Julien Cochennec a écrit :
Marteau Christophe a écrit :
For any tomcat6 errors, you can look in the "catalina.out" or
"catalina.<date>.log" log files (probably in var/log/tomcat6)
Great! It was there, I found many "Severe errors", in the log file, a
few ones here, the log File is heavy :
16 juil. 2009 14:49:46 org.apache.catalina.core.StandardContext
listenerStart
SEVERE: Erreur lors de la configuration de la classe d'???coute de
l'application (application listener)
org.jasig.cas.web.init.SafeContextLoaderListener
java.lang.ExceptionInInitializerError
at
org.jasig.cas.web.init.SafeContextLoaderListener.<init>(SafeContextLoaderListener.java:49)
...
Caused by: java.security.AccessControlException: access denied
(java.util.PropertyPermission
org.apache.commons.logging.LogFactory.HashtableImpl read)
I can give you ways for searching your error. It seems to be right
permissions onto files.
be sure that your cas webapps owner is the same as the tomcat process
launcher and he has write permissions on files (maybe only log file is
sufficient).
be sure that your cas user can write on tomcat directories : logs
webapps work temp conf/Catalina
an other way is to check conf/catalina.policy and verifying rights
permissions for the cas webapp. I think a line like this can allow the
cas webapp
grant codeBase "file:/var/lib/tomcat6/webapps/cas/-" {
permission java.security.AllPermission;
};
Christophe M.
So I guess it looks like I failed the security disabling options in
the JaSig Documentation, am I right?
Glad to see french people round here, my goal is to provide a Cas SSO
to my high school, cause in our region, thousands of high schools have
the same LDAP and IP configuration, if I succeed, other admins will
just have to copy/paste my work. I have to make it very simple and
complete.
Thanks a lot Christophe.
You can make cas debugging enabled by changing parameters in this
file (you had to reload tomcat after) :
tomcat6/webapps/cas/WEB-INF/classes/log4j.properties
I did that too, I just had to remove # at the end of the file, right?
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
