topic Re: Alfresco war on ubuntu 7.10 in Alfresco Archive

Alfresco war on ubuntu 7.10

alixbarbosa — Sun, 06 Jan 2008 16:44:33 GMT

I'm having problems installing the Alfresco war on a Ubuntu 7.10 server (console interface)heres what i have done so far on a new install:sudo apt-get updatesudo apt-get dist-upgradesudo apt-get install sun-java6-jdk sun-java6-jresudo vim /etc/profileJAVA_HOME=/usr/lib/jvm/java-6-sun; export JAVA_HO

Re: Alfresco war on ubuntu 7.10

steve — Mon, 07 Jan 2008 15:23:45 GMT

Hi,

Have you followed the instructions here?:
http://wiki.alfresco.com/wiki/Installing_Alfresco_on_Ubuntu_7.10

Specifically, the section:

Create a directory for the logs and make the user and group alfresco it's owner:

mkdir -p /var/log/alfresco/tomcat/logs

chown -R alfresco:alfresco /var/log/alfresco

The Alfresco log will be in /var/log/alfresco/alfresco.log.

Steve

Re: Alfresco war on ubuntu 7.10

gcastro — Thu, 31 Jan 2008 09:27:55 GMT

I deployed the alfresco war ( alfresco-community-war-2.1.0.zip ) with the Tomcat manager, the directory webapps\alfresco was created.

But Tomcat Manager does not list alfresco as application.

Re: Alfresco war on ubuntu 7.10

apeshansky — Tue, 05 Feb 2008 19:37:34 GMT

Hi,

Have you followed the instructions here?:
http://wiki.alfresco.com/wiki/Installing_Alfresco_on_Ubuntu_7.10

Specifically, the section:

Create a directory for the logs and make the user and group alfresco it's owner:

mkdir -p /var/log/alfresco/tomcat/logs

chown -R alfresco:alfresco /var/log/alfresco

The Alfresco log will be in /var/log/alfresco/alfresco.log.

Steve

I am having the same problems as alixbarbosa, to whom Steve replied in quoted message, although I am installing Alfresco on Ubuntu 6.06 LAMP server. I did essentially the same things as alixbarbosa did, and I did follow quoted directions (fixing minor errors in Installing_Alfresco_on_Ubuntu_7.10 wiki page in the process):


alex@gcrc-dev:~$ sudo  mkdir -p /var/log/alfresco/tomcat/logs 
alex@gcrc-dev:~$ sudo  chown -R alfresco:alfresco /var/log/alfresco
alex@gcrc-dev:~$ ls -ld /var/log/alfresco/
drwxr-x— 2 alfresco alfresco 4096 2008-02-04 10:35 /var/log/alfresco/
‍‍‍‍‍‍

My error message is (the source of error, I believe)


INFO: Installing web application at context path /alfresco from URL file:/var/lib/tomcat5/webapps/alfresco
Feb 5, 2008 12:22:48 PM org.apache.catalina.startup.HostConfig deployWARs
SEVERE: Exception while expanding web application archive alfresco.war
java.lang.ExceptionInInitializerError
[ … ]
Caused by: java.security.AccessControlException: access denied (java.io.FilePermission /var/log/alfresco/alfresco.log write)
‍‍‍‍‍‍‍‍

I tried the following:
1. Allow all access to /var/log/alfresco/:

alex@gcrc-dev:~$ sudo chmod -R 777 /var/log/alfresco/
alex@gcrc-dev:~$ ls -ld /var/log/alfresco/
drwxrwxrwx 2 alfresco alfresco 4096 2008-02-05 10:35 /var/log/alfresco/
‍‍‍‍

- no effect.
2. Manually creating alfresco.log file:

sudo touch /var/log/alfresco/alfresco.log
sudo chmod 777 /var/log/alfresco/alfresco.log
‍‍‍

- no effect.
3. Changing Alfresco logging configuration in tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties:

log4j.appender.File.File=/home/alfresco/alfresco.log
‍‍

- no effect.
4. Changing ownership of /var/log/alfresco/ subtree to tomcat5:nogroup (default tomcat user) - no effect.

The only changes I saw was different directory in the error message when I change it in log4j.properties.

Anyone knows what the problem is?

