Hello,
i have a problem with tomcat security manager.

First of all, hibernate works. But if i make a mistake, i cannot see the stacktrace of the exception. The class org/hibernate/exception/ExceptionUtils.class cannot be loaded because access is denied. I see the NoClassDefFoundError: org/hibernate/exception/ExceptionUtils Exception instead of the originally exception.

My application has read access to the directory. I think another component of tomcat or another library needs the right to read the class. But which one?


i even don't know, if the following FilePermission is correct for a class which is inside a jar file and not in the directory.

access: access denied (java.io.FilePermission /home/WWW/domain/webapps/portal/WEB-INF/classes/org/hibernate/exception/ExceptionUtils.class
read)

-----

Stacktrace:
java.lang.NoClassDefFoundError: org/hibernate/exception/ExceptionUtils
at org.hibernate.exception.NestableDelegate.printStackTrace(NestableDelegate.java:296)
at org.hibernate.exception.NestableRuntimeException.printStackTrace(NestableRuntimeException.java:166)
at java.util.logging.SimpleFormatter.format(SimpleFormatter.java:72)
at org.apache.juli.FileHandler.publish(FileHandler.java:128)
at java.util.logging.Logger.log(Logger.java:452)
at java.util.logging.Logger.doLog(Logger.java:474)
at java.util.logging.Logger.logp(Logger.java:674)
at org.apache.commons.logging.impl.Jdk14Logger.log(Jdk14Logger.java:93)
at org.apache.commons.logging.impl.Jdk14Logger.error(Jdk14Logger.java:127)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:253)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:541)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:199)
at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:282)
at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:767)
at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:697)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:889)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)


access: access denied (java.io.FilePermission /home/WWW/domain/webapps/portal/WEB-INF/classes/org/hibernate/exception/ExceptionUtils.class
read)
java.lang.Exception: Stack trace
at java.lang.Thread.dumpStack(Thread.java:1158)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:253)
at java.security.AccessController.checkPermission(AccessController.java:427)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
at java.io.File.exists(File.java:700)
at org.apache.naming.resources.FileDirContext.file(FileDirContext.java:827)
at org.apache.naming.resources.FileDirContext.lookup(FileDirContext.java:210)
at org.apache.naming.resources.ProxyDirContext.lookup(ProxyDirContext.java:293)
at org.apache.catalina.loader.WebappClassLoader.findResourceInternal(WebappClassLoader.java:1887)
at org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:1752)
at org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:869)
at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1322)
at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1201)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
at org.hibernate.exception.NestableDelegate.printStackTrace(NestableDelegate.java:296)
at org.hibernate.exception.NestableRuntimeException.printStackTrace(NestableRuntimeException.java:166)
at java.util.logging.SimpleFormatter.format(SimpleFormatter.java:72)
at org.apache.juli.FileHandler.publish(FileHandler.java:128)
at java.util.logging.Logger.log(Logger.java:452)
at java.util.logging.Logger.doLog(Logger.java:474)
at java.util.logging.Logger.logp(Logger.java:674)
at org.apache.commons.logging.impl.Jdk14Logger.log(Jdk14Logger.java:93)
at org.apache.commons.logging.impl.Jdk14Logger.error(Jdk14Logger.java:127)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:253)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:541)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:199)
at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:282)
at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:767)
at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:697)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:889)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)


Thanks for your time,
Andi


Hibernate version: 3.3.1.GA

I am having tons of SecurityManager problems, too. My configuration is Hibernate 3 latest stable (core is 3.3.1.GA), Tomcat 6.0.18, Sun JDK 1.6.0_10-b33, on Ubuntu 8.10.

I get things like this:



Thus far I have been unable to get around them by setting appropriate tomcat policies ... even down to the point of setting java.security.AllPermissions.

When I started out, I had some pretty basic things to fix. By reading as much documentation as I could I figured out I needed:



I guess a more fundamental question is this ... what exactly is this ExceptionUtils trying to tell me? What it seems to really be doing is hiding from me the real cause. It's possibly I just don't know how to read the exception trace it's delivering. The funny part is that usually when tomcat gives up in a NoClassDefFoundError it's because the SecurityManager blocked something, and usually it's pretty explicit about telling me exactly what permission it needs. This time I have been unable to follow it.