You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "James H. H. Lampert" <ja...@touchtonecorp.com.INVALID> on 2021/08/05 22:33:10 UTC
More information, Re: Tomcat 8.5.68 failing on takeoff!
I finally had a chance to switch the customer back to the failing Tomcat
8.5.68, and this is what the browser error page shows (with a 500 error):
Type Exception Report
Message AuthConfigFactory error: java.lang.reflect.InvocationTargetException
Description The server encountered an unexpected condition that
prevented it from fulfilling the request.
Exception
java.lang.SecurityException: AuthConfigFactory error:
java.lang.reflect.InvocationTargetException
javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:85)
org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
java.lang.Thread.run(Thread.java:811)
Root Cause
java.lang.reflect.InvocationTargetException
sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
java.lang.reflect.Constructor.newInstance(Constructor.java:437)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
java.security.AccessController.doPrivileged(AccessController.java:696)
javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
java.lang.Thread.run(Thread.java:811)
Root Cause
java.lang.SecurityException: org.xml.sax.SAXNotRecognizedException:
Feature: http://apache.org/xml/features/allow-java-encodings
org.apache.catalina.authenticator.jaspic.PersistentProviderRegistrations.loadProviders(PersistentProviderRegistrations.java:65)
org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.loadPersistentRegistrations(AuthConfigFactoryImpl.java:345)
org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.<init>(AuthConfigFactoryImpl.java:68)
sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
java.lang.reflect.Constructor.newInstance(Constructor.java:437)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
java.security.AccessController.doPrivileged(AccessController.java:696)
javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
java.lang.Thread.run(Thread.java:811)
Root Cause
org.xml.sax.SAXNotRecognizedException: Feature:
http://apache.org/xml/features/allow-java-encodings
org.apache.crimson.parser.XMLReaderImpl.setFeature(XMLReaderImpl.java:213)
org.apache.crimson.jaxp.SAXParserImpl.setFeatures(SAXParserImpl.java:143)
org.apache.crimson.jaxp.SAXParserImpl.<init>(SAXParserImpl.java:126)
org.apache.crimson.jaxp.SAXParserFactoryImpl.newSAXParserImpl(SAXParserFactoryImpl.java:113)
org.apache.crimson.jaxp.SAXParserFactoryImpl.setFeature(SAXParserFactoryImpl.java:141)
org.apache.tomcat.util.digester.Digester.setFeature(Digester.java:526)
org.apache.catalina.authenticator.jaspic.PersistentProviderRegistrations.loadProviders(PersistentProviderRegistrations.java:61)
org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.loadPersistentRegistrations(AuthConfigFactoryImpl.java:345)
org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.<init>(AuthConfigFactoryImpl.java:68)
sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
java.lang.reflect.Constructor.newInstance(Constructor.java:437)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
java.security.AccessController.doPrivileged(AccessController.java:696)
javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
java.lang.Thread.run(Thread.java:811)
Note The full stack trace of the root cause is available in the server logs.
I will note that the *second* SAXNotRecognizedException stack trace
starts out exactly like the one in catalina.out, but diverges after
Digester.java:526. The first three stacktraces on the error page look
completely different.
The first stacktrace on the error page looks similar to one in
localhost.2021-08-05.log, timestamped when I attempted to access manager:
05-Aug-2021 17:05:52.697 SEVERE [https-jsse-nio-443-exec-10]
org.apache.catalina.core.StandardHostValve.invoke Exception Processing
/manager/
java.lang.SecurityException: AuthConfigFactory error:
java.lang.reflect.InvocationTargetException
at
javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:85)
. . .
localhost_access_log.2021-08-05.txt shows (IP address redacted):
[05/Aug/2021:17:05:52 -0500] "GET /manager HTTP/1.1" 302 -
[05/Aug/2021:17:05:52 -0500] "GET /manager/ HTTP/1.1" 500 9663
and the manager log shows nothing at all.
And to reiterate, the very same JVM has no difficulty at all running
Tomcat 7.0.93.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by "James H. H. Lampert" <ja...@touchtonecorp.com.INVALID>.
