Grouper Users - Open Discussion List

[Chris Hyzer <>]

I think this might be Java restricting the write, not the OS restricting it.  
You can try by setting the dir permissions to 777, and see the same error.

If it's the same error, you could set the logger to only use stdout or 
stderr, and at least that hurdle is done.  But Im not sure that is the only 
place where files are read/written.

The real solution is to google the problem, and see if you can figure out how 
to edit the java security files about this.  There are tons of google entries 
for

"tomcat java.security.AccessControlException: access denied 
(java.io.FilePermission"

Here is a doc that might help:

http://java.sun.com/j2se/1.4.2/docs/guide/security/PolicyFiles.html

I think you need something like this in your policy config (e.g. java.policy)

grant {
      permission java.io.FilePermission "/var/log/tomcat5.5/*", "read,write";
  };

-or-

grant {
      permission java.io.FilePermission "/*", "read,write";
  };

Or you could install a new java and hope the permissions are more standard (I 
don't get this restriction when installing new java5 in *nix)

Hope this helps,
Chris

> -----Original Message-----
> From: Lutz Suhrbier 
> [mailto:]
> Sent: Wednesday, October 29, 2008 2:00 PM
> To: 
> 
> Subject: [grouper-users] Problems installing Grouper-UI 1.3.1
>
> Hello,
>
> I'am trying to install grouper-qs-1.3.1 following the instructions
> within README.html.
> My system is running on Debian Etch, so I changed the following in
> build.properties deploy.home=/var/lib/tomcat5.5/ #Switches to UI
> specific log4j.properties use.local.log4j=true
>
> #Make sure directory exists!
> local.log4j.output-dir=/var/log/tomcat5.5/
>
> Next, I run ant ui  and selected default to deploy grouper to tomcat
> automatically. But, nothing happens.
> Them, I successfully created the grouper.war file running ant ui ->
> war.
>
> After copying grouper.var to /var/lib/tomcat5.5/webapps, tomcat's
> deployment failes with the following cause Caused by:
> java.security.AccessControlException: access denied
> (java.io.FilePermission /var/log/tomcat5.5/grouper_ui.log write)
>
> But, the directory is owned by tomcat and writeable.
> la /var/log/tomcat5.5/
> total 548
> drwxr-x--- 2 tomcat55 adm       4096 2008-10-29 18:39 .
> drwxr-xr-x 6 root     root      4096 2008-10-29 12:27 ..
> -rw-r--r-- 1 tomcat55 nogroup      0 2008-10-29 11:33 admin.2008-10-
> 29.log
> -rw-r--r-- 1 tomcat55 nogroup 272882 2008-10-29 18:39 catalina_2008-10-
> 29.log
> -rw-r--r-- 1 tomcat55 nogroup 268680 2008-10-29 18:39 catalina.2008-10-
> 29.log
> prwx------ 1 tomcat55 root         0 2008-10-29 18:39 catalina.out
> -rw-r--r-- 1 tomcat55 nogroup      0 2008-10-29 11:33
> host-manager.2008-10-29.log
> -rw-r--r-- 1 tomcat55 nogroup      0 2008-10-29 11:33
> localhost.2008-10-29.log
> -rw-r--r-- 1 tomcat55 nogroup      0 2008-10-29 11:33 manager.2008-10-
> 29.log
>
>
> Can you give me a hint, what is going wrong ?
>
> Thanks
>
> Lutz