You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Tina Li (JIRA)" <ji...@apache.org> on 2011/05/26 08:53:47 UTC
[jira] [Created] (GERONIMO-5982) Server can't start after secured
the default RMI port of the Geronimo server
Server can't start after secured the default RMI port of the Geronimo server
----------------------------------------------------------------------------
Key: GERONIMO-5982
URL: https://issues.apache.org/jira/browse/GERONIMO-5982
Project: Geronimo
Issue Type: Bug
Security Level: public (Regular issues)
Components: security
Affects Versions: 3.0
Environment: JRE 1.6.0 IBM J9 2.4 Windows Server 2008 R2 amd64-64
Reporter: Tina Li
1.Secure the default RMI port of the Geronimo server following the first step of the doc:
https://cwiki.apache.org/GMOxDOC30/securing-rmi-port-of-geronimo.html
2.Start the server using the command: startup.bat and error displayed on the cmd console:
2011-05-26 14:47:18,427 ERROR [GBeanInstanceState] Error while starting; GBean is now in the FAILED state: abstractName="org.apache.geronimo.configs/transaction-1_6/3.0-SNAPSHOT/car?ServiceModule=org.apache.geronimo.configs/transaction-1_6/3.0-SNAPSHOT/car,j2eeType=GBean,name=SecurityContextHandler"
java.lang.ExceptionInInitializerError
at java.lang.J9VMInternals.initialize(J9VMInternals.java:222)
at org.apache.geronimo.connector.wrapper.work.SecurityContextHandler.<init>(SecurityContextHandler.java:71)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:56)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:39)
at java.lang.reflect.Constructor.newInstance(Constructor.java:527)
at org.apache.xbean.recipe.ReflectionUtil$ConstructorFactory.create(ReflectionUtil.java:958)
at org.apache.xbean.recipe.ObjectRecipe.internalCreate(ObjectRecipe.java:276)
at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:96)
at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:61)
at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:933)
at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:271)
at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:105)
at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:127)
at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:560)
at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:386)
at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:460)
at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:226)
at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:702)
at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:211)
at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:91)
at org.apache.geronimo.system.osgi.BootActivator$1.execute(BootActivator.java:107)
at org.apache.geronimo.main.Bootstrapper.execute(Bootstrapper.java:65)
at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:65)
at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:32)
Caused by: java.lang.SecurityException: unable to instantiate Subject-based policy
at javax.security.auth.Policy.getPolicyNoCheck(Policy.java:268)
at javax.security.auth.Policy.getPolicy(Policy.java:219)
at javax.security.auth.SubjectDomainCombiner$5.run(SubjectDomainCombiner.java:513)
at java.security.AccessController.doPrivileged(AccessController.java:202)
at javax.security.auth.SubjectDomainCombiner.compatPolicy(SubjectDomainCombiner.java:509)
at javax.security.auth.SubjectDomainCombiner.combine(SubjectDomainCombiner.java:223)
at java.security.AccessController.getContext(AccessController.java:141)
at org.apache.geronimo.security.ContextManager$3.run(ContextManager.java:274)
at java.security.AccessController.doPrivileged(AccessController.java:224)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:645)
at org.apache.geronimo.security.ContextManager.registerSubject(ContextManager.java:272)
at org.apache.geronimo.security.ContextManager.<clinit>(ContextManager.java:84)
at java.lang.J9VMInternals.initializeImpl(Native Method)
at java.lang.J9VMInternals.initialize(J9VMInternals.java:200)
... 24 more
3.Start the server using the command: geronimo run and error displayed on the cmd console:
2011-05-26 14:51:19,530 WARN [0-SNAPSHOT/car,j2eeType=GBean,name=JMXSecureConnector] Failure in JMXConnector service:jmx:rmi://0.0.0.0:9998/jndi/rmi://0.0.0.0:1099/JMXSecureConnector
2011-05-26 14:51:19,545 ERROR [GBeanInstanceState] Error while starting; GBean is now in the FAILED state: abstractName="org.apache.geronimo.framework/jmx-security/3.0-SNAPSHOT/car?ServiceModule=org.apache.geronimo.framework/jmx-security/3.0-SNAPSHOT/car,j2eeType=GBean,name=JMXSecureConnector"
java.io.IOException: Cannot bind to URL [rmi://0.0.0.0:1099/JMXSecureConnector]: javax.naming.CommunicationException [Root exception is java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)]
at javax.management.remote.rmi.RMIConnectorServer.newIOException(RMIConnectorServer.java:815)
at javax.management.remote.rmi.RMIConnectorServer.start(RMIConnectorServer.java:428)
at org.apache.geronimo.jmxremoting.JMXSecureConnector.doStart(JMXSecureConnector.java:157)
at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:975)
at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:271)
