0 Replies Latest reply on Aug 18, 2008 8:37 AM by russellsimpkins

    Odd security issue: commons-modeler.jar <no signer certifica

    russellsimpkins

      I was wondering if anyone has seen an issue like this below. I searched google and didn't find anything close. The server is jboss 4.05.GA and we are running ATG Content Administration software for what it's worth. I am wondering if we have a bad jar file packaged, if we need to install a provider to our CA Certs or if this can be safely ignored. Thanks for any help.


      2008-08-18 07:42:41,093 ERROR [org.apache.commons.modeler.Registry] Error registering jboss.web:type=RequestProcessor,worker=http-boapp103%2F192.168.30.60-10080,name=HttpRequest12
      java.lang.SecurityException: MBeanTrustPermission(register) not implied by protection domain of mbean class: org.apache.commons.modeler.BaseModelMBean, pd: ProtectionDomain (file:/usr/local/jboss-4.0.5.GA/se
      rver/publish/tmp/deploy/tmp33459commons-modeler.jar <no signer certificates>)
      org.jboss.mx.loading.UnifiedClassLoader3@121321f5{ url=file:/usr/local/jboss-4.0.5.GA/server/publish/deploy/jbossweb-tomcat55.sar/ ,addedOrder=9}
      <no principals>
      java.security.Permissions@b4bf84b (
      (java.lang.RuntimePermission stopThread)
      (java.io.FilePermission /usr/local/jboss-4.0.5.GA/server/publish/tmp/deploy/tmp33459commons-modeler.jar read)
      (java.io.FilePermission /usr/local/jboss-4.0.5.GA/server/publish/deploy/jbossweb-tomcat55.sar read)
      (java.net.SocketPermission localhost:1024- listen,resolve)
      (java.net.SocketPermission localhost:1024- listen,resolve)
      (java.util.PropertyPermission java.version read)
      (java.util.PropertyPermission java.vm.name read)
      (java.util.PropertyPermission java.vm.vendor read)
      (java.util.PropertyPermission os.name read)
      (java.util.PropertyPermission java.vendor.url read)
      (java.util.PropertyPermission java.vm.specification.vendor read)
      (java.util.PropertyPermission os.version read)
      (java.util.PropertyPermission java.specification.vendor read)
      (java.util.PropertyPermission java.class.version read)
      (java.util.PropertyPermission java.specification.name read)
      (java.util.PropertyPermission file.separator read)
      (java.util.PropertyPermission os.arch read)
      (java.util.PropertyPermission java.vm.version read)
      (java.util.PropertyPermission java.vendor read)
      (java.util.PropertyPermission java.specification.version read)
      (java.util.PropertyPermission java.vm.specification.version read)
      (java.util.PropertyPermission java.vm.specification.name read)
      (java.util.PropertyPermission path.separator read)
      (java.util.PropertyPermission line.separator read)
      )


      at org.jboss.mx.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:1398)
      at org.jboss.mx.server.MBeanServerImpl.registerMBean(MBeanServerImpl.java:376)
      at org.apache.commons.modeler.Registry.registerComponent(Registry.java:871)
      at org.apache.coyote.http11.Http11Protocol$JmxHttp11ConnectionHandler.init(Http11Protocol.java:147)
      at org.apache.tomcat.util.net.MasterSlaveWorkerThread.start(MasterSlaveWorkerThread.java:131)
      at org.apache.tomcat.util.net.PoolTcpEndpoint.newWorkerThread(PoolTcpEndpoint.java:595)
      at org.apache.tomcat.util.net.PoolTcpEndpoint.createWorkerThread(PoolTcpEndpoint.java:574)
      at org.apache.tomcat.util.net.PoolTcpEndpoint.run(PoolTcpEndpoint.java:631)
      at java.lang.Thread.run(Thread.java:595)
      2008-08-18 07:42:41,201 ERROR [nucleusNamespace.atg.epub.DeploymentServer] transport error from agent 'app101'
      java.rmi.ConnectException: Connection refused to host: 192.168.30.50; nested exception is:
      java.net.ConnectException: Connection refused
      at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:574)
      at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:185)
      at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:171)
      at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:94)
      at atg.deployment.agent.RMIClientAgentTransport_Stub.getStatus(Unknown Source)
      at atg.deployment.server.RMIServerAgentTransport.getStatus(RMIServerAgentTransport.java:192)
      at atg.deployment.server.AgentRef.getStatus(AgentRef.java:519)
      at atg.deployment.server.Target.isAccessible(Target.java:571)
      at sun.reflect.GeneratedMethodAccessor365.invoke(Unknown Source)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:585)
      at org.apache.taglibs.standard.lang.jstl.ArraySuffix.evaluate(ArraySuffix.java:317)
      at org.apache.taglibs.standard.lang.jstl.ComplexValue.evaluate(ComplexValue.java:146)
      at org.apache.taglibs.standard.lang.jstl.UnaryOperatorExpression.evaluate(UnaryOperatorExpression.java:156)
      at org.apache.taglibs.standard.lang.jstl.ELEvaluator.evaluate(ELEvaluator.java:242)