Re: Security problem.

Alex Paransky <[email protected]> Wed, 18 May 2005 17:42:34 -0700
Newsgroups gmane.comp.java.sun.ejb.general
Message-ID <[email protected]>
The problem you are getting has more to do with Class Not Found
exception rather than with any security issues.  Have you packaged the
struts library .JAR into your .WAR or added it to the websphere global
classpath?

--
-AP_
http://www.myprofiles.com/member/profile/apara_personal
http://www.myprofiles.com/member/profile/apara_business



malviya mahesh wrote:

>Hi All,
>I am developing a project, which contains an ejb
>module and a web module in websphere studio 5.1. Web
>module has struts1.1 support. It works fine in studio.
>I made an .ear file by exporting from websphere
>studio.
>My WebSphere application server 5.0 is configured with
>LDAP. Only ldap user can log in to it. When I go to
>deploy this ear file. It show no error and 0 warnings
>and deployed successfully. It is also started
>successfully. I am able to view htmls and jsps(without
>without struts support). But problem starts from here.
>1) I am not able to view any jsp with struts support
>and it gives me error.
>
>Error page exception
>The server cannot use the error page specified for
>your application to handle the Original Exception
>printed below. Please see the Error Page Exception
>below for a description of the problem with the
>specified error page.
>
>
>Original Exception:
>Error Message: org/apache/struts/taglib/html/HtmlTag
>Error Code: 500
>Target Servlet: null
>Error Stack:
>java.lang.NoClassDefFoundError:
>org/apache/struts/taglib/html/HtmlTag
>at
>org.apache.jsp._jspWelcome._jspService(_jspWelcome.java:42)
>
>at
>com.ibm.ws.webcontainer.jsp.runtime.HttpJspBase.service(HttpJspBase.java:89)
>
>at
>javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
>
>at
>com.ibm.ws.webcontainer.jsp.servlet.JspServlet$JspServletWrapper.service(JspServlet.java(Compiled
>Code))
>at
>com.ibm.ws.webcontainer.jsp.servlet.JspServlet.serviceJspFile(JspServlet.java:598)
>
>at
>com.ibm.ws.webcontainer.jsp.servlet.JspServlet.service(JspServlet.java:696)
>
>at
>javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictServletInstance.doService(StrictServletInstance.java:110)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._service(StrictLifecycleServlet.java:174)
>
>at
>com.ibm.ws.webcontainer.servlet.IdleServletState.service(StrictLifecycleServlet.java:313)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.service(StrictLifecycleServlet.java:116)
>
>at
>com.ibm.ws.webcontainer.servlet.ServletInstance.service(ServletInstance.java:258)
>
>at
>com.ibm.ws.webcontainer.servlet.ValidServletReferenceState.dispatch(ValidServletReferenceState.java:42)
>
>at
>com.ibm.ws.webcontainer.servlet.ServletInstanceReference.dispatch(ServletInstanceReference.java:40)
>
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java:872)
>
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java(Compiled
>Code))
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:173)
>
>at
>com.ibm.ws.webcontainer.servlet.SimpleFileServlet.doGet(SimpleFileServlet.java:174)
>
>at
>javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
>
>at
>javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictServletInstance.doService(StrictServletInstance.java:110)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._service(StrictLifecycleServlet.java:174)
>
>at
>com.ibm.ws.webcontainer.servlet.IdleServletState.service(StrictLifecycleServlet.java:313)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.service(StrictLifecycleServlet.java:116)
>
>at
>com.ibm.ws.webcontainer.servlet.ServletInstance.service(ServletInstance.java:258)
>
>at
>com.ibm.ws.webcontainer.servlet.ValidServletReferenceState.dispatch(ValidServletReferenceState.java:42)
>
>at
>com.ibm.ws.webcontainer.servlet.ServletInstanceReference.dispatch(ServletInstanceReference.java:40)
>
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java:872)
>
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java(Compiled
>Code))
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:173)
>
>at
>com.ibm.ws.webcontainer.srt.WebAppInvoker.doForward(WebAppInvoker.java:79)
>
>at
>com.ibm.ws.webcontainer.srt.WebAppInvoker.handleInvocationHook(WebAppInvoker.java:199)
>
>at
