Thread: [Php-java-bridge-users] help with Tomcat 5.5 security

Hello,
I had to move to a new machine and performed a Debian 5.x clean install .
Now, I am only able to run JavaBridge *without* Tomcat 5.5 security enabled at
/etc/default/tomcat5.5
Even configuring /etc/tomcat5.5/policy.d/60JavaBridge.policy to
java.security.AllPermission was not enough.
Do you have some hint?
Regards.
Andre Felipe Machado

Hi Andre,

Does it help if you move JavaBridge.jar from WEB-INF/lib to the
java.ext.dir?

On my system <?php echo java("java.lang.System

14. Jul 2009 2:39 nachm. schrieb am <
php...@li...>:

Hello,
I had to move to a new machine and performed a Debian 5.x clean install .
Now, I am only able to run JavaBridge *without* Tomcat 5.5 security enabled
at
/etc/default/tomcat5.5
Even configuring /etc/tomcat5.5/policy.d/60JavaBridge.policy to
java.security.AllPermission was not enough.
Do you have some hint?
Regards.
Andre Felipe Machado


------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
php-java-bridge-users mailing list
php...@li...
https://lists.sourceforge.net/lists/listinfo/php-java-bridge-users

... on my system echo java("java.lang.System")->getProperties() reports
java.ext.dirs=/usr/java/default/lib/ext.

If I put the JavaBridge.jar in there, the bridge works, even when running
tomcat with the -secure option.

Don't you install JavaBridge.jar and php-script.jar into the JVM classpath
anyway? If so, then all you need to do is to remove the JavaBridge.jar and
php-script.jar from the JavaBridge.war.

Jost

14. Jul 2009 6:28 nachm. schrieb am "Jost Bekemeier" <
jos...@go...>:

Hi Andre,

Does it help if you move JavaBridge.jar from WEB-INF/lib to the
java.ext.dir?

On my system <?php echo java("java.lang.System

14. Jul 2009 2:39 nachm. schrieb am <
php...@li...>:

> > Hello, > I had to move to a new machine and performed a Debian 5.x clean
install . > Now, I am ...
------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
php-java-bridge-users mailing list
php...@li...
https://lists.sourceforge.net/lists/listinfo/php-java-bridge-users

Hello, Jost
Thanks for your hints.
Actually, the Debian Policy for packaging imposes FHS compliance.
So, the JavaBridge must be installed at TomCat webapps directory.
The system directories are for official libraries.
But studying the tomcat system security policies (per your hints) helped
to improve the /etc/tomcat5.5/policy.d/60JavaBridge.policy file. 
Juli logging was not configured and prevented startup.
The # comment sign was not recognized at that file at a Debian Lenny
clean install .
Improved the rule cross platform portability. 
Improved the installation script sequence.
The file ownership and permissions were wrong, preventing startup.
So, packaging improvements were made to address these issues.
Even configuring TomCat error logging does not show startup errors
at /var/log/tomcat5.5/...
This kind of TomCat startup errors were logged at /var/log/syslog

I commited changes to CVS head today.
Regards.
Andre Felipe Machado
http://www.techforce.com.br

> So, the JavaBridge must be installed at TomCat
> webapps directory

I think the JavaBridge.jar is also useful outside of tomcat. With
"jrunscript -classpath JavaBridge.jar - php-interactive" I can run an
interactive php session.

If JavaBridge.jar (and php-script.jar) gets installed by some base .deb
package, and Java is able to load the additional libraries from there, all
users and tomcat could use this library as usual. jrunscript -q would list
the php script engine and tomcat

17. Jul 2009 1:05 vorm. schrieb am <
php...@li...>:

Hello, Jost
Thanks for your hints.
Actually, the Debian Policy for packaging imposes FHS compliance.
So, the JavaBridge must be installed at TomCat webapps directory.
The system directories are for official libraries.
But studying the tomcat system security policies (per your hints) helped
to improve the /etc/tomcat5.5/policy.d/60JavaBridge.policy file.
Juli logging was not configured and prevented startup.
The # comment sign was not recognized at that file at a Debian Lenny
clean install .
Improved the rule cross platform portability.
Improved the installation script sequence.
The file ownership and permissions were wrong, preventing startup.
So, packaging improvements were made to address these issues.
Even configuring TomCat error logging does not show startup errors
at /var/log/tomcat5.5/...
This kind of TomCat startup errors were logged at /var/log/syslog

I commited changes to CVS head today.
Regards.
Andre Felipe Machado
http://www.techforce.com.br

------------------------------------------------------------------------------
Enter the BlackBe...

[Continued from previous mail, a bug in android mail app causes a 'send'
rather than 'save']

... and tomcat won't restrict the JavaBridge library.

But I don't know whether such a global repository of Java libraries exists
and if it's possible to split the debian package that way.

Regards,
Jost Boekemeier

17. Jul 2009 1:05 vorm. schrieb am <
php...@li...>:

> > Hello, Jost > Thanks for your hints. > Actually, the Debian Policy for
packaging imposes FHS co...

------------------------------------------------------------------------------
Enter the BlackBe...