Tomcat: ClassNotFound Exception in security mode

Hi there,
we have a problem with our web application when starting Tomcat in security mode. For some reasons we always get some "ClassNotFoundExceptions" and we don't know why. The exception is:
java.lang.ClassNotFoundException:org.mozilla.javascript.optimizer.OptRuntime
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1359)
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1205)
java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
java.lang.Class.forName0(Native Method)
java.lang.Class.forName(Class.java:164)
...The class which cannot be found is in a js.jar which is located at WEB-INF/lib of our web application. We also defined access to our web application in the catalina.policy which looks like:
grant codeBase "file:${catalina.home}/webapps/ourWebApp/-"
permission java.security.AllPermission;
};If we start Tomcat in normal mode, everything works fine. So what could be the problem? Can you help me?
Thanks,
jacquipre

Similar Messages

The dreaded 404 message using basicHttpBinding, Transport security mode, and certificates

I am working on setting up a WCF service using mutual authentication with both client and server certifiates. The service is hosted in IIS 7, and I'm trying to access it from a simple console app. When I try to connect to the service, I get the error ""There
was no endpoint listening at
https://localhost/IISHostedService/MyService.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details." The inner exception is "The remote server returned an error:
(404) Not Found."
I have seen people all over the net reporting this error, but so far none of their fixes work for me. I have an HTTPS binding in IIS for my app, and I am able to browse to my service (using either http or https) and view it with no problems. I can get the
wsdl (also over either protocol) with no issues, but connecting from the client doesn't work.
Here is my server config:
<system.serviceModel>
<behaviors>
<serviceBehaviors>
<behavior>
<serviceCredentials>
<serviceCertificate findValue="ServerCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName" />
<clientCertificate>
<authentication revocationMode="NoCheck" />
</clientCertificate>
</serviceCredentials>
<serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="true" />
</behavior>
</serviceBehaviors>
</behaviors>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService">
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<services>
<service name="MyService">
<endpoint binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService" contract="Namespace.IContract" />
</service>
</services>
</system.serviceModel>
And my client:
<system.serviceModel>
<behaviors>
<endpointBehaviors>
<behavior name="clientEndpointBehavior">
<clientCredentials>
<clientCertificate findValue="ClientCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName"/>
</clientCredentials>
</behavior>
</endpointBehaviors>
</behaviors>
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService" closeTimeout="00:10:00"
openTimeout="00:10:00" receiveTimeout="00:10:00" sendTimeout="00:10:00"
allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
useDefaultWebProxy="true">
<readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
maxBytesPerRead="4096" maxNameTableCharCount="16384" />
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<client>
<endpoint address="https://localhost/IISHostedService/MyService.svc behaviorConfiguration="clientEndpointBehavior"
binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService"
contract="Namespace.IContract" name="BasicHttpBinding_MyService" />
</client>
</system.serviceModel>
I am not sure if it matters, but this client and server are running on the same physical machine in a test environment. I have confirmed that both the client and the server certificates are installed, and that the issuing authority is trusted. The virtual
folder is set in IIS to "Accept" client certificates, and SSL is not required.
Does anyone have any thoughts what I may be missing? This service works without a problem over HTTP, so it has to be somehow related to the certificate that is being passed. With the Server certificate, I just trapped the ServicePointManager.ServerCertificateValidationCallback
event to manually approve the certificate if the subject matched what I was looking for (the subject does not match the domain name, since this is a test environment). Do I need to do something similar for the client certificate?
EDIT: One thing I do notice is that, in the WSDL, the soap location is always pointing to http. I'm not sure if that is correct or not:
<wsdl:service name="MyService">
<wsdl:port name="BasicHttpBinding_MyService" binding="tns:BasicHttpBinding_MyService">
<soap:address location="http://computerName.domain.com/IISHostedService/MyService.svc" />
</wsdl:port>
</wsdl:service>

A little more information (since this is the main thing I have to work on today):
After some research, I decided to try using a custom certificate validator, in case something is wrong with the client certificate. In the clientCertificate\authentication node on the server, I set the certificateValidationMode="Custom" and set customValidationType="MyType.Validator,
MyType". My type is apparently being found (when it is not found I get a "service could not be activated" error), but my Validate() method is never being called.
Now this leads me to believe that it's not a problem with the client certificate, but something else, before it even gets that far.

Firefox is asking me to add an exception for security for a website that has told me its certificate is valid.

