Issue Type: Bug Bug
Affects Versions: 1.8.2, 1.8.1, 1.8.0, 1.7.2, 1.7.1, 1.7.0, 1.6.2, 1.6.1, 1.6.0, 1.5.2, 1.5.1, 1.5.0
Assignee: Unassigned
Components: DSpace API, JSPUI
Created: 30/May/12 11:10 AM
Description: Context

- Tomcat 6 with multiple hosts with one application per host (DSpace is one of them).
- Local SMTP server with no Authentication required

Problem

As the Javamail API documentation[1] states, the method getDefaultInstance() - used in DSpace - returns an object shared among the JVM context. If, for some reason, another application (not DSpace) in tomcat refreshes the Authenticator instance within the default session, DSpace will start getting errors when trying to send emails (throwing SecurityException).

Solution

- A simple solution to this problem would be replacing all Session.getDefaultInstance() calls by Session.getInstance().
- Another (more efficient) solution would be defining a singleton, calling the Session.getInstance using some wrapper that would replace all the Session.getDefaultInstance() calls.

Resources

[1] Javamail API getDefaultSession - http://javamail.kenai.com/nonav/javadocs/javax/mail/Session.html#getDefaultInstance(java.util.Properties)
Environment: Unix
Project: DSpace
Labels: Email Javamail Tomcat SecurityException
Priority: Critical Critical
Reporter: João Melo
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to