Mantis - Resin
Viewing Issue Advanced Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
4517 minor always 04-21-11 09:55 09-08-14 17:17
Reporter: reza Platform:  
Assigned To: ferg OS:  
Priority: normal OS Version:  
Status: closed Product Version: 4.0.17  
Product Build: Resolution: won't fix  
Projection: none      
ETA: none Fixed in Version:  
Summary: 0004517: JMX Service doesn't work with Security Manager
Description: The JMX pro service doesn't work with a security manager/policy file. There seems to be a permissions issue that stops the class-loader from working properly.

The following code demonstrates the issue:

================================================================================
grant {
  permission java.util.PropertyPermission "*", "read";
  permission java.io.FilePermission "*", "read,write,execute,delete";
  permission java.lang.Reflect.ReflectPermission "suppressAccessChecks";
  permission java.lang.RuntimePermission "accessClassInPackage.*";
  permission java.lang.RuntimePermission "accessDeclaredMembers";
  permission java.lang.RuntimePermission "getClassLoader"; };

grant codeBase "file:${resin.home}/lib/-" {
        permission java.security.AllPermission; };

grant codeBase "file:${resin.home}/webapps/-" {
        permission java.security.AllPermission; };

grant codeBase "file:${java.home}/lib/-" {
        permission java.security.AllPermission; };

grant codeBase "file:${java.home}/jre/lib/-" {
        permission java.security.AllPermission; };
================================================================================

================================================================================
<resin xmlns="http://caucho.com/ns/resin" [^]
       xmlns:resin="urn:java:com.caucho.resin">

  <log-handler name="" level="all" path="stdout:"
               timestamp="[%y-%m-%d %H:%M:%S.%s] {%{thread}} "/>

  <logger name="com.caucho" level="info"/>
  <logger name="com.caucho.java" level="config"/>
  <logger name="com.caucho.loader" level="config"/>

  <security-manager/>

  <cluster-default>
    <resin:import path="${__DIR__}/app-default.xml"/>

    <!-- JMX service does not work with the security manager/policy -->
    <resin:JmxService/>

    <resin:import path="${__DIR__}/health.xml"/>

    <host-default>
      <web-app-deploy path="webapps" versioning="true"/>
    </host-default>
  </cluster-default>

  <cluster id="app-tier">
    <root-directory>.</root-directory>

    <server-default>
      <http address="*" port="8080"/>
      <jvm-arg>-Djava.security.policy=${resin.home}/conf/java.policy</jvm-arg>
    </server-default>

    <server id="" address="127.0.0.1" port="6800">
    </server>

    <host id="" root-directory=".">
      <web-app id="/" root-directory="webapps/ROOT"/>
      <web-app id="/resin-admin" root-directory="${resin.root}/doc/admin">
        <prologue>
          <resin:set var="resin_admin_external" value="false"/>
          <resin:set var="resin_admin_insecure" value="true"/>
        </prologue>
      </web-app>
      <web-app id="/resin-doc" root-directory="${resin.root}/doc/resin-doc"/>
    </host>
  </cluster>
</resin>
================================================================================

The following exception is thrown:

================================================================================
javax.enterprise.inject.InjectionException: XmlStandardPlugin[].processAfterValidation: Could not initialize class com.caucho.config.ConfigException
    at com.caucho.config.extension.ExtensionManager$ExtensionObserver.notify(
        ExtensionManager.java:715)
    at com.caucho.config.event.EventManager.fireLocalEvent(
        EventManager.java:300)
    at com.caucho.config.event.EventManager.fireLocalEvent(
        EventManager.java:289)
    at com.caucho.config.event.EventManager.fireExtensionEvent(
        EventManager.java:273)
    at com.caucho.config.extension.ExtensionManager
        .fireAfterDeploymentValidation(ExtensionManager.java:527)
    at com.caucho.config.inject.InjectManager.notifyStart(
        InjectManager.java:3815)
    at com.caucho.config.inject.InjectManager.start(InjectManager.java:3798)
    at com.caucho.env.service.CdiSystem.start(CdiSystem.java:69)
    at com.caucho.env.service.ResinSystem.startServices(ResinSystem.java:508)
    at com.caucho.env.service.ResinSystem.start(ResinSystem.java:476)
    at com.caucho.server.resin.Resin.start(Resin.java:950)
    at com.caucho.server.resin.Resin.initMain(Resin.java:1078)
    at com.caucho.server.resin.Resin.main(Resin.java:1375)
  Caused by: java.lang.NoClassDefFoundError: Could not initialize class
      com.caucho.config.ConfigException
    at com.caucho.config.bytecode.ScopeAdapter.wrap(ScopeAdapter.java:151)
    at com.caucho.config.inject.InjectManager
        $NormalContextReferenceFactory.<init>(InjectManager.java:4564)
    at com.caucho.config.inject.InjectManager.createReferenceFactory(
        InjectManager.java:2290)
    at com.caucho.config.inject.InjectManager.getReferenceFactory(
        InjectManager.java:2244)
    at com.caucho.config.inject.InjectManager.getReference(
        InjectManager.java:2196)
    at com.caucho.config.xml.XmlStandardPlugin
        .processAfterValidation(XmlStandardPlugin.java:279)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at com.caucho.config.extension.ExtensionManager
        $ExtensionObserver.notify(ExtensionManager.java:704)
  ... 12 more
================================================================================

This issue was originally reported by Bill Au.
Steps To Reproduce:
Additional Information:
Relationships
Attached Files:

Notes
(0006490)
ferg   
09-08-14 17:17   
SecurityManager is not supported with Resin 4.0.