Now I am atwhich is rather strange, as this class seem to be defined in webapps/alfresco/WEB-INF/lib/alfresco-repository.jar, but there is no alfresco-repository.jar in /opt/alfresco/ tree created by untarring alfresco-community-tomcat!java.lang.NoClassDefFoundError: Could not initialize class org.alfresco.repo.security.authentication.MD4PasswordEncoderImpl
D'oh! Of course it is not in /opt/alfresco/ tree created by untarring alfresco-community-tomcat - it is created as a part of deployment, and I never started it!
ops:
I looked up match rules at http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html, and after several iteration ended up withI was too hastyas {trailing -} syntax apparently expands to both named directory, all files in it, all its subdirectories and all files in them.permission java.io.FilePermission "/var/log/alfresco/*", "read,write,delete";
permission java.io.FilePermission "/var/lib/alfresco/*", "read,write,execute";
permission java.io.FilePermission "/var/lib/alfresco/alf_data/-", "read,write,delete,execute";
permission java.io.FilePermission "/var/lib/alfresco/tmp/-", "read,write,delete,execute";
ops: Apparently dir/- does not expand to cover access to dir itself. Plus I missed a complaint about inability to execute imageMagic. So the final set of java.io.FilePermissions is permission java.io.FilePermission "/var/log/alfresco/*", "read,write,delete";
permission java.io.FilePermission "/var/lib/alfresco/*", "read,write,execute";
permission java.io.FilePermission "/var/lib/alfresco/alf_data/-", "read,write,delete,execute";
permission java.io.FilePermission "/var/lib/alfresco/tmp/-", "read,write,delete,execute";
permission java.io.FilePermission "/var/lib/alfresco/alf_data", "read,write,execute";
permission java.io.FilePermission "/var/lib/alfresco/tmp", "read,write,execute";
permission java.io.FilePermission "/var/lib/tomcat5/temp/-", "read,write,delete,execute";
permission java.io.FilePermission "/var/lib/tomcat5/temp", "read,write,execute";
permission java.io.FilePermission "<<ALL FILES>>", "execute";
