Hi All - can anyone help me with this as I'm under pressure and am a relative
newcomer to Tomcat. The problem seems to be with the Java Security Manager, if
I'm not mistaken. The following 'access denied' entries are recorded in the
main logger for Tomcat: (I have enabled SecurityManager logging by setting the
following system property before starting Tomcat :
set CATALINA_OPTS=-Djava.security.debug=access,failure I am running :
Tomcat 4.1
Apache/1.3.33 (Win32)
mod_jk/1.2.8
JRE Version 1.4.2_03
access: access allowed (java.io.FilePermission
C:\Tomcat41\common\classes\xx\xx\xx\RMIManager$RMIHostList.class read)
access: access allowed (java.io.FilePermission C:\Tomcat41\bin\bootstrap.jar
read)
access: access allowed (java.io.FilePermission C:\Tomcat41\bin\bootstrap.jar
read)
access: access allowed (java.io.FilePermission C:\Tomcat41\bin\bootstrap.jar
read)
HERE->access: access denied (java.io.FilePermission
C:\Tomcat41\common\classes\xx\xx\xx\RMIManager$RMIHostList.class read)
access: access allowed (java.util.PropertyPermission java.rmi.server.hostname
read)
access: access allowed (java.util.PropertyPermission
sun.rmi.transport.connectionTimeout read)
access: access allowed (java.util.PropertyPermission
sun.rmi.transport.tcp.handshakeTimeout read)
access: access allowed (java.util.PropertyPermission
sun.rmi.transport.tcp.responseTimeout read)
access: access allowed (java.io.FilePermission
C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.io.FilePermission
C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.io.FilePermission
C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.util.PropertyPermission socksProxyHost read)
HERE->access: access denied (java.net.SocketPermission XX.XX.XX resolve)
I'm not sure why SecurityManager is on - I am running Tomcat as a service in
Windows Server 2003 - perhaps running Tomcat as a service enables
SecurityManager ? Does anybody know how to disable the SecurityManager when
running as a service? If I disabled SecurityManager would I get the above
'access denied' entries?
For the first access denied above I have tried adding the following but it
makes no difference :
grant codeBase "file:${catalina.home}/common/classes/-" {
permission java.io.FilePermission "read";
};
....so I'm stumped!
Many thanks in advance!
Jonathan O'Donovan
Web Developer,
EuroKom
