Re: security manager

[Jeanfrancois Arcand]

You need to add the following line in catalina.policy, under

// ========== WEB APPLICATION PERMISSIONS =====================================


// These permissions are granted by default to all web applications
// In addition, a web application will be given a read FilePermission
// and JndiPermission for all files and directories in its document root.
grant {

......

// Required for sevlets and JSP's
permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util.*";
permission java.lang.RuntimePermission "defineClassInPackage.org.apache.catalina.util";
permission java.lang.RuntimePermission "defineClassInPackage.org.apache.catalina.util.*";

....
}

-- Jeanfrancois


Jose Antonio Martinez wrote:

I have developed a servlet that recives from a form
(post method) the name of a file and write its
content.

--- Jeanfrancois Arcand <[EMAIL PROTECTED]>
escribi�: > Strange. Can you post you entire log file
(to see

more exception info)?

-- Jeanfrancois

Jose Antonio Martinez wrote:

tomcat 4.0.5

--- Jeanfrancois Arcand <[EMAIL PROTECTED]>
escribi�: > Which version of Tomcat are you using?

-- Jeanfrancois

Jose Antonio Martinez wrote:

I am using the default security configuration at
manager 'catalina.policy' file, but when i try to
access files which are under the webapp directory

who

i am executing i have an exception:


javax.servlet.ServletException: Servlet execution
threw an exception
at

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)

at

org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:98)

at

org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:176)

at

java.security.AccessController.doPrivileged(Native

Method)


what's the problem?

_______________________________________________________________

Yahoo! Messenger
Nueva versi�n: Webcam, voz, y mucho m�s �Gratis! Desc�rgalo ya desde http://messenger.yahoo.es

--
To unsubscribe, e-mail:

<mailto:tomcat-user-unsubscribe@;jakarta.apache.org>

For additional commands, e-mail:

<mailto:tomcat-user-help@;jakarta.apache.org>

--
To unsubscribe, e-mail:

<mailto:tomcat-user-unsubscribe@;jakarta.apache.org>

For additional commands, e-mail:
<mailto:tomcat-user-help@;jakarta.apache.org>

_______________________________________________________________

Yahoo! Messenger
Nueva versi�n: Webcam, voz, y mucho m�s �Gratis! Desc�rgalo ya desde http://messenger.yahoo.es

--
To unsubscribe, e-mail:

<mailto:tomcat-user-unsubscribe@;jakarta.apache.org>

For additional commands, e-mail:

<mailto:tomcat-user-help@;jakarta.apache.org>

_______________________________________________________________
Yahoo! Messenger
Nueva versi�n: Webcam, voz, y mucho m�s �Gratis! Desc�rgalo ya desde http://messenger.yahoo.es

------------------------------------------------------------------------

javax.servlet.ServletException: Servlet execution threw an exception
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:98)
at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:176)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:172)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java:246)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2347)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.ajp.tomcat4.Ajp13Processor.process(Ajp13Processor.java:458)
at org.apache.ajp.tomcat4.Ajp13Processor.run(Ajp13Processor.java:551)
at java.lang.Thread.run(Thread.java:536)


root cause
java.lang.NoClassDefFoundError: org/apache/catalina/util/ParameterMap
at org.apache.catalina.connector.HttpRequestBase.parseParameters(HttpRequestBase.java:615)
at org.apache.catalina.connector.HttpRequestBase.getParameter(HttpRequestBase.java:691)
at org.apache.catalina.connector.RequestFacade.getParameter(RequestFacade.java:160)
at Crack01.doPost(Crack01.java:20)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:98)
at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:176)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:172)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java:246)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2347)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
at org.apache.ajp.tomcat4.Ajp13Processor.process(Ajp13Processor.java:458)
at org.apache.ajp.tomcat4.Ajp13Processor.run(Ajp13Processor.java:551)
at java.lang.Thread.run(Thread.java:536)



------------------------------------------------------------------------

--
To unsubscribe, e-mail: <mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@;jakarta.apache.org>