[IPT] IPT setup on Ubuntu (8.10) with Tomcat 6

[Tim Robertson (GBIF)]

Hi,

This looks like a security feature with Tomcat on Ubuntu.  I am not sure
if the policy file is created at startup with Ubuntu from the webapps
policy file or if it uses the catalina.policy... so I can't be 100%
specific, but will be able to point in the right direction.

Let's try the catalina policy first.

Please find /var/lib/tomcat5.5/conf/catalina.policy   (I think it is this
on your installation)

and add:

// IPT webapp permission
grant codebase "file:/var/lib/tomcat5.5/webapps/ipt/-" {
        permission java.io.FilePermission
"/var/lib/tomcat5.5/webapps/ipt/-", "read,write,delete";
        permission java.util.PropertyPermission "*", "read,write";
        permission java.util.logging.LoggingPermission  "control";
        permission java.lang.RuntimePermission "getClassLoader";
        permission java.lang.RuntimePermission "preferences";
        permission java.lang.RuntimePermission "shutdownHooks";
        permission java.lang.reflect.ReflectPermission
"suppressAccessChecks";
};
// Geoserver webapp permissions
grant codebase "file:/var/lib/tomcat5.5/webapps/geoserver/-" {
        permission java.io.FilePermission
"/var/lib/tomcat5.5/webapps/geoserver/data/-",
"read,write,delete";
        permission java.util.PropertyPermission "*", "read,write";
        permission java.util.logging.LoggingPermission  "control";
        permission java.lang.RuntimePermission "getClassLoader";
        permission java.lang.RuntimePermission "preferences";
        permission java.lang.RuntimePermission "shutdownHooks";
        permission java.lang.reflect.ReflectPermission
"suppressAccessChecks";
};

If the catalina.policy route does not work, then it could well be in
/etc/tomcat5.5/policy.d/04webapps.policy

Please always post the catalina.log in order to diagnose.

Hope this helps,

Tim


> In an attempt to make IPT behave with Ubuntu I have set up Tomcat 5.5...
>
> Here are the specs:
> Tomcat Version: Apache Tomcat/5.5
> JVM Version: 1.5.0_16-b02
> JVM Vendor: Sun Microsystems Inc.
> OS: Ubuntu Linux 8.10
> Kernel: 2.6.27-7-server
> Arch: i386
>
> IPT still does not load.
>
> I have included the log files from a tomcat restart so you can look at the
> log files.
>
>
> -Greg D Smith
> Sr. Systems Admin.
> Biodiversity Institute
> University of Kansas
>
>
> -----Original Message-----
> From: Tim Robertson (GBIF) [mailto:trobertson at gbif.org]
> Sent: Wednesday, February 25, 2009 12:29 PM
> To: Smith, Gregory D
> Cc: ipt at lists.gbif.org
> Subject: Re: [IPT] IPT setup on Ubuntu (8.10) with Tomcat 6
>
> Hi Greg,
>
> It should be ok, but has not been tried.  So far I have installed on
> Redhat, Fedorra, Linux, Mac Windows XP and Vista but on a variety of
> Tomcat 5.X and 6.X.
>
> Please can you post the catalina.out log from a fresh tomcat startup and
> we should be able to diagnose?
>
> I suspect that there is a suspicious xml-apis.jar floating around on the
> tomcat classpath which happens with some distributions of Tomcat.
>
> Also please check the java version - the IPT requires Java5.
>
> Cheers,
>
> Tim
>
>
>> We have had no luck setting up the IPT on tomcat 6 on ubuntu. Has anyone
>> else had any luck or is this a known issue?
>>
>>
>>
>> -Greg D Smith
>> Sr. Systems Admin.
>> Biodiversity Institute
>> University of Kansas
>>
>>
>>
>> _______________________________________________
>> IPT mailing list
>> IPT at lists.gbif.org
>> http://lists.gbif.org/mailman/listinfo/ipt
>>
>
>
> ____________________________________________________________
> Tim Robertson
> Systems Architect
> Global Biodiversity Information Facility Secretariat  (GBIF)
> Universitetsparken 15, 2100 Copenhagen Ø, Denmark
> http://www.gbif.org
> trobertson at gbif.org
> Phone: +45 35 32 14 87 (Office)
> Fax: +45 35 32 14 80
> ____________________________________________________________
>
> _______________________________________________
> IPT mailing list
> IPT at lists.gbif.org
> http://lists.gbif.org/mailman/listinfo/ipt
>


____________________________________________________________
Tim Robertson
Systems Architect
Global Biodiversity Information Facility Secretariat  (GBIF)
Universitetsparken 15, 2100 Copenhagen Ø, Denmark
http://www.gbif.org
trobertson at gbif.org
Phone: +45 35 32 14 87 (Office)
Fax: +45 35 32 14 80
____________________________________________________________