Re: Problem with SecurityManager and jmx

[Jacob Kjome]

This could be caused by using the deprecated HTTP1.1 connector rather than 
the new Coyote Connector in server.xml.

Jake

At 10:06 AM 6/6/2003 +0200, you wrote:
Hi.

I'm currently working in a complex web application. In a stage of 
development, we wanted to control access to files from the users, and we 
got all the logic in a SecurityManager of its own. As we were not very 
familiar with all the capacities of the Security Manager, we chose for the 
following procedure:
- Let Tomcat start normally
- In our app start, we get the current SecurityManager if any and create 
one of ours (setting it as the System SecurityManager).

Our SecurityManager implements the methods related to the java.io.* 
classes (checkRead, etc.). If any other method is called, we implement it 
just calling the older SecurityManager (if there was any).

Until Tomcat4.1.12 this patch has worked well. But now I'm doing some 
tests to move towards Tomcat4.1.24 and during startup some Exceptions 
regardind the ServerLifecycleListener are shown in the console. After 
that, the server works fine, until we stop it (more exceptions in the console).

Any idea of what I could try to get rid of these messages (and other 
problems due to our SecurityManager)? Thanks In Advance.



Here is the stacktrace produced during the server startup.

05-jun-2003 11:37:12 org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on port 9116
Starting service Tomcat-Standalone
Apache Tomcat/4.1.24
ServerLifecycleListener: processContainerAddChild: Throwable
java.security.AccessControlException: Access denied 
(mx4j.server.MBeanTrustPermi
ssion register): MBean class 
org.apache.catalina.mbeans.StandardContextMBean is
not trusted for registration
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.checkTrustRegi
stration(SecurityMBeanServerInterceptor.java:156)
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.registration(S
ecurityMBeanServerInterceptor.java:116)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.ContextClassLoaderMBeanServerInterceptor.regi
stration(ContextClassLoaderMBeanServerInterceptor.java:108)
        at 
mx4j.server.MBeanServerImpl.registerImpl(MBeanServerImpl.java:1051)
        at 
mx4j.server.MBeanServerImpl.registerMBeanImpl(MBeanServerImpl.java:10
02)
        at 
mx4j.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:978)
        at 
org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:263
)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.createMBeans(Serve
rLifecycleListener.java:419)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.processContainerAd
dChild(ServerLifecycleListener.java:1358)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.containerEvent(Ser
verLifecycleListener.java:189)
        at 
org.apache.catalina.core.ContainerBase.fireContainerEvent(ContainerBa
se.java:1404)
        at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:829)
        at 
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:80
7)
        at 
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:579)

        at 
org.apache.catalina.core.StandardHostDeployer.install(StandardHostDep
loyer.java:307)
        at 
org.apache.catalina.core.StandardHost.install(StandardHost.java:772)
        at 
org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:492
)
        at 
org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:400
)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:718)
        at 
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java
:358)
        at 
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:166)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1196)

        at org.apache.catalina.core.StandardHost.start(StandardHost.java:738)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)

        at 
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347
)
        at 
org.apache.catalina.core.StandardService.start(StandardService.java:4
97)
        at 
org.apache.catalina.core.StandardServer.start(StandardServer.java:219
0)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:512)
        at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
        at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)
ServerLifecycleListener: processContainerAddChild: Throwable
java.security.AccessControlException: Access denied 
(mx4j.server.MBeanTrustPermi
ssion register): MBean class 
org.apache.catalina.mbeans.StandardContextMBean is
not trusted for registration
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.checkTrustRegi
stration(SecurityMBeanServerInterceptor.java:156)
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.registration(S
ecurityMBeanServerInterceptor.java:116)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.ContextClassLoaderMBeanServerInterceptor.regi
stration(ContextClassLoaderMBeanServerInterceptor.java:108)
        at 
mx4j.server.MBeanServerImpl.registerImpl(MBeanServerImpl.java:1051)
        at 
mx4j.server.MBeanServerImpl.registerMBeanImpl(MBeanServerImpl.java:10
02)
        at 
mx4j.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:978)
        at 
org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:263
)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.createMBeans(Serve
rLifecycleListener.java:419)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.processContainerAd
dChild(ServerLifecycleListener.java:1358)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.containerEvent(Ser
verLifecycleListener.java:189)
        at 
org.apache.catalina.core.ContainerBase.fireContainerEvent(ContainerBa
se.java:1404)
        at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:829)
        at 
org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:
162)
        at 
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(Contain
erBase.java:182)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:80
5)
        at 
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:579)

        at 
org.apache.catalina.core.StandardHostDeployer.install(StandardHostDep
loyer.java:307)
        at 
org.apache.catalina.core.StandardHost.install(StandardHost.java:772)
        at 
org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.j
ava:559)
        at 
org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:401
)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:718)
        at 
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java
:358)
        at 
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:166)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1196)

        at org.apache.catalina.core.StandardHost.start(StandardHost.java:738)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)

        at 
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347
)
        at 
org.apache.catalina.core.StandardService.start(StandardService.java:4
97)
        at 
org.apache.catalina.core.StandardServer.start(StandardServer.java:219
0)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:512)
        at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
        at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)
ServerLifecycleListener: processContainerAddChild: Throwable
java.security.AccessControlException: Access denied 
(mx4j.server.MBeanTrustPermi
ssion register): MBean class 
org.apache.catalina.mbeans.StandardContextMBean is
not trusted for registration
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.checkTrustRegi
stration(SecurityMBeanServerInterceptor.java:156)
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.registration(S
ecurityMBeanServerInterceptor.java:116)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.ContextClassLoaderMBeanServerInterceptor.regi
stration(ContextClassLoaderMBeanServerInterceptor.java:108)
        at 
mx4j.server.MBeanServerImpl.registerImpl(MBeanServerImpl.java:1051)
        at 
mx4j.server.MBeanServerImpl.registerMBeanImpl(MBeanServerImpl.java:10
02)
        at 
mx4j.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:978)
        at 
org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:263
)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.createMBeans(Serve
rLifecycleListener.java:419)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.processContainerAd
dChild(ServerLifecycleListener.java:1358)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.containerEvent(Ser
verLifecycleListener.java:189)
        at 
org.apache.catalina.core.ContainerBase.fireContainerEvent(ContainerBa
se.java:1404)
        at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:829)
        at 
org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:
162)
        at 
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(Contain
erBase.java:182)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:80
5)
        at 
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:579)

        at 
org.apache.catalina.core.StandardHostDeployer.install(StandardHostDep
loyer.java:307)
        at 
org.apache.catalina.core.StandardHost.install(StandardHost.java:772)
        at 
org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.j
ava:559)
        at 
org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:401
)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:718)
        at 
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java
:358)
        at 
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:166)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1196)

        at org.apache.catalina.core.StandardHost.start(StandardHost.java:738)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)

        at 
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347
)
        at 
org.apache.catalina.core.StandardService.start(StandardService.java:4
97)
        at 
org.apache.catalina.core.StandardServer.start(StandardServer.java:219
0)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:512)
        at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
        at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)
ServerLifecycleListener: processContainerAddChild: Throwable
java.security.AccessControlException: Access denied 
(mx4j.server.MBeanTrustPermi
ssion register): MBean class 
org.apache.catalina.mbeans.StandardContextMBean is
not trusted for registration
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.checkTrustRegi
stration(SecurityMBeanServerInterceptor.java:156)
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.registration(S
ecurityMBeanServerInterceptor.java:116)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.ContextClassLoaderMBeanServerInterceptor.regi
stration(ContextClassLoaderMBeanServerInterceptor.java:108)
        at 
mx4j.server.MBeanServerImpl.registerImpl(MBeanServerImpl.java:1051)
        at 
mx4j.server.MBeanServerImpl.registerMBeanImpl(MBeanServerImpl.java:10
02)
        at 
mx4j.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:978)
        at 
org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:263
)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.createMBeans(Serve
rLifecycleListener.java:419)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.processContainerAd
dChild(ServerLifecycleListener.java:1358)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.containerEvent(Ser
verLifecycleListener.java:189)
        at 
org.apache.catalina.core.ContainerBase.fireContainerEvent(ContainerBa
se.java:1404)
        at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:829)
        at 
org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:
162)
        at 
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(Contain
erBase.java:182)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:80
5)
        at 
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:579)

        at 
org.apache.catalina.core.StandardHostDeployer.install(StandardHostDep
loyer.java:307)
        at 
org.apache.catalina.core.StandardHost.install(StandardHost.java:772)
        at 
org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.j
ava:559)
        at 
org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:401
)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:718)
        at 
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java
:358)
        at 
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:166)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1196)

        at org.apache.catalina.core.StandardHost.start(StandardHost.java:738)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)

        at 
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347
)
        at 
org.apache.catalina.core.StandardService.start(StandardService.java:4
97)
        at 
org.apache.catalina.core.StandardServer.start(StandardServer.java:219
0)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:512)
        at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
        at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)
ServerLifecycleListener: processContainerAddChild: Throwable
java.security.AccessControlException: Access denied 
(mx4j.server.MBeanTrustPermi
ssion register): MBean class 
org.apache.catalina.mbeans.StandardContextMBean is
not trusted for registration
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.checkTrustRegi
stration(SecurityMBeanServerInterceptor.java:156)
        at 
mx4j.server.interceptor.SecurityMBeanServerInterceptor.registration(S
ecurityMBeanServerInterceptor.java:116)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.DefaultMBeanServerInterceptor.registration(De
faultMBeanServerInterceptor.java:113)
        at 
mx4j.server.interceptor.ContextClassLoaderMBeanServerInterceptor.regi
stration(ContextClassLoaderMBeanServerInterceptor.java:108)
        at 
mx4j.server.MBeanServerImpl.registerImpl(MBeanServerImpl.java:1051)
        at 
mx4j.server.MBeanServerImpl.registerMBeanImpl(MBeanServerImpl.java:10
02)
        at 
mx4j.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:978)
        at 
org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:263
)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.createMBeans(Serve
rLifecycleListener.java:419)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.processContainerAd
dChild(ServerLifecycleListener.java:1358)
        at 
org.apache.catalina.mbeans.ServerLifecycleListener.containerEvent(Ser
verLifecycleListener.java:189)
        at 
org.apache.catalina.core.ContainerBase.fireContainerEvent(ContainerBa
se.java:1404)
        at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase
.java:829)
        at 
org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:
162)
        at 
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(Contain
erBase.java:182)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:80
5)
        at 
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:579)

        at 
org.apache.catalina.core.StandardHostDeployer.install(StandardHostDep
loyer.java:307)
        at 
org.apache.catalina.core.StandardHost.install(StandardHost.java:772)
        at 
org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.j
ava:559)
        at 
org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:401
)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:718)
        at 
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java
:358)
        at 
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:166)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1196)

        at org.apache.catalina.core.StandardHost.start(StandardHost.java:738)
        at 
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)

        at 
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347
)
        at 
org.apache.catalina.core.StandardService.start(StandardService.java:4
97)
        at 
org.apache.catalina.core.StandardServer.start(StandardServer.java:219
0)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:512)
        at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
        at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)