# tomcat-users mailing list archives

##### Site index · List index
Message view
Top
From Andoni <andonil...@eurokom.ie>
Subject Re: How to use -security when running as a service under Windows.
Date Fri, 04 Nov 2005 09:08:05 GMT
Thanks a million for that. It sound like exactly what I need.

I also found this website which gives a way of registering the Tomcat service. I added the
switches to it and that seems to work also, though it is aimed at Tomcat 4 users and yours
seems to be particularly for Tomcat 5 users?

The website is here:
http://www.prabhums.org/wordpress/index.php/archives/2004/05/03/run-tomcat-as-a-windows-service/

I modified it's command slightly to get it to work for me (I didn't have the right .dll in
the right place). This works for me.

set SECURITY_POLICY_FILE=%CATALINA_BASE%\conf\catalina.policy
%CATALINA_HOME%\bin\tomcat -install "Apache Tomcat" "%JAVA_HOME%\jre\bin\server\jvm.dll" -Djava.class.path="%CATALINA_HOME%\bin\bootstrap.jar;%JAVA_HOME%\libtools.jar"
-Djava.security.manager -Djava.security.policy=="%SECURITY_POLICY_FILE%" -Dcatalina.home="%CATALINA_HOME%"
-Xrs -start org.apache.catalina.startup.Bootstrap -params start -stop org.apache.catalina.startup.Bootstrap
-params stop -out "%CATALINA_HOME%\logs\stderr.log"

Andoni.
----- Original Message -----
From: Ken Pawliw
Newsgroups: gmane.comp.jakarta.tomcat.user
Sent: Thursday, November 03, 2005 8:14 PM
Subject: RE: How to use -security when running as a service under Windows.

The Tomcat Windows distibution has an executable named tomcat5w.exe in the
bin directory. Double click the executable, click the Java tab, and add the
following to the Java Options field:
-Djava.security.manager
-Djava.security.policy=C:\path\to\tomcat\conf\catalina.policy

Ken

-----Original Message-----
From: Andoni [mailto:andonilist@eurokom.ie]
Sent: November 3, 2005 2:16 PM
To: Tomcat Users List
Subject: Re: How to use -security when running as a service under
Windows.

Hi,

That's fine, but where do I add these when I am not running Catalina.bat? Or
are you saying that tomcat.exe is just calling catalina.bat?

Andoni.
----- Original Message -----
From: Ken Pawliw
Newsgroups: gmane.comp.jakarta.tomcat.user
Sent: Thursday, November 03, 2005 3:06 PM
Subject: RE: How to use -security when running as a service under Windows.

Thanks to Bill Barker who supplied me with this advice a couple of weeks
ago...

Actually, what you need to do is to add to the Java Options section:
-Djava.security.manager
-Djava.security.policy==C:\path\to\tomcat\conf\catalina.policy

If you look in catalina.bat, you will see that this is what the script is
actually doing when you run it with the '-security' option.

Ken

-----Original Message-----
From: Donovan, JD [mailto:JD.Donovan@NielsenMedia.com]
Sent: November 3, 2005 9:26 AM
To: Tomcat Users List
Subject: RE: How to use -security when running as a service under
Windows.

You're going from OpenVMS to Windows?!?!? WHY?
Why go from the most secure system on the planet to the most exposed?
Just wondering?

jd
Sr.  Systems Engineer
OpenVMS Alpha Support Team
(813) 366-2359
"OpenVMS: When downtime is not an option"

-----Original Message-----
From: Andoni [mailto:andonilist@eurokom.ie]
Sent: Tuesday, November 01, 2005 2:36 PM
To: Tomcat Users List
Subject: How to use -security when running as a service under Windows.

Hello,

I am currently running Tomcat under OpenVMS by calling catalina.bat with
the -security switch to allow it to connect to several RMI servers.

Now that I am moving this app. to windows I want to be able to call the
same switch from my service-driven installation of Tomcat 4.1.
Unfortunately when I go to the properties of the service itself
everything is greyed out so that I cannot add any switches. Also the
program it is running is /bin/tomcat.exe.

What can I do to get this to run with -security option?