While I'm not an expert at Glassfish by any means, a quick skim through the source of Glassfish' PolicyWrapper shows that it is doing a policy evaluation (ProtectionDomain.implies(), actually). So it is clearly consulting a static policy somewhere. You need to figure out a way to turn this off.
Andrew On Wed, Jul 22, 2009 at 4:19 PM, Brian Bowling<[email protected]> wrote: > Hi Paul, > If you renamed the .jar file, I'm wondering why jspwiki.jar is referenced in > the failure message? > Brian > > Paul Sterk wrote: >> >> Ok. I was able to make no headway. So, I did the following: >> >> 1) Completely removed JSPWiki 2.4 and GlassFish v2u1 >> 2) Did a new install of GlassFish v2u1 >> 3) Downloaded JSPWiki 2.8.2 (latest stable release) >> 4) Renamed JSPWiki.war to appserver.war >> 4) Deployed appserver.war >> 5) Entered this URL in my browser: localhost:/appserver/Install.jsp >> >> I immediately see the permission failure below. Is this right? JSPWiki.jar >> is not signed in version 2.8.2. Why am I getting JACC domain failure? If I >> try to continue, I see further permission failure messages in the log file, >> and authentication fails to work. >> >> Please help - this is a roadblock for my deployment! >> >> Thanks, >> Paul >> >> >> [#|2009-07-22T11:31:57.553-0700|INFO|sun-appserver9.1|javax.enterprise.system.core.security|_ThreadID=19;_ThreadName=httpSSLWorkerThread-80-1;|JACC >> Policy Provider: PolicyWrapper.implies, context(nul >> )- >> permission(("com.ecyrd.jspwiki.auth.permissions.AllPermission","JSPWiki")) >> domain that failed(ProtectionDomain >> (file:/storage/glassfishwiki/server/glassfish_v2u1/domains/domain1/applications/j2ee >> modules/appserver/WEB-INF/lib/JSPWiki.jar <no signer certificates>) >> WebappClassLoader >> delegate: true >> repositories: >> /WEB-INF/classes/ >> ----------> Parent Classloader: >> EJBClassLoader : >> urlSet = [] >> doneCalled = false >> Parent -> java.net.urlclassloa...@173eca6 >> >> >> (principals com.ecyrd.jspwiki.auth.authorize.Role "Anonymous", >> com.ecyrd.jspwiki.auth.WikiPrincipal "192.18.101.5", >> com.ecyrd.jspwiki.auth.authorize.Role "All") >> >> java.security.permissi...@7e4019 ( >> (java.net.SocketPermission localhost:1024- listen,resolve) >> (java.net.SocketPermission * connect,resolve) >> (javax.management.MBeanTrustPermission register) >> (javax.management.MBeanPermission [com.sun.messaging.jms.*:*] *) >> (javax.security.auth.PrivateCredentialPermission >> javax.resource.spi.security.PasswordCredential * "*" read) >> (java.util.PropertyPermission line.separator read) >> (java.util.PropertyPermission java.vm.version read) >> (java.util.PropertyPermission java.vm.specification.version read) >> (java.util.PropertyPermission java.vm.specification.vendor read) >> (java.util.PropertyPermission java.vendor.url read) >> (java.util.PropertyPermission java.vm.name read) >> (java.util.PropertyPermission * read,write) >> (java.util.PropertyPermission os.name read) >> (java.util.PropertyPermission java.vm.vendor read) >> (java.util.PropertyPermission path.separator read) >> (java.util.PropertyPermission java.specification.name read) >> (java.util.PropertyPermission os.version read) >> (java.util.PropertyPermission os.arch read) >> (java.util.PropertyPermission java.class.version read) >> (java.util.PropertyPermission java.version read) >> (java.util.PropertyPermission file.separator read) >> (java.util.PropertyPermission java.vendor read) >> (java.util.PropertyPermission java.vm.specification.name read) >> (java.util.PropertyPermission java.specification.version read) >> (java.util.PropertyPermission java.specification.vendor read) >> (java.lang.RuntimePermission getClassLoader) >> (java.lang.RuntimePermission loadLibrary.*) >> (java.lang.RuntimePermission accessDeclaredMembers) >> (java.lang.RuntimePermission getProtectionDomain) >> (java.lang.RuntimePermission modifyThreadGroup) >> (java.lang.RuntimePermission stopThread) >> (java.lang.RuntimePermission setContextClassLoader) >> (java.lang.RuntimePermission queuePrintJob) >> (java.io.FilePermission /var/tmp//- delete) >> (java.io.FilePermission >> /storage/glassfishwiki/server/glassfish_v2u1/domains/domain1/lib/databases/- >> delete) >> (java.io.FilePermission <<ALL FILES>> read,write) >> (java.io.FilePermission >> /storage/glassfishwiki/server/glassfish_v2u1/domains/domain1/applications/j2ee-modules/appserver/WEB-INF/lib/JSPWiki.jar >> read) >> (unresolved >> com.sun.corba.ee.impl.presentation.rmi.DynamicAccessPermission access null) >> (unresolved com.sun.enterprise.security.CORBAObjectPermission * *) >> ) >> >> )|#] >> > >
