some configuration problem

[Bhavesh Chheda <fo...@hotmail.com>]

hi, i am using JAAS with servlets and am using Tomcat as my servlet engine. 
I am getting security exceptions. I think i am missing some configuaration 
that i have to do.

My servlet calls a class that updates a system property. This throws a 
security exception. The servlet and the other class file are in 
../Web-inf/classes directory as required. I have tried giving AllPermision 
to classes. but it still wont work

I am using this configuration in server.xml
<SecurityManager>
	<Permission className="java.security.AllPermission"/>
	<Permission className= "java.util.PropertyPermission" 
attribute="java.security.auth.login.config" value="write" />
    </SecurityManager>

and

        <Context path="/reactor" docBase="webapps/reactor" debug="0" 
reloadable="true" >
			<Permission className="java.security.AllPermission"/>
			<Permission className= "java.util.PropertyPermission" 
attribute="java.security.auth.login.config" value="write" />
        </Context>


and here is what my tomcat.policy looks like

// Additional permissions for tomcat.

// javac
/*grant codeBase "file:${java.home}/../lib/-" {
       permission java.security.AllPermission;
};
*/
// Tomcat gets all permissions
grant codeBase "file:${tomcat.home}/lib/-" {
       permission java.security.AllPermission;
};

grant codeBase "file:${tomcat.home}/classes/-" {
	permission java.security.AllPermission;
};

// Example webapp policy
// By default we grant read access on webapp dir and
// write in workdir
grant codeBase "file:${tomcat.home}/webapps/examples" {
      permission java.net.SocketPermission "localhost:1024-", "listen";
      permission java.util.PropertyPermission "*", "read";
};

grant codeBase "file:${tomcat.home}/webapps/reactor/-" {
	permission java.security.AllPermission;
};

grant codeBase "file:D:/jakarta-tomcat/webapps/reactor/-" {
	permission java.security.AllPermission;
};

grant codeBase "file:D:/jakarta-tomcat/-" {
	permission java.security.AllPermission;
};

grant codeBase "file:C:/dev/lib/jaas.jar" {
	permission java.security.AllPermission;
};

grant codeBase "file:D:/jakarta-tomcat/webapps/reactor/Web-inf/classes/-" {
	permission java.security.AllPermission;
};



I am not sure what i am missing. If anyone can figure it out please let me 
know. Thanks in advance

bhavesh
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.