at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:105)
at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:127)
at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:560)
at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:386)
at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:460)
at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:226)
at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:702)
at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:211)
at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:91)
at org.apache.geronimo.system.osgi.BootActivator$1.execute(BootActivator.java:107)
at org.apache.geronimo.main.Bootstrapper.execute(Bootstrapper.java:65)
at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:65)
at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:32)
Caused by: javax.naming.CommunicationException [Root exception is java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)]
at com.sun.jndi.rmi.registry.RegistryContext.bind(RegistryContext.java:138)
at com.sun.jndi.toolkit.url.GenericURLContext.bind(GenericURLContext.java:220)
at org.apache.aries.jndi.DelegateContext.bind(DelegateContext.java:82)
at javax.naming.InitialContext.bind(InitialContext.java:444)
at javax.management.remote.rmi.RMIConnectorServer.bind(RMIConnectorServer.java:636)
at javax.management.remote.rmi.RMIConnectorServer.start(RMIConnectorServer.java:423)
... 16 more
Caused by: java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
at sun.rmi.server.UnicastServerRef.oldDispatch(UnicastServerRef.java:413)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:267)
at sun.rmi.transport.Transport$1.run(Transport.java:171)
at java.security.AccessController.doPrivileged(AccessController.java:284)
at sun.rmi.transport.Transport.serviceCall(Transport.java:167)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:547)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:802)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:661)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:897)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:919)
at java.lang.Thread.run(Thread.java:736)
at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:267)
at sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:245)
at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:371)
at sun.rmi.registry.RegistryImpl_Stub.bind(RegistryImpl_Stub.java:43)
at com.sun.jndi.rmi.registry.RegistryContext.bind(RegistryContext.java:132)
... 21 more
Caused by: java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
at sun.rmi.registry.RegistryImpl_Skel.dispatch(RegistryImpl_Skel.java:42)
at sun.rmi.server.UnicastServerRef.oldDispatch(UnicastServerRef.java:403)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:267)
at sun.rmi.transport.Transport$1.run(Transport.java:171)
at java.security.AccessController.doPrivileged(AccessController.java:284)
at sun.rmi.transport.Transport.serviceCall(Transport.java:167)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:547)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:802)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:661)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:897)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:919)
at java.lang.Thread.run(Thread.java:736)
Caused by: java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:387)
at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:177)
at java.rmi.server.RMIClassLoader$2.loadClass(RMIClassLoader.java:631)
at org.apache.geronimo.kernel.rmi.RMIClassLoaderSpiImpl.loadClass(RMIClassLoaderSpiImpl.java:53)
at java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:258)
at sun.rmi.server.MarshalInputStream.resolveClass(MarshalInputStream.java:209)
at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1592)
at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1513)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1749)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1346)
at java.io.ObjectInputStream.readObject(ObjectInputStream.java:365)
at sun.rmi.transport.tcp.TCPEndpoint.read(TCPEndpoint.java:549)
at sun.rmi.transport.LiveRef.read(LiveRef.java:286)
at sun.rmi.server.UnicastRef2.readExternal(UnicastRef2.java:71)
at java.rmi.server.RemoteObject.readObject(RemoteObject.java:449)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at java.io.ObjectStreamClass.invokeReadObject(ObjectStreamClass.java:1044)
at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1866)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1770)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1346)
at java.io.ObjectInputStream.readObject(ObjectInputStream.java:365)
at sun.rmi.registry.RegistryImpl_Skel.dispatch(RegistryImpl_Skel.java:38)
... 11 more
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (GERONIMO-5982) Server can't start after secured
the default RMI port of the Geronimo server
Posted by "Shawn Jiang (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-5982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Shawn Jiang resolved GERONIMO-5982.
