Debian etch: Meshcms 3.1 and tomcat5.5

Le 15 Juillet 2007 06:28, Arieh Skliarouk a écrit :
> Hello,
>
> I am trying to install meshcms under debian etch
(4.0):
> * tomcat5.5 (from debian package) is installed and
works
> * meshcms.war (from meshcms 3.1) was into
/var/lib/tomcat5.5/webapps
> directory
> * directory /var/lib/tomcat5.5/webapps/meshcms was
automagically created
> after couple of seconds
> * At this stage files server.xml was not touched
> * Attempt to access the meshcms page (http://somehost:8080/mes
hcms) yielded
> following error message:
>
> HTTP Status 500 -
> type Exception report
> message
> description The server encountered an internal error ()
that prevented it
> from fulfilling this request.
>
> exception
>
> javax.servlet.ServletException
>
org.apache.catalina.security.SecurityUtil.execute(SecurityUt
il.java:293)
>
org.apache.catalina.security.SecurityUtil.doAsPrivilege(Secu
rityUtil.java
>
> :217)
>
> root cause
>
> (taken from tomcat5.5 log):
> SEVERE: Servlet.service() for servlet default threw
exception
> java.lang.NoClassDefFoundError
>         at
org.meshcms.util.DirectoryParser.process(Unknown Source)
>         at
org.meshcms.core.CMSDirectoryFinder.getCMSPath(Unknown
Source)

Hi,

Feels to me like a security exception. I think by default on
Debian, all 
tomcat applications run under a security manager enabled 
(http://tomcat.apache.org/tomcat-5.5-doc/secur
ity-manager-howto.html).

You could

1) Change tomcat default not to run under a security context
(the lazy and 
unsecure solution). Look into /etc/default/tomcat5.conf

2) Try to define a security policy file. I had posted one on
the list last 
year for tomcat4. Look there 
(http://www.onjava.com/p
ub/a/onjava/2007/01/03/discovering-java-security-requirement
s.html) 
to ease the process. Then post your file on the list and get
eternal 
praise...

-- Pierre Métras

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
MeshCMS-Discussion mailing list
MeshCMS-Discussionlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mesh
cms-discussion

Hello,

> 1) Change tomcat default not to run under a security
context (the lazy and
unsecure solution). Look into /etc/default/tomcat5.conf

If I do following, meshcms works:
grant codeBase
"file:/var/lib/tomcat5.5/webapps/meshcms/-" {
    permission java.security.AllPermission;
}

> 2) Try to define a security policy file.

I tried several settings and got to following (and I have no
idea what
restriction causes this, and how to debug it):

type Exception report

message

description The server encountered an internal error () that
prevented
it from fulfilling this request.

exception

javax.servlet.ServletException
	org.apache.catalina.security.SecurityUtil.execute(SecurityU
til.java:293)
	org.apache.catalina.security.SecurityUtil.doAsPrivilege(Sec
urityUtil.java:217)

root cause

java.lang.ExceptionInInitializerError
	com.thoughtworks.xstream.XStream.<init>(XStream.java:
275)
	com.thoughtworks.xstream.XStream.<init>(XStream.java:
318)
	org.meshcms.core.WebSite.loadFromXML(Unknown Source)
	org.meshcms.core.SiteInfo.load(Unknown Source)
	org.meshcms.core.WebSite.init(Unknown Source)
	org.meshcms.core.WebSite.create(Unknown Source)
	org.meshcms.core.HitFilter.getRootSite(Unknown Source)
	org.meshcms.core.HitFilter.doFilter(Unknown Source)
	sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)
	sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAcc
essorImpl.java:39)
	sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingM
ethodAccessorImpl.java:25)
	java.lang.reflect.Method.invoke(Method.java:585)
	org.apache.catalina.security.SecurityUtil$1.run(SecurityUti
l.java:243)
	java.security.AccessController.doPrivileged(Native Method)
	javax.security.auth.Subject.doAsPrivileged(Subject.java:517
)
	org.apache.catalina.security.SecurityUtil.execute(SecurityU
til.java:275)
	org.apache.catalina.security.SecurityUtil.doAsPrivilege(Sec
urityUtil.java:217)


-- 
Arieh

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
MeshCMS-Discussion mailing list
MeshCMS-Discussionlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mesh
cms-discussion

Le 22 Juillet 2007 11:38, Arieh Skliarouk a écrit :
> > 2) Try to define a security policy file.
>
> I tried several settings and got to following (and I
have no idea what
> restriction causes this, and how to debug it):

Try to start tomcat JVM with the option
-Djava.security.debug=failure

If you want to follow all security accesses, you can use 
-Djava.security.debug=access,failure

-- Pierre Métras

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
MeshCMS-Discussion mailing list
MeshCMS-Discussionlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mesh
cms-discussion