problems start cyclos in Tomcat with secutrity manager

Hello, I hope you can help.

I’ve installed cyclos (http://project.cyclos.org) on my tomcat5.5 running on debian lenny on amd64Bit Machine. A Mail to the Cyclos Team itself gets no answer since a week and the Cyclos Forum is nearly dead :(

With an disabled security manager all works fine. The Manager was disabled in /etc/init.d/tomcat5.5

With an enabled Security Manager and this code in 50user.policy all works fine too: grant { permission java.security.AllPermission; };

But otherwise I get thousand lines of Errors. Here some first lines they are specific (I think)

Jul 15 05:57:33 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:33 AM org.apache.coyote.http11.Http11BaseProtocol init#012INFO: Initializing Coyote HTTP/1.1 on http-8080 Jul 15 05:57:35 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:35 AM org.apache.coyote.http11.Http11BaseProtocol init#012INFO: Initializing Coyote HTTP/1.1 on http-8443 Jul 15 05:57:35 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:35 AM org.apache.catalina.startup.Catalina load#012INFO: Initialization processed in 2966 ms Jul 15 05:57:35 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:35 AM org.apache.catalina.core.StandardService start#012INFO: Starting service Catalina Jul 15 05:57:35 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:35 AM org.apache.catalina.core.StandardEngine start#012INFO: Starting Servlet Engine: Apache Tomcat/5.5 Jul 15 05:57:35 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:35 AM org.apache.catalina.core.StandardHost start#012INFO: XML validation disabled Jul 15 05:57:38 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:38 AM org.apache.commons.modeler.Registry registerComponent#012SEVERE: Error registering Catalina:type=Valve,name=StandardContextValve,path=/banks-of-community,host=localhost#012javax.management.MBeanException: Cannot instantiate ModelMBean of class org.apache.commons.modeler.BaseModelMBean#012#011at org.apache.commons.modeler.ManagedBean.createMBean(ManagedBean.java:385)#012#011at org.apache.commons.modeler.Registry.registerComponent(Registry.java:835)#012#011at org.apache.catalina.core.StandardPipeline.registerValve(StandardPipeline.java:302)#012#011at org.apache.catalina.core.StandardPipeline.start(StandardPipeline.java:234)#012#011at org.apache.catalina.core.StandardContext.start(StandardContext.java:4140)#012#011at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)#012#011at org.apache.catalina.core.ContainerBase.access$0(ContainerBase.java:744)#012#011at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:144)#012#011at java.security.AccessController.doPrivileged(Native Method)#012#011at org.

Jul 15 05:57:39 srv097 jsvc.exec[14351]: [INFO] banks-of-community] – Initializing Spring root WebApplicationContext Jul 15 05:57:39 srv097 jsvc.exec[14351]: [INFO] ContextLoader – Root WebApplicationContext: initialization started Jul 15 05:57:39 srv097 jsvc.exec[14351]: [INFO] CustomWebApplicationContext – Refreshing nl.strohalm.cyclos.spring.CustomWebApplicationContext@ec0a9f9: display name [Root WebApplicationContext]; startup date [Thu Jul 15 05:57:39 UTC 2010]; root of context hierarchy Jul 15 05:57:40 srv097 jsvc.exec[14351]: [INFO] XmlBeanDefinitionReader – Loading XML bean definitions from class path resource [nl/strohalm/cyclos/spring/persistence.xml] Jul 15 05:57:40 srv097 jsvc.exec[14351]: [WARN] DefaultNamespaceHandlerResolver – Ignoring namespace handler [org.apache.cxf.transport.http_jetty.spring.NamespaceHandler]: problem with handler class file or dependent class java.lang.ExceptionInInitializerError#012#011at org.apache.cxf.transport.http_jetty.spring.NamespaceHandler.init(NamespaceHandler.java:25)#012#011at org.springframework.beans.factory.xml.DefaultNamespaceHandlerResolver.initHandlerMappings(DefaultNamespaceHandlerResolver.java:123)#012#011at org.springframework.beans.factory.xml.DefaultNamespaceHandlerResolver.(DefaultNamespaceHandlerResolver.java:96)#012#011at org.springframework.beans.factory.xml.DefaultNamespaceHandlerResolver.(DefaultNamespaceHandlerResolver.java:83)#012#011at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.createDefaultNamespaceHandlerResolver(XmlBeanDefinitionReader.java:498)#012#011at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.createReaderContext(XmlBeanDefinitionReader.java:487)#012#011at org.springframework.beans.f