On 8/6/21 1:40 AM, Mark Thomas wrote:
> Tomcat 7 doesn't have JASPIC support so you'll never see this issue in
> Tomcat 7.
What's a JASPIC?
And as to configuration, Mr. Schultz, my usual procedure is to (after
commenting out the default 8080 unsecured connector) copy and paste the
active secured port 443 connector *directly* from the Tomcat 7
conf/server.xml to the Tomcat 8 conf/server.xml. Ditto for the one user
definition in tomcat-users.xml.
That particular installation has a note to add this clause
<context-param>
<param-name>birtUseSvg</param-name>
<param-value>false</param-value>
</context-param>
to the web.xml of *our webapp,* but nothing server-wide.
--
JHHL
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Mark Thomas <ma...@apache.org>.
On 06/08/2021 06:15, Christopher Schultz wrote:
> On 8/5/21 18:33, James H. H. Lampert wrote:
<snip/>
>> java.lang.SecurityException: org.xml.sax.SAXNotRecognizedException:
>> Feature: http://apache.org/xml/features/allow-java-encodings
>> org.apache.catalina.authenticator.jaspic.PersistentProviderRegistrations.loadProviders(PersistentProviderRegistrations.java:65)
>>
>> org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.loadPersistentRegistrations(AuthConfigFactoryImpl.java:345)
>>
>> org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.<init>(AuthConfigFactoryImpl.java:68)
>>
>> sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native
>> Method)
>> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
>>
>> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
>>
>> java.lang.reflect.Constructor.newInstance(Constructor.java:437)
>> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
>>
>> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
>>
>> java.security.AccessController.doPrivileged(AccessController.java:696)
>>
>> javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
>>
<snip/>
> Now THAT looks like a bug. Here is the code around that setFeature() call:
>
> Digester digester = new Digester();
>
> try {
>
> digester.setFeature("http://apache.org/xml/features/allow-java-encodings",
> true);
> digester.setValidating(true);
> digester.setNamespaceAware(true);
> } catch (Exception e) {
> throw new SecurityException(e);
> }
>
> That digester.setFeature() call should be in its own try/catch block
> which issues a warning if a SAXException is thrown.
+1
>> And to reiterate, the very same JVM has no difficulty at all running
>> Tomcat 7.0.93.
>
> Something seems odd about that. There must be soe configuration
> difference between your 7.0.x environment and the 8.5.x environment you
> are testing.
Tomcat 7 doesn't have JASPIC support so you'll never see this issue in
Tomcat 7.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Christopher Schultz <ch...@christopherschultz.net>.
James,
On 8/5/21 18:33, James H. H. Lampert wrote:
> I finally had a chance to switch the customer back to the failing Tomcat
> 8.5.68, and this is what the browser error page shows (with a 500 error):
>
>
> Type Exception Report
>
> Message AuthConfigFactory error:
> java.lang.reflect.InvocationTargetException
>
> Description The server encountered an unexpected condition that
> prevented it from fulfilling the request.
