[GeoNetwork-users] pb in installation fo GN with tomcat : AccessControlException: access denied

Jean_Pommier · July 3, 2009, 5:08pm

Hi,

I'm trying to install geonetwork (checked from trunk yesterday and compiled)
in a tomcat instance, as described here :
http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat
Unfortunately, i get an error message :

3 juil. 2009 19:03:40 org.apache.catalina.core.StandardWrapperValve invoke
SEVERE: Exception lors de l'allocation pour la servlet gn-servlet
java.security.AccessControlException: access denied (java.io.FilePermission
/usr/share/tomcat6/webapps/geonetwork/../tmp read)
    at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
    at
java.security.AccessController.checkPermission(AccessController.java:546)
    at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
    at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
    at java.io.File.exists(File.java:731)
    at java.io.File.mkdirs(File.java:1181)
    at jeeves.server.JeevesEngine.initGeneral(JeevesEngine.java:284)
    at jeeves.server.JeevesEngine.loadConfigFile(JeevesEngine.java:203)
    at jeeves.server.JeevesEngine.init(JeevesEngine.java:137)
    at jeeves.server.sources.http.JeevesServlet.init(JeevesServlet.java:66)
    at javax.servlet.GenericServlet.init(GenericServlet.java:212)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
    at java.security.AccessController.doPrivileged(Native Method)
    at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
    at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
    at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
    at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)
    at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1166)
    at
org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:808)
    at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:129)
    at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
    at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
    at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
    at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
    at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
    at java.lang.Thread.run(Thread.java:619)

I've tried changing the access rights to the tmp directory, to change le
path to the directory (it is set in config.xml), but with no success.

Have anybody successfully installed geonetwork on tomcat, recently ?
Thanks,

Jean

michael.stegherr · July 6, 2009, 3:09am

Hi Jean,

I recently installed GeoNetwork trunk revision 4231.

I installed it on Tomcat 5.5 and had to do the following modifications:

# Make Tomcat the owner of the web directory:
chown -R tomcat55:nogroup /usr/local/geonetwork/web
# Make Tomcat the owner of the metadata upload directory:
chown -R tomcat55:nogroup /usr/local/geonetwork/data/tmp

Owner and group can be different, if you are using different tomcat versions.

Maybe that should go on this page:
http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat

HTH,
Michael

-----Original Message-----
From: Jean Pommier (IGE) [mailto:jean.pommier@anonymised.com]
Sent: Saturday, 4 July 2009 1:08 AM
To: geonetwork-users@lists.sourceforge.net
Subject: [GeoNetwork-users] pb in installation fo GN with
tomcat : AccessControlException: access denied

Hi,

I'm trying to install geonetwork (checked from trunk
yesterday and compiled)
in a tomcat instance, as described here :
http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat
Unfortunately, i get an error message :

3 juil. 2009 19:03:40
org.apache.catalina.core.StandardWrapperValve invoke
SEVERE: Exception lors de l'allocation pour la servlet gn-servlet
java.security.AccessControlException: access denied
(java.io.FilePermission
/usr/share/tomcat6/webapps/geonetwork/../tmp read)
    at
java.security.AccessControlContext.checkPermission(AccessContr
olContext.java:323)
    at
java.security.AccessController.checkPermission(AccessControlle
r.java:546)
    at
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
    at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
    at java.io.File.exists(File.java:731)
    at java.io.File.mkdirs(File.java:1181)
    at jeeves.server.JeevesEngine.initGeneral(JeevesEngine.java:284)
    at
jeeves.server.JeevesEngine.loadConfigFile(JeevesEngine.java:203)
    at jeeves.server.JeevesEngine.init(JeevesEngine.java:137)
    at
jeeves.server.sources.http.JeevesServlet.init(JeevesServlet.java:66)
    at javax.servlet.GenericServlet.init(GenericServlet.java:212)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccess
orImpl.java:39)
    at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMeth
odAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
    at java.security.AccessController.doPrivileged(Native Method)
    at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
    at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil
.java:276)
    at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(Securi
tyUtil.java:162)
    at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(Securi
tyUtil.java:115)
    at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardW
rapper.java:1166)
    at
org.apache.catalina.core.StandardWrapper.allocate(StandardWrap
per.java:808)
    at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardW
rapperValve.java:129)
    at
org.apache.catalina.core.StandardContextValve.invoke(StandardC
ontextValve.java:191)
    at
org.apache.catalina.core.StandardHostValve.invoke(StandardHost
Valve.java:128)
    at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReport
Valve.java:102)
    at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEn
gineValve.java:109)
    at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdap
ter.java:286)
    at
org.apache.coyote.http11.Http11Processor.process(Http11Process
or.java:845)
    at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandle
r.process(Http11Protocol.java:583)
    at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.
java:447)
    at java.lang.Thread.run(Thread.java:619)

I've tried changing the access rights to the tmp directory,
to change le
path to the directory (it is set in config.xml), but with no success.

Have anybody successfully installed geonetwork on tomcat, recently ?
Thanks,

Jean
--------------------------------------------------------------
----------------
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at
http://sourceforge.net/projects/geonetwork

Michele_Beneventi1 · July 6, 2009, 7:49am

Hi,
I've already installed the 2.4 release (from Sourceforge) under Apache
tomcat 6.18 on my Ubuntu 9.04
following the HowTo:

http://geonetwork-opensource.org/documentation/how-to/installing-geonetwork-2-1-0-on-ubuntu

Pay attention to the tomcat path and version

PS: the table "isolanguagesdes" seems not working good with "gast" DB setup.
I've used the one from the geonetwork 2.2

Regards
Michele

On Mon, Jul 6, 2009 at 5:09 AM, <Michael.Stegherr@anonymised.com> wrote:

Hi Jean,

I recently installed GeoNetwork trunk revision 4231.

I installed it on Tomcat 5.5 and had to do the following modifications:

# Make Tomcat the owner of the web directory:
chown -R tomcat55:nogroup /usr/local/geonetwork/web
# Make Tomcat the owner of the metadata upload directory:
chown -R tomcat55:nogroup /usr/local/geonetwork/data/tmp

Owner and group can be different, if you are using different tomcat
versions.

Maybe that should go on this page:
http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat

HTH,
Michael

> -----Original Message-----
> From: Jean Pommier (IGE) [mailto:jean.pommier@anonymised.com]
> Sent: Saturday, 4 July 2009 1:08 AM
> To: geonetwork-users@lists.sourceforge.net
> Subject: [GeoNetwork-users] pb in installation fo GN with
> tomcat : AccessControlException: access denied
>
> Hi,
>
> I'm trying to install geonetwork (checked from trunk
> yesterday and compiled)
> in a tomcat instance, as described here :
> http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat
> Unfortunately, i get an error message :
>
> 3 juil. 2009 19:03:40
> org.apache.catalina.core.StandardWrapperValve invoke
> SEVERE: Exception lors de l'allocation pour la servlet gn-servlet
> java.security.AccessControlException: access denied
> (java.io.FilePermission
> /usr/share/tomcat6/webapps/geonetwork/../tmp read)
> at
> java.security.AccessControlContext.checkPermission(AccessContr
> olContext.java:323)
> at
> java.security.AccessController.checkPermission(AccessControlle
> r.java:546)
> at
> java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
> at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
> at java.io.File.exists(File.java:731)
> at java.io.File.mkdirs(File.java:1181)
> at jeeves.server.JeevesEngine.initGeneral(JeevesEngine.java:284)
> at
> jeeves.server.JeevesEngine.loadConfigFile(JeevesEngine.java:203)
> at jeeves.server.JeevesEngine.init(JeevesEngine.java:137)
> at
> jeeves.server.sources.http.JeevesServlet.init(JeevesServlet.java:66)
> at javax.servlet.GenericServlet.init(GenericServlet.java:212)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccess
> orImpl.java:39)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMeth
> odAccessorImpl.java:25)
> at java.lang.reflect.Method.invoke(Method.java:597)
> at
> org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
> at
> org.apache.catalina.security.SecurityUtil.execute(SecurityUtil
> .java:276)
> at
> org.apache.catalina.security.SecurityUtil.doAsPrivilege(Securi
> tyUtil.java:162)
> at
> org.apache.catalina.security.SecurityUtil.doAsPrivilege(Securi
> tyUtil.java:115)
> at
> org.apache.catalina.core.StandardWrapper.loadServlet(StandardW
> rapper.java:1166)
> at
> org.apache.catalina.core.StandardWrapper.allocate(StandardWrap
> per.java:808)
> at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardW
> rapperValve.java:129)
> at
> org.apache.catalina.core.StandardContextValve.invoke(StandardC
> ontextValve.java:191)
> at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHost
> Valve.java:128)
> at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReport
> Valve.java:102)
> at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEn
> gineValve.java:109)
> at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdap
> ter.java:286)
> at
> org.apache.coyote.http11.Http11Processor.process(Http11Process
> or.java:845)
> at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandle
> r.process(Http11Protocol.java:583)
> at
> org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.
> java:447)
> at java.lang.Thread.run(Thread.java:619)
>
> I've tried changing the access rights to the tmp directory,
> to change le
> path to the directory (it is set in config.xml), but with no success.
>
> Have anybody successfully installed geonetwork on tomcat, recently ?
> Thanks,
>
> Jean
> --------------------------------------------------------------
> ----------------
> _______________________________________________
> GeoNetwork-users mailing list
> GeoNetwork-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geonetwork-users
> GeoNetwork OpenSource is maintained at
> http://sourceforge.net/projects/geonetwork
>

------------------------------------------------------------------------------
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at
http://sourceforge.net/projects/geonetwork

--
Michele Beneventi - Sardegna IT
c/o
Assessorato Enti Locali, Finanze ed Urbanistica
Direzione Generale Pianificazione Urbanistica Territoriale e Vigilanza
Edilizia
Servizio Informativo e Cartografico regionale
Viale Trieste 186 - 09123 Cagliari

Tel: +39 070 606 5818

Jean_Pommier · July 13, 2009, 2:16pm

OK, Thanks.
What i wanted to do is use the 'b' solutions proposed in the WIKI (
http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat)
I found why i had this error : i had to change the 'TOMCAT6_SECURITY'
parameter to 'no' (in /etc/init.d/tomcat6)

Jean

------
N'imprimez ce message qu'en cas de nécessité. Soyons éco-responsables !

Donnez une nouvelle dimension à vos données…

I G E

Jean POMMIER
*Directeur Associé*

TIC - Webmapping 3D

Port : +33 6 09 23 21 36
Skype : igejean

Information Géographique et Environnement
12 rue Arnaud Vidal
31000 Toulouse
France

Tel : +33 5 61 86 81 49
Fax : +33 5 61 86 09 23
Mail : contact@anonymised.com
Site web : www.ige.fr <http://wwww.ige.fr>

*L'actualité d'IGE sur RSS : *http://www.ige.fr/actualites/rss.php
*Localisez IGE dans WorldWind : *
worldwind://goto/world=Earth&lat=43.55519&lon=1.38256&alt=190&dir=26.7&tilt=60.3

2009/7/6 <Michael.Stegherr@anonymised.com>

Hi Jean,

I recently installed GeoNetwork trunk revision 4231.

I installed it on Tomcat 5.5 and had to do the following modifications:

# Make Tomcat the owner of the web directory:
chown -R tomcat55:nogroup /usr/local/geonetwork/web
# Make Tomcat the owner of the metadata upload directory:
chown -R tomcat55:nogroup /usr/local/geonetwork/data/tmp

Owner and group can be different, if you are using different tomcat
versions.

