xml-apis dependency causes sax parser exception in tomcqt with java security mgr enabled

[Shawn McKinney]

Hello,

This is an FYI not a bug (yet)...

The ldap api has a dependency on xml-apis jar.  I can verify this by running 
mvn dependency:tree

[INFO] |  |     +- org.apache.directory.api:api-all:jar:1.0.0:compile
[INFO] |  |     |  +- xml-apis:xml-apis:jar:1.0.b2:compile

Which causes trouble when the Fortress Realm is runnning inside tomcat with 
java security manager enabled.  Here's the exception reported in tomcat logs:

Caused by: javax.xml.parsers.FactoryConfigurationError: Provider for 
javax.xml.parsers.SAXParserFactory cannot be found

I can work around it by adding an exclusion to the fortress core's pom file:

    <dependency>
      <groupId>org.apache.directory.api</groupId>
      <artifactId>api-all</artifactId>
      <version>${version.api.all}</version>
      <type>jar</type>
      <exclusions>
        <exclusion>
          <groupId>xml-apis</groupId>
          <artifactId>xml-apis</artifactId>
        </exclusion>
      </exclusions>
    </dependency>

It's worth noting this issue first appeared when running tomcat with -security 
enabled.  Not sure if others using the api have experienced similar 
difficulties in Tomcat.  

I've still got some more testing / investigating to do before commiting the 
change or providing recommendations wrt change to api, if any.  We shall see.

Thanks

Shawn