Hi All - can anyone help me with this as I'm under pressure and am a relative newcomer to Tomcat. The problem seems to be with the Java Security Manager, if I'm not mistaken. The following 'access denied' entries are recorded in the main logger for Tomcat: (I have enabled SecurityManager logging by setting the following system property before starting Tomcat :
set CATALINA_OPTS=-Djava.security.debug=access,failure I am running :
Tomcat 4.1
Apache/1.3.33 (Win32)
mod_jk/1.2.8
JRE Version 1.4.2_03
access: access allowed (java.io.FilePermission C:\Tomcat41\common\classes\xx\xx\xx\RMIManager$RMIHostList.class read)
access: access allowed (java.io.FilePermission C:\Tomcat41\bin\bootstrap.jar read)
access: access allowed (java.io.FilePermission C:\Tomcat41\bin\bootstrap.jar read)
access: access allowed (java.io.FilePermission C:\Tomcat41\bin\bootstrap.jar read)
HERE->access: access denied (java.io.FilePermission C:\Tomcat41\common\classes\xx\xx\xx\RMIManager$RMIHostList.class read)
access: access allowed (java.util.PropertyPermission java.rmi.server.hostname read)
access: access allowed (java.util.PropertyPermission sun.rmi.transport.connectionTimeout read)
access: access allowed (java.util.PropertyPermission sun.rmi.transport.tcp.handshakeTimeout read)
access: access allowed (java.util.PropertyPermission sun.rmi.transport.tcp.responseTimeout read)
access: access allowed (java.io.FilePermission C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.io.FilePermission C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.io.FilePermission C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.util.PropertyPermission socksProxyHost read)
HERE->access: access denied (java.net.SocketPermission XX.XX.XX resolve)
I'm not sure why SecurityManager is on - I am running Tomcat as a service in Windows Server 2003 - perhaps running Tomcat as a service enables SecurityManager ? Does anybody know how to disable the SecurityManager when running as a service? If I disabled SecurityManager would I get the above 'access denied' entries?
For the first access denied above I have tried adding the following but it makes no difference :
grant codeBase "file:${catalina.home}/common/classes/-" {
permission java.io.FilePermission "read";
};
....so I'm stumped!
Many thanks in advance!
Jonathan O'Donovan
Web Developer,
EuroKom