I am running Firefox 31.0 on a Windows 8.1 o/s. When I attempt to access my email provider in its' "secure" mode, I am advised that the connection is untrustworthy. (Parenthetically, this does not occur on my other two systems running respectively, Windows 7 and Windows XP.) I am asked to provide an authorization for an 'exception' prior to completing the connection. The option of making the exception permanent is NOT available, so I go through this every time I begin a new internet session. I have contacted the email provider and been advised that their digital certificate is valid. So, as I see it there are three problems: (1) if the certificate is valid, as is suggested by the provider, why does Firefox not recognize this, (2) why does the exception window not allow me the option to make the exception status enduring, and (3) why is this problem present only on my Windows 8.1 system?

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file to remove intermediate certificates that Firefox has stored.
If that helped to solve the problem then you can remove the renamed cert8.db.old file.
Otherwise you can rename (or copy) the cert8.db.old file to cert8.db to restore the previous intermediate certificates.
Firefox will automatically store intermediate certificates when you visit websites that send such a certificate.
If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

Performance Issues with Acrobat Reader 11.0.0.2 when secure mode is enabled

Hello All,
We are experiencing sporadic issues with Acrobat 11.0.0.2 across our domain, users are reporting performance issues when opening PDF documents whether locally or from a network share.
We have found that turning off Secure Mode helps towards reducing this delay and in the cases it doesn't we are repairing the installation and/or reinstalling the application.
Due to the security implications we need to leave this turned on, I am wondering if anyone has encountered this issue and what steps were taken towards resolving it?
I also wonder whether the white list function in the new release 11.0.0.3 would be a solution to this issue?
Kind Regards,
Ryan McCarty

No probelm, so....
We had no problems with Adobe Reader 9 and 10, we encountered the issues when upgrading to 11.0.0.2.
Initially we found that turning off the Protected Mode, helped but did not resolve the issue.
We tried;
1. Turn off protected mode - issue still present
2. Clearing the recent file registry using the below registry path and deleting the keys underneath it.
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFiles (this does not turn recent files off permanently). - works but needs clearing regularly
3. Turning off welcome screen by creating - HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown\cWelcomeScreen - works to improve app open speed.
4. uninstall/reinstall of 11.0.0.2 - works most likley due to the recent files being cleared.
5. upgrade to 11.0.0.3 - issue still present
Following reboots the issue is still present.
When Adobe Reader is the only application open this issue is still present.
As mentioned I have no systems available which I could test this issue using 11.0.0.1 as we have fixed them, albeit temporarily using the reinstall method.
I am concious that this issue is going to reoccur once that cache (recent files) builds back up because the fix above (#2) is clearing the recent files cache NOT disabling it.

Calendar Web Part not showing events except in edit mode

We are unable to view calendar events in the calendar view except in edit mode. When you view the page normally, the calendar shows the current day, but you cannot change the month or add new events.
If you change the view to all items you can see all the events but its not in the calendar view which is preferred.
Any ideas?

Hello,
SharePoint 2010 has some limitations with its group calendar. I recommend checking out this topic to help resolve your issue: Work Around SharePoint
2010 Group Calendar Limitations.
Hope this helps,
- Kemp Brown [MSFT]

BI Publisher with Oracle e-Business Suite 11i in EBS security mode

Seems I submitted below in wrong forums earlier so posing to correct one now. Appreciate any help.
Hi All,
I want to configure BI Publisher that comes as a part of OBIEE in Oracle E-Business Suite security mode. My Oracle E-Business Suite 11i runs on 3 node RAC database and 3 node apps tier/cm tier. As per configuration guide, I changed security mode in BIP to 'Oracle E-Business' and uploaded DBC file from E-business suite Web&Forms tier. In DBC file TWO_TASK parameter has value of test_806_BALANCE which is just an alias in tnsnames.ora for load balancing. Now when I go to BI publisher and click on 'Roles and Permission' tab in security center, it gives me 500 Internal server error.
But if I change this TWO_TASK value to any particular RAC instance sid, I am able to see all responsibility in Roles and Permission tab. This seems that BI Publisher makes jdbc connection url to database on the fly by reading DB_HOST, dB_Port and TWO_TASK parametes from dbc file and due to this my BI Publisher is single point of failure if the RAC instance goes down which I mentioned in DBC file. Even though E-Business Suite is in HA, BI publisher is not taking advantage of this HA db.
Any one has idea how to over come this situation.

You can try for a luck by posting the thread in BI Publisher Section of this Forum..

