You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Mike@FP-POP" <mi...@finepoint.com.hk> on 2002/06/11 16:52:17 UTC

Exception when using security manager

Hi,

I need to deploy an webapps under Tomcat4.0.3 with security manager

#startup -security

I have added in the required permission in the "catalina.policy" file as

grant codeBase "file:${catalina.home}/webapps/sso/*" {
        permission java.security.AllPermission;
};

I guess this will grant all the rights to the webapps.
But when I startup tomcat with security manager, I got exceptions as follow:

Any thoughts!

Thanks

++++++++++++++++++++++++++++++++
2002-06-10 16:58:45 StandardHost[localhost]: Installing web application at
context path /sso from URL file:D:\tomcat-4-LE\webapps\sso
2002-06-10 16:58:46 WebappLoader[/sso]: Deploying class repositories to work
directory D:\tomcat-4-LE\work\localhost\sso
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/SCBJaas.jar
to D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\SCBJaas.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR
/WEB-INF/lib/classes12.jar to
D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\classes12.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/ecb.jar to
D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\ecb.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/ecbldap.jar
to D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\ecbldap.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR
/WEB-INF/lib/ecbsecurity.jar to
D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\ecbsecurity.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/ldap.jar to
D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\ldap.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/log4j.jar to
D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\log4j.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/logapp.jar
to D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\logapp.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/logger.jar
to D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\logger.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/session.jar
to D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\session.jar
2002-06-10 16:58:46 WebappLoader[/sso]: Deploy JAR /WEB-INF/lib/struts.jar
to D:\tomcat-4-LE\webapps\sso\WEB-INF\lib\struts.jar
2002-06-10 16:58:46 StandardManager[/sso]: Seeding random number generator
class java.security.SecureRandom
2002-06-10 16:58:46 StandardManager[/sso]: Seeding of random number
generator has been completed
2002-06-10 16:58:46 ContextConfig[/sso]: Added certificates -> request
attribute Valve
2002-06-10 16:58:46 SSO-init: init
2002-06-10 16:58:48 StandardContext[/sso]: Servlet /sso threw load()
exception
javax.servlet.ServletException: Servlet.init() for servlet SSO-init threw
exception
	at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:93
5)
	at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:808)
	at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3266)
	at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3395)
	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:785)
	at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:454)
	at org.apache.catalina.core.StandardHost.install(StandardHost.java:714)
	at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:300)
	at org.apache.catalina.startup.HostConfig.start(HostConfig.java:389)
	at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:232)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSuppor
t.java:155)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1131)
	at org.apache.catalina.core.StandardHost.start(StandardHost.java:614)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)
	at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:343)
	at org.apache.catalina.core.StandardService.start(StandardService.java:388)
	at org.apache.catalina.core.StandardServer.start(StandardServer.java:506)
	at org.apache.catalina.startup.Catalina.start(Catalina.java:781)
	at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
	at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39
)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
	at java.lang.reflect.Method.invoke(Method.java:324)
	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)
----- Root Cause -----
java.security.AccessControlException: access denied
(java.net.SocketPermission dbhost resolve)
	at
java.security.AccessControlContext.checkPermission(AccessControlContext.java
:270)
	at
java.security.AccessController.checkPermission(AccessController.java:401)
	at java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
	at java.lang.SecurityManager.checkConnect(SecurityManager.java:1042)
	at java.net.InetAddress.getAllByName0(InetAddress.java:909)
	at java.net.InetAddress.getAllByName0(InetAddress.java:890)
	at java.net.InetAddress.getAllByName(InetAddress.java:884)
	at java.net.InetAddress.getByName(InetAddress.java:814)
	at java.net.InetSocketAddress.<init>(InetSocketAddress.java:109)
	at java.net.Socket.<init>(Socket.java:118)
	at oracle.net.nt.TcpNTAdapter.connect(Unknown Source)
	at oracle.net.nt.ConnOption.connect(Unknown Source)
	at oracle.net.nt.ConnStrategy.execute(Unknown Source)
	at oracle.net.resolver.AddrResolution.resolveAndExecute(Unknown Source)
	at oracle.net.ns.NSProtocol.establishConnection(Unknown Source)
	at oracle.net.ns.NSProtocol.connect(Unknown Source)
	at oracle.jdbc.ttc7.TTC7Protocol.connect(TTC7Protocol.java:1213)
	at oracle.jdbc.ttc7.TTC7Protocol.logon(TTC7Protocol.java:209)
	at oracle.jdbc.driver.OracleConnection.<init>(OracleConnection.java:246)
	at
oracle.jdbc.driver.OracleDriver.getConnectionInstance(OracleDriver.java:365)
	at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:260)
	at
org.apache.struts.util.GenericDataSource.createConnection(GenericDataSource.
java:731)
	at
org.apache.struts.util.GenericDataSource.open(GenericDataSource.java:668)
	at
org.apache.struts.action.ActionServlet.initDataSources(ActionServlet.java:10
77)
	at org.apache.struts.action.ActionServlet.init(ActionServlet.java:471)
	at javax.servlet.GenericServlet.init(GenericServlet.java:258)
	at com.scb.sso.servlet.SSOInitServlet.init(SSOInitServlet.java:39)
	at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:91
6)
	at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:808)
	at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3266)
	at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3395)
	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:785)
	at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:454)
	at org.apache.catalina.core.StandardHost.install(StandardHost.java:714)
	at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:300)
	at org.apache.catalina.startup.HostConfig.start(HostConfig.java:389)
	at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:232)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSuppor
t.java:155)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1131)
	at org.apache.catalina.core.StandardHost.start(StandardHost.java:614)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)
	at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:343)
	at org.apache.catalina.core.StandardService.start(StandardService.java:388)
	at org.apache.catalina.core.StandardServer.start(StandardServer.java:506)
	at org.apache.catalina.startup.Catalina.start(Catalina.java:781)
	at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
	at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
	at java.lang.reflect.Method.invoke(Method.java:324)
	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)

