Hi Alan Yes, I usually have security on. I followed Hilton's instructions at:
http://wiki.lib.sun.ac.za/index.php/SUNScholar/Prepare_Ubuntu/S05/Ubuntu-14.04 I just tried enabling security on two other 14.04 servers and had the same problem: tomcat won't start: java.security.AccessControlException: access denied ("java.util.PropertyPermission" "java.util.logging.config.class" "read") It does look like something has changed in Ubuntu 14.04 as it's still working on my 16.04 server. This might also be related to the JDK on those machines: 1.7 on 14.04, 1.8 on 16.04. Sean On 25 January 2017 at 16:48, Alan Orth <[email protected]> wrote: > As far as I know DSpace has always required Tomcat security to be turned > off. Were you running it with security on before? > > On Tue, Jan 24, 2017, 10:36 Sean Carte <[email protected]> wrote: > >> Everything was fine until this morning when Tomcat failed to start on a >> couple of servers running Tomcat 7 on Ubuntu Linux 14.04. >> >> Changing TOMCAT7_SECURITY=yes to no in /etc/defaults/tomcat7 allowed the >> server to start. >> >> I have the following in /etc/tomcat7/policy.d/05dspace.policy : >> grant codeBase "file:/dspace/-" { >> permission java.security.AllPermission; >> }; >> grant codeBase "file:/tmp/-" { >> permission java.security.AllPermission; >> }; >> >> And permissions allow it to be world-readable. >> >> I suspect an automated update must have caused the problem, but does >> anybody have any ideas as to what I should do to re-enable security. Or is >> security not that important? >> >> This is from the catalina.out log: >> >> INFO: Spring Service Manager Shutdown... >> Jan 24, 2017 7:54:50 AM org.dspace.servicemanager.DSpaceServiceManager >> shutdown >> INFO: Shutdown DSpace core service manager >> Jan 24, 2017 7:54:50 AM org.dspace.servicemanager.DSpaceKernelImpl stop >> INFO: DSpace kernel shutdown completed and unregistered MBean: >> org.dspace:name=a >> 88be423-2f4a-45e5-b482-dd009c473190,type=DSpaceKernel >> Exception in thread "main" java.lang.ExceptionInInitializerError >> at org.apache.juli.logging.LogFactory.getInstance( >> LogFactory.java:169) >> at org.apache.juli.logging.LogFactory.getInstance( >> LogFactory.java:241) >> at org.apache.juli.logging.LogFactory.getLog(LogFactory.java:292) >> at org.apache.catalina.startup.Bootstrap.<clinit>(Bootstrap. >> java:59) >> Caused by: java.security.AccessControlException: access denied >> ("java.util.Prope >> rtyPermission" "java.util.logging.config.class" "read") >> at java.security.AccessControlContext.checkPermission( >> AccessControlConte >> xt.java:472) >> at java.security.AccessController.checkPermission( >> AccessController.java: >> 685) >> at java.lang.SecurityManager.checkPermission( >> SecurityManager.java:549) >> at java.lang.SecurityManager.checkPropertyAccess( >> SecurityManager.java:12 >> 98) >> at java.lang.System.getProperty(System.java:708) >> at org.apache.juli.logging.DirectJDKLog.<clinit>( >> DirectJDKLog.java:43) >> ... 4 more >> Exception in thread "main" java.lang.ExceptionInInitializerError >> at org.apache.juli.logging.LogFactory.getInstance( >> LogFactory.java:169) >> at org.apache.juli.logging.LogFactory.getInstance( >> LogFactory.java:241) >> at org.apache.juli.logging.LogFactory.getLog(LogFactory.java:292) >> at org.apache.catalina.startup.Bootstrap.<clinit>(Bootstrap. >> java:59) >> Caused by: java.security.AccessControlException: access denied >> ("java.util.PropertyPermission" "java.util.logging.config.class" "read") >> at java.security.AccessControlContext.checkPermission( >> AccessControlContext.java:472) >> at java.security.AccessController.checkPermission( >> AccessController.java:685) >> at java.lang.SecurityManager.checkPermission( >> SecurityManager.java:549) >> at java.lang.SecurityManager.checkPropertyAccess( >> SecurityManager.java:1298) >> at java.lang.System.getProperty(System.java:708) >> at org.apache.juli.logging.DirectJDKLog.<clinit>( >> DirectJDKLog.java:43) >> ... 4 more >> >> >> Sean >> -- >> >> -- >> You received this message because you are subscribed to the Google Groups >> "DSpace Technical Support" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> Visit this group at https://groups.google.com/group/dspace-tech. >> For more options, visit https://groups.google.com/d/optout. >> > -- > > Alan Orth > [email protected] > https://englishbulgaria.net > https://alaninkenya.org > https://mjanja.ch > -- -- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/dspace-tech. For more options, visit https://groups.google.com/d/optout.
