[jboss-user] [Tomcat, HTTPD, Servlets & JSP] - Odd security issue: commons-modeler.jar <no signer certifica

[russellsimpkins]

I was wondering if anyone has seen an issue like this below. I searched google and didn't find anything close. The server is jboss 4.05.GA and we are running ATG Content Administration software for what it's worth. I am wondering if we have a bad jar file packaged, if we need to install a provider to our CA Certs or if this can be safely ignored. Thanks for any help.


2008-08-18 07:42:41,093 ERROR [org.apache.commons.modeler.Registry] Error registering jboss.web:type=RequestProcessor,worker=http-boapp103%2F192.168.30.60-10080,name=HttpRequest12
java.lang.SecurityException: MBeanTrustPermission(register) not implied by protection domain of mbean class: org.apache.commons.modeler.BaseModelMBean, pd: ProtectionDomain  (file:/usr/local/jboss-4.0.5.GA/se
rver/publish/tmp/deploy/tmp33459commons-modeler.jar <no signer certificates>)
 org.jboss.mx.loading.UnifiedClassLoader3 at 121321f5{ url=file:/usr/local/jboss-4.0.5.GA/server/publish/deploy/jbossweb-tomcat55.sar/ ,addedOrder=9}
 <no principals>
 java.security.Permissions at b4bf84b (
 (java.lang.RuntimePermission stopThread)
 (java.io.FilePermission /usr/local/jboss-4.0.5.GA/server/publish/tmp/deploy/tmp33459commons-modeler.jar read)
 (java.io.FilePermission /usr/local/jboss-4.0.5.GA/server/publish/deploy/jbossweb-tomcat55.sar read)
 (java.net.SocketPermission localhost:1024- listen,resolve)
 (java.net.SocketPermission localhost:1024- listen,resolve)
 (java.util.PropertyPermission java.version read)
 (java.util.PropertyPermission java.vm.name read)
 (java.util.PropertyPermission java.vm.vendor read)
 (java.util.PropertyPermission os.name read)
 (java.util.PropertyPermission java.vendor.url read)
 (java.util.PropertyPermission java.vm.specification.vendor read)
 (java.util.PropertyPermission os.version read)
 (java.util.PropertyPermission java.specification.vendor read)
 (java.util.PropertyPermission java.class.version read)
 (java.util.PropertyPermission java.specification.name read)
 (java.util.PropertyPermission file.separator read)
 (java.util.PropertyPermission os.arch read)
 (java.util.PropertyPermission java.vm.version read)
 (java.util.PropertyPermission java.vendor read)
 (java.util.PropertyPermission java.specification.version read)
 (java.util.PropertyPermission java.vm.specification.version read)
 (java.util.PropertyPermission java.vm.specification.name read)
 (java.util.PropertyPermission path.separator read)
 (java.util.PropertyPermission line.separator read)
)


        at org.jboss.mx.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:1398)
        at org.jboss.mx.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:376)
        at org.apache.commons.modeler.Registry.registerComponent(Registry.java:871)
        at org.apache.coyote.http11.Http11Protocol$JmxHttp11ConnectionHandler.init(Http11Protocol.java:147)
        at org.apache.tomcat.util.net.MasterSlaveWorkerThread.start(MasterSlaveWorkerThread.java:131)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.newWorkerThread(PoolTcpEndpoint.java:595)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.createWorkerThread(PoolTcpEndpoint.java:574)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.run(PoolTcpEndpoint.java:631)
        at java.lang.Thread.run(Thread.java:595)
2008-08-18 07:42:41,201 ERROR [nucleusNamespace.atg.epub.DeploymentServer] transport error from agent 'app101'
java.rmi.ConnectException: Connection refused to host: 192.168.30.50; nested exception is:
        java.net.ConnectException: Connection refused
        at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:574)
        at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:185)
        at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:171)
        at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:94)
        at atg.deployment.agent.RMIClientAgentTransport_Stub.getStatus(Unknown Source)
        at atg.deployment.server.RMIServerAgentTransport.getStatus(RMIServerAgentTransport.java:192)
        at atg.deployment.server.AgentRef.getStatus(AgentRef.java:519)
        at atg.deployment.server.Target.isAccessible(Target.java:571)
        at sun.reflect.GeneratedMethodAccessor365.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.taglibs.standard.lang.jstl.ArraySuffix.evaluate(ArraySuffix.java:317)
        at org.apache.taglibs.standard.lang.jstl.ComplexValue.evaluate(ComplexValue.java:146)
        at org.apache.taglibs.standard.lang.jstl.UnaryOperatorExpression.evaluate(UnaryOperatorExpression.java:156)
        at org.apache.taglibs.standard.lang.jstl.ELEvaluator.evaluate(ELEvaluator.java:242)


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4171036#4171036

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4171036