Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm
Message-ID: <3740.192.168.1.20.973811647.squirrel@mail.totalsync.com>
Date: Thu, 9 Nov 2000 15:14:07 -0800 (PST)
Subject: Re: [T4m4] java.lang.SecurityException
From: <satan@totalsync.com>
To: tomcat-dev@jakarta.apache.org
In-Reply-To: <3A0AF974.A79C9608@eng.sun.com>
References: <3A0AF974.A79C9608@eng.sun.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

>satan@totalsync.com wrote:
> 
>> I am trying to run T4m4 with my webapp and I am receiving a
>>
>> java.lang.SecurityException : sealing exception
>>
>> This is because my servlet is trying to instantiate a singleton object
>> in the webapp that reads its config info from a file on the classpath
>> using a mildy modified version of the XML mapper from Tomcat (just
>> renamed the package so I can use it).
>>
>> I was under the assumption that the security stuff didn't run if you
>> just ran bin/startup.sh.  Is that still the case?
>>
> 
> "Sealing violation" problems just started showing up in m4.  The only
> thing I can think of that's different is I compiled with optimization
> on, but it's still under investigation.  As I understand it, a sealing
> violation means you're trying to load a class in a particular package
> from a different JAR file than other classes of that same package were
> found.
> 
> One issue you might run into with the "modified XML mapper" is that, if
> the mapper classes themselves are on the system class path, they won't
> be able to see classes in WEB-INF/classes or WEB-INF/lib/*.jar -- class
> loader delegation goes up the hierarchy, but not down.  You might need
> to ensure that all your classes are under WEB-INF (or all your classes
> are on the classpath) to make this work.
> 
> I ran into exactly this situation with the Digester module in Struts
> <http://jakarta.apache.org/struts>, which is pretty similar in
> principle to XmlMapper, and it is one of the reasons for the
> restriction that struts.jar *must* be in your WEB-INF/lib directory.

Thanks, Craig.  All of my code is in either WEB-INF/classes or WEB-
INF/lib.  One thing I have noted to do in ALL of my java development is to 
NEVER specify a classpath in my environment.  I always make the program 
invoke using its needed classpath.  Less ambiguity that way ;-)

I'll keep looking ;-)

Scott Sanders