By default, systemd, allows tomcat to write only under the following
directories:
/etc/tomcat9/Catalina/
/var/lib/tomcat9/webapps/
/var/log/tomcat9/

So, you should override systemd - tomcat settings, to allow writing to any
other directory (/var/log/ in your case).

Add the following in /etc/systemd/system/tomcat9.service.d/override.conf
file (if it's not already there, just create it)

[Service]
ReadWritePaths=/var/log/

If you want to add more directories add more ReadWritePaths=xxx entries

Pavlos




On Tue, Feb 11, 2020 at 8:18 PM Ray Bon <[email protected]> wrote:

> tomcat user will need write access to those files. If the files do not
> exist, create them:
> # touch /var/log/cas.log
> # chgrp tomcat /var/log/cas.log
>
> My /var/log has these permissions
> drwxrwxr-x 18 root syslog   4096 Feb 11 00:00 log
>
> so tomcat user can not create those files, it must be done beforehand.
>
> Ray
>
> On Tue, 2020-02-11 at 10:05 -0800, Jérémie Pilette wrote:
>
> I work with Debian 10 / Tomcat 9.0.16
>
> To start : systemctl start tomcat9
>
> root@debian10:~# ps aux | grep tomcat
> tomcat    9793  1.9  3.6 14146344 1197524 ?    Ssl  17:07   1:06 /usr/lib/
> jvm/java-11-openjdk-amd64/bin/java -Djava.util.logging.config.file=/var/
> lib/tomcat9/conf/logging.properties -Djava.util.logging.manager=org.apache
> .juli.ClassLoaderLogManager -Djava.awt.headless=true -Djdk.tls.
> ephemeralDHKeySize=2048 
> -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
> -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 -Dignore.
> endorsed.dirs= -classpath /usr/share/tomcat9/bin/bootstrap.jar:/usr/share/
> tomcat9/bin/tomcat-juli.jar -Dcatalina.base=/var/lib/tomcat9 -Dcatalina.
> home=/usr/share/tomcat9 -Djava.io.tmpdir=/tmp
> org.apache.catalina.startup.Bootstrap start
> root     10085  0.0  0.0   6144   896 pts/0    S+   18:03   0:00 grep
> tomcat
>
>
> Jérémie
>
>
> Le mardi 11 février 2020 19:00:21 UTC+1, rbon a écrit :
>
> How are you starting tomcat?
> Is catalina.out being written to /var/log or is it in TOMCAT_HOME/logs?
>
> To see process owner:
> $ ps aux | grep tomcat
>
> Ray
>
> On Tue, 2020-02-11 at 09:06 -0800, Jérémie Pilette wrote:
>
> Sorry, it is
>
>    - cas.log
>    - cas_audit.log
>
> of course...
>
> --
>
>
> Ray Bon
> Programmer Analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | [email protected]
>
> I respectfully acknowledge that my place of work is located within the
> ancestral, traditional and unceded territory of the Songhees, Esquimalt and
> WSÁNEĆ Nations.
>
> --
>
> Ray Bon
> Programmer Analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | [email protected]
>
> I respectfully acknowledge that my place of work is located within the
> ancestral, traditional and unceded territory of the Songhees, Esquimalt and
> WSÁNEĆ Nations.
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/d1fb4904d98bd038ef7614a1ba3fd6e33f4963c4.camel%40uvic.ca
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/d1fb4904d98bd038ef7614a1ba3fd6e33f4963c4.camel%40uvic.ca?utm_medium=email&utm_source=footer>
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAKP%3DBg0YD2nnt_KBZuGrr8mt3vrzs4fvhVd2XS_DPz%3DMcv%2BwKA%40mail.gmail.com.

Reply via email to