[Netarchivesuite-users] Trouble with security manager

nicolas.giraud at bnf.fr nicolas.giraud at bnf.fr
Mon Apr 20 15:45:43 CEST 2009


Hi,

I've created a deployer configuration file. After some trial-and-error, I 
am able to install and run the suite. However I run into a lot of trouble 
setting the security.policy file. Here are some exceptions traces I get 
when trying to create a selective harvest definition : 

GRAVE: Nested in org.apache.jasper.JasperException: PWC6033: Unable to 
compile class for JSP:
java.security.AccessControlException: access denied 
(java.lang.RuntimePermission createClassLoader)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at 
java.security.AccessController.checkPermission(AccessController.java:546)
        at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at 
java.lang.SecurityManager.checkCreateClassLoader(SecurityManager.java:594)
        at java.lang.ClassLoader.<init>(ClassLoader.java:202)
        at 
java.security.SecureClassLoader.<init>(SecureClassLoader.java:53)
        at java.net.URLClassLoader.<init>(URLClassLoader.java:82)
        at 
org.apache.jasper.servlet.JasperLoader.<init>(JasperLoader.java:87)
        at 
org.apache.jasper.JspCompilationContext.getJspLoader(JspCompilationContext.java:638)
        at 
org.apache.jasper.compiler.JDTJavaCompiler.compile(JDTJavaCompiler.java:224)
        at 
org.apache.jasper.compiler.Compiler.generateClass(Compiler.java:342)
        at org.apache.jasper.compiler.Compiler.compile(Compiler.java:411)
        at 
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:592)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:344)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:470)
        at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:364)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:362)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:722)
        at 
org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:404)
        at 
org.mortbay.jetty.servlet.Dispatcher.include(Dispatcher.java:192)
        at 
org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:997)
        at 
org.apache.jsp.Definitions_002dedit_002dselective_002dharvest_jsp._jspService(org.apache.jsp.Definitions_002dedit_002dselective_002dharvest_jsp:$
        at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:93)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:373)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:470)
        at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:364)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:362)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:722)
        at 
org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:404)
        at 
org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)
        at 
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)
        at org.mortbay.jetty.Server.handle(Server.java:324)
        at 
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:505)
         at 
org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:828)
        at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:514)
        at 
org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:211)
        at 
org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:380)
        at 
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
        at 
org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:450)
20 avr. 2009 15:39:32 org.slf4j.impl.JCLLoggerAdapter error
GRAVE: /HarvestDefinition/Definitions-edit-selective-harvest.jsp
java.security.AccessControlException: access denied 
(java.lang.RuntimePermission createClassLoader)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at 
java.security.AccessController.checkPermission(AccessController.java:546)
        at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at 
java.lang.SecurityManager.checkCreateClassLoader(SecurityManager.java:594)
        at java.lang.ClassLoader.<init>(ClassLoader.java:202)
        at 
java.security.SecureClassLoader.<init>(SecureClassLoader.java:53)
        at java.net.URLClassLoader.<init>(URLClassLoader.java:82)
        at 
org.apache.jasper.servlet.JasperLoader.<init>(JasperLoader.java:87)
        at 
org.apache.jasper.JspCompilationContext.getJspLoader(JspCompilationContext.java:638)
        at 
org.apache.jasper.compiler.JDTJavaCompiler.compile(JDTJavaCompiler.java:224)
        at 
org.apache.jasper.compiler.Compiler.generateClass(Compiler.java:342)
        at org.apache.jasper.compiler.Compiler.compile(Compiler.java:411)
        at 
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:592)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:344)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:470)
        at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:364)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:362)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:722)
        at 
org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:404)
        at 
org.mortbay.jetty.servlet.Dispatcher.include(Dispatcher.java:192)
        at 
org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:997)
        at 
org.apache.jsp.Definitions_002dedit_002dselective_002dharvest_jsp._jspService(org.apache.jsp.Definitions_002dedit_002dselective_002dharvest_jsp:$
        at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:93)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:373)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:470)
        at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:364)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:362)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:722)
        at 
org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:404)
        at 
org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)
        at 
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)
        at org.mortbay.jetty.Server.handle(Server.java:324)
        at 
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:505)
        at 
org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:828)
        at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:514)
        at 
org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:211)
        at 
org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:380)
        at 
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
        at 
org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:450)
20 avr. 2009 15:39:32 org.slf4j.impl.JCLLoggerAdapter error
GRAVE: /HarvestDefinition/Definitions-edit-selective-harvest.jsp
java.security.AccessControlException: access denied 
(java.lang.RuntimePermission createClassLoader)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at 
java.security.AccessController.checkPermission(AccessController.java:546)
        at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at 
java.lang.SecurityManager.checkCreateClassLoader(SecurityManager.java:594)
        at java.lang.ClassLoader.<init>(ClassLoader.java:202)
        at 
java.security.SecureClassLoader.<init>(SecureClassLoader.java:53)
        at java.net.URLClassLoader.<init>(URLClassLoader.java:82)
        at 
org.apache.jasper.servlet.JasperLoader.<init>(JasperLoader.java:87)
        at 
org.apache.jasper.JspCompilationContext.getJspLoader(JspCompilationContext.java:638)
        at 
org.apache.jasper.compiler.JDTJavaCompiler.compile(JDTJavaCompiler.java:224)
        at 
org.apache.jasper.compiler.Compiler.generateClass(Compiler.java:342)
        at org.apache.jasper.compiler.Compiler.compile(Compiler.java:411)
        at 
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:592)
         at org.apache.jasper.compiler.Compiler.compile(Compiler.java:411)
        at 
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:592)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:344)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:470)
        at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:364)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:362)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:722)
        at 
org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:404)
        at 
org.mortbay.jetty.servlet.Dispatcher.include(Dispatcher.java:192)
        at 
org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:997)
        at 
org.apache.jsp.Definitions_002dedit_002dselective_002dharvest_jsp._jspService(org.apache.jsp.Definitions_002dedit_002dselective_002dharvest_jsp:$
        at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:93)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:373)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:470)
        at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:364)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:362)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:722)
        at 
org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:404)
        at 
org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)
        at 
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)
        at org.mortbay.jetty.Server.handle(Server.java:324)
        at 
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:505)
        at 
org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:828)
        at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:514)
        at 
org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:211)
        at 
org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:380)
        at 
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
        at 
org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:450)

