Linux Permissions Error

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Linux Permissions Error

Dustin Henson-2

I have setup a Ubuntu server that I am doing pre-release testing on. Mainly my goal is to shake out any Windows vs. Linux issues before I roll the application out to production. However, I'm getting the permission error below form Ops.

Other web applications function OK, so I'm guessing that Orbeon is trying to access Java directly instead of through Tomcat (does that make sense?). Has anyone else seen this or know how to handle it? Forgive me if this is a basic question, but I'm far from being a Linux guru.


HTTP Status 500 -


type Exception report

message

description The server encountered an internal error () that prevented it from fulfilling this request.

exception

javax.servlet.ServletException: access denied (java.lang.RuntimePermission setContextClassLoader)
org.orbeon.oxf.servlet.OPSServlet.init(OPSServlet.java:65)
javax.servlet.GenericServlet.init(GenericServlet.java:211)


sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)


java.lang.reflect.Method.invoke(Method.java:597)
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)


java.security.AccessController.doPrivileged(Native Method)
org.orbeon.oxf.servlet.OPSXFormsFilter.doFilter(OPSXFormsFilter.java:89)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)


sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:597)


org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)

root cause

java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
java.security.AccessController.checkPermission(AccessController.java:546)


java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
java.lang.Thread.setContextClassLoader(Thread.java:1351)
org.orbeon.oxf.servlet.OPSServlet.init(OPSServlet.java:62)
javax.servlet.GenericServlet.init(GenericServlet.java:211)


sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)


java.lang.reflect.Method.invoke(Method.java:597)
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)


java.security.AccessController.doPrivileged(Native Method)
org.orbeon.oxf.servlet.OPSXFormsFilter.doFilter(OPSXFormsFilter.java:89)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)


sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:597)


org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)


Thanks,
Dustin

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Linux Permissions Error

Dustin Henson-2
Got it! The system uses /etc/init.d/tomcat5.5 to startup the tomcat service. In tomcat5.5 there is this section:

     # Use the Java security manager? (yes/no)
     TOMCAT5_SECURITY=yes

I changed it to this and it worked perfectly:

     # Use the Java security manager? (yes/no)
     TOMCAT5_SECURITY=no

There is also a section on configuring the security manger at:
    http://www.orbeon.com/ops/doc/intro-install#security

On 1/25/08, Dustin Henson <[hidden email]> wrote:

I have setup a Ubuntu server that I am doing pre-release testing on. Mainly my goal is to shake out any Windows vs. Linux issues before I roll the application out to production. However, I'm getting the permission error below form Ops.

Other web applications function OK, so I'm guessing that Orbeon is trying to access Java directly instead of through Tomcat (does that make sense?). Has anyone else seen this or know how to handle it? Forgive me if this is a basic question, but I'm far from being a Linux guru.


HTTP Status 500 -


type Exception report

message

description The server encountered an internal error () that prevented it from fulfilling this request.

exception

javax.servlet.ServletException: access denied (java.lang.RuntimePermission setContextClassLoader)
org.orbeon.oxf.servlet.OPSServlet.init(OPSServlet.java:65)
javax.servlet.GenericServlet.init(GenericServlet.java:211)


sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)


java.lang.reflect.Method.invoke(Method.java:597)
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)


java.security.AccessController.doPrivileged(Native Method)
org.orbeon.oxf.servlet.OPSXFormsFilter.doFilter(OPSXFormsFilter.java:89)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)


sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:597)


org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)

root cause

java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
java.security.AccessController.checkPermission(AccessController.java:546)


java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
java.lang.Thread.setContextClassLoader(Thread.java:1351)
org.orbeon.oxf.servlet.OPSServlet.init(OPSServlet.java:62)
javax.servlet.GenericServlet.init(GenericServlet.java:211)


sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)


java.lang.reflect.Method.invoke(Method.java:597)
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)


java.security.AccessController.doPrivileged(Native Method)
org.orbeon.oxf.servlet.OPSXFormsFilter.doFilter(OPSXFormsFilter.java:89)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)


sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:597)


org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)


org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)


Thanks,
Dustin



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Linux Permissions Error

Erik Bruchez
Administrator
Yes, turning off the security manager will solve this. Another option  
is, in web.xml, to refer to OPSServletDelegate instead of OPSServlet.