2002-06-10 16:58:48 jaas: init
2002-06-10 16:58:48 StandardContext[/sso]: Servlet /sso threw load()
exception
javax.servlet.ServletException: access denied
(javax.security.auth.AuthPermission setPolicy)
	at com.scb.jaas.InitServlet.init(InitServlet.java:43)
	at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:91
6)
	at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:808)
	at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3266)
	at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3395)
	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:785)
	at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:454)
	at org.apache.catalina.core.StandardHost.install(StandardHost.java:714)
	at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:300)
	at org.apache.catalina.startup.HostConfig.start(HostConfig.java:389)
	at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:232)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSuppor
t.java:155)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1131)
	at org.apache.catalina.core.StandardHost.start(StandardHost.java:614)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)
	at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:343)
	at org.apache.catalina.core.StandardService.start(StandardService.java:388)
	at org.apache.catalina.core.StandardServer.start(StandardServer.java:506)
	at org.apache.catalina.startup.Catalina.start(Catalina.java:781)
	at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
	at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39
)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
	at java.lang.reflect.Method.invoke(Method.java:324)
	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)
----- Root Cause -----
java.security.AccessControlException: access denied
(javax.security.auth.AuthPermission setPolicy)
	at
java.security.AccessControlContext.checkPermission(AccessControlContext.java
:270)
	at
java.security.AccessController.checkPermission(AccessController.java:401)
	at java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
	at javax.security.auth.Policy.setPolicy(Policy.java:250)
	at com.scb.jaas.InitServlet.init(InitServlet.java:38)
	at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:91
6)
	at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:808)
	at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3266)
	at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3395)
	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:785)
	at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:454)
	at org.apache.catalina.core.StandardHost.install(StandardHost.java:714)
	at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:300)
	at org.apache.catalina.startup.HostConfig.start(HostConfig.java:389)
	at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:232)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSuppor
t.java:155)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1131)
	at org.apache.catalina.core.StandardHost.start(StandardHost.java:614)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)
	at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:343)
	at org.apache.catalina.core.StandardService.start(StandardService.java:388)
	at org.apache.catalina.core.StandardServer.start(StandardServer.java:506)
	at org.apache.catalina.startup.Catalina.start(Catalina.java:781)
	at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
	at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39
)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
	at java.lang.reflect.Method.invoke(Method.java:324)
	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)

