[opencms-dev] tomcat policy for opencms

[Lars Piehler]

Hi Rod,

first thanx for your fast help. Now I understand a little bit more about the
security settings.

>If it 'breaks' read the catalina log for a
> 'permission denied' - and if found add it to catalina.policy. all
functions
> In my experience the only way to do this is by trial and error (as above),
> or simply grant all permissions (thereby applying no restrictions at all).

I did it like you said. He wanted  permission for many classes in the
"opencms/WEB-INF/occlasses and I have given him the permissions he wanted.
But now he stopped with the error:

java.lang.ClassNotFoundException: Something really bad happened while
loading class com.opencms.file.mySql.CmsResourceBroker:
java.lang.NoClassDefFoundError:
com/opencms/file/genericSql/CmsResourceBroker

First he ask me for the permission of this class and after I have given him
this permission, he could not find the class.
I don`t understand it, because without the Security Manager opencms is
running very well!!
In this case he has to load this class as well, isn`t it?!!
Perhaps you or anybody else who is reading this mail have an idea, what I`m
doing wrong.

I`m happy for any help, because this Security Settings makes me crazy.

Thanx,

Lars
----- Original Message -----
From: "Rod Thorburn" <rod.thorburn at pavtech.co.nz>
To: <opencms-dev at www.opencms.org>
Sent: Wednesday, February 12, 2003 7:57 PM
Subject: RE: [opencms-dev] tomcat policy for opencms


> Attached is a text file containing some (perhaps all) catalina.policy
> settings for an instance of opencms running under a tomcat security
manager.
> There should be enough here to at least get you started. Some of the more
> generic settings will already be in your catalina.policy, so be careful
not
> to duplicate these.
> After adding these permissions to catalina.policy and restarting tomcat,
> test using your opencms app. If it 'breaks' read the catalina log for a
> 'permission denied' - and if found add it to catalina.policy. all
functions
> In my experience the only way to do this is by trial and error (as above),
> or simply grant all permissions (thereby applying no restrictions at all).
>
> Rod
>
>
> -----Original Message-----
> From: Alois Franz [mailto:alois.franz at epimusic.de]
> Sent: Wednesday, 12 February 2003 10:31 p.m.
> To: opencms-dev at opencms.org
> Subject: [opencms-dev] tomcat policy for opencms