Re: Alfresco war on ubuntu 7.10

alixbarbosa — Wed, 06 Feb 2008 10:40:08 GMT

@apeshansky I did exactly the same thing has you.. I should have updated the thread .

I'm still trig to make the war work tho.. I would like to get the war working instead of the tomcat+alfresco pack..

Can anyone give us a hand please.

Re: Alfresco war on ubuntu 7.10

apeshansky — Thu, 07 Feb 2008 03:07:12 GMT

@apeshansky I did exactly the same thing has you.. I should have updated the thread .

I'm still trig to make the war work tho.. I would like to get the war working instead of the tomcat+alfresco pack..

Can anyone give us a hand please.

OK, with the help of with Java Guru (my son, who is doing research on Java compilers for IBM), we discovered that the error was not file system permissions, but Java security manager permissions ops: (the key was in the log line immediately after the one alixbarbosa ended quoting with:

Caused by: java.security.AccessControlException: access denied (java.io.FilePermission /var/log/tomcat5/alfresco.log write)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)‍‍

So we did web search for "tomcat FilePermission ExceptionInInitializerError", and found (http://nutch.sourceforge.net/cgi-bin/twiki/view/Main/GettingNutchRunningOnDebian) a solution: grant Alfresco permission to access files. :idea: Just insert a line

permission java.io.FilePermission "/var/log/alfresco/*", "read,write,delete";‍

into /etc/tomcat5/policy.d/04webapps.policy right before closing }.

I am now getting different error

 FATAL [webapp.webxml.WebXmlParser] Unable to parse web.xml
java.security.AccessControlException: access denied (java.net.SocketPermission 
java.sun.com:80 connect,resolve)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)‍‍‍‍

which apparently means that I should find why alfresco cannot talk to java.sun.com:80 and let it.

Very similar solution: add line

permission java.net.SocketPermission "java.sun.com:80", "connect,resolve";‍

after the previous one in the same /etc/tomcat5/policy.d/04webapps.policy.

Restart tomcat … and now the error is

ERROR [web.context.ContextLoader] Context initialization failed
java.security.AccessControlException: access denied (java.util.PropertyPermission alfresco.jmx.dir write)‍‍

OK, this is almost too easy : add line

permission java.util.PropertyPermission "alfresco.jmx.dir", "read,write";‍

into the familiar place.

Restart tomcat … and now the error is

ERROR [web.context.ContextLoader] Context initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'luceneFullTextSearchIndexer' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve reference to bean 'indexerAndSearcherFactory' while setting bean property 'indexerAndSearcherFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating
 bean with name 'indexerAndSearcherFactory' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve reference to bean 'admLuceneIndexerAndSearcherFactory' while setting bean property 'defaultBinding'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'admLuceneIndexerAndSearcherFactory' defined in class path … ‍‍‍

Oh, well, this can wait until tomorrow :wink:

Re: Alfresco war on ubuntu 7.10

apeshansky — Thu, 07 Feb 2008 17:34:13 GMT

The saga of installation continues…

When I saw the error message

INFO: Installing web application at context path /alfresco from URL file:/var/lib/tomcat5/webapps/alfresco
10:34:09,295 ERROR [web.context.ContextLoader] Context initialization failed org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'luceneFullTextSearchIndexer' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve reference to bean 'indexerAndSearcherFactory' while setting bean property 'indexerAndSearcherFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'indexerAndSearcherFactory' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve reference to bean 'admLuceneIndexerAndSearcherFactory' while setting bean property 'defaultBinding'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'admLuceneIndexerAndSearcherFactory' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve reference to bean 'mlAwareNodeService' while setting bean property 'nodeService'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'mlAwareNodeService' defined in class path resource [alfresco/node-services-context.xml]: Cannot resolve reference to bean 'dbNodeService' while setting bean property 'defaultBinding'; nested exception is org.springframework.beans.factory. BeanCreationException: Error creating bean with name 'dbNodeService' defined in 
class path resource [alfresco/node-services-context.xml]: Cannot resolve reference to bean 'dbNodeServiceImpl' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'dbNodeServiceImpl' defined in class path resource [alfresco/node-services-context.xml]: Cannot resolve reference to bean 'nodeDaoService' while setting bean property 'nodeDaoService'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'nodeDaoService' defined in class path resource [alfresco/hibernate-context.xml]: Cannot resolve reference to bean 'nodeDaoServiceImpl' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'nodeDaoServiceImpl' defined in class path resource [alfresco/hibernate-context.xml]: Cannot resolve reference to bean 'sessionFactory' while setting bean property 'sessionFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sessionFactory' defined in class path resource [alfresco/hibernate-context.xml]: 
Invocation of init method failed; nested exception is java.security.AccessControlException: access denied (java.lang.RuntimePermission accessDeclaredMembers)
[ … ]‍‍‍‍‍