>
> Exception
>
> java.lang.SecurityException: AuthConfigFactory error:
> java.lang.reflect.InvocationTargetException
> javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:85)
> org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
> org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
> org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
> org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
> org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
> org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
> org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
> java.lang.Thread.run(Thread.java:811)
> Root Cause
>
> java.lang.reflect.InvocationTargetException
> sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
> java.lang.reflect.Constructor.newInstance(Constructor.java:437)
> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
> java.security.AccessController.doPrivileged(AccessController.java:696)
> javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
> org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
> org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
> org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
> org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
> org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
> org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
> org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
> java.lang.Thread.run(Thread.java:811)
> Root Cause
>
> java.lang.SecurityException: org.xml.sax.SAXNotRecognizedException:
> Feature: http://apache.org/xml/features/allow-java-encodings
> org.apache.catalina.authenticator.jaspic.PersistentProviderRegistrations.loadProviders(PersistentProviderRegistrations.java:65)
> org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.loadPersistentRegistrations(AuthConfigFactoryImpl.java:345)
> org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.<init>(AuthConfigFactoryImpl.java:68)
> sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
> java.lang.reflect.Constructor.newInstance(Constructor.java:437)
> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
> java.security.AccessController.doPrivileged(AccessController.java:696)
> javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
> org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
> org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
> org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
> org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
> org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
> org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
> org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
> java.lang.Thread.run(Thread.java:811)
> Root Cause
>
> org.xml.sax.SAXNotRecognizedException: Feature:
> http://apache.org/xml/features/allow-java-encodings
> org.apache.crimson.parser.XMLReaderImpl.setFeature(XMLReaderImpl.java:213)
> org.apache.crimson.jaxp.SAXParserImpl.setFeatures(SAXParserImpl.java:143)
> org.apache.crimson.jaxp.SAXParserImpl.<init>(SAXParserImpl.java:126)
> org.apache.crimson.jaxp.SAXParserFactoryImpl.newSAXParserImpl(SAXParserFactoryImpl.java:113)
> org.apache.crimson.jaxp.SAXParserFactoryImpl.setFeature(SAXParserFactoryImpl.java:141)
> org.apache.tomcat.util.digester.Digester.setFeature(Digester.java:526)
> org.apache.catalina.authenticator.jaspic.PersistentProviderRegistrations.loadProviders(PersistentProviderRegistrations.java:61)
> org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.loadPersistentRegistrations(AuthConfigFactoryImpl.java:345)
> org.apache.catalina.authenticator.jaspic.AuthConfigFactoryImpl.<init>(AuthConfigFactoryImpl.java:68)
> sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:83)
> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:57)
> java.lang.reflect.Constructor.newInstance(Constructor.java:437)
> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:76)
> javax.security.auth.message.config.AuthConfigFactory$1.run(AuthConfigFactory.java:67)
> java.security.AccessController.doPrivileged(AccessController.java:696)
> javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:66)
> org.apache.catalina.authenticator.AuthenticatorBase.findJaspicProvider(AuthenticatorBase.java:1421)
> org.apache.catalina.authenticator.AuthenticatorBase.getJaspicProvider(AuthenticatorBase.java:1411)
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:535)
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
> org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698)
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364)
> org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624)
> org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
> org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)
> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1651)
> org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
> java.lang.Thread.run(Thread.java:811)
> Note The full stack trace of the root cause is available in the server
> logs.
Now THAT looks like a bug. Here is the code around that setFeature() call:
Digester digester = new Digester();
try {
digester.setFeature("http://apache.org/xml/features/allow-java-encodings",
true);
digester.setValidating(true);
digester.setNamespaceAware(true);
} catch (Exception e) {
throw new SecurityException(e);
}
That digester.setFeature() call should be in its own try/catch block
which issues a warning if a SAXException is thrown.
> I will note that the *second* SAXNotRecognizedException stack trace
> starts out exactly like the one in catalina.out, but diverges after
> Digester.java:526. The first three stacktraces on the error page look
> completely different.
Yep: the other one you showed was caught and logged, but otherwise ignored.
> The first stacktrace on the error page looks similar to one in
> localhost.2021-08-05.log, timestamped when I attempted to access manager:
>
> 05-Aug-2021 17:05:52.697 SEVERE [https-jsse-nio-443-exec-10]
> org.apache.catalina.core.StandardHostValve.invoke Exception Processing
> /manager/
> java.lang.SecurityException: AuthConfigFactory error:
> java.lang.reflect.InvocationTargetException
> at
> javax.security.auth.message.config.AuthConfigFactory.getFactory(AuthConfigFactory.java:85)
>
> . . .
>
> localhost_access_log.2021-08-05.txt shows (IP address redacted):
> [05/Aug/2021:17:05:52 -0500] "GET /manager HTTP/1.1" 302 -
> [05/Aug/2021:17:05:52 -0500] "GET /manager/ HTTP/1.1" 500 9663
>
> and the manager log shows nothing at all.
>
> And to reiterate, the very same JVM has no difficulty at all running
> Tomcat 7.0.93.
Something seems odd about that. There must be soe configuration
difference between your 7.0.x environment and the 8.5.x environment you
are testing. Somehow, the Crimson XML library is not being used by
Tomcat in your 7.0.x environment. Do you know if you have customized
your conf/catalina.properties or have some non-mundane CATALINA_OPTS
being set in your 7.0.x and.or 8.5.x environments?
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Pete Helgren <pe...@valadd.com>.
I don't have an AS/400 any longer but I do I have a 9009 running IBM i.
If you use iACS and go to the IFS menu option, you can filter by a file
name. Are you looking for a class file within a jar or just the jar itself?
Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals
Twitter - Sys_i_Geek IBM_i_Geek
On 8/6/2021 11:49 AM, James H. H. Lampert wrote:
> Searching JAR files for "crimson" would likely be an exercise in
> futility on an AS/400.
>
> --
> JHHL
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Jo...@wellsfargo.com.INVALID.
> -----Original Message-----
> From: James H. H. Lampert <ja...@touchtonecorp.com.INVALID>
> Sent: Friday, August 06, 2021 11:49 AM
> To: Tomcat Users List <us...@tomcat.apache.org>
> Subject: Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
>
> Searching JAR files for "crimson" would likely be an exercise in futility on an
> AS/400.
>
> --
> JHHL
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
I think it's likely to have "crimson" in the file name.
https://search.maven.org/artifact/crimson/crimson/1.1.3/jar
It's ancient, BTW.
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by "James H. H. Lampert" <ja...@touchtonecorp.com.INVALID>.
Searching JAR files for "crimson" would likely be an exercise in
futility on an AS/400.
--
JHHL
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Rob Sargent <rs...@xmission.com>.
> On Aug 6, 2021, at 10:17 AM, Konstantin Kolinko <kn...@gmail.com> wrote:
>
> пт, 6 авг. 2021 г. в 01:33, James H. H. Lampert
> <ja...@touchtonecorp.com.invalid>:
>> org.xml.sax.SAXNotRecognizedException: Feature:
>> http://apache.org/xml/features/allow-java-encodings
>> org.apache.crimson.parser.XMLReaderImpl.setFeature(XMLReaderImpl.java:213)
>> org.apache.crimson.jaxp.SAXParserImpl.setFeatures(SAXParserImpl.java:143)
>> org.apache.crimson.jaxp.SAXParserImpl.<init>(SAXParserImpl.java:126)
>> org.apache.crimson.jaxp.SAXParserFactoryImpl.newSAXParserImpl(SAXParserFactoryImpl.java:113)
>> org.apache.crimson.jaxp.SAXParserFactoryImpl.setFeature(SAXParserFactoryImpl.java:141)
>
> Try to find what *.jar file in your system contains the above classes.
>
> E.g. searching for string "crimson" in *.jar files.
> That string will be visible in the archive file as it is a name of a directory.
>
> HTH.
>
I have a bash function which does this moderately well. Happy to share it, if needed.
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Jo...@wellsfargo.com.INVALID.
> -----Original Message-----
> From: James H. H. Lampert <ja...@touchtonecorp.com.INVALID>
> Sent: Monday, August 09, 2021 12:21 PM
> To: users@tomcat.apache.org
> Subject: Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
>
> On 8/6/21 9:17 AM, Konstantin Kolinko wrote:
>
> > Try to find what *.jar file in your system contains the above classes.
> >
> > E.g. searching for string "crimson" in *.jar files.
> > That string will be visible in the archive file as it is a name of a directory.
>
> I've learned that QShell (a *nix-like shell that was added with Java
> support) on an AS/400 does have both "find" and "grep," so it wasn't quite so
> futile as I thought.