-----------------------------------
Resolution: Duplicate
Fix Version/s: 3.0
Assignee: Shawn Jiang
duplicated with GERONIMO-5973
> Server can't start after secured the default RMI port of the Geronimo server
> ----------------------------------------------------------------------------
>
> Key: GERONIMO-5982
> URL: https://issues.apache.org/jira/browse/GERONIMO-5982
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 3.0
> Environment: JRE 1.6.0 IBM J9 2.4 Windows Server 2008 R2 amd64-64
> Reporter: Tina Li
> Assignee: Shawn Jiang
> Fix For: 3.0
>
>
> 1.Secure the default RMI port of the Geronimo server following the first step of the doc:
> https://cwiki.apache.org/GMOxDOC30/securing-rmi-port-of-geronimo.html
> 2.Start the server using the command: startup.bat and error displayed on the cmd console:
> 2011-05-26 14:47:18,427 ERROR [GBeanInstanceState] Error while starting; GBean is now in the FAILED state: abstractName="org.apache.geronimo.configs/transaction-1_6/3.0-SNAPSHOT/car?ServiceModule=org.apache.geronimo.configs/transaction-1_6/3.0-SNAPSHOT/car,j2eeType=GBean,name=SecurityContextHandler"
> java.lang.ExceptionInInitializerError
> at java.lang.J9VMInternals.initialize(J9VMInternals.java:222)
> at org.apache.geronimo.connector.wrapper.work.SecurityContextHandler.<init>(SecurityContextHandler.java:71)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:56)
> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:39)
> at java.lang.reflect.Constructor.newInstance(Constructor.java:527)
> at org.apache.xbean.recipe.ReflectionUtil$ConstructorFactory.create(ReflectionUtil.java:958)
> at org.apache.xbean.recipe.ObjectRecipe.internalCreate(ObjectRecipe.java:276)
> at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:96)
> at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:61)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:933)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:271)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:105)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:127)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:560)
> at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:386)
> at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:460)
> at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:226)
> at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:702)
> at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:211)
> at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:91)
> at org.apache.geronimo.system.osgi.BootActivator$1.execute(BootActivator.java:107)
> at org.apache.geronimo.main.Bootstrapper.execute(Bootstrapper.java:65)
> at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:65)
> at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:32)
> Caused by: java.lang.SecurityException: unable to instantiate Subject-based policy
> at javax.security.auth.Policy.getPolicyNoCheck(Policy.java:268)
> at javax.security.auth.Policy.getPolicy(Policy.java:219)
> at javax.security.auth.SubjectDomainCombiner$5.run(SubjectDomainCombiner.java:513)
> at java.security.AccessController.doPrivileged(AccessController.java:202)
> at javax.security.auth.SubjectDomainCombiner.compatPolicy(SubjectDomainCombiner.java:509)
> at javax.security.auth.SubjectDomainCombiner.combine(SubjectDomainCombiner.java:223)
> at java.security.AccessController.getContext(AccessController.java:141)
> at org.apache.geronimo.security.ContextManager$3.run(ContextManager.java:274)
> at java.security.AccessController.doPrivileged(AccessController.java:224)
> at javax.security.auth.Subject.doAsPrivileged(Subject.java:645)
> at org.apache.geronimo.security.ContextManager.registerSubject(ContextManager.java:272)
> at org.apache.geronimo.security.ContextManager.<clinit>(ContextManager.java:84)
> at java.lang.J9VMInternals.initializeImpl(Native Method)
> at java.lang.J9VMInternals.initialize(J9VMInternals.java:200)
> ... 24 more
> 3.Start the server using the command: geronimo run and error displayed on the cmd console:
> 2011-05-26 14:51:19,530 WARN [0-SNAPSHOT/car,j2eeType=GBean,name=JMXSecureConnector] Failure in JMXConnector service:jmx:rmi://0.0.0.0:9998/jndi/rmi://0.0.0.0:1099/JMXSecureConnector
> 2011-05-26 14:51:19,545 ERROR [GBeanInstanceState] Error while starting; GBean is now in the FAILED state: abstractName="org.apache.geronimo.framework/jmx-security/3.0-SNAPSHOT/car?ServiceModule=org.apache.geronimo.framework/jmx-security/3.0-SNAPSHOT/car,j2eeType=GBean,name=JMXSecureConnector"
> java.io.IOException: Cannot bind to URL [rmi://0.0.0.0:1099/JMXSecureConnector]: javax.naming.CommunicationException [Root exception is java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
> java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)]
> at javax.management.remote.rmi.RMIConnectorServer.newIOException(RMIConnectorServer.java:815)
> at javax.management.remote.rmi.RMIConnectorServer.start(RMIConnectorServer.java:428)
> at org.apache.geronimo.jmxremoting.JMXSecureConnector.doStart(JMXSecureConnector.java:157)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:975)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:271)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:105)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:127)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:560)
