I am encountering a big problem when trying to use Tomcat's security
manager.  I have set the following lines in the policy file:

grant codeBase "file:${tomcat.home}/webapps/PFOCE" {
        permission java.net.SocketPermission "1.2.3.4:1024-65535", "accept,
connect, listen, resolve";
        permission java.net.SocketPermission "1.2.3.4", "accept, connect,
listen, resolve";
        permission java.net.SocketPermission "127.0.0.1:1024-", "accept,
connect, listen, resolve";
};

When I try to access any jsp or servlet inside the webapps/PFOCE directory, I
get a nullpointerexception like so:

java.lang.NullPointerException
at
_0002flogin_0002ejsplogin_jsp_26._jspService(_0002flogin_0002ejsplogin_jsp_26.ja
va:156)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:119)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at
org.apache.jasper.servlet.JspServlet$JspServletWrapper.service(JspServlet.java:1
77)
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:318)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:391)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.apache.tomcat.core.ServletWrapper.doService(ServletWrapper.java:404)
at org.apache.tomcat.core.Handler.service(Handler.java:286)
at org.apache.tomcat.core.ServletWrapper.service(ServletWrapper.java:372)
at
org.apache.tomcat.core.ContextManager.internalService(ContextManager.java:797)
at org.apache.tomcat.core.ContextManager.service(ContextManager.java:743)
at
org.apache.tomcat.service.http.HttpConnectionHandler.processConnection(HttpConne
ctionHandler.java:210)
at org.apache.tomcat.service.TcpWorkerThread.runIt(PoolTcpEndpoint.java:416)
at org.apache.tomcat.util.ThreadPool$ControlRunnable.run(ThreadPool.java:498)
at java.lang.Thread.run(Thread.java:484)

I am not sure what exactly I need to do to prevent this from occurring.  Even
if I point to a blank .jsp file, this problem occurs.  Any help would be
greatly appreciated :)

Chris Smith
480 517 1863 (home)
602 549 7823 (cell)


Reply via email to