>
> If I go into QShell, navigate to the JVM home directory, and do a "find . -
> name '*.jar'"
> I get
>
> ./jre/lib/ppc64/compressedrefs/jclSC180/vm.jar
> ./jre/lib/ppc64/default/jclSC180/vm.jar
> ./jre/lib/ext/db2_classes18.jar
> ./jre/lib/ext/CmpCrmf.jar
> ./jre/lib/ext/IBMSecureRandom.jar
> ./jre/lib/ext/cldrdata.jar
> ./jre/lib/ext/dnsns.jar
> ./jre/lib/ext/dtfj.jar
> ./jre/lib/ext/dtfjview.jar
> ./jre/lib/ext/gskikm.jar
> ./jre/lib/ext/healthcenter.jar
> ./jre/lib/ext/ibmcmsprovider.jar
> ./jre/lib/ext/ibmjcefips.jar
> ./jre/lib/ext/ibmjceplus.jar
> ./jre/lib/ext/ibmjceprovider.jar
> ./jre/lib/ext/ibmkeycert.jar
> ./jre/lib/ext/ibmpkcs11impl.jar
> ./jre/lib/ext/ibmsaslprovider.jar
> ./jre/lib/ext/ibmxmlcrypto.jar
> ./jre/lib/ext/ibmxmldsigprovider.jar
> ./jre/lib/ext/ibmxmlencprovider.jar
> ./jre/lib/ext/jaccess.jar
> ./jre/lib/ext/localedata.jar
> ./jre/lib/ext/nashorn.jar
> ./jre/lib/ext/traceformat.jar
> ./jre/lib/ext/xmlencfw.jar
> ./jre/lib/ext/zipfs.jar
> ./jre/lib/aggressive.jar
> ./jre/lib/charsets.jar
> ./jre/lib/dataaccess.jar
> ./jre/lib/ddr/j9ddr.jar
> ./jre/lib/deploy.jar
> ./jre/lib/ibmcertpathfw.jar
> ./jre/lib/ibmcertpathprovider.jar
> ./jre/lib/ibmcfw.jar
> ./jre/lib/ibmjcefw.jar
> ./jre/lib/ibmjgssfw.jar
> ./jre/lib/ibmjgssprovider.jar
> ./jre/lib/ibmjssefw.jar
> ./jre/lib/ibmjsseprovider2.jar
> ./jre/lib/ibmorb.jar
> ./jre/lib/ibmorbapi.jar
> ./jre/lib/ibmpkcs.jar
> ./jre/lib/ibmsaslfw.jar
> ./jre/lib/javaws.jar
> ./jre/lib/management-agent.jar
> ./jre/lib/math.jar
> ./jre/lib/plugin.jar
> ./jre/lib/resources.jar
> ./jre/lib/rt.jar
> ./jre/lib/se-service.jar
> ./jre/lib/security/US_export_policy_56bit.jar
> ./jre/lib/security/local_policy_56bit.jar
> ./jre/lib/security/policy/limited/US_export_policy.jar
> ./jre/lib/security/policy/limited/local_policy.jar
> ./jre/lib/security/policy/unlimited/US_export_policy.jar
> ./jre/lib/security/policy/unlimited/local_policy.jar
> ./jre/lib/tools/monitoring-api.jar
> ./jre/lib/xml.jar
> ./jre/lib/xmldsigfw.jar
> ./IBMmisc.jar
> ./lib/dt.jar
> ./lib/ibmorbtools.jar
> ./lib/jconsole.jar
> ./lib/tools.jar
> ./lib/IBMi5OSJSSE.jar
>
> If I do a "find . -name '*crimson*'", I get nothing.
>
> If I do a "find . -name '*.jar' -exec grep -l 'crimson' {} \;", I also get nothing.
>
> So unless anybody else has any ideas, I'm once again stuck, at least on this
> angle.
>
> Mark Thomas wrote:
> > Tomcat 7 doesn't have JASPIC support so you'll never see this issue in
> Tomcat 7.
>
> . . . to which I replied (seriously, rather than flippantly) "What's a JASPIC?"
>
> I've finally taken a look at what JASPIC is. Interesting. If it's JASPIC support in
> Tomcat 8 that is throwing exceptions and killing manager under this particular
> Java 8 JVM, is there a way to disable it, at least until the customer has their
> PTFs up to date?
>
> --
> JHHL
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
Check under the Tomcat webapps and lib directories.
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by "James H. H. Lampert" <ja...@touchtonecorp.com.INVALID>.
On 8/9/21 11:33 AM, Mark Thomas wrote:
> The fix will be in the September releases.
Thanks.
--
JHHL
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Mark Thomas <ma...@apache.org>.
