tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: Unable to access Global JNDI Resource
Date Mon, 03 Oct 2016 17:52:07 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Chinoy,

On 9/30/16 12:24 PM, Chinoy Gupta wrote:
> But the same thing is working in 8.0.36.

I'm very sorry, I must have read your originally message incorrectly.

I was thinking you were trying to map the UserDatabaseRealm into your
web application, and not just the password.

Apologies for the noise,
- -chris

> On Fri, Sep 30, 2016 at 9:33 PM +0530, "Christopher Schultz"
> <chris@christopherschultz.net<mailto:chris@christopherschultz.net>>
> wrote:
> 
> Chinoy,
> 
> On 9/30/16 8:34 AM, Chinoy Gupta wrote:
>> Hi Mark,
> 
>> The following is added in server.xml:
> 
>> <GlobalNamingResources> <!-- Editable user database that can
>> also be used by UserDatabaseRealm to authenticate users -->
>> <Resource name="UserDatabase" auth="Container" 
>> type="org.apache.catalina.UserDatabase" description="User
>> database that can be updated and saved" 
>> factory="org.apache.catalina.users.MemoryUserDatabaseFactory" 
>> pathname="conf/tomcat-users.xml" />
> 
>> <Environment name="my/secret/password" value="JohnDoe" 
>> type="java.lang.String"/> </GlobalNamingResources>
> 
>> And the following is added in context.xml:
> 
>> <Environment name="my/local/test" value="local test" 
>> type="java.lang.String" override="false"/> <ResourceLink 
>> name="my/secret/password" global="my/secret/password" 
>> type="java.lang.String" />
> 
>> If I try to get "my/local/test", it works and I get "local
>> test". But if I try to get " my/secret/password", it returns
>> NULL.
> 
> You aren't mapping it correctly.
> 
> Please have another look at the documentation for <ResourceLink>.
> 
> -chris
> 
>> -----Original Message----- From: Mark Thomas 
>> [mailto:markt@apache.org] Sent: Friday, September 30, 2016 6:00
>> PM To: Tomcat Users List <users@tomcat.apache.org> Subject: Re:
>> Unable to access Global JNDI Resource
> 
>> On 30/09/2016 13:20, Chinoy Gupta wrote:
>>> Hi Mark,
>>> 
>>> This is my stacktrace:
>>> 
>>> ResourceLinkFactory.validateGlobalResourceAccess(String) line: 
>>> 109 ResourceLinkFactory.getObjectInstance(Object, Name,
>>> Context, Hashtable<?,?>) line: 142
>>> NamingManager.getObjectInstance(Object, Name, Context,
>>> Hashtable<?,?>) line: 321 NamingContext.lookup(Name, boolean)
>>> line: 847 NamingContext.lookup(Name) line: 158
>>> NamingContext.lookup(Name, boolean) line: 835
>>> NamingContext.lookup(Name) line: 158 NamingContext.lookup(Name,
>>> boolean) line: 835 NamingContext.lookup(String) line: 172
>>> 
>>> validateGlobalResourceAccess function returns false and then 
>>> getObjectInstance returns NULL.
> 
>> You haven't defined a ResourceLink.
> 
>> Mark
> 
>>> 
>>> Regards, Chinoy
>>> 
>>> 
>>> -----Original Message----- From: Mark Thomas 
>>> [mailto:markt@apache.org] Sent: Friday, September 30, 2016
>>> 5:28 PM To: Tomcat Users List <users@tomcat.apache.org>
>>> Subject: Re: Unable to access Global JNDI Resource
>>> 
>>> On 30/09/2016 12:50, Chinoy Gupta wrote:
>>>> I am getting NULL instead of the resource's value. I
>>>> debugged the tomcat code and figured out that in 
>>>> ResourceLinkFactory.java, before fetching the resource there
>>>> is a validation based on current classloader. That
>>>> validation fails and tomcat returns NULL.
>>> 
>>> The above statement is not correct. If the class loader based 
>>> validation fails, Tomcat throws an exception. It does not
>>> return null.
>>> 
>>> Mark
>>> 
>>>> 
>>>> -----Original Message----- From: Mark Thomas 
>>>> [mailto:markt@apache.org] Sent: Friday, September 30, 2016
>>>> 4:11 PM To: Tomcat Users List <users@tomcat.apache.org>
>>>> Subject: Re: Unable to access Global JNDI Resource
>>>> 
>>>> On 30/09/2016 11:30, Chinoy Gupta wrote:
>>>>> Hi,
>>>>> 
>>>>> I have a web application which runs on tomcat. In
>>>>> server.xml, I provide some resources under
>>>>> "<GlobalNamingResources> section" and then provide a
>>>>> ResourceLink to the same in context.xml. And then I fetch
>>>>> that resource in my application. This was working properly
>>>>> earlier but started breaking with 8.0.37.
>>>> 
>>>> Define breaking. Ideally with a stack trace.
>>>> 
>>>> Mark
>>>> 
>>>> 
>>>>> I think the reason is the extra validation check
>>>>> introduced in ResourceLinkFactory class. My application has
>>>>> its own classloader and when I try to fetch the JNDI
>>>>> resource, the Thread's classloader is my custom one rather
>>>>> than the default one. Because of that validation fails and
>>>>> tomcat returns NULL. Is there a way to fix this through
>>>>> configuration or any other means?
>>>>> 
>>>>> Regards, Chinoy
>>>>> 
>>>>> 
>>>> 
>>>> 
>>>> -------------------------------------------------------------------
- -
>
>>>> 
- -
>>>> 
>>>> 
>>> 
>>>> 
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>>> For additional commands, e-mail:
>>>> users-help@tomcat.apache.org
>>>> 
>>>> 
>>>> -------------------------------------------------------------------
- -
>
>>>> 
- -
>>>> 
>>>> 
>>> 
>>>> 
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>>> For additional commands, e-mail:
>>>> users-help@tomcat.apache.org
>>>> 
>>> 
>>> 
>>> --------------------------------------------------------------------
- -
>>>
>>>
>
>>> 
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>> 
>>> 
>>> --------------------------------------------------------------------
- -
>>>
>>>
>
>>> 
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>> 
> 
> 
>> ---------------------------------------------------------------------
>
>> 
> 
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
>> ---------------------------------------------------------------------
>
>> 
> 
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> ---------------------------------------------------------------------
>
> 
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=TswG
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message