-Erik

On Jan 25, 2008, at 6:40 PM, Dustin Henson wrote:

> Got it! The system uses /etc/init.d/tomcat5.5 to startup the tomcat  
> service. In tomcat5.5 there is this section:
>
>      # Use the Java security manager? (yes/no)
>      TOMCAT5_SECURITY=yes
>
> I changed it to this and it worked perfectly:
>
>      # Use the Java security manager? (yes/no)
>      TOMCAT5_SECURITY=no
>
> There is also a section on configuring the security manger at:
>     http://www.orbeon.com/ops/doc/intro-install#security
>
> On 1/25/08, Dustin Henson <[hidden email]> wrote:
> I have setup a Ubuntu server that I am doing pre-release testing on.  
> Mainly my goal is to shake out any Windows vs. Linux issues before I  
> roll the application out to production. However, I'm getting the  
> permission error below form Ops.
> Other web applications function OK, so I'm guessing that Orbeon is  
> trying to access Java directly instead of through Tomcat (does that  
> make sense?). Has anyone else seen this or know how to handle it?  
> Forgive me if this is a basic question, but I'm far from being a  
> Linux guru.
>
>
> HTTP Status 500 -
> type Exception report
>
> message
>
> description The server encountered an internal error () that  
> prevented it from fulfilling this request.
>
> exception
>
> javax.servlet.ServletException: access denied  
> (java.lang.RuntimePermission setContextClassLoader)
>         org.orbeon.oxf.servlet.OPSServlet.init(OPSServlet.java:65)
>         javax.servlet.GenericServlet.init(GenericServlet.java:211)
>
>
>
>
>         sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>          
> sun
> .reflect
> .NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>          
> sun
> .reflect
> .DelegatingMethodAccessorImpl
> .invoke(DelegatingMethodAccessorImpl.java:25)
>
>
>
>
>         java.lang.reflect.Method.invoke(Method.java:597)
>         org.apache.catalina.security.SecurityUtil
> $1.run(SecurityUtil.java:244)
>         java.security.AccessController.doPrivileged(Native Method)
>
>         javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
>
>
>
>          
> org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:
> 276)
>          
> org
> .apache
> .catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
>          
> org
> .apache
> .catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)
>
>
>
>
>         java.security.AccessController.doPrivileged(Native Method)
>          
> org.orbeon.oxf.servlet.OPSXFormsFilter.doFilter(OPSXFormsFilter.java:
> 89)
>         sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>
>
>
>
>          
> sun
> .reflect
> .NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>          
> sun
> .reflect
> .DelegatingMethodAccessorImpl
> .invoke(DelegatingMethodAccessorImpl.java:25)
>         java.lang.reflect.Method.invoke(Method.java:597)
>
>
>
>
>         org.apache.catalina.security.SecurityUtil
> $1.run(SecurityUtil.java:244)
>         java.security.AccessController.doPrivileged(Native Method)
>         javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
>
>
>
>
>          
> org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:
> 276)
>          
> org
> .apache
> .catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
> root cause
>
> java.security.AccessControlException: access denied  
> (java.lang.RuntimePermission setContextClassLoader)
>          
> java
> .security
> .AccessControlContext.checkPermission(AccessControlContext.java:323)
>          
> java.security.AccessController.checkPermission(AccessController.java:
> 546)
>
>
>
>
>          
> java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>         java.lang.Thread.setContextClassLoader(Thread.java:1351)
>         org.orbeon.oxf.servlet.OPSServlet.init(OPSServlet.java:62)
>
>
>         javax.servlet.GenericServlet.init(GenericServlet.java:211)
>
>
>         sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>          
> sun
> .reflect
> .NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>
>
>          
> sun
> .reflect
> .DelegatingMethodAccessorImpl
> .invoke(DelegatingMethodAccessorImpl.java:25)
>
>
>         java.lang.reflect.Method.invoke(Method.java:597)
>         org.apache.catalina.security.SecurityUtil
> $1.run(SecurityUtil.java:244)
>
>
>         java.security.AccessController.doPrivileged(Native Method)
>         javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
>
>
>          
> org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:
> 276)
>
>
>          
> org
> .apache
> .catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
>          
> org
> .apache
> .catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)
>
>
>         java.security.AccessController.doPrivileged(Native Method)
>
>
>          
> org.orbeon.oxf.servlet.OPSXFormsFilter.doFilter(OPSXFormsFilter.java:
> 89)
>         sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>
>
>          
> sun
> .reflect
> .NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>
>
>          
> sun
> .reflect
> .DelegatingMethodAccessorImpl
> .invoke(DelegatingMethodAccessorImpl.java:25)
>         java.lang.reflect.Method.invoke(Method.java:597)
>
>
>         org.apache.catalina.security.SecurityUtil
> $1.run(SecurityUtil.java:244)
>
>
>         java.security.AccessController.doPrivileged(Native Method)
>         javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
>
>
>          
> org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:
> 276)
>
>
>          
> org
> .apache
> .catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
>
> Thanks,
> Dustin
>
>
> --
> You receive this message as a subscriber of the [hidden email]  
> mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws