Return-Path: Delivered-To: apmail-incubator-jspwiki-user-archive@minotaur.apache.org Received: (qmail 97944 invoked from network); 22 Jul 2009 18:47:43 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 22 Jul 2009 18:47:43 -0000 Received: (qmail 25059 invoked by uid 500); 22 Jul 2009 18:48:48 -0000 Delivered-To: apmail-incubator-jspwiki-user-archive@incubator.apache.org Received: (qmail 25004 invoked by uid 500); 22 Jul 2009 18:48:48 -0000 Mailing-List: contact jspwiki-user-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jspwiki-user@incubator.apache.org Delivered-To: mailing list jspwiki-user@incubator.apache.org Received: (qmail 24993 invoked by uid 99); 22 Jul 2009 18:48:48 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 22 Jul 2009 18:48:48 +0000 X-ASF-Spam-Status: No, hits=-4.0 required=10.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [192.18.98.36] (HELO brmea-mail-4.sun.com) (192.18.98.36) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 22 Jul 2009 18:48:36 +0000 Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n6MImFHA001439 for ; Wed, 22 Jul 2009 18:48:15 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII; format=flowed Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KN700F0057I3000@mail-amer.sun.com> for jspwiki-user@incubator.apache.org; Wed, 22 Jul 2009 12:48:15 -0600 (MDT) Received: from [129.150.36.102] ([unknown] [129.150.36.102]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KN7003EY5JQ3X70@mail-amer.sun.com>; Wed, 22 Jul 2009 12:47:51 -0600 (MDT) Date: Wed, 22 Jul 2009 11:47:48 -0700 From: Paul Sterk Subject: Re: ProtectionDomain failure In-reply-to: <4A660746.2020206@sun.com> Sender: Paul.Sterk@Sun.COM To: jspwiki-user@incubator.apache.org Message-id: <4A675ED4.7030709@sun.com> References: <4A64E29D.7090500@sun.com> <74B9B8FC-4E5B-4ABA-ACDE-2F65DC669151@ecyrd.com> <4A64F41B.9060905@sun.com> <4A660746.2020206@sun.com> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1b3pre) Gecko/20090223 Thunderbird/3.0b2 X-Virus-Checked: Checked by ClamAV on apache.org Ok. I was able to make no headway. So, I did the following: 1) Completely removed JSPWiki 2.4 and GlassFish v2u1 2) Did a new install of GlassFish v2u1 3) Downloaded JSPWiki 2.8.2 (latest stable release) 4) Renamed JSPWiki.war to appserver.war 4) Deployed appserver.war 5) Entered this URL in my browser: localhost:/appserver/Install.jsp I immediately see the permission failure below. Is this right? JSPWiki.jar is not signed in version 2.8.2. Why am I getting JACC domain failure? If I try to continue, I see further permission failure messages in the log file, and authentication fails to work. Please help - this is a roadblock for my deployment! Thanks, Paul [#|2009-07-22T11:31:57.553-0700|INFO|sun-appserver9.1|javax.enterprise.system.core.security|_ThreadID=19;_ThreadName=httpSSLWorkerThread-80-1;|JACC Policy Provider: PolicyWrapper.implies, context(nul )- permission(("com.ecyrd.jspwiki.auth.permissions.AllPermission","JSPWiki")) domain that failed(ProtectionDomain (file:/storage/glassfishwiki/server/glassfish_v2u1/domains/domain1/applications/j2ee modules/appserver/WEB-INF/lib/JSPWiki.jar ) WebappClassLoader delegate: true repositories: /WEB-INF/classes/ ----------> Parent Classloader: EJBClassLoader : urlSet = [] doneCalled = false Parent -> java.net.URLClassLoader@173eca6 (principals com.ecyrd.jspwiki.auth.authorize.Role "Anonymous", com.ecyrd.jspwiki.auth.WikiPrincipal "192.18.101.5", com.ecyrd.jspwiki.auth.authorize.Role "All") java.security.Permissions@7e4019 ( (java.net.SocketPermission localhost:1024- listen,resolve) (java.net.SocketPermission * connect,resolve) (javax.management.MBeanTrustPermission register) (javax.management.MBeanPermission [com.sun.messaging.jms.*:*] *) (javax.security.auth.PrivateCredentialPermission javax.resource.spi.security.PasswordCredential * "*" read) (java.util.PropertyPermission line.separator read) (java.util.PropertyPermission java.vm.version read) (java.util.PropertyPermission java.vm.specification.version read) (java.util.PropertyPermission java.vm.specification.vendor read) (java.util.PropertyPermission java.vendor.url read) (java.util.PropertyPermission java.vm.name read) (java.util.PropertyPermission * read,write) (java.util.PropertyPermission os.name read) (java.util.PropertyPermission java.vm.vendor read) (java.util.PropertyPermission path.separator read) (java.util.PropertyPermission java.specification.name read) (java.util.PropertyPermission os.version read) (java.util.PropertyPermission os.arch read) (java.util.PropertyPermission java.class.version read) (java.util.PropertyPermission java.version read) (java.util.PropertyPermission file.separator read) (java.util.PropertyPermission java.vendor read) (java.util.PropertyPermission java.vm.specification.name read) (java.util.PropertyPermission java.specification.version read) (java.util.PropertyPermission java.specification.vendor read) (java.lang.RuntimePermission getClassLoader) (java.lang.RuntimePermission loadLibrary.*) (java.lang.RuntimePermission accessDeclaredMembers) (java.lang.RuntimePermission getProtectionDomain) (java.lang.RuntimePermission modifyThreadGroup) (java.lang.RuntimePermission stopThread) (java.lang.RuntimePermission setContextClassLoader) (java.lang.RuntimePermission queuePrintJob) (java.io.FilePermission /var/tmp//- delete) (java.io.FilePermission /storage/glassfishwiki/server/glassfish_v2u1/domains/domain1/lib/databases/- delete) (java.io.FilePermission <> read,write) (java.io.FilePermission /storage/glassfishwiki/server/glassfish_v2u1/domains/domain1/applications/j2ee-modules/appserver/WEB-INF/lib/JSPWiki.jar read) (unresolved com.sun.corba.ee.impl.presentation.rmi.DynamicAccessPermission access null) (unresolved com.sun.enterprise.security.CORBAObjectPermission * *) ) )|#]