Re: [IPT] IPT setup on Ubuntu (8.10) with Tomcat 6

25 Feb 2009


      Hi,
This looks like a security feature with Tomcat on Ubuntu.  I am not sure
if the policy file is created at startup with Ubuntu from the webapps
policy file or if it uses the catalina.policy... so I can't be 100%
specific, but will be able to point in the right direction.
Let's try the catalina policy first.
Please find /var/lib/tomcat5.5/conf/catalina.policy   (I think it is this
on your installation)
and add:
// IPT webapp permission
grant codebase "file:/var/lib/tomcat5.5/webapps/ipt/-" {
        permission java.io.FilePermission
"/var/lib/tomcat5.5/webapps/ipt/-", "read,write,delete";
        permission java.util.PropertyPermission "*", "read,write";
        permission java.util.logging.LoggingPermission  "control";
        permission java.lang.RuntimePermission "getClassLoader";
        permission java.lang.RuntimePermission "preferences";
        permission java.lang.RuntimePermission "shutdownHooks";
        permission java.lang.reflect.ReflectPermission
"suppressAccessChecks";
};
// Geoserver webapp permissions
grant codebase "file:/var/lib/tomcat5.5/webapps/geoserver/-" {
        permission java.io.FilePermission
"/var/lib/tomcat5.5/webapps/geoserver/data/-",
"read,write,delete";
        permission java.util.PropertyPermission "*", "read,write";
        permission java.util.logging.LoggingPermission  "control";
        permission java.lang.RuntimePermission "getClassLoader";
        permission java.lang.RuntimePermission "preferences";
        permission java.lang.RuntimePermission "shutdownHooks";
        permission java.lang.reflect.ReflectPermission
"suppressAccessChecks";
};
If the catalina.policy route does not work, then it could well be in
/etc/tomcat5.5/policy.d/04webapps.policy
Please always post the catalina.log in order to diagnose.
Hope this helps,
Tim
...
In an attempt to make IPT behave with Ubuntu I have set up Tomcat 5.5...
Here are the specs:
Tomcat Version: Apache Tomcat/5.5
JVM Version: 1.5.0_16-b02
JVM Vendor: Sun Microsystems Inc.
OS: Ubuntu Linux 8.10
Kernel: 2.6.27-7-server
Arch: i386
IPT still does not load.
I have included the log files from a tomcat restart so you can look at the
log files.
-Greg D Smith
Sr. Systems Admin.
Biodiversity Institute
University of Kansas
-----Original Message-----
From: Tim Robertson (GBIF) [mailto:trobertson@gbif.org]
Sent: Wednesday, February 25, 2009 12:29 PM
To: Smith, Gregory D
Cc: ipt@lists.gbif.org
Subject: Re: [IPT] IPT setup on Ubuntu (8.10) with Tomcat 6
Hi Greg,
It should be ok, but has not been tried.  So far I have installed on
Redhat, Fedorra, Linux, Mac Windows XP and Vista but on a variety of
Tomcat 5.X and 6.X.
Please can you post the catalina.out log from a fresh tomcat startup and
we should be able to diagnose?
I suspect that there is a suspicious xml-apis.jar floating around on the
tomcat classpath which happens with some distributions of Tomcat.
Also please check the java version - the IPT requires Java5.
Cheers,
Tim
...
We have had no luck setting up the IPT on tomcat 6 on ubuntu. Has anyone
else had any luck or is this a known issue?
-Greg D Smith
Sr. Systems Admin.
Biodiversity Institute
University of Kansas

IPT mailing list
IPT@lists.gbif.org
http://lists.gbif.org/mailman/listinfo/ipt

Tim Robertson
Systems Architect
Global Biodiversity Information Facility Secretariat  (GBIF)
Universitetsparken 15, 2100 Copenhagen Ø, Denmark
http://www.gbif.org
trobertson@gbif.org
Phone: +45 35 32 14 87 (Office)
Fax: +45 35 32 14 80
____________________________________________________________

IPT mailing list
IPT@lists.gbif.org
http://lists.gbif.org/mailman/listinfo/ipt
____________________________________________________________
Tim Robertson
Systems Architect
Global Biodiversity Information Facility Secretariat  (GBIF)
Universitetsparken 15, 2100 Copenhagen Ø, Denmark
http://www.gbif.org
trobertson@gbif.org
Phone: +45 35 32 14 87 (Office)
Fax: +45 35 32 14 80
____________________________________________________________