> at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:386)
> at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:460)
> at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:226)
> at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:702)
> at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:211)
> at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:91)
> at org.apache.geronimo.system.osgi.BootActivator$1.execute(BootActivator.java:107)
> at org.apache.geronimo.main.Bootstrapper.execute(Bootstrapper.java:65)
> at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:65)
> at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:32)
> Caused by: javax.naming.CommunicationException [Root exception is java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
> java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)]
> at com.sun.jndi.rmi.registry.RegistryContext.bind(RegistryContext.java:138)
> at com.sun.jndi.toolkit.url.GenericURLContext.bind(GenericURLContext.java:220)
> at org.apache.aries.jndi.DelegateContext.bind(DelegateContext.java:82)
> at javax.naming.InitialContext.bind(InitialContext.java:444)
> at javax.management.remote.rmi.RMIConnectorServer.bind(RMIConnectorServer.java:636)
> at javax.management.remote.rmi.RMIConnectorServer.start(RMIConnectorServer.java:423)
> ... 16 more
> Caused by: java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
> java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
> at sun.rmi.server.UnicastServerRef.oldDispatch(UnicastServerRef.java:413)
> at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:267)
> at sun.rmi.transport.Transport$1.run(Transport.java:171)
> at java.security.AccessController.doPrivileged(AccessController.java:284)
> at sun.rmi.transport.Transport.serviceCall(Transport.java:167)
> at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:547)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:802)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:661)
> at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:897)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:919)
> at java.lang.Thread.run(Thread.java:736)
> at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:267)
> at sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:245)
> at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:371)
> at sun.rmi.registry.RegistryImpl_Stub.bind(RegistryImpl_Stub.java:43)
> at com.sun.jndi.rmi.registry.RegistryContext.bind(RegistryContext.java:132)
> ... 21 more
> Caused by: java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
> at sun.rmi.registry.RegistryImpl_Skel.dispatch(RegistryImpl_Skel.java:42)
> at sun.rmi.server.UnicastServerRef.oldDispatch(UnicastServerRef.java:403)
> at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:267)
> at sun.rmi.transport.Transport$1.run(Transport.java:171)
> at java.security.AccessController.doPrivileged(AccessController.java:284)
> at sun.rmi.transport.Transport.serviceCall(Transport.java:167)
> at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:547)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:802)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:661)
> at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:897)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:919)
> at java.lang.Thread.run(Thread.java:736)
> Caused by: java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
> at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:387)
> at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:177)
> at java.rmi.server.RMIClassLoader$2.loadClass(RMIClassLoader.java:631)
> at org.apache.geronimo.kernel.rmi.RMIClassLoaderSpiImpl.loadClass(RMIClassLoaderSpiImpl.java:53)
> at java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:258)
> at sun.rmi.server.MarshalInputStream.resolveClass(MarshalInputStream.java:209)
> at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1592)
> at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1513)
> at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1749)
> at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1346)
> at java.io.ObjectInputStream.readObject(ObjectInputStream.java:365)
> at sun.rmi.transport.tcp.TCPEndpoint.read(TCPEndpoint.java:549)
> at sun.rmi.transport.LiveRef.read(LiveRef.java:286)
> at sun.rmi.server.UnicastRef2.readExternal(UnicastRef2.java:71)
> at java.rmi.server.RemoteObject.readObject(RemoteObject.java:449)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
> at java.lang.reflect.Method.invoke(Method.java:611)
> at java.io.ObjectStreamClass.invokeReadObject(ObjectStreamClass.java:1044)
> at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1866)
> at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1770)
> at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1346)
> at java.io.ObjectInputStream.readObject(ObjectInputStream.java:365)
> at sun.rmi.registry.RegistryImpl_Skel.dispatch(RegistryImpl_Skel.java:38)
> ... 11 more
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Closed] (GERONIMO-5982) Server can't start after secured
the default RMI port of the Geronimo server
Posted by "Tina Li (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-5982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tina Li closed GERONIMO-5982.
-----------------------------
Verified on Aug 9's build, found no problems.
