[Bug 625415] New: Tomcat6 does not have permissions to its own directories
http://bugzilla.novell.com/show_bug.cgi?id=625415 http://bugzilla.novell.com/show_bug.cgi?id=625415#c0 Summary: Tomcat6 does not have permissions to its own directories Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: i686 OS/Version: openSUSE 11.3 Status: NEW Severity: Minor Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: doug@charvolant.org QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 The default install of tomcat6 and the admin-webapps leaves the admin webapps unable to run. There appears to be a general set of permissions problems with the tomcat directory structure, since the server runs with user/group tomcat but there are not group write permissions on things like /var/cache/tomcat6, /var/log/tomcat6 /srv/tomcat6/webapps etc. I also have a suspicion that /etc/tomcat6/Catalina is supposed to be a symbolic link to /var/cache/tomcat6/Catalina since the server attempts to write there. Reproducible: Always Steps to Reproduce: 1. Install tomcat 6 2. Add the tomcat user with role manager to /etc/tomcat6/tomcat-users.xml 3. Run /etc/init.d/tomcat6 start 4. Open a web browser and attempt to go to http://localhost:8080/manager/status Actual Results: Error message from tomcat saying /manager/status not found. /var/log/tomcat6/catalina.out contains a number of errors of the form java.io.FileNotFoundException: /usr/share/tomcat6/logs/catalina.2010-07-26.log (Permission denied) java.io.FileNotFoundException: /etc/tomcat6/Catalina/localhost/manager.xml (Permission denied) java.io.FileNotFoundException: /usr/share/tomcat6/work/Catalina/localhost/docs/SESSIONS.ser (No such file or directory) etc. Expected Results: Status display screen. The work-around is quite simple. 1. Add g+w to the various tomcat /var and /srv directories 2. Remove /etc/tomcat6/Catalina and replace it with a symbolic link to /var/cahce/tomcat6/Catalina -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=625415
http://bugzilla.novell.com/show_bug.cgi?id=625415#c
yang xiaoyu
http://bugzilla.novell.com/show_bug.cgi?id=625415
http://bugzilla.novell.com/show_bug.cgi?id=625415#c1
Fernando Hartmann
http://bugzilla.novell.com/show_bug.cgi?id=625415
http://bugzilla.novell.com/show_bug.cgi?id=625415#c2
Craig Rogers
The work-around is quite simple.
1. Add g+w to the various tomcat /var and /srv directories 2. Remove /etc/tomcat6/Catalina and replace it with a symbolic link to /var/cahce/tomcat6/Catalina
I found it desirable to "chgrp tomcat" or "chown tomcat.tomcat" various files and directories. I also found it helpful to "g+s" the directories, allowing me to more easily add and edit files from a second account that had "tomcat" group membership. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=625415
http://bugzilla.novell.com/show_bug.cgi?id=625415#c3
--- Comment #3 from Craig Rogers
http://bugzilla.novell.com/show_bug.cgi?id=625415
http://bugzilla.novell.com/show_bug.cgi?id=625415#c4
Doug Palmer
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c5
Michal Vyskocil
I also have a suspicion that /etc/tomcat6/Catalina is supposed to be a symbolic link to /var/cache/tomcat6/Catalina since the server attempts to write there.
Yes, stupid mistake, will fix it.
Expected Results: Status display screen.
The work-around is quite simple.
1. Add g+w to the various tomcat /var and /srv directories
Does not know why the problem occurs - those dirs are packaged with 0775, so they has to be writable by a group. rpm -V does not complain, so it thinks everything is ok. (In reply to comment #1)
This happens to me too. I realized that the /etc/sysconfig/j2ee or /etc/sysconfig/tomcat6 are missing too.
Having sysconfig and a tomcat.conf mades the tomcat configuration confusing, so only tomcat.conf is used - see bnc#471639. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c6
Leo Davis
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c7
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c8
Rafał Miłecki
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c9
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c10
--- Comment #10 from Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c11
--- Comment #11 from Rafał Miłecki
the problem was the build system silently replaced the 0775 permissions of the locations to 0755, so tomcat has been installed without proper permissions.
Is this something expected? Or maybe we should report this to OBS team to avoid similar problems in future? I think even if it's sth expected, OBS should generate some warning. It seems you didn't receive any? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c12
--- Comment #12 from Archie Cobbs
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c13
--- Comment #13 from Doug Palmer
Fixed tomcat6 is in home:mvyskocil:branches:openSUSE:11.3:Update:Test, please test
I can't see a 11.3 branch in /repositories/home:/mvyskocil:/branches:/openSUSE: Am I looking in the right place? Also, will this fix stop deployment to /srv/tomcat6/webapps for users in the tomcat group? Generally, I'd like to not have to be root to deploy. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c14
Michal Vyskocil
I can't see a 11.3 branch in /repositories/home:/mvyskocil:/branches:/openSUSE: Am I looking in the right place?
Sorry, forgot to publish. The download.o.o is dead right away so cannot check. Anyway the osc getbinaries home:mvyskocil:branches:openSUSE:11.3:Update:Test/tomcat6 will download the rpms using API. maintenance: can I have a swampid for tomcat6 update for openSUSE 11.3? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c15
--- Comment #15 from Rafał Miłecki
Sorry, forgot to publish. The download.o.o is dead right away so cannot check. Anyway the osc getbinaries home:mvyskocil:branches:openSUSE:11.3:Update:Test/tomcat6 will download the rpms using API.
It looks fixes RPM still isn't uploaded to http server. I wanted to use osc, but it needs me to have OBS account and I don't own one. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c16
Ciro Iriarte
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c17
--- Comment #17 from Michal Vyskocil
It looks fixes RPM still isn't uploaded to http server. I wanted to use osc, but it needs me to have OBS account and I don't own one.
I copied rpms to ftp://ftp.suse.com/pub/people/mvyskocil/bnc625415 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c18
Christian Dengler
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c19
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c20
Christian Dengler
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c21
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c22
Marcus Meissner
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c23
--- Comment #23 from Christian Dengler
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c24
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c25
James Rome
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c26
--- Comment #26 from Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c27
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c28
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c29
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c30
--- Comment #30 from Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c31
--- Comment #31 from Marcus Meissner
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c32
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c33
Christian Dengler
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c34
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c35
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=625415
https://bugzilla.novell.com/show_bug.cgi?id=625415#c
Swamp Workflow Management
http://bugzilla.novell.com/show_bug.cgi?id=625415
http://bugzilla.novell.com/show_bug.cgi?id=625415#c36
--- Comment #36 from Bernhard Wiedemann
participants (1)
-
bugzilla_noreply@novell.com