Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>
Date: 21 Mar 2002 13:02:17 -0000
Message-ID: <20020321130217.3569.qmail@nagoya.betaversion.org>
From: bugzilla@apache.org
To: tomcat-dev@jakarta.apache.org
Cc: 
Subject: DO NOT REPLY [Bug 7319] New:  -
    codeBase in catalina.policy broken with jars

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7319>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7319

codeBase in catalina.policy broken with jars

           Summary: codeBase in catalina.policy broken with jars
           Product: Tomcat 4
           Version: 4.0.3 Final
          Platform: PC
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: kim@deepfx.com


I'm struggling with this for weeks now: with pre-4.0.3 releases, I was unable 
to grant permissions to my webapp using codeBase. Just specifiying "grant {}" 
worked fine, however. After upgrading to 4.0.3, the following happens if I 
start Tomcat with "-security" and using the default catalina.policy:

Exception initializing TldLocationsCache: XML parsing error on file /WEB-
INF/web.xml: Internal Error: File /javax/servlet/resources/web-app_2_3.dtd not 
found

This just appears in the logfile (no AccessControlException is thrown) and 
prevents my webapp from working as the web.xml is obviously not parsed and 
therefore no init-params are available to my servlets.

I'm not too familiar with the Tomcat source but after playing around for a 
while I'm convinced that it has something to do with the codeBase applied to 
jar files: everything works fine if I unpack ALL jars (from my webapp, my libs 
as well as the jars that come with tomcat) or if I simply omit "codeBase" in 
catalina.policy (which is obviously just like running Tomcat without 
SecurityManager).

--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>