> Server can't start after secured the default RMI port of the Geronimo server
> ----------------------------------------------------------------------------
>
> Key: GERONIMO-5982
> URL: https://issues.apache.org/jira/browse/GERONIMO-5982
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 3.0
> Environment: JRE 1.6.0 IBM J9 2.4 Windows Server 2008 R2 amd64-64
> Reporter: Tina Li
> Assignee: Shawn Jiang
> Fix For: 3.0
>
>
> 1.Secure the default RMI port of the Geronimo server following the first step of the doc:
> https://cwiki.apache.org/GMOxDOC30/securing-rmi-port-of-geronimo.html
> 2.Start the server using the command: startup.bat and error displayed on the cmd console:
> 2011-05-26 14:47:18,427 ERROR [GBeanInstanceState] Error while starting; GBean is now in the FAILED state: abstractName="org.apache.geronimo.configs/transaction-1_6/3.0-SNAPSHOT/car?ServiceModule=org.apache.geronimo.configs/transaction-1_6/3.0-SNAPSHOT/car,j2eeType=GBean,name=SecurityContextHandler"
> java.lang.ExceptionInInitializerError
> at java.lang.J9VMInternals.initialize(J9VMInternals.java:222)
> at org.apache.geronimo.connector.wrapper.work.SecurityContextHandler.<init>(SecurityContextHandler.java:71)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:56)
> at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:39)
> at java.lang.reflect.Constructor.newInstance(Constructor.java:527)
> at org.apache.xbean.recipe.ReflectionUtil$ConstructorFactory.create(ReflectionUtil.java:958)
> at org.apache.xbean.recipe.ObjectRecipe.internalCreate(ObjectRecipe.java:276)
> at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:96)
> at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:61)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:933)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:271)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:105)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:127)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:560)
> at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:386)
> at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:460)
> at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:226)
> at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:702)
> at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:211)
> at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:91)
> at org.apache.geronimo.system.osgi.BootActivator$1.execute(BootActivator.java:107)
> at org.apache.geronimo.main.Bootstrapper.execute(Bootstrapper.java:65)
> at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:65)
> at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:32)
> Caused by: java.lang.SecurityException: unable to instantiate Subject-based policy
> at javax.security.auth.Policy.getPolicyNoCheck(Policy.java:268)
> at javax.security.auth.Policy.getPolicy(Policy.java:219)
> at javax.security.auth.SubjectDomainCombiner$5.run(SubjectDomainCombiner.java:513)
> at java.security.AccessController.doPrivileged(AccessController.java:202)
> at javax.security.auth.SubjectDomainCombiner.compatPolicy(SubjectDomainCombiner.java:509)
> at javax.security.auth.SubjectDomainCombiner.combine(SubjectDomainCombiner.java:223)
> at java.security.AccessController.getContext(AccessController.java:141)
> at org.apache.geronimo.security.ContextManager$3.run(ContextManager.java:274)
> at java.security.AccessController.doPrivileged(AccessController.java:224)
> at javax.security.auth.Subject.doAsPrivileged(Subject.java:645)
> at org.apache.geronimo.security.ContextManager.registerSubject(ContextManager.java:272)
> at org.apache.geronimo.security.ContextManager.<clinit>(ContextManager.java:84)
> at java.lang.J9VMInternals.initializeImpl(Native Method)
> at java.lang.J9VMInternals.initialize(J9VMInternals.java:200)
> ... 24 more
> 3.Start the server using the command: geronimo run and error displayed on the cmd console:
> 2011-05-26 14:51:19,530 WARN [0-SNAPSHOT/car,j2eeType=GBean,name=JMXSecureConnector] Failure in JMXConnector service:jmx:rmi://0.0.0.0:9998/jndi/rmi://0.0.0.0:1099/JMXSecureConnector
> 2011-05-26 14:51:19,545 ERROR [GBeanInstanceState] Error while starting; GBean is now in the FAILED state: abstractName="org.apache.geronimo.framework/jmx-security/3.0-SNAPSHOT/car?ServiceModule=org.apache.geronimo.framework/jmx-security/3.0-SNAPSHOT/car,j2eeType=GBean,name=JMXSecureConnector"
> java.io.IOException: Cannot bind to URL [rmi://0.0.0.0:1099/JMXSecureConnector]: javax.naming.CommunicationException [Root exception is java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
> java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)]
> at javax.management.remote.rmi.RMIConnectorServer.newIOException(RMIConnectorServer.java:815)
> at javax.management.remote.rmi.RMIConnectorServer.start(RMIConnectorServer.java:428)
> at org.apache.geronimo.jmxremoting.JMXSecureConnector.doStart(JMXSecureConnector.java:157)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:975)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:271)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:105)
> at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:127)
> at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:560)
