You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@commons.apache.org by Wolfgang Wagner <ww...@gmail.com> on 2008/05/28 09:39:12 UTC
[commons-logging] cannot use commons-logging (or any library that uses it) in secure client
Hi
I have a problem starting my client in a secure context when I use a
library that uses commons-logging. (e.g. spring)
Exception in thread "AWT-EventQueue-0" java.lang.ExceptionInInitializerError
at org.springframework.util.ClassUtils.<clinit>(Class Utils.java:73)
at org.springframework.core.io.DefaultResourceLoader.
<init>(DefaultResourceLoader.java:52)
(...)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied
(java.util.PropertyPermission
org.apache.commons.logging.LogFactory.HashtableImp l read)
at java.security.AccessControlContext.checkPermission (Unknown Source)
at java.security.AccessController.checkPermission(Unk nown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unkn own Source)
at java.lang.System.getProperty(Unknown Source)
at org.apache.commons.logging.LogFactory.createFactor
yStore(LogFactory.java:320)
at org.apache.commons.logging.LogFactory.<clinit>(Log Factory.java:1725)
... 34 more
private static final Hashtable createFactoryStore() {
Hashtable result = null;
String storeImplementationClass
= System.getProperty(HASHTABLE_IMPLEMENTATION_PROPER TY);
if (storeImplementationClass == null) {
storeImplementationClass = WEAK_HASHTABLE_CLASSNAME;
I do not get the Problem If I sign the jars and use the
'permision-all' tag in my jnlp, but that is not what I want.
Does anyone have an idea how to overcome that problem ???
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@commons.apache.org
For additional commands, e-mail: user-help@commons.apache.org
Re: [commons-logging] cannot use commons-logging (or any library that uses it) in secure client
Posted by Wolfgang Wagner <ww...@gmail.com>.
Thanks that helped
2008/5/28 simon.kitching@chello.at <si...@chello.at>:
> Wolfgang Wagner schrieb:
>> Hi
>> I have a problem starting my client in a secure context when I use a
>> library that uses commons-logging. (e.g. spring)
>>
>> Exception in thread "AWT-EventQueue-0" java.lang.ExceptionInInitializerError
>> at org.springframework.util.ClassUtils.<clinit>(Class Utils.java:73)
>> at org.springframework.core.io.DefaultResourceLoader.
>> <init>(DefaultResourceLoader.java:52)
>> (...)
>> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
>> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
>> at java.awt.EventDispatchThread.run(Unknown Source)
>> Caused by: java.security.AccessControlException: access denied
>> (java.util.PropertyPermission
>> org.apache.commons.logging.LogFactory.HashtableImp l read)
>> at java.security.AccessControlContext.checkPermission (Unknown Source)
>> at java.security.AccessController.checkPermission(Unk nown Source)
>> at java.lang.SecurityManager.checkPermission(Unknown Source)
>> at java.lang.SecurityManager.checkPropertyAccess(Unkn own Source)
>> at java.lang.System.getProperty(Unknown Source)
>> at org.apache.commons.logging.LogFactory.createFactor
>> yStore(LogFactory.java:320)
>> at org.apache.commons.logging.LogFactory.<clinit>(Log Factory.java:1725)
>> ... 34 more
>>
>> private static final Hashtable createFactoryStore() {
>> Hashtable result = null;
>> String storeImplementationClass
>> = System.getProperty(HASHTABLE_IMPLEMENTATION_PROPER TY);
>> if (storeImplementationClass == null) {
>> storeImplementationClass = WEAK_HASHTABLE_CLASSNAME;
>>
>>
>> I do not get the Problem If I sign the jars and use the
>> 'permision-all' tag in my jnlp, but that is not what I want.
>>
>> Does anyone have an idea how to overcome that problem ???
>>
>
> Are you using commons-logging version 1.1.1? If not, then try it as
> there was a security-related problem fixed in that release (see release
> notes).
>
> Regards,
> Simon
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@commons.apache.org
> For additional commands, e-mail: user-help@commons.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@commons.apache.org
For additional commands, e-mail: user-help@commons.apache.org
Re: [commons-logging] cannot use commons-logging (or any library
that uses it) in secure client
Posted by "simon.kitching@chello.at" <si...@chello.at>.
Wolfgang Wagner schrieb:
> Hi
> I have a problem starting my client in a secure context when I use a
> library that uses commons-logging. (e.g. spring)
>
> Exception in thread "AWT-EventQueue-0" java.lang.ExceptionInInitializerError
> at org.springframework.util.ClassUtils.<clinit>(Class Utils.java:73)
> at org.springframework.core.io.DefaultResourceLoader.
> <init>(DefaultResourceLoader.java:52)
> (...)
> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
> at java.awt.EventDispatchThread.run(Unknown Source)
> Caused by: java.security.AccessControlException: access denied
> (java.util.PropertyPermission
> org.apache.commons.logging.LogFactory.HashtableImp l read)
> at java.security.AccessControlContext.checkPermission (Unknown Source)
> at java.security.AccessController.checkPermission(Unk nown Source)
> at java.lang.SecurityManager.checkPermission(Unknown Source)
> at java.lang.SecurityManager.checkPropertyAccess(Unkn own Source)
> at java.lang.System.getProperty(Unknown Source)
> at org.apache.commons.logging.LogFactory.createFactor
> yStore(LogFactory.java:320)
> at org.apache.commons.logging.LogFactory.<clinit>(Log Factory.java:1725)
> ... 34 more
>
> private static final Hashtable createFactoryStore() {
> Hashtable result = null;
> String storeImplementationClass
> = System.getProperty(HASHTABLE_IMPLEMENTATION_PROPER TY);
> if (storeImplementationClass == null) {
> storeImplementationClass = WEAK_HASHTABLE_CLASSNAME;
>
>
> I do not get the Problem If I sign the jars and use the
> 'permision-all' tag in my jnlp, but that is not what I want.
>
> Does anyone have an idea how to overcome that problem ???
>
Are you using commons-logging version 1.1.1? If not, then try it as
there was a security-related problem fixed in that release (see release
notes).
Regards,
Simon
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@commons.apache.org
For additional commands, e-mail: user-help@commons.apache.org