And here while trying to access the System state menu :

java.lang.ExceptionInInitializerError
        at 
dk.netarkivet.monitor.webinterface.JMXSummaryUtils.queryJMXFromRequest(JMXSummaryUtils.java:310)
        at 
org.apache.jsp.Monitor_002dJMXsummary_jsp._jspService(org.apache.jsp.Monitor_002dJMXsummary_jsp:118)
        at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:93)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:373)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:470)
        at 
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:364)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:362)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:722)
        at 
org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:404)
        at 
org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)
        at 
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)
        at org.mortbay.jetty.Server.handle(Server.java:324)
        at 
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:505)
        at 
org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:828)
        at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:514)
        at 
org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:211)
        at 
org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:380)
        at 
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
        at 
org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:450)
Caused by: java.security.AccessControlException: access denied 
(javax.management.MBeanServerPermission createMBeanServer)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at 
java.security.AccessController.checkPermission(AccessController.java:546)
        at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at 
javax.management.MBeanServerFactory.checkPermission(MBeanServerFactory.java:393)
        at 
javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:211)
        at 
javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:174)
        at 
dk.netarkivet.monitor.webinterface.JMXStatusEntry.(JMXStatusEntry.java:57)
        ... 24 more

I suppose that my security.policy file, suppolied to the deployer, is 
incorrect in some way but I can't find where the error resides. I have 
attached the input to the deployer to this message.

Could you please point me out to the right direction?

Thanks for your time,

Nicolas



Avant d'imprimer, pensez à l'environnement. 
Consider the environment before printing this mail.   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://ml.sbforge.org/pipermail/netarchivesuite-users/attachments/20090420/83da0579/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: deployer.tar.gz
Type: application/octet-stream
Size: 3392 bytes
Desc: not available
URL: <http://ml.sbforge.org/pipermail/netarchivesuite-users/attachments/20090420/83da0579/attachment-0002.obj>


More information about the NetarchiveSuite-users mailing list