Java.lang.Exception:java.security.accesscontrolException:access denied

good afternoon to all experts
i am getting the following exception when i am going to read file
java.lang.Exception:java.security.accesscontrolException:accessdenied(java.io.FilePermission c:\premiji.rar)
my applet as follows
import java.io.*;
import java.applet.*;
import java.awt.*;
import java.security.*;
import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.crypto.spec.*;
import java.io.IOException;
public class TestApp extends Applet
     public static TextField t;
     public static String key;
    public Label l;
public void init()
   setBackground(Color.GRAY);
   setLayout(null);
   t=new TextField(" ");
   t.setEchoChar('*');
   l=new Label("Enter ur key");
   l.setBounds(0,2,75,20);
   t.setForeground(Color.RED);
   t.setBounds(78,2,150,20);
add(l);
   add(t);
public static String eFile(String plainFile)throws Exception
{String cFile="c://suri.rar";
     key=t.getText();
    byte[]raw=key.getBytes("UTF8");
    SecretKeySpec skeySpec = new SecretKeySpec(raw, "Blowfish");
    Cipher cipher = Cipher.getInstance("Blowfish");
    Cipher cipher2=Cipher.getInstance("Blowfish");
    cipher2.init(Cipher.DECRYPT_MODE,skeySpec);
    cipher.init(Cipher.ENCRYPT_MODE, skeySpec);
    InputStream fis,dis;
    FileOutputStream fos,dos;
    fis = new FileInputStream("c://premji.rar");
    fis = new javax.crypto.CipherInputStream(fis, cipher);
    fos = new FileOutputStream(cFile);
    byte[] b = new byte[8];
    int i = fis.read(b);
    while (i != -1) {
        fos.write(b, 0, i);
        i = fis.read(b);
dis = new FileInputStream(cFile);
dis = new javax.crypto.CipherInputStream(dis, cipher2);
dos=new FileOutputStream("c://madhu.rar");
byte[] c=new byte[8];
int j=dis.read(c);
while(j!=-1)
     dos.write(c,0,j);
     j=dis.read(c);
   fis.close() ;
   fos.close();
   return cFile;
}my html as follows
html>
<script language="JavaScript">
function pass()
    document.myForm.uname.value=document.myApp.eFile(document.myForm.upfile.value);
</script>
<applet name="myApp" code="TestApp.class" archive="TestApp.jar" width=600 height=80></applet>
<body>
<form name="myForm" >
Name
<input type="text" name="uname"/>
File
<input type="file" name="upfile"/>
<input type=button value="click" onClick="pass();">
<input type="submit"/>
</form>
</body>
</html>note:
i signed my applet like
keytool -genkey -alias sgsits -validity 365
jarsigner TestApp.jar sgsitshave we to modify polacy file also?
if so how & which one modify
any suggestion would be greatly appreciated
thanks in advance

I assume your signature is correct.
Signing the applet enables privileges (like file IO) whenever all the calls on the stack leading
to the sensitive operation (in your case fis = new FileInputStream("c://premji.rar")) originate
from the signed jar. It is not your case, as you come into the applet from javascript.
The solution is to use AccessController.doPrivileged...(). It was designed with this situation in mind.

Cant get Security Mode to work on WRT54G

I have everything set up fine.. internet working etc but I cannot get security mode to work.. I go to click on WEP, WPA.. whatever and it just autos back to DISABLED.. Anyone to fix this?

how many computers do you have?
try to use other computers in setting up the security. check also the firmware of your router.make sure you have the latest one.

Can't get my audio clip to work in Keynote except in edit mode. I've followed Help instructions to the letter. Any suggestions?

Can't get my audio clip to work in Keynote except in edit mode. I've followed Help instructions to the letter. Any suggestions?

Hi Gary - thanks so much for your help. I'd already done that, but finally stumbled across the answer for my situation. I'm new to iMac and this is the first time I used Keynote, so maybe this info will help someone else along the way - I still haven't found this in any of the Keynote documentation or forums I've read.
My slides were all set up with at least one text box in which the text was animated. The sound was the last thing I added to each slide, exactly following the info in Keynote Help re: adding audio. The audio would work when I tested it in Inspector mode, and also if I switched to soundtrack instead. But not if sound was added to each individual slide. Hmmm. After I submitted the question above, I was running through the (auto) slide show one final time to check text, animation, etc. when I noticed that on just one single slide the sound effect came through, but at the very tail end of the slide. Hmm again. Why?
Through trial & error, the answer was in the animation section - not very intuitive re: audio. The steps to correct the issue were: 1) click on the sound icon embedded in each slide, 2) click on the animation tab in Inspector. 3) There's a drop-down menu there that allows you to reposition the audio clip to the #1 spot (if it was added after other "animation"). This allows the sound to begin before the text animation begins on each slide. Before doing this, I guess the sound was in there but the slides were transitioning before it had a chance to play.
Since this is the first time I've used Keynote and it's the most recent version, I'm not sure if this is a new feature to allow users to choose where within a slide to play a sound effect, but I'm guessing that might be why was unable to find any info on how to solve it. Hopefully this will help others who get stumped.
Thanks again for jumping in to help! I really appreciate it.

