AccessControlException: unable to parse web.xml

[urbane]

Dear helpful people,

I'm trying to install Alfresco 3.2 on an existing tomcat6 on Ubuntu 9.04, with a WAR file.  The servlet does not load.  In catalina.err I see a large number of AccessControlException errors marked "SEVERE," starting with this:

SEVERE: Unable to parse web.xml
java.security.AccessControlException: access denied (java.net.SocketPermission java.sun.com:80 connect,resolve)

Why the XML parser wants to open a connection to sun.com is rather beyond me, but I am not a Tomcat6 expert.

Further down, I see:

SEVERE: Context initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'repository-properties' defined in class path resource [alfresco/core-services-context.xml]: Cannot resolve reference to bean 'global-properties' while setting bean property 'properties'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'global-properties' defined in class path resource [alfresco/core-services-context.xml]: Invocation of init method failed; nested exception is java.security.AccessControlException: access denied (java.util.PropertyPermission hibernate.default_schema read)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'global-properties' defined in class path resource [alfresco/core-services-context.xml]: Invocation of init method failed; nested exception is java.security.AccessControlException: access denied (java.util.PropertyPermission hibernate.default_schema read)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission hibernate.default_schema read)

If anyone recognizes these messages, I'm quite curious.  Note that I can fix all of this by turning off TOMCAT6_SECURITY - which I don't want to do, obviously.

Best,
Curtis

[urbane]

After considerable googling, the answer seems to be that tomcat6 on Ubuntu is broken as installed.  Namely, it turns the security manager on, but does not actually have appropriate policy settings to make all the built-in libraries work.  Nice work, Ubuntu guys!  Remind me to introduce my soldering iron to your duodenum sometime.

So if you have this problem, unless you are installing some seriously dodgy WARs (Alfresco obviously not included), the best answer seems to indeed be: TOMCAT_SECURITY=no.  At least as far as I can tell.