On August 9, 2021 5:31:41 PM UTC, "James H. H. Lampert" <ja...@touchtonecorp.com.INVALID> wrote:
>On 8/9/21 10:24 AM, Mark Thomas wrote:
>> Future versions of Tomcat won't see this issue but if the customer is
>
>> prepared to update Tomcat to fix this issue then they might as well
>just
>> update Java (assuming that is indeed sufficient to fix this).
>
>Given that they currently seem to be happy as clams on their currently
>installed Tomcat 7, and that we've only been updating customers to
>Tomcat 8 in order to proactively deal with any security complaints that
>
>might come up, they can presumably wait for a Tomcat 8 that has the
>relevant fix.
>
>And this customer is not in any particular hurry for updating
>*anything*
>(a trait I share).
>
>Any idea when a Tomcat 8 with the relevant fix might come out?
The fix will be in the September releases.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by "James H. H. Lampert" <ja...@touchtonecorp.com.INVALID>.
On 8/9/21 10:24 AM, Mark Thomas wrote:
> Future versions of Tomcat won't see this issue but if the customer is
> prepared to update Tomcat to fix this issue then they might as well just
> update Java (assuming that is indeed sufficient to fix this).
Given that they currently seem to be happy as clams on their currently
installed Tomcat 7, and that we've only been updating customers to
Tomcat 8 in order to proactively deal with any security complaints that
might come up, they can presumably wait for a Tomcat 8 that has the
relevant fix.
And this customer is not in any particular hurry for updating *anything*
(a trait I share).
Any idea when a Tomcat 8 with the relevant fix might come out?
--
JHHL
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Mark Thomas <ma...@apache.org>.
On 09/08/2021 19:21, James H. H. Lampert wrote:
> On 8/6/21 9:17 AM, Konstantin Kolinko wrote:
>
>> Try to find what *.jar file in your system contains the above classes.
>>
>> E.g. searching for string "crimson" in *.jar files.
>> That string will be visible in the archive file as it is a name of a
>> directory.
>
> I've learned that QShell (a *nix-like shell that was added with Java
> support) on an AS/400 does have both "find" and "grep," so it wasn't
> quite so futile as I thought.
>
> If I go into QShell, navigate to the JVM home directory, and do a
> "find . -name '*.jar'"
> I get
>
> ./jre/lib/ppc64/compressedrefs/jclSC180/vm.jar
> ./jre/lib/ppc64/default/jclSC180/vm.jar
> ./jre/lib/ext/db2_classes18.jar
> ./jre/lib/ext/CmpCrmf.jar
> ./jre/lib/ext/IBMSecureRandom.jar
> ./jre/lib/ext/cldrdata.jar
> ./jre/lib/ext/dnsns.jar
> ./jre/lib/ext/dtfj.jar
> ./jre/lib/ext/dtfjview.jar
> ./jre/lib/ext/gskikm.jar
> ./jre/lib/ext/healthcenter.jar
> ./jre/lib/ext/ibmcmsprovider.jar
> ./jre/lib/ext/ibmjcefips.jar
> ./jre/lib/ext/ibmjceplus.jar
> ./jre/lib/ext/ibmjceprovider.jar
> ./jre/lib/ext/ibmkeycert.jar
> ./jre/lib/ext/ibmpkcs11impl.jar
> ./jre/lib/ext/ibmsaslprovider.jar
