directory-api mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "George S." <geor...@mhsoftware.com>
Subject Re: Using Directory API Under Security Manager
Date Thu, 08 Mar 2018 05:55:48 GMT
Never mind. The problem is I'm trying to use this from a JSP which is 
untrusted. I got through it, but what a pain.


On 3/7/2018 9:55 PM, George S. wrote:
>
> I'm trying to run the Directory API under tomcat using a security 
> manager. It's throwing an error:
>
> 2018-03-07 21:41:55,525 [http-nio-443-exec-12] ERROR org.apache.directory.api.ldap.codec.api.LdapApiServiceFactory-
Failed to instantiate a viable instance, instantiating new instance of
> java.security.AccessControlException: access denied ("java.util.PropertyPermission" "apacheds.controls"
"read")
>          at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
>          at java.security.AccessController.checkPermission(AccessController.java:884)
>          at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
>          at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1294)
>          at java.lang.System.getProperty(System.java:717)
>          at org.apache.directory.api.ldap.codec.standalone.StandaloneLdapApiService.getControlsFromSystemProperties(StandaloneLdapApiService.java:204)
>          at org.apache.directory.api.ldap.codec.standalone.StandaloneLdapApiService.<init>(StandaloneLdapApiService.java:145)
> I've signed the jar and I have a grant:
>
> grant signedBy "mysign" {
>     permission java.security.AllPermission;
> }
>
> Can anyone help me understand why this isn't working?
>
> -- 
> George S.
> *MH Software, Inc.*
> Voice: 303 438 9585
> http://www.mhsoftware.com

-- 
George S.
*MH Software, Inc.*
Voice: 303 438 9585
http://www.mhsoftware.com

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message