Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Received-SPF: pass (asf.osuosl.org: local policy)
Message-ID: <42F2168B.7000502@kippdata.de>
Date: Thu, 04 Aug 2005 15:22:19 +0200
From: Rainer Jung <tomcat-user@kippdata.de>
User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.7.3) Gecko/20040910
MIME-Version: 1.0
To: Tomcat Users List <tomcat-user@jakarta.apache.org>
Subject: Re: HELP: Tomcat 5.5.9 with jsvc as low priviledges user on Linux
 fails in Bootstrap
References: <BAY103-F33C406BC8FAD252B0AF010D5C20@phx.gbl>
In-Reply-To: <BAY103-F33C406BC8FAD252B0AF010D5C20@phx.gbl>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

CVS head now includes an improvement:

1) If the directory containing tomcat-users.xml is not writeable you 
will get a nice warning instead of a strange exception.
2) You can configure the MemoryUserDatabase with the attribute 
readonly="true". Then there will be not write attempt at all.

Details under

http://issues.apache.org/bugzilla/show_bug.cgi?id=36020

Will be included in 5.5.11 most probably sometime during august.

MC Moisei wrote:

> Hi,
> 
> I manage to configure my tomcat with jsvc(common-daemon) and everything 
> work great till I start to launch it as root. If I run it as tomcat user 
> it does work great. If I try to run it as root from command prompt or 
> from init.d I get the following exception ( see below )
> 
> Right are given as below
> chown -R tomcat:tomcat /usr/local/tomcat
> chown -R root:root /usr/local/tomcat/bin
> chown -R root:root /usr/local/tomcat/common
> 
> This is not right - looks like the bootstrap is trying to access the 
> Realm and there is no write access to the conf/tomcat-users.xml file. I 
> can't believe the common-daemon not tomcat side didn't say a thing about 
> this, I bet there are others experiencing the matter.
> Do i have to disable Tomcat realms ? It doesn't sounds right. There is 
> no way I'd give "others" write access on that.
> 
> Looking forward to hear from you if you experienced something similar.
> Thanks,
> MC
> 
> 
> 
> 
> Aug 1, 2005 7:23:15 PM org.apache.naming.NamingContext lookup
> WARNING: Unexpected exception resolving reference
> java.io.FileNotFoundException: 
> /usr/local/tomcat/tomcat_home/conf/tomcat-users.xml.new (Permission denied)
>     at java.io.FileOutputStream.open(Native Method)
>     at java.io.FileOutputStream.<init>(FileOutputStream.java:179)
>     at java.io.FileOutputStream.<init>(FileOutputStream.java:131)
>     at 
> org.apache.catalina.users.MemoryUserDatabase.save(MemoryUserDatabase.java:462) 
> 
>     at 
> org.apache.catalina.users.MemoryUserDatabaseFactory.getObjectInstance(MemoryUserDatabaseFactory.java:98) 
> 
>     at 
> org.apache.naming.factory.ResourceFactory.getObjectInstance(ResourceFactory.java:129) 
> 
>     at 
> javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:301)
>     at org.apache.naming.NamingContext.lookup(NamingContext.java:792)
>     at org.apache.naming.NamingContext.lookup(NamingContext.java:152)
>     at 
> org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.createMBeans(GlobalResourcesLifecycleListener.java:138) 
> 
>     at 
> org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.createMBeans(GlobalResourcesLifecycleListener.java:108) 
> 
>     at 
> org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.lifecycleEvent(GlobalResourcesLifecycleListener.java:80) 
> 
>     at 
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119) 
> 
>     at 
> org.apache.catalina.core.StandardServer.start(StandardServer.java:676)
>     at org.apache.catalina.startup.Catalina.start(Catalina.java:537)
>     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>     at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
> 
>     at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
> 
>     at java.lang.reflect.Method.invoke(Method.java:324)
>     at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:271)
>     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>     at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
> 
>     at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
> 
>     at java.lang.reflect.Method.invoke(Method.java:324)
>     at 
> org.apache.commons.daemon.support.DaemonLoader.start(DaemonLoader.java:218)
> Aug 1, 2005 7:23:15 PM 
> org.apache.catalina.mbeans.GlobalResourcesLifecycleListener createMBeans
> SEVERE: Exception processing Global JNDI Resources
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org