Re: -security with 5.0.16 doesn't work

2004-01-15 Thread Jeanfrancois Arcand 


Marten Lehmann wrote:

Hello,

I was setting fine grained permissions to my webapp, but always an 
exception was thrown. So I tried to use

grant {
permission java.security.AllPermission;
};
but even with that, my application doesn't run (which it does without 
-security). When calling the site, I get:

javax.servlet.ServletException: Servlet.init() for servlet action 
threw exception
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:509) 

org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:164) 

org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:805) 

org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:696) 

org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:605) 

org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:677) 

java.lang.Thread.run(Thread.java:568)

root cause

java.lang.SecurityException: java.lang.reflect.InvocationTargetException
javax.security.auth.Subject$5.run(Subject.java:733)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.createContext(Subject.java:717)
javax.security.auth.Subject.doAsPrivileged(Subject.java:708)
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:306) 

org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:200) 

org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:153) 

org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:509) 

org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:164) 

org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:805) 

org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:696) 

org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:605) 

org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:677) 

java.lang.Thread.run(Thread.java:568)

catalina.log says:

INFO: Server startup in 8985 ms
StandardWrapperValve[action]: Allocate exception for servlet action
javax.servlet.ServletException: Servlet.init() for servlet action 
threw exception
javax.servlet.ServletException: Servlet.init() for servlet action 
threw exception
at 
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1086) 

at 
org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:712) 

at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:186) 

at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151) 

at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564) 

at 
org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:245) 

at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:199) 

at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151) 

at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:509) 

at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:149) 

at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564) 

at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:195) 

at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151) 

at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:164) 

at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:149) 

at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564) 

at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:156) 

at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151) 

at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564) 

at 
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:972)
at 
org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:805) 

at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:696) 

at 
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:605) 

at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:677) 

at java.lang.Thread.run(Thread.java:568)

I really don't have an idea wh

RE: -security with 5.0.16 doesn't work

2004-01-15 Thread Shapira, Yoav 

Howdy,
What JDK (including minor version) on what OS is this?

Yoav Shapira
Millennium ChemInformatics


>-Original Message-
>From: Marten Lehmann [mailto:[EMAIL PROTECTED]
>Sent: Thursday, January 15, 2004 8:14 AM
>To: '[EMAIL PROTECTED]'
>Subject: -security with 5.0.16 doesn't work
>
>Hello,
>
>I was setting fine grained permissions to my webapp, but always an
>exception was thrown. So I tried to use
>
>grant {
> permission java.security.AllPermission;
>};
>
>but even with that, my application doesn't run (which it does without
>-security). When calling the site, I get:
>
>javax.servlet.ServletException: Servlet.init() for servlet action threw
>exception
>org.apache.catalina.authenticator.AuthenticatorBase.invoke(Authenticato
rBas
>e.java:509)
>org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.jav
a:16
>4)
>org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
>org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:8
05)
>org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process
Conn
>ection(Http11Protocol.java:696)
>org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:6
05)
>org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPoo
l.ja
>va:677)
>   java.lang.Thread.run(Thread.java:568)
>
>root cause
>
>java.lang.SecurityException:
java.lang.reflect.InvocationTargetException
>   javax.security.auth.Subject$5.run(Subject.java:733)
>   java.security.AccessController.doPrivileged(Native Method)
>   javax.security.auth.Subject.createContext(Subject.java:717)
>   javax.security.auth.Subject.doAsPrivileged(Subject.java:708)
>
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:3
>06)
>org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.ja
va:2
>00)
>org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.ja
va:1
>53)
>org.apache.catalina.authenticator.AuthenticatorBase.invoke(Authenticato
rBas
>e.java:509)
>org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.jav
a:16
>4)
>org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
>org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:8
05)
>org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process
Conn
>ection(Http11Protocol.java:696)
>org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:6
05)
>org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPoo
l.ja
>va:677)
>   java.lang.Thread.run(Thread.java:568)
>
>catalina.log says:
>
>INFO: Server startup in 8985 ms
>StandardWrapperValve[action]: Allocate exception for servlet action
>javax.servlet.ServletException: Servlet.init() for servlet action threw
>exception
>javax.servlet.ServletException: Servlet.init() for servlet action threw
>exception
> at
>org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.ja
va:1
>086)
> at
>org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:
712)
> at
>org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperVal
ve.j
>ava:186)
> at
>org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveC
onte
>xt.java:151)
> at
>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:
564)
> at
>org.apache.catalina.core.StandardContextValve.invokeInternal(StandardCo
ntex
>tValve.java:245)
> at
>org.apache.catalina.core.StandardContextValve.invoke(StandardContextVal
ve.j
>ava:199)
> at
>org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveC
onte
>xt.java:151)
> at
>org.apache.catalina.authenticator.AuthenticatorBase.invoke(Authenticato
rBas
>e.java:509)
> at
>org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveC
onte
>xt.java:149)
> at
>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:
564)
> at
>org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.jav
a:19
>5)
> at
>org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveC
onte
>xt.java:151)
> at
>org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.jav
a:16
>4)
> at
>org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveC
onte
>xt.java:149)
> at
>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:
564)
> at
>org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve
.jav
>a:156)
> at
>org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv

-security with 5.0.16 doesn't work

2004-01-15 Thread Marten Lehmann 
Hello,

I was setting fine grained permissions to my webapp, but always an 
exception was thrown. So I tried to use

grant {
permission java.security.AllPermission;
};
but even with that, my application doesn't run (which it does without 
-security). When calling the site, I get:

javax.servlet.ServletException: Servlet.init() for servlet action threw 
exception
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:509)
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:164)
org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:805)
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:696)
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:605)
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:677)
	java.lang.Thread.run(Thread.java:568)

root cause

java.lang.SecurityException: java.lang.reflect.InvocationTargetException
javax.security.auth.Subject$5.run(Subject.java:733)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.createContext(Subject.java:717)
javax.security.auth.Subject.doAsPrivileged(Subject.java:708)
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:306)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:200)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:153)
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:509)
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:164)
org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:805)
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:696)
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:605)
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:677)
java.lang.Thread.run(Thread.java:568)
catalina.log says:

INFO: Server startup in 8985 ms
StandardWrapperValve[action]: Allocate exception for servlet action
javax.servlet.ServletException: Servlet.init() for servlet action threw 
exception
javax.servlet.ServletException: Servlet.init() for servlet action threw 
exception
at 
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1086)
at 
org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:712)
at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:186)
at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
at 
org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:245)
at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:199)
at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:509)
at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:149)
at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:195)
at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:164)
at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:149)
at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:156)
at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
at 
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:972)
at 
org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:805)
at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:696)
at 
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:605)
at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:677)
at java.lang.Thread.run(Thread.java:568)

I really don't have an idea what's going on. Since the jsvc-daemon 
doesn't work with redhat enterprise linux 3