>
>>
>> --
>> Matt Sicker <boards@gmail.com
>> <javascript:_e(%7B%7D,'cvml','boards@gmail.com');>>
>>
>>
>>
>
>
> --
> E-Mail: garydgregory@gmail.com
> <javascript:_e(%7B%7D,'cvml','garydgregory@gmail.com');> | ggregory@apache.org
> <javascript:_e(%7B%7D,'cvml','ggregory@apache.org');>
> Java Persistence with Hibernate, Second Edition
> <http://www.manning.com/bauer3/>
> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
> Spring Batch in Action <http://www.manning.com/templier/>
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
>
Re: Hopefully last RC for 2.1 ?
Posted by Gary Gregory <ga...@gmail.com>.
IIRC, it looks something Matt was working on recently and he did mention
working through security issues. Hopefully he will see this message and can
help out.
It sounds like we need at last one integration tests for Tomcat...
Gary
On Tue, Oct 14, 2014 at 8:30 PM, Ralph Goers <ra...@dslextreme.com>
wrote:
> I am having a bit of trouble with the latest code. Log4j won’t start in
> tomcat due to a security violation. I am not going to go forward with the
> release until I can determine what the problem is and fix it.
>
> Ralph
>
> ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
> at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
> at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
> at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
> at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
> at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
> at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
> at java.lang.Class.newInstance0(Class.java:357)
> at java.lang.Class.newInstance(Class.java:310)
> at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
> at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
> at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
> at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
> at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
> at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
> at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
> at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
> at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
> at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
> at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
> at org.apache.catalina.core.StandardService.start(StandardService.java:448)
> at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
> at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> at java.lang.reflect.Method.invoke(Method.java:597)
> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
>
> ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
> ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
>
>
>
>
> On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
>
> Oh crap, you're right.
>
> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
>
>> Don't you have to login to Nexus to release though?
>>
>> Gary
>>
>> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>>
>>> Question: if I start the release process with everything signed, can
>>> someone else complete it when the vote is done?
>>>
>>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>>
>>>> Matt can't do it so I will. It will be in the next couple of days.
>>>>
>>>> Sent from my iPad
>>>>
>>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com>
>>>> wrote:
>>>>
>>>> Hi All:
>>>>
>>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what
>>>> will hopefully be the last 2.1 RC?
>>>>
>>>> Gary
>>>>
>>>> --
>>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>>> Java Persistence with Hibernate, Second Edition
>>>> <http://www.manning.com/bauer3/>
>>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>>> Spring Batch in Action <http://www.manning.com/templier/>
>>>> Blog: http://garygregory.wordpress.com
>>>> Home: http://garygregory.com/
>>>> Tweet! http://twitter.com/GaryGregory
>>>>
>>>>
>>>
>>>
>>> --
>>> Matt Sicker <bo...@gmail.com>
>>>
>>
>>
>>
>> --
>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>> Java Persistence with Hibernate, Second Edition
>> <http://www.manning.com/bauer3/>
>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>> Spring Batch in Action <http://www.manning.com/templier/>
>> Blog: http://garygregory.wordpress.com
>> Home: http://garygregory.com/
>> Tweet! http://twitter.com/GaryGregory
>>
>
>
>
> --
> Matt Sicker <bo...@gmail.com>
>
>
>
--
E-Mail: garydgregory@gmail.com | ggregory@apache.org
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <ra...@dslextreme.com>.
I am having a bit of trouble with the latest code. Log4j won’t start in tomcat due to a security violation. I am not going to go forward with the release until I can determine what the problem is and fix it.
Ralph
ERROR StatusLogger Unable to create class org.apache.logging.log4j.core.impl.Log4jContextFactory specified in jar:file:/usr/local/jakarta-tomcat/webapps/NextivaDriveBilling/WEB-INF/lib/log4j-core-2.1-SNAPSHOT.jar!/META-INF/log4j-provider.properties java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at java.util.concurrent.Executors$PrivilegedThreadFactory.<init>(Executors.java:563)
at java.util.concurrent.Executors.privilegedThreadFactory(Executors.java:321)
at org.apache.logging.log4j.core.util.DefaultShutdownCallbackRegistry.<init>(DefaultShutdownCallbackRegistry.java:54)
at org.apache.logging.log4j.core.impl.Log4jContextFactory.createShutdownCallbackRegistry(Log4jContextFactory.java:117)
at org.apache.logging.log4j.core.impl.Log4jContextFactory.<init>(Log4jContextFactory.java:54)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
at java.lang.Class.newInstance0(Class.java:357)
at java.lang.Class.newInstance(Class.java:310)
at org.apache.logging.log4j.LogManager.<clinit>(LogManager.java:96)
at org.apache.logging.log4j.core.config.Configurator.getFactory(Configurator.java:154)
at org.apache.logging.log4j.core.config.Configurator.initialize(Configurator.java:109)
at org.apache.logging.log4j.web.Log4jWebInitializerImpl.initializeNonJndi(Log4jWebInitializerImpl.java:157)
at org.apache.logging.log4j.web.Log4jWebInitializerImpl.start(Log4jWebInitializerImpl.java:107)
at org.apache.logging.log4j.web.Log4jServletContextListener.contextInitialized(Log4jServletContextListener.java:45)
at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3795)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:4252)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:884)
at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:737)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:498)
at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1203)
at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
at org.apache.catalina.core.StandardService.start(StandardService.java:448)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
ERROR StatusLogger LogManager returned an instance of org.apache.logging.log4j.simple.SimpleLoggerContextFactory which does not implement org.apache.logging.log4j.core.impl.Log4jContextFactory. Unable to initialize Log4j.