Jul 15 05:57:42 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:42 AM org.apache.coyote.http11.Http11BaseProtocol start#012INFO: Starting Coyote HTTP/1.1 on http-8080 Jul 15 05:57:43 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:43 AM org.apache.coyote.http11.Http11BaseProtocol start#012INFO: Starting Coyote HTTP/1.1 on http-8443 Jul 15 05:57:43 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:43 AM org.apache.jk.common.ChannelSocket init#012INFO: JK: ajp13 listening on /0.0.0.0:8009 Jul 15 05:57:43 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:43 AM org.apache.jk.server.JkMain start#012INFO: Jk running ID=0 time=0/76 config=null Jul 15 05:57:43 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:43 AM org.apache.catalina.storeconfig.StoreLoader load#012INFO: Find registry server-registry.xml at classpath resource Jul 15 05:57:43 srv097 jsvc.exec[14351]: Jul 15, 2010 5:57:43 AM org.apache.catalina.startup.Catalina start#012INFO: Server startup in 8513 ms

with security manager disabled it looks like this:

Jul 15 06:01:59 srv097 jsvc.exec[14482]: Jul 15, 2010 6:01:59 AM org.apache.coyote.http11.Http11BaseProtocol init#012INFO: Initializing Coyote HTTP/1.1 on http-8080 Jul 15 06:02:00 srv097 jsvc.exec[14482]: Jul 15, 2010 6:02:00 AM org.apache.coyote.http11.Http11BaseProtocol init#012INFO: Initializing Coyote HTTP/1.1 on http-8443 Jul 15 06:02:00 srv097 jsvc.exec[14482]: Jul 15, 2010 6:02:00 AM org.apache.catalina.startup.Catalina load#012INFO: Initialization processed in 2936 ms Jul 15 06:02:01 srv097 jsvc.exec[14482]: Jul 15, 2010 6:02:01 AM org.apache.catalina.core.StandardService start#012INFO: Starting service Catalina Jul 15 06:02:01 srv097 jsvc.exec[14482]: Jul 15, 2010 6:02:01 AM org.apache.catalina.core.StandardEngine start#012INFO: Starting Servlet Engine: Apache Tomcat/5.5 Jul 15 06:02:01 srv097 jsvc.exec[14482]: Jul 15, 2010 6:02:01 AM org.apache.catalina.core.StandardHost start#012INFO: XML validation disabled Jul 15 06:02:05 srv097 jsvc.exec[14482]: 06:02:05,343 INFO [/banks-of-community] – Initializing Spring root WebApplicationContext Jul 15 06:02:20 srv097 jsvc.exec[14482]: 06:02:20,623 INFO DataBaseConfiguration – Cyclos database version 3.5.6 found on MySQL version 5.0.51a-24+lenny4 Jul 15 06:02:23 srv097 jsvc.exec[14482]: 06:02:23,751 INFO CyclosOSCacheProvider – Enabling disk cache on /var/lib/tomcat5.5/webapps/banks-of-community/WEB-INF/cache Jul 15 06:03:00 srv097 jsvc.exec[14482]: 06:03:00,079 INFO [/banks-of-community] – Cyclos initialized Jul 15 06:03:01 srv097 jsvc.exec[14482]: 06:03:01,211 INFO [/banks-of-community] – No Configuration for this context. Initializing. Jul 15 06:03:01 srv097 jsvc.exec[14482]: 06:03:01,211 INFO [/banks-of-community] – configuring cewolf app.. Jul 15 06:03:01 srv097 jsvc.exec[14482]: 06:03:01,215 INFO [/banks-of-community] – using storage class de.laures.cewolf.storage.ClusterableSessionStorage Jul 15 06:03:01 srv097 jsvc.exec[14482]: 06:03:01,215 INFO [/banks-of-community] – using overlibURL /pages/scripts/overlib.js Jul 15 06:03:01 srv097 jsvc.exec[14482]: 06:03:01,216 INFO [/banks-of-community] – debugging is turned off Jul 15 06:03:01 srv097 jsvc.exec[14482]: 06:03:01,216 INFO [/banks-of-community] – …done. Jul 15 06:03:03 srv097 jsvc.exec[14482]: Jul 15, 2010 6:03:03 AM org.apache.coyote.http11.Http11BaseProtocol start#012INFO: Starting Coyote HTTP/1.1 on http-8080 Jul 15 06:03:03 srv097 jsvc.exec[14482]: Jul 15, 2010 6:03:03 AM org.apache.coyote.http11.Http11BaseProtocol start#012INFO: Starting Coyote HTTP/1.1 on http-8443 Jul 15 06:03:04 srv097 jsvc.exec[14482]: Jul 15, 2010 6:03:04 AM org.apache.jk.common.ChannelSocket init#012INFO: JK: ajp13 listening on /0.0.0.0:8009 Jul 15 06:03:04 srv097 jsvc.exec[14482]: Jul 15, 2010 6:03:04 AM org.apache.jk.server.JkMain start#012INFO: Jk running ID=0 time=0/19 config=null Jul 15 06:03:04 srv097 jsvc.exec[14482]: Jul 15, 2010 6:03:04 AM org.apache.catalina.storeconfig.StoreLoader load#012INFO: Find registry server-registry.xml at classpath resource Jul 15 06:03:04 srv097 jsvc.exec[14482]: Jul 15, 2010 6:03:04 AM org.apache.catalina.startup.Catalina start#012INFO: Server startup in 64007 ms

reboot problems

Hi,

Machine is a HP Proliant DL 140 with 2 SCSI disks. Raid 1 is done via md. Several partitions made for / (md1), /boot (md0), /var (md3) and /usr (md2). Machine is used as router/firewall.

About 2 years ago I installed Debian etch on it. For a long time I did not update the kernel because I had problems with the default NIC driver and every apt update/upgrade cycle would remove the extra Intel driver. I did apply all other patches. A few months after Lenny came out I started upgrading the kernel to the latest etch version and noticed the default NIC drivers supported my hardware. A few months after that I upgraded to Lenny and the machine is now running the latest Lenny release.

I may have been with the etch kernel upgrade or it may have been one of the next upgrades but… after that the machine will not reboot. It will hang just after stopping the md devices. The last lines on the screen are (from paper as I cannot copy from a stopped machine): md: Stopping all md devices [...] md: md1 still in use will now restart (might be a few more lines up) sd: 1:0:0:0 [sdb] stopping disk sd: 0:0:0:0 [sda] stopping disk ACPI:PCI interupt for device 0000:06:00.1 disabled ACPI:PCI interupt for device 0000:06:00.0 disabled

And that’s it. After that the machine will hang and I need to hold the power butten for a few seconds to shut it off and then power it back on.

Maybe I did not look properly on the net but I have not been able to find if this is a problem for just me or if there are others with this specific problem. Lot’s of general reboot problems but is this one known? Does anyone know where I can find more information about troubleshooting this problem. The fact that I cannot reboot this machine remote or scheduled during the night is becoming quite a problem.

Bonno Bloksma

Problems with ISA non-pnp card

Hi all, I am working on an single board computer (Diamond Systems’ Pegasus) running Debian Lenny with a custom-built kernel for the Pegasus Board, version 2.6.29. Connected to this board I have a GPIO card (Diamond Systems’ GPIO-MM) that is a ISA non-PnP card. Well, I can’t use the card: the driver has the same output on the SBC and on my laptop that doesn’t have the GPIO card mounted on.

Assuming that the GPIO card works correctly, there are 2 possibilities: 1) the board or the driver aren’t configured correctly 2) the SBC doesn’t access properly the ISA bus 3) BIOS (?)

1) the board has a Jumper selection for its i/o address range for the ISA bus: I selected 0×40 – 0x7F, and these addresses, according to the scanport command (attached) are free. The on-board selected IRQs are 7 and 11, free according to /proc/interrupts (attached) The same i/o address and IRQ are specified in the driver, so the driver should be configured correctly.

2) the kernel finds the EISA bus, and it has the needed driver: the ISA bridge is shown in lspci (attached) and in dmesg (attached) the EISA bus 0 is mentioned but there are 2 errors in configuring the slots: [ 2.537285] Cannot allocate resource for EISA slot 1 [ 2.537339] Cannot allocate resource for EISA slot 6

3) In the BIOS setup there are some settings about the IT8888 ISA bridge for address decoding and so on that I left blank. I also disabled the PnP OS setting.

I think the problem is in the messages I copied from dmesg, but I couldn’t find a way to fix them, but I can be wrong: that’s why I wrote a global view.

Thanks for your patience, any help will be appreciated.

Peppe

Problems with parsing html with servlet

On 09/07/2010 09:15, John Byrne wrote:

It is WEB-INF, not web-inf. Case matters.

Mark

Upgrading from Etch to Lenny ends in SSH problems

Hi All,

I’ve just been attempting an (more than just slightly) overdue upgrade from Etch to Lenny on a machine I don’t have physical access to. At first, everything seemed to work fine. But after a while my connection (over ssh) was dropped and all my box returns now is ‘connection closed’ when I try to reconnect. It gives me this:

wouter@wouter-desktop:~$ ssh -vvv root@www.#########.nl OpenSSH_5.3p1 Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug2: ssh_connect: needpriv 0 debug1: Connecting to www.#########.nl [###.###.###.###] port 22. debug1: Connection established. debug1: identity file /home/wouter/.ssh/identity type -1 debug1: identity file /home/wouter/.ssh/id_rsa type -1 debug1: identity file /home/wouter/.ssh/id_dsa type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.1p1 Debian-5 debug1: match: OpenSSH_5.1p1 Debian-5 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu4 debug2: fd 3 setting O_NONBLOCK debug1: SSH2_MSG_KEXINIT sent debug3: Wrote 792 bytes for a total of 831 Connection closed by ###.###.###.###

Of course I’ve already activated customer support, hoping that my hosting company is willing to physically go to the server. But I was hoping that you might have some suggestions on what I might be able to try. Though I know my options are limited :(

And at the same time I’m wondering what’s causing it, and how I could have prevented it. I upgraded with a simple: apt-get dist-upgrade

Thanks! Wouter

Ipsec problems

Hi. I’m having some problems with ipsec. The connections are running, but when the line goes down the vpn is not coming back again. If i see the logs, i see these errors:

2010-07-06 13:23:22: ERROR: fatal INVALID-SPI notify messsage, phase1 should be deleted.

If i force a restart of the setkey and racoon services, then the vpns are coming back. This is the conf:

remote AAA.AAA.AAA.AAA { exchange_mode main; verify_cert on; my_identifier address; lifetime time 96 hour ; dpd_delay 0; proposal { encryption_algorithm 3des; hash_algorithm sha1; authentication_method pre_shared_key; dh_group 2; }

}

sainfo address 192.168.1.0/24 any address 10.75.0.0/16 any { pfs_group 2; lifetime time 8 hour ; encryption_algorithm 3des ; authentication_algorithm hmac_md5 ; compression_algorithm deflate ; }

sainfo address AAA.AAA.AAA.AAA/32 any address 10.75.0.0/16 any { pfs_group 2; lifetime time 8 hour ; encryption_algorithm 3des ; authentication_algorithm hmac_md5 ; compression_algorithm deflate ; }

sainfo address BBB.BBB.BBB.BBB/32 any address AAA.AAA.AAA.AAA/32 any { pfs_group 2; lifetime time 8 hour ; encryption_algorithm 3des ; authentication_algorithm hmac_md5 ; compression_algorithm deflate ; }

sainfo address 192.168.1.0/24 any address AAA.AAA.AAA.AAA/32 any { pfs_group 2; lifetime time 8 hour ; encryption_algorithm 3des ; authentication_algorithm hmac_md5 ; compression_algorithm deflate ; }

10.75.0.0/16 is the remote network. 192.168.1.0/24 is our net. AAA.AAA.AAA.AAA is their remote public IP. BBB.BBB.BBB.BBB is our public IP

Thanks

Understanding my recurrent network connectivity problems

Hi,

For one week now, I sometimes `loose’ any access to the LAN and the WAN. Here is the way I am connected to the Internet:

ISP (house’s wall) -> ISP modem (RJ-45) -> D-Link DIR-635 router (RJ-45) -> Switch (RJ-45) -> 192.168.0.101 (this computer).