I first thought that I did not copy all folders packed into alfresco-community-war-2.1.0.tar.gz (./extensions, ./extras etc.) to the proper place. From analyzing what alfresco-community-tomcat-2.1.0.tar.gz unpacks into it looked like "proper place" should be /var/liv/tomcat5/shared/classes/alfresco.

When copying everything there and restarting tomcat did not bring me one step closer (same error), I noticed the last line in quoted error:

Invocation of init method failed; nested exception is java.security.AccessControlException: access denied (java.lang.RuntimePermission accessDeclaredMembers)‍

:idea: Time to add more permissions to /etc/tomcat5/policy.d/04webapps.policy:

permission java.lang.RuntimePermission "accessDeclaredMembers";‍

Restart … failed again. But now that line says

Invocation of init method failed; nested exception is java.security.AccessControlException: access denied (java.lang.reflect.ReflectPermission suppressAccessChecks)‍

:idea: Adding

permission java.lang.reflect.ReflectPermission "suppressAccessChecks";‍

Restart … A-ha! Now the error is

Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: EHCache configuration failed‍

Further in the message the real culprit seems to be

Caused by: net.sf.ehcache.CacheException: Error configuring from file:/var/lib/tomcat5/webapps/alfresco/WEB-INF/classes/alfresco/ehcache-default.xml. Initial cause was Error configuring from input stream. Initial cause was null:5: Could not set attribute "path".. Message was: java.security.AccessControlException: access denied (java.util.PropertyPermission user.home read)‍

:idea: Let's give alfresco Java permissions to user.home:

permission java.util.PropertyPermission "user.home", "read";‍

Restarting … Nope. The security exception now seems to be

java.security.AccessControlException: access denied (java.util.PropertyPermission user.dir read)‍

Giving rights to user.* (replace the line above with

permission java.util.PropertyPermission "user.*", "read";‍

) Restarting … Nope. The security exception now seems to be

java.security.AccessControlException: access denied (java.util.PropertyPermission java.io.tmpdir read)‍

OK, adding this permission:

permission java.util.PropertyPermission "java.io.tmpdir", "read";‍

Now it wants to read net.sf.ehcache.disabled; adding permissions to the ehcache.*

permission java.util.PropertyPermission "net.sf.ehcache.*", "read";‍

Now it wants to read /var/lib/tomcat5/temp ?!!

ERROR [ehcache.store.DiskStore] org.alfresco.cache.ticketsCacheCache: Could not create disk store. Initial cause was access denied (java.io.FilePermission /var/lib/tomcat5/temp read)‍

I guess it is looking for tomcat5.pid there. OK, let's allow it:

permission java.io.FilePermission "/var/lib/tomcat5/temp/*", "read";‍

Restart … and the same error. Now I'm stuck.

Re: Alfresco war on ubuntu 7.10

alixbarbosa — Thu, 07 Feb 2008 20:56:37 GMT

I'm on trip so i only have my laptop, can help you out real time.

Try

permission java.io.FilePermission "/var/lib/tomcat5/temp", "read";‍

as it can be access to the directory itself ( i think its possible to have access to the files within the directory but can't get to them cause of the permitions of the directory itself - I may be mistaken )

Re: Alfresco war on ubuntu 7.10

apeshansky — Thu, 07 Feb 2008 21:09:41 GMT

I'm on trip so i only have my laptop, can help you out real time.