On Oct 14, 2014, at 9:16 AM, Matt Sicker <bo...@gmail.com> wrote:
> Oh crap, you're right.
>
> On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
> Don't you have to login to Nexus to release though?
>
> Gary
>
> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
> Question: if I start the release process with everything signed, can someone else complete it when the vote is done?
>
> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
> Matt can't do it so I will. It will be in the next couple of days.
>
> Sent from my iPad
>
> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>
>> Hi All:
>>
>> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>>
>> Gary
>>
>> --
>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>> Java Persistence with Hibernate, Second Edition
>> JUnit in Action, Second Edition
>> Spring Batch in Action
>> Blog: http://garygregory.wordpress.com
>> Home: http://garygregory.com/
>> Tweet! http://twitter.com/GaryGregory
>
>
>
> --
> Matt Sicker <bo...@gmail.com>
>
>
>
> --
> E-Mail: garydgregory@gmail.com | ggregory@apache.org
> Java Persistence with Hibernate, Second Edition
> JUnit in Action, Second Edition
> Spring Batch in Action
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
>
>
>
> --
> Matt Sicker <bo...@gmail.com>
Re: Hopefully last RC for 2.1 ?
Posted by Matt Sicker <bo...@gmail.com>.
Oh crap, you're right.
On 14 October 2014 11:05, Gary Gregory <ga...@gmail.com> wrote:
> Don't you have to login to Nexus to release though?
>
> Gary
>
> On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
>
>> Question: if I start the release process with everything signed, can
>> someone else complete it when the vote is done?
>>
>> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>>
>>> Matt can't do it so I will. It will be in the next couple of days.
>>>
>>> Sent from my iPad
>>>
>>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com>
>>> wrote:
>>>
>>> Hi All:
>>>
>>> I'm sure we are all busy (I am!) but do we have a plan for cutting what
>>> will hopefully be the last 2.1 RC?
>>>
>>> Gary
>>>
>>> --
>>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>>> Java Persistence with Hibernate, Second Edition
>>> <http://www.manning.com/bauer3/>
>>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>>> Spring Batch in Action <http://www.manning.com/templier/>
>>> Blog: http://garygregory.wordpress.com
>>> Home: http://garygregory.com/
>>> Tweet! http://twitter.com/GaryGregory
>>>
>>>
>>
>>
>> --
>> Matt Sicker <bo...@gmail.com>
>>
>
>
>
> --
> E-Mail: garydgregory@gmail.com | ggregory@apache.org
> Java Persistence with Hibernate, Second Edition
> <http://www.manning.com/bauer3/>
> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
> Spring Batch in Action <http://www.manning.com/templier/>
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
>
--
Matt Sicker <bo...@gmail.com>
Re: Hopefully last RC for 2.1 ?
Posted by Gary Gregory <ga...@gmail.com>.
Don't you have to login to Nexus to release though?
Gary
On Tue, Oct 14, 2014 at 11:34 AM, Matt Sicker <bo...@gmail.com> wrote:
> Question: if I start the release process with everything signed, can
> someone else complete it when the vote is done?
>
> On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
>
>> Matt can't do it so I will. It will be in the next couple of days.
>>
>> Sent from my iPad
>>
>> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>>
>> Hi All:
>>
>> I'm sure we are all busy (I am!) but do we have a plan for cutting what
>> will hopefully be the last 2.1 RC?
>>
>> Gary
>>
>> --
>> E-Mail: garydgregory@gmail.com | ggregory@apache.org
>> Java Persistence with Hibernate, Second Edition
>> <http://www.manning.com/bauer3/>
>> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
>> Spring Batch in Action <http://www.manning.com/templier/>
>> Blog: http://garygregory.wordpress.com
>> Home: http://garygregory.com/
>> Tweet! http://twitter.com/GaryGregory
>>
>>
>
>
> --
> Matt Sicker <bo...@gmail.com>
>
--
E-Mail: garydgregory@gmail.com | ggregory@apache.org
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Re: Hopefully last RC for 2.1 ?
Posted by Matt Sicker <bo...@gmail.com>.
Question: if I start the release process with everything signed, can
someone else complete it when the vote is done?
On 13 October 2014 22:26, Ralph Goers <rg...@apache.org> wrote:
> Matt can't do it so I will. It will be in the next couple of days.
>
> Sent from my iPad
>
> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>
> Hi All:
>
> I'm sure we are all busy (I am!) but do we have a plan for cutting what
> will hopefully be the last 2.1 RC?
>
> Gary
>
> --
> E-Mail: garydgregory@gmail.com | ggregory@apache.org
> Java Persistence with Hibernate, Second Edition
> <http://www.manning.com/bauer3/>
> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
> Spring Batch in Action <http://www.manning.com/templier/>
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
>
>
--
Matt Sicker <bo...@gmail.com>
Re: Hopefully last RC for 2.1 ?
Posted by Ralph Goers <rg...@apache.org>.
Matt can't do it so I will. It will be in the next couple of days.
Sent from my iPad
> On Oct 13, 2014, at 7:22 PM, Gary Gregory <ga...@gmail.com> wrote:
>
> Hi All:
>
> I'm sure we are all busy (I am!) but do we have a plan for cutting what will hopefully be the last 2.1 RC?
>
> Gary
>
> --
> E-Mail: garydgregory@gmail.com | ggregory@apache.org
> Java Persistence with Hibernate, Second Edition
> JUnit in Action, Second Edition
> Spring Batch in Action
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory