Re: jspwiki.policy and anonymous users

>It also looks like you have an extra "/" in front of "file:", which
>might explain the problem...

true..but this is something new it started doing..
>Have you possibly set "-Djava.security.policy=..." somewhere in your
CATALINA_OPTS, JAVA_OPTS, catalina.sh or startup.sh?

No I have changed the default configuration on Tomcat as I am mainly testing
the security on Jspwiki.

Janne,

My intention was to have multiple wikis online so I can share the extensive
testing I have done with the community. What holds me back is that the
default policy seems to be in use. I want users to login by invitation only.

It is my understanding that the JVM will lock the first policy file it
encounters. This will be the policy file that will be used for all my
jspwiki's regardless of what is written in the other wikis. This theory is
supported by the fact that when all my wikis were given tight security
rules, I stilled was allowed to do everything on all of them. I think that
by shutting Tomcat on the server I might be able to fix this. I have been
reluctant to shut the server down.

I plan to undeploy all webapps and to start from scratch. Perhaps my method
of cloning a new wiki is wrong.
Here's what i do:
<!--
1.COPY IMAGES TO IMAGES
2.COPY TEMPLATES TO TEMPLATES
3.COPY WIKIATTACHMENT,WIKIPAGES,WIKIWORK&WIKILOGGINGS FOLDERS TO WEBAPPS DIR
A.EMPTYDIRS WIKIATTACHMENT & WIKIWORK
B.ADD EMPTY FILE TO WIKILOGGINGS
-->
Log Results:
1.please try copying your WEB-INF/jspwiki.jks to....
2.ERROR com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase  - XML group
database property jspwiki.xmlGroupDatabaseFile not found;
3.WARN com.ecyrd.jspwiki.auth.PolicyLoader  - You have set your '
java.security.policy' to point at '/file:/home/claudia/Tools/apache-
tomcat-5.5.20/webapps/wiki4/WEB-INF/jspwiki.policy', but that file does not
seem to exist.
-->

I am going for a clean log but I need to know if i am on the right
track...Please help :-)



On 9/10/07, Janne Jalkanen <[email protected]> wrote:
>
> > This explains why I get this warning from the logs:
> > WARN com.ecyrd.jspwiki.auth.PolicyLoader  - You have set your '
> > java.security.policy' to point at '/file:/home/claudia/Tools/apache-
> > tomcat-5.5.20/webapps/wiki4/WEB-INF/jspwiki.policy', but that file
> > does not
> > seem to exist.  I'll continue anyway, since this may be something
> > specific
> > to your servlet container.  Just consider yourself warned.
> >
> > However I can under no conditions get the container to point to the
> > right
> > security policy file. I have
> > undeployed all other wikis and resorted back to the original
> > downloaded just
> > called it  wiki4. The physical file is there so why can't it find
> > it????
>
> Have you possibly set "-Djava.security.policy=..." somewhere in your
> CATALINA_OPTS, JAVA_OPTS, catalina.sh or startup.sh?
>
> It also looks like you have an extra "/" in front of "file:", which
> might explain the problem...
>
> /Janne
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
>