WRTG42 v1 Need help with changing the Security Mode

I need to change my wireless security mode but for some reason whenever I try to change anything the website automatically puts what ever I changed back to normal. Basically, I try to change an option and the website changes the option back instantly. Has anyone else had this issue? And if so, can you please walk me through what you did? Thanks!

Try using a different browser and make sure you click on Save Settings after changing security settings. Here's a link for detailed instructions.

Classnotfound exception in Studio

I have this entity bean that I have deployed in weblogic. I am now trying to use
the studio to create a business operation from one of the Bean methods. When I
click on Configuration->Business Operations, I get a Classnotfound exception for
the beans remote class.
To get around this, I placed the bean jar file in the classpath in startweblogic.cmd
for the domain. After this the problem went away and I was able to create the operation.
Question is, is this the right way to have WLI find the class? Since I have deployed
this in weblogic, shouldn't it be able to find the class files? What is the recommended
way or am I doing something wrong.
Thanks,
--Krish.

Use
Class.forName("com.mysql.jdbc.Driver");Is the MySQL JDBC JAR file listed in project path.?

Security Mode Feature in ATAPI HD's provided by Apple

Hello, I'd like to know how would I implement the security mode feature for the hard drive provided by Apple in MacBook Pro and if it will or not have any problems with EFI.
How will EFI manage this feature of ATA hard drives?

This article will help (about 1/2 way down).
http://support.apple.com/kb/HT1212
Barry

Now I can start my Mac Pro only in "secure mode." I'm still appears on all monitors a series of bands such as seen in the attached file. Someone can give me a diagnosis? Thank you.

Now I can start my Mac Pro only in "secure mode."
I'm still appears on all monitors a series of bands such as seen in the attached file.
Someone can give me a diagnosis?
Thank you.

The attached file is not showing.
In Safe/Secure Mode many Drivers are not loaded. When your computer works in Safe Mode, but not regular mode, two types of problems are implicated:
1) Third-party kernel extensions. a conflict with some part of Mac OS X means that when those extensions load, your Mac can not run.
2) Failed graphics card. Since the Driver for the display is not loaded, the display in Safe Mode uses a very simple built-in Driver. In regular mode, once the driver is loaded, all parts of the graphics card must be working, or you could get bands of color on the display (which is just what you reported).
Which Model Mac Pro Tower or MacBook Pro is this?

I am not having problems with wifi but ipad will not accept my password in the secure mode. anyone else having the same problem?

I am having problems with the Ipad accepting my password in the secure mode in Wifi. I can get into wifi when the secure mode is off. This only started when I downloaded the lastest update for the Ipad. Anyone else having the same problems? I have rebooted the Rotar and still doesn't work.

I am not.
Which secure mode are you using with your wireless network - WEP or WPA?
Have you tried forgetting this network on your iPad, and/or resetting network settings on your iPad? Both will require rejoining the network and the latter will require rejoining every wi-fi network your iPad has access to when returning within range of the network.

Database control won't run in secure mode

I'm following the instructions displayed by the database configuration manager after creating a database. These instructions configure the database control to run in secure mode using https. I get an error with the following command run from the OS command line while in the ORACLE_HOME/bin directory:
emctl.bat secure dbconsole -sysman_pwd password
I get the error message "Failed to create EM root key."
The emdctl.trc file has the following entry: "No connection could be made because the target machine actively refused it."
The ORACLE_SID has already been set. The database control is down. The "emctl config emkey -repos" command completed successfully.
I'm using Oracle 10.2.0.4 on Windows 2003 server. I'm running this command on the database server. The database control was selected in the database configuration manager. This database control does run successfully in http mode, but I can't configure it for https.
Does anyone know why the target machine would actively refuse this connection?

Have you tried it without the -sysman_pwd flag ?
MOS Doc 276950.1 - How to setup Enterprise Manager Database Control for SSL (HTTPS) secure connection
HTH
Srini

Tomcat: ClassNotFound Exception in security mode

Similar Messages

Maybe you are looking for