[opencms-dev] OpenCMS Servlet Engine: Security Policy/Permissions Sun App Server

[Claudio Miranda]

    I forgot one thing.
    When deploying on SJSAS 8.1, it's mandatory to specify the classloader
permission for commons-digester at the policy.
    As this is goind to be deployed on a trusted host, I specified
security.AllPermission.

grant codeBase "file:///var/opencms/opencms/-" {
    permission java.security.AllPermission;
};



Claudio Miranda wrote:
> 
> 
> For SJSAS 8.1, it will throw a Exception when installing the modules. It
> is related to commons-digester. Where SJSAS 8.1 have a old
> commons-digester bundled at appserv-rt.jar. And opencms have
> WEB-INF/lib/commons-digester.jar. The opencms setup will load
> commons-digester from appserv-rt.jar, even if sun-web.xml is configured to
> load the webapp jars first (delegate classloader)
> 
> To fix, it is necessary to configure the SJSAS classpath prefix, to point
> to WEB-INF/lib/commons-digester.jar.
> 
> So, to install the opencms, I recommend this steps:
> 
> * Explode opencms.war at some directory (/var/opencms/opencms), 
> * configure the classpath prefix
> * configure the server.policy
> * restart the appserver
> * deploy opencms as a deployed directory
> * run the setup 
> 

-- 
View this message in context: http://www.nabble.com/OpenCMS-Servlet-Engine%3A-Security-Policy-Permissions-Sun-App-Server-tf2402017.html#a6737706
Sent from the OpenCMS - Dev mailing list archive at Nabble.com.