Maybe that should go on this page:
http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat

HTH,
Michael

> -----Original Message-----
> From: Jean Pommier (IGE) [mailto:jean.pommier@anonymised.com]
> Sent: Saturday, 4 July 2009 1:08 AM
> To: geonetwork-users@lists.sourceforge.net
> Subject: [GeoNetwork-users] pb in installation fo GN with
> tomcat : AccessControlException: access denied
>
> Hi,
>
> I'm trying to install geonetwork (checked from trunk
> yesterday and compiled)
> in a tomcat instance, as described here :
> http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat
> Unfortunately, i get an error message :
>
> 3 juil. 2009 19:03:40
> org.apache.catalina.core.StandardWrapperValve invoke
> SEVERE: Exception lors de l'allocation pour la servlet gn-servlet
> java.security.AccessControlException: access denied
> (java.io.FilePermission
> /usr/share/tomcat6/webapps/geonetwork/../tmp read)
> at
> java.security.AccessControlContext.checkPermission(AccessContr
> olContext.java:323)
> at
> java.security.AccessController.checkPermission(AccessControlle
> r.java:546)
> at
> java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
> at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
> at java.io.File.exists(File.java:731)
> at java.io.File.mkdirs(File.java:1181)
> at jeeves.server.JeevesEngine.initGeneral(JeevesEngine.java:284)
> at
> jeeves.server.JeevesEngine.loadConfigFile(JeevesEngine.java:203)
> at jeeves.server.JeevesEngine.init(JeevesEngine.java:137)
> at
> jeeves.server.sources.http.JeevesServlet.init(JeevesServlet.java:66)
> at javax.servlet.GenericServlet.init(GenericServlet.java:212)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccess
> orImpl.java:39)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMeth
> odAccessorImpl.java:25)
> at java.lang.reflect.Method.invoke(Method.java:597)
> at
> org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
> at
> org.apache.catalina.security.SecurityUtil.execute(SecurityUtil
> .java:276)
> at
> org.apache.catalina.security.SecurityUtil.doAsPrivilege(Securi
> tyUtil.java:162)
> at
> org.apache.catalina.security.SecurityUtil.doAsPrivilege(Securi
> tyUtil.java:115)
> at
> org.apache.catalina.core.StandardWrapper.loadServlet(StandardW
> rapper.java:1166)
> at
> org.apache.catalina.core.StandardWrapper.allocate(StandardWrap
> per.java:808)
> at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardW
> rapperValve.java:129)
> at
> org.apache.catalina.core.StandardContextValve.invoke(StandardC
> ontextValve.java:191)
> at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHost
> Valve.java:128)
> at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReport
> Valve.java:102)
> at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEn
> gineValve.java:109)
> at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdap
> ter.java:286)
> at
> org.apache.coyote.http11.Http11Processor.process(Http11Process
> or.java:845)
> at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandle
> r.process(Http11Protocol.java:583)
> at
> org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.
> java:447)
> at java.lang.Thread.run(Thread.java:619)
>
> I've tried changing the access rights to the tmp directory,
> to change le
> path to the directory (it is set in config.xml), but with no success.
>
> Have anybody successfully installed geonetwork on tomcat, recently ?
> Thanks,
>
> Jean
> --------------------------------------------------------------
> ----------------
> _______________________________________________
> GeoNetwork-users mailing list
> GeoNetwork-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geonetwork-users
> GeoNetwork OpenSource is maintained at
> http://sourceforge.net/projects/geonetwork
>

------------------------------------------------------------------------------
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at
http://sourceforge.net/projects/geonetwork

michael.stegherr · July 14, 2009, 5:36am

Hi Jean,

-----Original Message-----
From: ige31.jp@anonymised.com [mailto:ige31.jp@anonymised.com] On
Behalf Of Jean Pommier (IGE)

OK, Thanks.
What i wanted to do is use the 'b' solutions proposed in the
WIKI (http://trac.osgeo.org/geonetwork/wiki/HowToRunUnderTomcat)
I found why i had this error : i had to change the
'TOMCAT6_SECURITY' parameter to 'no' (in /etc/init.d/tomcat6)

Alright, I added both items to above page.

Cheers,
Michael