Menu
▾
▴
Re: [Wrapper-user] java.security changes when running with a wrapper?
|
From: <dp...@ro...> - 2009-07-17 12:38:50
|
In <c0a...@ma...>, on 07/17/09 at 01:32 PM, Leif Mortenson <le...@ta...> said: Thanks for your reply. I've attached the java.security file, the wrapper file (wrapper_callisl.conf), and more info below. (I've replaced my company name with "foo" due to our strict confidentiality policies. I did do a test where I updated the main java.security file with our custom factories, and there were no errors, and the application worked correctly, so I believe our custom socket factories are working correctly, and the problem is just getting them invoked. >Hi, >What you are trying to do should be possible. I was not clear however >where the error is being encountered. When using the default SSL Socket factory, my application gets the following error in it's own log file: ERROR 2009-07-17 07:57:19,108: ISL1-000245 - : Error creating service for WSDL URL: https://fooiappwsQA5.saifg.foo.com/islws_request/islws_request.asmx?WSDL , Web Service name: ISLWS_Request, Web Service namespace: http://www.software.com/ISLWS_Request/ISLWS. Exception is: modeler error: failed to parse document at "https://fooiappwsQA5.saifg.foo.com/islws_request/islws_request.asmx?WSD L": java.net.SocketException. >Is it when the JVM is being launched? Or within your application? Any changes to the java.policy file that I have refereced in the wrapper.conf that have allowed the applicaton to start, have not successed in invoking the custom socket factories. The other attempts have resulted in the lauching going into a loop and produceing the following in the wrapper.log: ====================start of log=================== STATUS | wrapper | 2009/07/17 08:06:29 | --> Wrapper Started as Service STATUS | wrapper | 2009/07/17 08:06:29 | Java Service Wrapper Community Edition 3.3.1 STATUS | wrapper | 2009/07/17 08:06:29 | Copyright (C) 1999-2008 Tanuki Software, Inc. All Rights Reserved. STATUS | wrapper | 2009/07/17 08:06:29 | http://wrapper.tanukisoftware.org STATUS | wrapper | 2009/07/17 08:06:29 | STATUS | wrapper | 2009/07/17 08:06:30 | Launching a JVM... INFO | jvm 1 | 2009/07/17 08:06:31 | WrapperManager: Initializing... INFO | jvm 1 | 2009/07/17 08:06:35 | java.security.policy: error parsing file://cagecfsu1.saifg.foo.com/RF00/DEV1/PF33/pr/presentation/java.calli sl2.policy: INFO | jvm 1 | 2009/07/17 08:06:35 | line 6: expected [;], found [ssl.SocketFactory.provider] INFO | jvm 1 | 2009/07/17 08:06:36 | INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperStartStopApp: Encountered an error running start main: java.security.AccessControlException: Access denied (java.net.SocketPermission 127.0.0.1:1099 connect,resolve) INFO | jvm 1 | 2009/07/17 08:06:36 | java.security.AccessControlException: Access denied (java.net.SocketPermission 127.0.0.1:1099 connect,resolve) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.security.AccessContr <<wrapper_callisl.conf>> <<Copy of java.was6.1.policy>> <<java.was6.1.policy>> <<java.security>> oller.checkPermission(AccessController.java:108) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.lang.SecurityManager.checkPermission(SecurityManager.java:558) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.lang.SecurityManager.checkConnect(SecurityManager.java:1060) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.net.Socket.connect(Socket.java:537) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.net.Socket.connect(Socket.java:493) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.net.Socket.<init>(Socket.java:401) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.net.Socket.<init>(Socket.java:215) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.rmi.transport.proxy.RMIDirectSocketFactory.createSocket(RMIDirectSoc ketFactory.java:41) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.rmi.transport.proxy.RMIMasterSocketFactory.createSocket(RMIMasterSoc ketFactory.java:145) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:585) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:204) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:190) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.rmi.server.UnicastRef.newCall(UnicastRef.java:321) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.rmi.registry.RegistryImpl_Stub.rebind(RegistryImpl_Stub.java:124) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.rmi.Naming.rebind(Naming.java:174) INFO | jvm 1 | 2009/07/17 08:06:36 | at com.callisl.callislRmiImpl.start(callislRmiImpl.java:268) INFO | jvm 1 | 2009/07/17 08:06:36 | at com.callisl.callislRmiImpl.<init>(callislRmiImpl.java:62) INFO | jvm 1 | 2009/07/17 08:06:36 | at com.callisl.Main.getInstance(Main.java:63) INFO | jvm 1 | 2009/07/17 08:06:36 | at com.callisl.Main.main(Main.java:196) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav a:79) INFO | jvm 1 | 2009/07/17 08:06:36 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor Impl.java:43) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.lang.reflect.Method.invoke(Method.java:618) INFO | jvm 1 | 2009/07/17 08:06:36 | at com.callislwrapper.WrapperStartStopApp.run(WrapperStartStopApp.java:85) INFO | jvm 1 | 2009/07/17 08:06:36 | at java.lang.Thread.run(Thread.java:810) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: Server daemon died! INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: java.security.AccessControlException: Access denied (org.tanukisoftware.wrapper.security.WrapperPermission stop) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.security.AccessController.checkPermission(AccessController.java:108 ) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.SecurityManager.checkPermission(SecurityManager.java:558) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.stop(WrapperManager.java:2140) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.startInner(WrapperManager.java :3057) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.handleSocket(WrapperManager.ja va:4045) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.run(WrapperManager.java:4338) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.Thread.run(Thread.java:810) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: Server daemon died! INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: java.security.AccessControlException: Access denied (java.net.SocketPermission 127.0.0.1:1768 connect,resolve) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.security.AccessController.checkPermission(AccessController.java:108 ) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.SecurityManager.checkPermission(SecurityManager.java:558) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.SecurityManager.checkConnect(SecurityManager.java:1060) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.connect(Socket.java:537) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.connect(Socket.java:493) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.<init>(Socket.java:401) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.<init>(Socket.java:302) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.openSocket(WrapperManager.java :3644) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.run(WrapperManager.java:4322) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.Thread.run(Thread.java:810) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: Server daemon died! INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: java.security.AccessControlException: Access denied (java.net.SocketPermission 127.0.0.1:1768 connect,resolve) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.security.AccessController.checkPermission(AccessController.java:108 ) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.SecurityManager.checkPermission(SecurityManager.java:558) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.SecurityManager.checkConnect(SecurityManager.java:1060) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.connect(Socket.java:537) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.connect(Socket.java:493) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.<init>(Socket.java:401) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.<init>(Socket.java:302) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.openSocket(WrapperManager.java :3644) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.run(WrapperManager.java:4322) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.Thread.run(Thread.java:810) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: Server daemon died! INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: java.security.AccessControlException: Access denied (java.net.SocketPermission 127.0.0.1:1768 connect,resolve) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.security.AccessController.checkPermission(AccessController.java:108 ) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.SecurityManager.checkPermission(SecurityManager.java:558) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.SecurityManager.checkConnect(SecurityManager.java:1060) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.connect(Socket.java:537) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.connect(Socket.java:493) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.<init>(Socket.java:401) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.net.Socket.<init>(Socket.java:302) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.openSocket(WrapperManager.java :3644) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at org.tanukisoftware.wrapper.WrapperManager.run(WrapperManager.java:4322) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: at java.lang.Thread.run(Thread.java:810) INFO | jvm 1 | 2009/07/17 08:06:36 | WrapperManager Error: Server daemon died! ========end of log=============================== >Could you please reply with your wrapper.conf, the contents of your >wrapper.log as well as the policy file you are using. >Cheers, >Leif >On Fri, Jul 17, 2009 at 8:06 AM, <dp...@ro...> wrote: >> >> >> I have the following situation on a server, and I"m hoping there is a way >> to accomplish this with the wrapper.conf file. >> >> This server has 1 install of Java, and several JVMs running. I need to >> add to this server a new JVM, running under the control of a wrapper. The >> other JVMs require standard SSL support, and the java.security file >> specifies the standard ssl.socketfactory.provider= and >> ssl.serversocketfactory.provider= >> >> This new JVM requires a custom ssl.socketfactory.provider and >> ssl.serversocketfactory.provider and the custom ones, are not suitable for >> the other JVMs on this server. >> >> I tried adding to the java.policy file that I specify in the wrapper.conf >> ssl.socketfactory.provider=custom >> ssl.serversocketfactory.provider=custom >> >> but the JVM does not start, giving a syntax error saying it expected ";" >> but found 'ssl.socketfactory.provider'. >> >> >> Thanks for any help >------------------------------------------------------------------------------ >Enter the BlackBerry Developer Challenge >This is your chance to win up to $100,000 in prizes! For a limited time, >vendors submitting new applications to BlackBerry App World(TM) will have >the opportunity to enter the BlackBerry Developer Challenge. See full >prize details at: http://p.sf.net/sfu/Challenge >_______________________________________________ >Wrapper-user mailing list >Wra...@li... >https://lists.sourceforge.net/lists/listinfo/wrapper-user -- ----------------------------------------------------------- dp...@ro... ----------------------------------------------------------- |
