[Geoserver-users] XSTREAM whitelist jor JMS clustering plugin.

GeoServer GeoServer User
1

Hello, I’m using the JMS clustering plugin in my Geoserver instance using version 2.22.1, I get the XSTREAM forbidden class error described in the troubleshooting in the documentation. I have tried adding all the classes that have started an error to a system property, but the forbidden class error still appears for the classes I have added.

To add to the classes to the whitelist, I have added -DEGOESERVER=’comma-separated-list-of-classess’ to the JAVA_OPTS. Is this the correct way? Is it possible to whitelist the classes for JMS clustering plugin.?

Thankyou.

Ricard

2

The issue is known… but it’s also your lucky day, we just got funding to fix it!
Keep your eyes on the ticket to know when the fix will land, it would be great if you could test the fix once it lands.

Cheers
Andrea

···

Regards,

Andrea Aime

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584 962313

fax: +39 0584 1660272

mob: +39 339 8844549

https://www.geosolutionsgroup.com/

http://twitter.com/geosolutions_it

Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail

3

Hi,

you can use jcmd to see which system properties are in use.

So e.g. on my linux server I do:
09:57:48 hans.yperman@…11721…:~

$ sudo jcmd
1297353 jdk.jcmd/sun.tools.jcmd.JCmd
904663 org.apache.catalina.startup.Bootstrap start

which delivers a list of candidate processes. For tomcat you want the org.apache.catalina line, 904663 in my case.

Then, you can send troubleshooting commands, e.g.
09:57:57 hans.yperman@…11721…:~

$ sudo jcmd 904663 VM.system_properties

which dumps all active system properties.

Beware, even after fixing xstream, I never got the clustering plugin working very well. We started to get random crashes and UI locking problems when using it, and sometimes updates went missing, leaving the cluster incoherent. In the end, we just dropped the plugin and clustered with some manual scripting.

Hans

image001.png

···

Hans Yperman

Department IT

Vlaams Instituut voor de Zee vzw

InnovOcean Campus, Jacobsenstraat 1

8400 Oostende, België

:phone:+32 (0) 59 33 61 13

:e-mail: hans.yperman@…1715…

www.vliz.be

Van: Ricard Peiro <ricard.peiro@…11372…>
Verzonden: maandag 6 februari 2023 17:12
Aan: geoserver-users@lists.sourceforge.net geoserver-users@lists.sourceforge.net
Onderwerp: [Geoserver-users] XSTREAM whitelist jor JMS clustering plugin.

Hello, I’m using the JMS clustering plugin in my Geoserver instance using version 2.22.1, I get the XSTREAM forbidden class error described in the troubleshooting in the documentation. I have tried adding all the classes that have started an error to a system property, but the forbidden class error still appears for the classes I have added.

To add to the classes to the whitelist, I have added -DEGOESERVER=’comma-separated-list-of-classess’ to the JAVA_OPTS. Is this the correct way? Is it possible to whitelist the classes for JMS clustering plugin.?

Thankyou.

Ricard