>com.ibm.ws.webcontainer.cache.invocation.CachedInvocation.handleInvocation(CachedInvocation.java:71)
>
>at
>com.ibm.ws.webcontainer.cache.invocation.CacheableInvocationContext.invoke(CacheableInvocationContext.java:114)
>
>at
>com.ibm.ws.webcontainer.srp.ServletRequestProcessor.dispatchByURI(ServletRequestProcessor.java:187)
>
>at
>com.ibm.ws.webcontainer.oselistener.OSEListenerDispatcher.service(OSEListener.java:331)
>
>at
>com.ibm.ws.webcontainer.http.HttpConnection.handleRequest(HttpConnection.java:56)
>
>at
>com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java:432)
>
>at
>com.ibm.ws.http.HttpConnection.run(HttpConnection.java:343)
>
>at
>com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:592)
>
>
>
>
>
>Error Page Exception:
>Error Message: org/apache/struts/taglib/html/HtmlTag
>Error Code: 0
>Target Servlet: null
>Error Stack:
>java.lang.NoClassDefFoundError:
>org/apache/struts/taglib/html/HtmlTag
>at
>org.apache.jsp._Login500._jspService(_Login500.java:43)
>
>at
>com.ibm.ws.webcontainer.jsp.runtime.HttpJspBase.service(HttpJspBase.java:89)
>
>at
>javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
>
>at
>com.ibm.ws.webcontainer.jsp.servlet.JspServlet$JspServletWrapper.service(JspServlet.java(Compiled
>Code))
>at
>com.ibm.ws.webcontainer.jsp.servlet.JspServlet.serviceJspFile(JspServlet.java:598)
>
>at
>com.ibm.ws.webcontainer.jsp.servlet.JspServlet.service(JspServlet.java:696)
>
>at
>javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictServletInstance.doService(StrictServletInstance.java:110)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._service(StrictLifecycleServlet.java:174)
>
>at
>com.ibm.ws.webcontainer.servlet.IdleServletState.service(StrictLifecycleServlet.java:313)
>
>at
>com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.service(StrictLifecycleServlet.java:116)
>
>at
>com.ibm.ws.webcontainer.servlet.ServletInstance.service(ServletInstance.java:258)
>
>at
>com.ibm.ws.webcontainer.servlet.ValidServletReferenceState.dispatch(ValidServletReferenceState.java:42)
>
>at
>com.ibm.ws.webcontainer.servlet.ServletInstanceReference.dispatch(ServletInstanceReference.java:40)
>
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java:872)
>
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java(Compiled
>Code))
>at
>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:173)
>
>at
>com.ibm.ws.webcontainer.webapp.WebApp.handleError(WebApp.java:977)
>
>at
>com.ibm.ws.webcontainer.webapp.WebApp.sendError(WebApp.java:836)
>
>at
>com.ibm.ws.webcontainer.srt.WebAppInvoker.doForward(WebAppInvoker.java:121)
>
>at
>com.ibm.ws.webcontainer.srt.WebAppInvoker.handleInvocationHook(WebAppInvoker.java:199)
>
>at
>com.ibm.ws.webcontainer.cache.invocation.CachedInvocation.handleInvocation(CachedInvocation.java:71)
>
>at
>com.ibm.ws.webcontainer.cache.invocation.CacheableInvocationContext.invoke(CacheableInvocationContext.java:114)
>
>at
>com.ibm.ws.webcontainer.srp.ServletRequestProcessor.dispatchByURI(ServletRequestProcessor.java:187)
>
>at
>com.ibm.ws.webcontainer.oselistener.OSEListenerDispatcher.service(OSEListener.java:331)
>
>at
>com.ibm.ws.webcontainer.http.HttpConnection.handleRequest(HttpConnection.java:56)
>
>at
>com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java:432)
>
>at
>com.ibm.ws.http.HttpConnection.run(HttpConnection.java:343)
>
>at
>com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:592)
>
>
>I think this could be a reason of security. Becuase I
>am able to view all jsps with struts support also
>,before configuring websphere application server with
>Lotus Domino(ldap)server.
>
>Waiting for your great replys. Thanks in advance.
>bye
>Mahesh Malviya
>
>
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around
>http://mail.yahoo.com
>
>===========================================================================
>To unsubscribe, send email to [email protected] and include in the body
>of the message "signoff EJB-INTEREST".  For general help, send email to
>[email protected] and include in the body of the message "help".
>
>
>
>

--
-AP_
http://www.myprofiles.com/member/profile/apara_personal
http://www.myprofiles.com/member/profile/apara_business

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff EJB-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".