> ./jre/lib/ext/ibmxmlcrypto.jar
> ./jre/lib/ext/ibmxmldsigprovider.jar
> ./jre/lib/ext/ibmxmlencprovider.jar
> ./jre/lib/ext/jaccess.jar
> ./jre/lib/ext/localedata.jar
> ./jre/lib/ext/nashorn.jar
> ./jre/lib/ext/traceformat.jar
> ./jre/lib/ext/xmlencfw.jar
> ./jre/lib/ext/zipfs.jar
> ./jre/lib/aggressive.jar
> ./jre/lib/charsets.jar
> ./jre/lib/dataaccess.jar
> ./jre/lib/ddr/j9ddr.jar
> ./jre/lib/deploy.jar
> ./jre/lib/ibmcertpathfw.jar
> ./jre/lib/ibmcertpathprovider.jar
> ./jre/lib/ibmcfw.jar
> ./jre/lib/ibmjcefw.jar
> ./jre/lib/ibmjgssfw.jar
> ./jre/lib/ibmjgssprovider.jar
> ./jre/lib/ibmjssefw.jar
> ./jre/lib/ibmjsseprovider2.jar
> ./jre/lib/ibmorb.jar
> ./jre/lib/ibmorbapi.jar
> ./jre/lib/ibmpkcs.jar
> ./jre/lib/ibmsaslfw.jar
> ./jre/lib/javaws.jar
> ./jre/lib/management-agent.jar
> ./jre/lib/math.jar
> ./jre/lib/plugin.jar
> ./jre/lib/resources.jar
> ./jre/lib/rt.jar
> ./jre/lib/se-service.jar
> ./jre/lib/security/US_export_policy_56bit.jar
> ./jre/lib/security/local_policy_56bit.jar
> ./jre/lib/security/policy/limited/US_export_policy.jar
> ./jre/lib/security/policy/limited/local_policy.jar
> ./jre/lib/security/policy/unlimited/US_export_policy.jar
> ./jre/lib/security/policy/unlimited/local_policy.jar
> ./jre/lib/tools/monitoring-api.jar
> ./jre/lib/xml.jar
> ./jre/lib/xmldsigfw.jar
> ./IBMmisc.jar
> ./lib/dt.jar
> ./lib/ibmorbtools.jar
> ./lib/jconsole.jar
> ./lib/tools.jar
> ./lib/IBMi5OSJSSE.jar
>
> If I do a "find . -name '*crimson*'", I get nothing.
>
> If I do a "find . -name '*.jar' -exec grep -l 'crimson' {} \;", I also
> get nothing.
>
> So unless anybody else has any ideas, I'm once again stuck, at least on
> this angle.
>
> Mark Thomas wrote:
>> Tomcat 7 doesn't have JASPIC support so you'll never see this issue in
>> Tomcat 7.
>
> . . . to which I replied (seriously, rather than flippantly) "What's a
> JASPIC?"
>
> I've finally taken a look at what JASPIC is. Interesting. If it's JASPIC
> support in Tomcat 8 that is throwing exceptions and killing manager
> under this particular Java 8 JVM, is there a way to disable it, at least
> until the customer has their PTFs up to date?
Sorry, no. The code in question is always going to get executed.
Future versions of Tomcat won't see this issue but if the customer is
prepared to update Tomcat to fix this issue then they might as well just
update Java (assuming that is indeed sufficient to fix this).
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by "James H. H. Lampert" <ja...@touchtonecorp.com.INVALID>.
On 8/6/21 9:17 AM, Konstantin Kolinko wrote:
> Try to find what *.jar file in your system contains the above classes.
>
> E.g. searching for string "crimson" in *.jar files.
> That string will be visible in the archive file as it is a name of a directory.
I've learned that QShell (a *nix-like shell that was added with Java
support) on an AS/400 does have both "find" and "grep," so it wasn't
quite so futile as I thought.