Try
permission java.io.FilePermission "/var/lib/tomcat5/temp", "read";‍
as it can be access to the directory itself ( i think its possible to have access to the files within the directory but can't get to them cause of the permitions of the directory itself - I may be mistaken )

Great idea! Actually, I looked up match rules at http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html, and after several iteration ended up with

  permission java.io.FilePermission "/var/log/alfresco/*", "read,write,delete";
  permission java.io.FilePermission "/var/lib/alfresco/*", "read,write,execute";
  permission java.io.FilePermission "/var/lib/alfresco/alf_data/-", "read,write,delete,execute";
  permission java.io.FilePermission "/var/lib/alfresco/tmp/-", "read,write,delete,execute";‍‍‍‍

as {trailing -} syntax apparently expands to both named directory, all files in it, all its subdirectories and all files in them.
Now I am at

java.lang.NoClassDefFoundError: Could not initialize class org.alfresco.repo.security.authentication.MD4PasswordEncoderImpl‍

which is rather strange, as this class seem to be defined in webapps/alfresco/WEB-INF/lib/alfresco-repository.jar, but there is no alfresco-repository.jar in /opt/alfresco/ tree created by untarring alfresco-community-tomcat!

Re: Alfresco war on ubuntu 7.10

alixbarbosa — Thu, 07 Feb 2008 22:02:36 GMT

did it work or did you get a new error?

Re: Alfresco war on ubuntu 7.10

apeshansky — Fri, 08 Feb 2008 01:08:48 GMT

I (foolishly) edited my previous post instead of continuing.

Yes, your idea was right on money, but I still did not get it running.

Re: Alfresco war on ubuntu 7.10

apeshansky — Fri, 08 Feb 2008 02:03:33 GMT

Now I am at
java.lang.NoClassDefFoundError: Could not initialize class org.alfresco.repo.security.authentication.MD4PasswordEncoderImpl‍
which is rather strange, as this class seem to be defined in webapps/alfresco/WEB-INF/lib/alfresco-repository.jar, but there is no alfresco-repository.jar in /opt/alfresco/ tree created by untarring alfresco-community-tomcat!

D'oh! Of course it is not in /opt/alfresco/ tree created by untarring alfresco-community-tomcat - it is created as a part of deployment, and I never started it! ops:

Re: Alfresco war on ubuntu 7.10

apeshansky — Fri, 08 Feb 2008 02:37:14 GMT

I looked up match rules at http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html, and after several iteration ended up with
  permission java.io.FilePermission "/var/log/alfresco/*", "read,write,delete";
  permission java.io.FilePermission "/var/lib/alfresco/*", "read,write,execute";
  permission java.io.FilePermission "/var/lib/alfresco/alf_data/-", "read,write,delete,execute";
  permission java.io.FilePermission "/var/lib/alfresco/tmp/-", "read,write,delete,execute";‍‍‍‍
as {trailing -} syntax apparently expands to both named directory, all files in it, all its subdirectories and all files in them.

I was too hasty ops: Apparently dir/- does not expand to cover access to dir itself. Plus I missed a complaint about inability to execute imageMagic. So the final set of java.io.FilePermissions is

  permission java.io.FilePermission "/var/log/alfresco/*", "read,write,delete";
  permission java.io.FilePermission "/var/lib/alfresco/*", "read,write,execute";
  permission java.io.FilePermission "/var/lib/alfresco/alf_data/-", "read,write,delete,execute";
  permission java.io.FilePermission "/var/lib/alfresco/tmp/-", "read,write,delete,execute";
  permission java.io.FilePermission "/var/lib/alfresco/alf_data", "read,write,execute";
  permission java.io.FilePermission "/var/lib/alfresco/tmp", "read,write,execute";
  permission java.io.FilePermission "/var/lib/tomcat5/temp/-", "read,write,delete,execute";
  permission java.io.FilePermission "/var/lib/tomcat5/temp", "read,write,execute";
  permission java.io.FilePermission "<<ALL FILES>>", "execute";‍‍‍‍‍‍‍‍‍

But I am still running into enormous list of: "Instantiation of bean failed; nested exception java.lang.NoClassDefFoundError: Could not initialize class …"

Re: Alfresco war on ubuntu 7.10

cleseach — Fri, 25 Apr 2008 15:13:50 GMT

Quick and dirty fix :

Edit your /etc/init.d/tomcat5.5 script to set


TOMCAT_SECURITY=no
‍‍‍

In the same file, find a line containing "-exec rm -f" and replace the quoted text by


-exec rm -rf
‍‍‍

If that works for me, that should work for you.

Regards,
Charles