tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From George Sexton <gsex...@mhsoftware.com>
Subject Re: 5.5.27 candidate binaries
Date Sat, 30 Aug 2008 15:59:11 GMT
Unfortunately, its broken when you run with security enabled.

I worked with Mark Thomas on this on 5.5.26, and he sent me a patch to 
JULI. It looks like it didn't make it in. This issue causes a start up 
error for every context, plus for me, it breaks my app.

Here's a URL to the patch Mark provided me with:

http://www.mhsoftware.com/~gsexton/juli_patch.diff


Here is the stack trace:

[ERROR] [iCalImporter] - Servlet.service() for servlet iCalImporter 
threw exception <java.security.AccessControlException: access denied 
(java.io.FilePermission 
/home/gsexton/ROOT/WEB-INF/classes/logging.properties 
read)>java.security.AccessControlException: access denied 
(java.io.FilePermission 
/home/gsexton/ROOT/WEB-INF/classes/logging.properties read)
	at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
	at 
java.security.AccessController.checkPermission(AccessController.java:546)
	at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
	at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
	at java.io.File.exists(File.java:731)
	at org.apache.naming.resources.FileDirContext.file(FileDirContext.java:828)
	at 
org.apache.naming.resources.FileDirContext.lookup(FileDirContext.java:211)
	at 
org.apache.naming.resources.ProxyDirContext.lookup(ProxyDirContext.java:294)
	at 
org.apache.catalina.loader.WebappClassLoader.findResourceInternal(WebappClassLoader.java:1948)
	at 
org.apache.catalina.loader.WebappClassLoader.findResource(WebappClassLoader.java:960)
	at 
org.apache.juli.ClassLoaderLogManager.readConfiguration(ClassLoaderLogManager.java:298)
	at 
org.apache.juli.ClassLoaderLogManager$2.run(ClassLoaderLogManager.java:273)
	at java.security.AccessController.doPrivileged(Native Method)
	at 
org.apache.juli.ClassLoaderLogManager.getClassLoaderInfo(ClassLoaderLogManager.java:270)
	at 
org.apache.juli.ClassLoaderLogManager.getLogger(ClassLoaderLogManager.java:175)
	at java.util.logging.Logger.getLogger(Logger.java:275)
	at 
sun.net.www.protocol.http.HttpURLConnection.<clinit>(HttpURLConnection.java:63)
	at sun.net.www.protocol.http.Handler.openConnection(Handler.java:44)
	at sun.net.www.protocol.http.Handler.openConnection(Handler.java:39)
	at java.net.URL.openConnection(URL.java:945)
	at com.mhsoftware.cdaily.servlet.iCalImporter.doPost(iCalImporter.java:231)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:647)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
	at sun.reflect.GeneratedMethodAccessor53.invoke(Unknown Source)
	at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:597)
	at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
	at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
	at 
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
	at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:262)
	at 
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:52)
	at 
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:171)
	at java.security.AccessController.doPrivileged(Native Method)
	at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:167)
	at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
	at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)
	at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:548)
	at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
	at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
	at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
	at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
	at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:875)
	at 
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
	at 
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
	at 
org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
	at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
	at java.lang.Thread.run(Thread.java:619)



Filip Hanik - Dev Lists wrote:
> http://people.apache.org/~fhanik/tomcat/tomcat-5.5/v5.5.27/
> 
> Unless I hear some complaints, I will be posting a vote on Monday
> 
> Filip
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
> 

-- 
George Sexton
MH Software, Inc.
Voice: +1 303 438 9585
URL:   http://www.mhsoftware.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message