If I go into QShell, navigate to the JVM home directory, and do a
"find . -name '*.jar'"
I get
./jre/lib/ppc64/compressedrefs/jclSC180/vm.jar
./jre/lib/ppc64/default/jclSC180/vm.jar
./jre/lib/ext/db2_classes18.jar
./jre/lib/ext/CmpCrmf.jar
./jre/lib/ext/IBMSecureRandom.jar
./jre/lib/ext/cldrdata.jar
./jre/lib/ext/dnsns.jar
./jre/lib/ext/dtfj.jar
./jre/lib/ext/dtfjview.jar
./jre/lib/ext/gskikm.jar
./jre/lib/ext/healthcenter.jar
./jre/lib/ext/ibmcmsprovider.jar
./jre/lib/ext/ibmjcefips.jar
./jre/lib/ext/ibmjceplus.jar
./jre/lib/ext/ibmjceprovider.jar
./jre/lib/ext/ibmkeycert.jar
./jre/lib/ext/ibmpkcs11impl.jar
./jre/lib/ext/ibmsaslprovider.jar
./jre/lib/ext/ibmxmlcrypto.jar
./jre/lib/ext/ibmxmldsigprovider.jar
./jre/lib/ext/ibmxmlencprovider.jar
./jre/lib/ext/jaccess.jar
./jre/lib/ext/localedata.jar
./jre/lib/ext/nashorn.jar
./jre/lib/ext/traceformat.jar
./jre/lib/ext/xmlencfw.jar
./jre/lib/ext/zipfs.jar
./jre/lib/aggressive.jar
./jre/lib/charsets.jar
./jre/lib/dataaccess.jar
./jre/lib/ddr/j9ddr.jar
./jre/lib/deploy.jar
./jre/lib/ibmcertpathfw.jar
./jre/lib/ibmcertpathprovider.jar
./jre/lib/ibmcfw.jar
./jre/lib/ibmjcefw.jar
./jre/lib/ibmjgssfw.jar
./jre/lib/ibmjgssprovider.jar
./jre/lib/ibmjssefw.jar
./jre/lib/ibmjsseprovider2.jar
./jre/lib/ibmorb.jar
./jre/lib/ibmorbapi.jar
./jre/lib/ibmpkcs.jar
./jre/lib/ibmsaslfw.jar
./jre/lib/javaws.jar
./jre/lib/management-agent.jar
./jre/lib/math.jar
./jre/lib/plugin.jar
./jre/lib/resources.jar
./jre/lib/rt.jar
./jre/lib/se-service.jar
./jre/lib/security/US_export_policy_56bit.jar
./jre/lib/security/local_policy_56bit.jar
./jre/lib/security/policy/limited/US_export_policy.jar
./jre/lib/security/policy/limited/local_policy.jar
./jre/lib/security/policy/unlimited/US_export_policy.jar
./jre/lib/security/policy/unlimited/local_policy.jar
./jre/lib/tools/monitoring-api.jar
./jre/lib/xml.jar
./jre/lib/xmldsigfw.jar
./IBMmisc.jar
./lib/dt.jar
./lib/ibmorbtools.jar
./lib/jconsole.jar
./lib/tools.jar
./lib/IBMi5OSJSSE.jar
If I do a "find . -name '*crimson*'", I get nothing.
If I do a "find . -name '*.jar' -exec grep -l 'crimson' {} \;", I also
get nothing.
So unless anybody else has any ideas, I'm once again stuck, at least on
this angle.
Mark Thomas wrote:
> Tomcat 7 doesn't have JASPIC support so you'll never see this issue in Tomcat 7.
. . . to which I replied (seriously, rather than flippantly) "What's a
JASPIC?"
I've finally taken a look at what JASPIC is. Interesting. If it's JASPIC
support in Tomcat 8 that is throwing exceptions and killing manager
under this particular Java 8 JVM, is there a way to disable it, at least
until the customer has their PTFs up to date?
--
JHHL
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: More information, Re: Tomcat 8.5.68 failing on takeoff!
Posted by Konstantin Kolinko <kn...@gmail.com>.
пт, 6 авг. 2021 г. в 01:33, James H. H. Lampert
<ja...@touchtonecorp.com.invalid>:
> org.xml.sax.SAXNotRecognizedException: Feature:
> http://apache.org/xml/features/allow-java-encodings
> org.apache.crimson.parser.XMLReaderImpl.setFeature(XMLReaderImpl.java:213)
> org.apache.crimson.jaxp.SAXParserImpl.setFeatures(SAXParserImpl.java:143)
> org.apache.crimson.jaxp.SAXParserImpl.<init>(SAXParserImpl.java:126)
> org.apache.crimson.jaxp.SAXParserFactoryImpl.newSAXParserImpl(SAXParserFactoryImpl.java:113)
> org.apache.crimson.jaxp.SAXParserFactoryImpl.setFeature(SAXParserFactoryImpl.java:141)
Try to find what *.jar file in your system contains the above classes.
E.g. searching for string "crimson" in *.jar files.
That string will be visible in the archive file as it is a name of a directory.
HTH.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org