> at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:386)
> at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:460)
> at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:226)
> at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:702)
> at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:211)
> at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:91)
> at org.apache.geronimo.system.osgi.BootActivator$1.execute(BootActivator.java:107)
> at org.apache.geronimo.main.Bootstrapper.execute(Bootstrapper.java:65)
> at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:65)
> at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:32)
> Caused by: javax.naming.CommunicationException [Root exception is java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
> java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)]
> at com.sun.jndi.rmi.registry.RegistryContext.bind(RegistryContext.java:138)
> at com.sun.jndi.toolkit.url.GenericURLContext.bind(GenericURLContext.java:220)
> at org.apache.aries.jndi.DelegateContext.bind(DelegateContext.java:82)
> at javax.naming.InitialContext.bind(InitialContext.java:444)
> at javax.management.remote.rmi.RMIConnectorServer.bind(RMIConnectorServer.java:636)
> at javax.management.remote.rmi.RMIConnectorServer.start(RMIConnectorServer.java:423)
> ... 16 more
> Caused by: java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
> java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
> at sun.rmi.server.UnicastServerRef.oldDispatch(UnicastServerRef.java:413)
> at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:267)
> at sun.rmi.transport.Transport$1.run(Transport.java:171)
> at java.security.AccessController.doPrivileged(AccessController.java:284)
> at sun.rmi.transport.Transport.serviceCall(Transport.java:167)
> at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:547)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:802)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:661)
> at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:897)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:919)
> at java.lang.Thread.run(Thread.java:736)
> at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:267)
> at sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:245)
> at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:371)
> at sun.rmi.registry.RegistryImpl_Stub.bind(RegistryImpl_Stub.java:43)
> at com.sun.jndi.rmi.registry.RegistryContext.bind(RegistryContext.java:132)
> ... 21 more
> Caused by: java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is:
> java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
> at sun.rmi.registry.RegistryImpl_Skel.dispatch(RegistryImpl_Skel.java:42)
> at sun.rmi.server.UnicastServerRef.oldDispatch(UnicastServerRef.java:403)
> at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:267)
> at sun.rmi.transport.Transport$1.run(Transport.java:171)
> at java.security.AccessController.doPrivileged(AccessController.java:284)
> at sun.rmi.transport.Transport.serviceCall(Transport.java:167)
> at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:547)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:802)
> at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:661)
> at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:897)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:919)
> at java.lang.Thread.run(Thread.java:736)
> Caused by: java.lang.ClassNotFoundException: javax.rmi.ssl.SslRMIClientSocketFactory (no security manager: RMI class loader disabled)
> at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:387)
> at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:177)
> at java.rmi.server.RMIClassLoader$2.loadClass(RMIClassLoader.java:631)
> at org.apache.geronimo.kernel.rmi.RMIClassLoaderSpiImpl.loadClass(RMIClassLoaderSpiImpl.java:53)
> at java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:258)
> at sun.rmi.server.MarshalInputStream.resolveClass(MarshalInputStream.java:209)
> at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1592)
> at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1513)
> at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1749)
> at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1346)
> at java.io.ObjectInputStream.readObject(ObjectInputStream.java:365)
> at sun.rmi.transport.tcp.TCPEndpoint.read(TCPEndpoint.java:549)
> at sun.rmi.transport.LiveRef.read(LiveRef.java:286)
> at sun.rmi.server.UnicastRef2.readExternal(UnicastRef2.java:71)
> at java.rmi.server.RemoteObject.readObject(RemoteObject.java:449)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
> at java.lang.reflect.Method.invoke(Method.java:611)
> at java.io.ObjectStreamClass.invokeReadObject(ObjectStreamClass.java:1044)
> at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1866)
> at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1770)
> at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1346)
> at java.io.ObjectInputStream.readObject(ObjectInputStream.java:365)
> at sun.rmi.registry.RegistryImpl_Skel.dispatch(RegistryImpl_Skel.java:38)
> ... 11 more
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira