-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Chinoy,
On 9/30/16 12:24 PM, Chinoy Gupta wrote: > But the same thing is working in 8.0.36. I'm very sorry, I must have read your originally message incorrectly. I was thinking you were trying to map the UserDatabaseRealm into your web application, and not just the password. Apologies for the noise, - -chris > On Fri, Sep 30, 2016 at 9:33 PM +0530, "Christopher Schultz" > <ch...@christopherschultz.net<mailto:ch...@christopherschultz.net>> > wrote: > > Chinoy, > > On 9/30/16 8:34 AM, Chinoy Gupta wrote: >> Hi Mark, > >> The following is added in server.xml: > >> <GlobalNamingResources> <!-- Editable user database that can >> also be used by UserDatabaseRealm to authenticate users --> >> <Resource name="UserDatabase" auth="Container" >> type="org.apache.catalina.UserDatabase" description="User >> database that can be updated and saved" >> factory="org.apache.catalina.users.MemoryUserDatabaseFactory" >> pathname="conf/tomcat-users.xml" /> > >> <Environment name="my/secret/password" value="JohnDoe" >> type="java.lang.String"/> </GlobalNamingResources> > >> And the following is added in context.xml: > >> <Environment name="my/local/test" value="local test" >> type="java.lang.String" override="false"/> <ResourceLink >> name="my/secret/password" global="my/secret/password" >> type="java.lang.String" /> > >> If I try to get "my/local/test", it works and I get "local >> test". But if I try to get " my/secret/password", it returns >> NULL. > > You aren't mapping it correctly. > > Please have another look at the documentation for <ResourceLink>. > > -chris > >> -----Original Message----- From: Mark Thomas >> [mailto:ma...@apache.org] Sent: Friday, September 30, 2016 6:00 >> PM To: Tomcat Users List <users@tomcat.apache.org> Subject: Re: >> Unable to access Global JNDI Resource > >> On 30/09/2016 13:20, Chinoy Gupta wrote: >>> Hi Mark, >>> >>> This is my stacktrace: >>> >>> ResourceLinkFactory.validateGlobalResourceAccess(String) line: >>> 109 ResourceLinkFactory.getObjectInstance(Object, Name, >>> Context, Hashtable<?,?>) line: 142 >>> NamingManager.getObjectInstance(Object, Name, Context, >>> Hashtable<?,?>) line: 321 NamingContext.lookup(Name, boolean) >>> line: 847 NamingContext.lookup(Name) line: 158 >>> NamingContext.lookup(Name, boolean) line: 835 >>> NamingContext.lookup(Name) line: 158 NamingContext.lookup(Name, >>> boolean) line: 835 NamingContext.lookup(String) line: 172 >>> >>> validateGlobalResourceAccess function returns false and then >>> getObjectInstance returns NULL. > >> You haven't defined a ResourceLink. > >> Mark > >>> >>> Regards, Chinoy >>> >>> >>> -----Original Message----- From: Mark Thomas >>> [mailto:ma...@apache.org] Sent: Friday, September 30, 2016 >>> 5:28 PM To: Tomcat Users List <users@tomcat.apache.org> >>> Subject: Re: Unable to access Global JNDI Resource >>> >>> On 30/09/2016 12:50, Chinoy Gupta wrote: >>>> I am getting NULL instead of the resource's value. I >>>> debugged the tomcat code and figured out that in >>>> ResourceLinkFactory.java, before fetching the resource there >>>> is a validation based on current classloader. That >>>> validation fails and tomcat returns NULL. >>> >>> The above statement is not correct. If the class loader based >>> validation fails, Tomcat throws an exception. It does not >>> return null. >>> >>> Mark >>> >>>> >>>> -----Original Message----- From: Mark Thomas >>>> [mailto:ma...@apache.org] Sent: Friday, September 30, 2016 >>>> 4:11 PM To: Tomcat Users List <users@tomcat.apache.org> >>>> Subject: Re: Unable to access Global JNDI Resource >>>> >>>> On 30/09/2016 11:30, Chinoy Gupta wrote: >>>>> Hi, >>>>> >>>>> I have a web application which runs on tomcat. In >>>>> server.xml, I provide some resources under >>>>> "<GlobalNamingResources> section" and then provide a >>>>> ResourceLink to the same in context.xml. And then I fetch >>>>> that resource in my application. This was working properly >>>>> earlier but started breaking with 8.0.37. >>>> >>>> Define breaking. Ideally with a stack trace. >>>> >>>> Mark >>>> >>>> >>>>> I think the reason is the extra validation check >>>>> introduced in ResourceLinkFactory class. My application has >>>>> its own classloader and when I try to fetch the JNDI >>>>> resource, the Thread's classloader is my custom one rather >>>>> than the default one. Because of that validation fails and >>>>> tomcat returns NULL. Is there a way to fix this through >>>>> configuration or any other means? >>>>> >>>>> Regards, Chinoy >>>>> >>>>> >>>> >>>> >>>> ------------------------------------------------------------------- - - > >>>> - - >>>> >>>> >>> >>>> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>>> For additional commands, e-mail: >>>> users-h...@tomcat.apache.org >>>> >>>> >>>> ------------------------------------------------------------------- - - > >>>> - - >>>> >>>> >>> >>>> > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>>> For additional commands, e-mail: >>>> users-h...@tomcat.apache.org >>>> >>> >>> >>> -------------------------------------------------------------------- - - >>> >>> > >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>> For additional commands, e-mail: users-h...@tomcat.apache.org >>> >>> >>> -------------------------------------------------------------------- - - >>> >>> > >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>> For additional commands, e-mail: users-h...@tomcat.apache.org >>> > > >> --------------------------------------------------------------------- > >> > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org > > >> --------------------------------------------------------------------- > >> > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJX8prHAAoJEBzwKT+lPKRYVvMP/21QdP571j3XsG7edcFCuizH hS9ZYa7iyUNhyE+x/uMJW0wxJoBmQfgmR6ucfMPimEELtMQwC2ETouZn5mE7SRAV xQPQg0vVmaajxiJXNgycooEgYFNSpkljx2q60L79eSQKxFZtaES61jYcWfSbsWVL w6L4ai3gFDdbEhELIF/fm9s+1RNC93vy4d/rHbdBqN9JqigVhuGjerzx8lK930Vh o/ghWZx4SAMf+TFZ3sFj6F9fdn8TSPaAvpwPEu23HYC1dxxPCgAOPB4GoD7m5zFC qYHqOhZD8vBXPTcKCEeE/+20oi6uUaXe4KS3M54UJ/tLkw2Xg1Fk0h65W88au44P WMCJhP1UmM1GE4xf1I28XTEDqC0wxL9sGLqKnVQh8g3yjY23KqKjLF/lWQBMTjWX ajd2qNyqpZzokY758pjyDYdqeTa0TTInaWZceXj0Y9lQc9lv3kByASNe5H4jmkw9 25oXZVIv45T3bpmK5nb/zRvFC4DtPGW6mre6xNT+/WLKzbItxAG9CRDMzQAowWtI jmSWmRtSBAV81h/OKlPzEii35nSNnUH2JaKFwcHKuVZ4BdO9uuk/Ip961/SNmfAt kUMh3fZXh6FVz3b2+uimdjiBv3aSjFPXxtZLxIrTKiJNqNG+baNOtZFVtAsJQ5sa MKUO0oWy7QxVVxFNCVdc =TswG -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
