I added an entry like this for all webapps and they are all working ok when
I start catalina with -security.
grant codebase "file:/usr/opt/tomcat/webapps/XYZ/-" {
permission java.security.AllPermission;
};
grant codebase "file:/usr/opt/tomcat/webapps/email/-" {
permission java.security.AllPermission;
};
If a I have a webapp in ../webapps/XYZ, what should this line from the
struts-confix.xml look like so it cann accss the webapp functionality in
../webapps/email?
<put name="body" value="../email/login.jsp" />
<definition name="site.index.page.email"
extends="site.mainLayout" >
<put name="title" value="Portal Email" />
<put name="menu" value="site.menu.links.email" />
<put name="body" value="../email/login.jsp" />
</definition>
Jim
From: "Martin Gainty" <[EMAIL PROTECTED]>
Reply-To: "Martin Gainty" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <user@struts.apache.org>
Subject: Re: PATH
Date: Sun, 30 Oct 2005 15:42:29 -0500
Good Call
/conf/tomcat.policy specifies grants on files, sockets, properties...
example policy file:
// Permissions for tomcat.
// javac needs this
grant codeBase "file:${java.home}/lib/-" {
permission java.security.AllPermission;
};
// Tomcat with IP filtering
grant codeBase "file:${tomcat.home}/lib/-" {
// Tomcat should be able to read/write all properties
permission java.util.PropertyPermission "*","read,write";
// Tomcat needs to be able to read files in its own directory
permission java.io.FilePermission "${tomcat.home}/-","read";
// Tomcat has to be able to write its logs
permission java.io.FilePermission "${tomcat.home}/logs/-","read,write";
// Tomcat has to be able to write to the conf directory
permission java.io.FilePermission "${tomcat.home}/conf/-","read,write";
// Tomcat has to be able to compile JSP's
permission java.io.FilePermission
"${tomcat.home}/work/-","read,write,delete";
// Tomcat needs all the RuntimePermission's
permission java.lang.RuntimePermission "*";
// Needed so Tomcat can set security policy for a Context
permission java.security.SecurityPermission "*";
// Needed so that Tomcat will accept connections from a remote web server
// Replace XXX.XXX.XXX.XXX with the IP address of the remote web server
permission java.net.SocketPermission
"XXX.XXX.XXX.XXX:1024-","accept,listen,resolve";
// Tomcat has to be able to use its port on the localhost
permission java.net.SocketPermission
"localhost:1024-","connect,accept,listen,resolve";
};
BUT Also make sure you dont have any restrictions setup in .htaccess file
for the
folderhttp://httpd.apache.org/docs/1.3/howto/htaccess.htmlHTH,M------
Original Message ----- From: "Aladin Alaily" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <user@struts.apache.org>
Sent: Saturday, October 29, 2005 7:47 PM
Subject: Re: PATH
Hi Jim,
You said that you have a struts application in
$TOMCAT_HOME/webapps/STRUTS_APP and you want it to access content in the
$TOMCAT_HOME/webapps/EMAIL_APP.
The following may be helpful for what you are trying to do.
Tomcat as a policy file which dictate what an application can and cannot
access. Have a look to make sure that your struts_app has access to read
(and maybe write) from/to the email_app.
Good luck.
Aladin
Jim Douglas wrote:
To all,
I have TOMCAT 5.5 up and running and a webapp in the
TOMCAT_HOME/webpps/XYZ directory
I have an email webapp in TOMCAT_HOME/webapps/email that I want the
abilty to share with all other webapps.
I am having a problem configuring STRUTS, it seems that the
workers.properties file won't allow access to the
TOMCAT_HOME/webapps/email directory from TOMCAT_HOME/webapps/XYZ in which
I have the following tiles-def.xml in the TOMCAT_HOME/webpps/XYZ
directory,
<definition name="site.index.page.email" extends="site.mainLayout" >
<put name="title" value="Portal Email" />
<put name="menu" value="site.menu.links.email" />
<put name="body" value="../email/login.jsp" />
</definition>
Any suggestions would be appreciated.
Jim
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
