security - Java Wep Application Deployment -


i wrote first web app using vaadin framework , i'm trying deploy online. exported .war file , uploaded here: http://www.eatj.com/ error security when trying run. (project name - jtpwebapp)

type exception report  message  description server encountered internal error () prevented fulfilling request.  exception  javax.servlet.servletexception: servlet.init() servlet com.example.jtpwebapp.jtpwebappui$servlet threw exception     org.apache.catalina.authenticator.authenticatorbase.invoke(authenticatorbase.java:472)     org.apache.catalina.valves.errorreportvalve.invoke(errorreportvalve.java:98)     org.apache.catalina.valves.accesslogvalve.invoke(accesslogvalve.java:927)     org.apache.catalina.connector.coyoteadapter.service(coyoteadapter.java:407)     org.apache.coyote.http11.abstracthttp11processor.process(abstracthttp11processor.java:987)     org.apache.coyote.abstractprotocol$abstractconnectionhandler.process(abstractprotocol.java:579)     org.apache.tomcat.util.net.jioendpoint$socketprocessor.run(jioendpoint.java:307)     java.util.concurrent.threadpoolexecutor$worker.runtask(threadpoolexecutor.java:886)     java.util.concurrent.threadpoolexecutor$worker.run(threadpoolexecutor.java:908)     java.lang.thread.run(thread.java:619) root cause  java.security.accesscontrolexception: access denied (java.util.propertypermission com.example.jtpwebapp.disable-xsrf-protection read)     java.security.accesscontrolcontext.checkpermission(accesscontrolcontext.java:323)     java.security.accesscontroller.checkpermission(accesscontroller.java:546)     java.lang.securitymanager.checkpermission(securitymanager.java:532)     java.lang.securitymanager.checkpropertyaccess(securitymanager.java:1285)     java.lang.system.getproperty(system.java:652)     com.vaadin.server.defaultdeploymentconfiguration.getsystemproperty(defaultdeploymentconfiguration.java:148)     com.vaadin.server.defaultdeploymentconfiguration.getapplicationorsystemproperty(defaultdeploymentconfiguration.java:121)     com.vaadin.server.defaultdeploymentconfiguration.checkxsrfprotection(defaultdeploymentconfiguration.java:260)     com.vaadin.server.defaultdeploymentconfiguration.<init>(defaultdeploymentconfiguration.java:80)     com.vaadin.server.vaadinservlet.createdeploymentconfiguration(vaadinservlet.java:183)     com.vaadin.server.vaadinservlet.init(vaadinservlet.java:95)     sun.reflect.nativemethodaccessorimpl.invoke0(native method)     sun.reflect.nativemethodaccessorimpl.invoke(nativemethodaccessorimpl.java:39)     sun.reflect.delegatingmethodaccessorimpl.invoke(delegatingmethodaccessorimpl.java:25)     java.lang.reflect.method.invoke(method.java:597)     org.apache.catalina.security.securityutil$1.run(securityutil.java:274)     org.apache.catalina.security.securityutil$1.run(securityutil.java:271)     java.security.accesscontroller.doprivileged(native method)     javax.security.auth.subject.doasprivileged(subject.java:517)     org.apache.catalina.security.securityutil.execute(securityutil.java:306)     org.apache.catalina.security.securityutil.doasprivilege(securityutil.java:166)     org.apache.catalina.security.securityutil.doasprivilege(securityutil.java:120)     org.apache.catalina.authenticator.authenticatorbase.invoke(authenticatorbase.java:472)     org.apache.catalina.valves.errorreportvalve.invoke(errorreportvalve.java:98)     org.apache.catalina.valves.accesslogvalve.invoke(accesslogvalve.java:927)     org.apache.catalina.connector.coyoteadapter.service(coyoteadapter.java:407)     org.apache.coyote.http11.abstracthttp11processor.process(abstracthttp11processor.java:987)     org.apache.coyote.abstractprotocol$abstractconnectionhandler.process(abstractprotocol.java:579)     org.apache.tomcat.util.net.jioendpoint$socketprocessor.run(jioendpoint.java:307)     java.util.concurrent.threadpoolexecutor$worker.runtask(threadpoolexecutor.java:886)     java.util.concurrent.threadpoolexecutor$worker.run(threadpoolexecutor.java:908)     java.lang.thread.run(thread.java:619)

it works fine offline. created file server.policy , client.policy code

grant   {       permission java.security.allpermission;   };

but i'm not sure place them, after exporting .war file don't see them inside. sorry if it's simple, i'm writing first web app , i'm stuck right now.

i'm recommend try deploy first app openshift redhat. it's easy , works without security manager.


-

Comments

Post a Comment

Popular posts from this blog

how to proxy from https to http with lighttpd -

i have internal site (192.168.2.1) accessible http on different server run public web-server using lighttpd. can make internal site accessible outside work follows $http["host"] == "internal.example.com" { ... proxy.server = ( "" => ( "internal" => ( "host" => "192.168.2.1", "port" => 8000 ) ) } this works, use https outside world. question is, how can proxy going https http ? i've tried this: $server["socket"] == ":443" { $http["host"] == "internal.example.com" { ... proxy.server = ( "" => ( "internal" => ( "host" => "http://192.168.2.1", "port" => 8000 ) ) } } but doesn't seem wor...
Read more

android - Automated my builds -

i have multiple app , android project want automated in build , release sequence. have ant script build , create apk of app. want have 1 script or ant file start build sequence app. maybe don't konw search, can't find easy documentation on ant. the point of use jenkins ant (or maven, i'm not sure of difference between them now) automated build sequence when people commit on project. any int appreciated maven dependencies (over ant) don't need pass around jars. recommend maven on ant day. syntax , overall process easier understand, @ end of both build tools. if able to, more recommend upgrading gradle. easy create different build types , create them ./gradlew assemble here project jake wharton can see power of gradle. there release , debug build, can make lot more if like. https://github.com/jakewharton/u2020 here android docs gradle http://tools.android.com/tech-docs/new-build-system/user-guide . if can't find looking here, check out main grad...
Read more

python - Flask migration error -

i've got application build on flask , wanted create new migration today. when run $python manage.py db upgrade i got message raise util.commanderror('only single head supported. ' alembic.util.commanderror: single head supported. script directory has multiple heads (due branching), must resolved manually editing revision files form linear sequence. run alembic branches see divergence(s). so run command $alembic branches no config file 'alembic.ini' found, or file has no '[alembic]' section any clue on about? the error messages coming alembic, use command form alembic <command> , integrating flask coming flask-migrate, need use form python manage.py db branches . to resolve multiple branches, make 1 of branches point down other branch upgrade graph straight line. see alembic's docs on branches: http://alembic.readthedocs.org/en/latest/branches.html
Read more