2002-06-10 16:58:48 action: init
2002-06-10 16:58:48 action: Loading application resources from resource
ApplicationResources
2002-06-10 16:58:48 action: Initializing configuration from resource path
/WEB-INF/struts-config.xml
2002-06-10 16:58:50 action: Initializing application data source logging
2002-06-10 16:58:50 StandardContext[/sso]: Servlet /sso threw load()
exception
javax.servlet.ServletException: Servlet.init() for servlet action threw
exception
	at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:93
5)
	at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:808)
	at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3266)
	at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3395)
	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:785)
	at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:454)
	at org.apache.catalina.core.StandardHost.install(StandardHost.java:714)
	at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:300)
	at org.apache.catalina.startup.HostConfig.start(HostConfig.java:389)
	at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:232)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSuppor
t.java:155)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1131)
	at org.apache.catalina.core.StandardHost.start(StandardHost.java:614)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)
	at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:343)
	at org.apache.catalina.core.StandardService.start(StandardService.java:388)
	at org.apache.catalina.core.StandardServer.start(StandardServer.java:506)
	at org.apache.catalina.startup.Catalina.start(Catalina.java:781)
	at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
	at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39
)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
	at java.lang.reflect.Method.invoke(Method.java:324)
	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)
----- Root Cause -----
java.security.AccessControlException: access denied
(java.net.SocketPermission dbhost resolve)
	at
java.security.AccessControlContext.checkPermission(AccessControlContext.java
:270)
	at
java.security.AccessController.checkPermission(AccessController.java:401)
	at java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
	at java.lang.SecurityManager.checkConnect(SecurityManager.java:1042)
	at java.net.InetAddress.getAllByName0(InetAddress.java:909)
	at java.net.InetAddress.getAllByName0(InetAddress.java:890)
	at java.net.InetAddress.getAllByName(InetAddress.java:884)
	at java.net.InetAddress.getByName(InetAddress.java:814)
	at java.net.InetSocketAddress.<init>(InetSocketAddress.java:109)
	at java.net.Socket.<init>(Socket.java:118)
	at oracle.net.nt.TcpNTAdapter.connect(Unknown Source)
	at oracle.net.nt.ConnOption.connect(Unknown Source)
	at oracle.net.nt.ConnStrategy.execute(Unknown Source)
	at oracle.net.resolver.AddrResolution.resolveAndExecute(Unknown Source)
	at oracle.net.ns.NSProtocol.establishConnection(Unknown Source)
	at oracle.net.ns.NSProtocol.connect(Unknown Source)
	at oracle.jdbc.ttc7.TTC7Protocol.connect(TTC7Protocol.java:1213)
	at oracle.jdbc.ttc7.TTC7Protocol.logon(TTC7Protocol.java:209)
	at oracle.jdbc.driver.OracleConnection.<init>(OracleConnection.java:246)
	at
oracle.jdbc.driver.OracleDriver.getConnectionInstance(OracleDriver.java:365)
	at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:260)
	at
org.apache.struts.util.GenericDataSource.createConnection(GenericDataSource.
java:731)
	at
org.apache.struts.util.GenericDataSource.open(GenericDataSource.java:668)
	at
org.apache.struts.action.ActionServlet.initDataSources(ActionServlet.java:10
77)
	at org.apache.struts.action.ActionServlet.init(ActionServlet.java:471)
	at javax.servlet.GenericServlet.init(GenericServlet.java:258)
	at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:91
6)
	at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:808)
	at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3266)
	at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3395)
	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:785)
	at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:454)
	at org.apache.catalina.core.StandardHost.install(StandardHost.java:714)
	at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:300)
	at org.apache.catalina.startup.HostConfig.start(HostConfig.java:389)
	at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:232)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSuppor
t.java:155)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1131)
	at org.apache.catalina.core.StandardHost.start(StandardHost.java:614)
	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)
	at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:343)
	at org.apache.catalina.core.StandardService.start(StandardService.java:388)
	at org.apache.catalina.core.StandardServer.start(StandardServer.java:506)
	at org.apache.catalina.startup.Catalina.start(Catalina.java:781)
	at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
	at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39
)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
	at java.lang.reflect.Method.invoke(Method.java:324)
	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)

2002-06-10 16:58:50 ThirdPartyServlet: init
2002-06-10 16:58:50 StandardWrapper[/sso:default]: Loading container servlet
default
2002-06-10 16:58:50 default: init
2002-06-10 16:58:50 logger-init: init
2002-06-10 16:58:51 StandardWrapper[/sso:invoker]: Loading container servlet
invoker
2002-06-10 16:58:51 invoker: init
2002-06-10 16:58:51 session: init
2002-06-10 16:58:51 jsp: init
++++++++++++++++++++++++++++++++


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>