[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-developers] Help with external jars/servlets...



That makes perfect sense. I just kept getting the error that the classes directory was causing the error. I ended up using the following to get it to work but I'm going to try and "do it right" rather than this brute force method:

grant {
	permission java.security.AllPermission;
}

this lets all servlets do anything you want.
Thanks again for your help.

On Wednesday, November 27, 2002, at 02:39 AM, Wouter van Reeven wrote:

Hi Greg,


Coincidentically, I have been fiddling around with tomcat.policy files on a RaQ550 myself over the pas few days. I think the error you get is due to the jar file in the lib directory that isn't allowed to be read. Perhaps this may work :

grant codeBase "file:/home/.sites/28/site1/web/WEB-INF/-"{
    permission java.security.AllPermission;
}


Kind regards,


Wouter van Reeven

Greg Davis wrote:

I just started working with a raq550 and am having problems.
I have a servlet that uses one external jar file. I installed the servlet according to the 'simple' instructions. Step 1 place the class file in the
{site}/WEB-INF/classes directory. Step 2 place the jar library in the
{site}/WEB-INF/lib directory. Step 3 restart the web service. Upon
checking the servlet, I get the following error

java.security.AccessControlException: access denied
(java.io.FilePermission /home/.sites/28/site1/web/WEB-INF/classes read)

I know this means I have to set some security policy up but I have no idea
what to set up. I tried putting:

grant codeBase "file:/home/.sites/28/site1/web/WEB-INF/classes/-"{
    permission java.security.AllPermission;
}

in 2 different places according to what I've read -
/usr/java/jakarta-tomcat/conf/tomcat.policy.custom  and
/usr/java/jakarta-tomcat/conf/tomcat.policy (after the first method
didn't work)

I only have (and plan on having) a single site up on this box and
blowing the security
is less of an issue since it's an internal-only machine.

What could I be doing wrong?

Greg Davis

_______________________________________________
cobalt-developers mailing list
cobalt-developers@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-developers


--
_____________________________________________________________________
  SUN MICROSYSTEMS
"We make the Net Work"

Wouter van Reeven
Sun Cobalt Support Engineer
Sun Services

Visit us at http://www.sun.com/
http://www.cobalt.com/
_____________________________________________________________________

_______________________________________________
cobalt-developers mailing list
cobalt-developers@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-developers