When trying to use my Internet connection, I sometimes encounter some load page error from Firefox. Checking the modem’s LEDs, I notice that the RECEIVING and SENDING LEDs are then constantly lighted. Well, this is not normal. I then try to go to my router’s webpage, i.e. 192.168.0.1 (this is my (LAN) DHCP server for 192.168.0.101 -> 192.168.0.111), and it does not load. I then reset the router, and everything then works right once the router has acquired the IP from my ISP’s DHCP server. But if I switch off the router, say, for 10 mins, for example, the modem continues lightning its LEDs. But when the router is re-plugged, and an IP address is acquired from my ISP’s DHCP server, the modem turns off the two respective LEDs, and everything is okay on the computers.

First, I thought that I had some vulnerability (open port, etc.), which was responsible of the sending/receiving operations of my modem, but, as deactivating the router does not change anything to the modem state (it still keeps receiving and sending), it should not be a vulnerability. (Moreover, there is no reason to it.)

I then thought that the modem was defective, but if it was the only defective device in my installation, why am I sometimes unable to access the router’s webpage (and the Internet, accessorily)?

And let the modem be defective. Then, the router should also be defective, but there is no reason to it, as it is brand new, both are on the UPS, and always worked fine.

I can’t understand this problem. Any idea?

Thanks.

Problems with homebrew ParallelWriter

Hi all,

We’ve been waiting for LUCENE-1879 and LUCENE-2425 and have written our own ParallelWriter class in the meantime. Apparently our indexes are falling out of sync (I suspect my colleague is seeing error messages come from ParallelReader stating the the number of documents must be the same).

Here’s a code snippet from our ParallelWriter which extends Object:

writer1 = new IndexWriter(dir, analyzer, create,

new IndexWriter.MaxFieldLength(MFL));

writer1.setMergePolicy(new LogDocMergePolicy());

writer1.setMergeScheduler(new SerialMergeScheduler());

writer1.setMaxBufferedDocs(MBD);

writer1.setRAMBufferSizeMB(IndexWriter.DISABLE_AUTO_FLUSH);

My colleague suspects that merging or flushing is being triggered on something other than the doc count which leads to the writers’ different behaviors. I suspect our next step is to scatter breakpoints around Lucene source (we’ve got trunk@926791 to take advantage of latest NRT readers).

Does anyone have ideas on how the indexes would get out of sync? Process close, committing, optimizing,… they all should work okay?

Thanks, Justin

Video problems with VLC

I have a problem playing AVI divx files with VLC. Yesterday upon start VLC showed an error message complaining about divx codecs and refused to proceed. Today the player starts but the video is squished horizontally (it occupies roughly 1/4th of the VLC window which is for the other part black).

I’m on an updated testing system, and before yesterday VLC was playing fine. In the meantime – after a recent dist-upgrade – I cannot run X with proprietary ATI drivers anymore, I have to use the FOSS radeonhd ones instead. I don’t know if that’s related but I thought it could be worth mentioning (and by the way if anyone has suggestions about this problem too, that’d be very much appreciated).

How can I fix VLC’s problem?

Thanks.

problems with dell poweredge server R140 (rack)

I tried to install Debian Lenny on Dell Poweredge R140 with no success.

First problem is with netword card bnx2? It is not working with default install, but with this workaround it works:

-> http://kmuto.jp/debian/d-i/ (this image support bnx2 from scratch)

another problem is that default kernel cannot mount rootfs from perc raid (sas) controller after boot? why? tool old kernel?

I tried this workaround (rootdelay=35) but with no success.

RHEL and UBuntu server works fine on this hardware, main reason to install debian is that we are trying to avoid support costs from redhat.

Any ideas how to install debian with success to this machine? I just bought three of these ..

thanks,