Hi Jan, I fixed the order of the elements in the sun-web.xml file,
tested again... and got the same exceptions (it's still trying to save
session state across restarts).
Ken
Jan Luehe wrote:
>Hi Ken,
>
>Ken Paulsen wrote On 02/13/06 15:17,:
>
>
>>Hi Jan,
>>
>>I tried this but was not successful. The build I am using is not the
>>most current... how long has this feature been available? The
>>sun-web.xml did not complain when I added your suggestion, but it didn't
>>seem to help. Here's the sun-web.xml file I used:
>>
>><?xml version="1.0" encoding="UTF-8"?>
>>
>><!DOCTYPE sun-web-app PUBLIC '-//Sun Microsystems, Inc.//DTD Sun ONE
>>Application Server 7.0 Servlet 2.3//EN'
>>'http://www.sun.com/software/sunone/appserver/dtds/sun-web-app_2_3-0.dtd'>
>>
>><sun-web-app>
>> <security-role-mapping>
>> <role-name>admin</role-name>
>> <principal-name>admin</principal-name>
>> <group-name>asadmin</group-name>
>> </security-role-mapping>
>> <locale-charset-info default-locale="en">
>> <parameter-encoding default-charset="UTF-8" />
>> </locale-charset-info>
>>* <session-config>
>> <session-manager>
>> <property name="sessionFilename" value="" />
>> </session-manager>
>> </session-config>*
>> <jsp-config>
>> <property name="usePrecompiled" value="false" />
>> </jsp-config>
>></sun-web-app>
>>
>>
>
>hmm, the above sun-web.xml violates the sun-web-app_2_3-0.dtd,
>which requires this order of sun-web-app sub-elements:
>
><!ELEMENT sun-web-app
> (security-role-mapping*, servlet*, session-config?,
> resource-env-ref*, resource-ref*,
> ejb-ref*, cache?, class-loader?,
> jsp-config?, locale-charset-info?, property*)>
>
>Notice how <session-config> must be specified before
><locale-charset-info>, but that's not the case in your
>sun-web.xml.
>
>
>Jan
>
>
>
>
>
>>I noticed the following 2 exceptions:
>>
>>On shutdown:
>>
>>[#|2006-02-13T15:06:36.977-0800|INFO|sun-appserver-pe9.0|org.apache.catalina.session.ManagerBase|_ThreadID=15;_ThreadName=RMI
>>TCP Connection(9)-127.0.0.1;|Cannot serialize session attribute
>>PropertiesTableModel for session 65a90691b6821513c6f6333a828d
>>java.io.NotSerializableException: java.util.PropertyResourceBundle
>> at
>>java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1075)
>> at
>>java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1369)
>> at
>>java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1341)
>> at
>>java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1284)
>> at
>>java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1073)
>> at
>>java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:291)
>> at
>>org.apache.catalina.session.StandardSession.writeObject(StandardSession.java:1813)
>> at
>>org.apache.catalina.session.StandardSession.writeObjectData(StandardSession.java:1021)
>> at
>>org.apache.catalina.session.StandardManager.doUnload(StandardManager.java:549)
>> at
>>org.apache.catalina.session.StandardManager.access$100(StandardManager.java:75)
>> at
>>org.apache.catalina.session.StandardManager$PrivilegedDoUnload.run(StandardManager.java:99)
>> at java.security.AccessController.doPrivileged(Native Method)
>> at
>>org.apache.catalina.session.StandardManager.unload(StandardManager.java:477)
>> at
>>org.apache.catalina.session.StandardManager.stop(StandardManager.java:717)
>> at
>>org.apache.catalina.core.StandardContext.stop(StandardContext.java:4864)
>> at
>>org.apache.catalina.core.ContainerBase.stop(ContainerBase.java:1149)
>>...
>>
>>On Startup:
>>
>>[#|2006-02-13T15:06:56.774-0800|SEVERE|sun-appserver-pe9.0|org.apache.catalina.session.ManagerBase|_ThreadID=10;_ThreadName=main;_RequestID=a5fb571c-14a6-49f1-ba75-2b6b0292ce8c;|Exception
>>loading sessions from persistent storage
>>java.lang.NullPointerException
>> at
>>com.sun.web.ui.model.CCManageChildrenModel.readObject(CCManageChildrenModel.java:545)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>> at
>>sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>> at
>>sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>> at java.lang.reflect.Method.invoke(Method.java:585)
>> at
>>java.io.ObjectStreamClass.invokeReadObject(ObjectStreamClass.java:919)
>> at
>>java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1813)
>> at
>>java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1713)
>>...
>>
>>Here's how to reproduce the exception:
>>
>>1) Start the server
>>2) Login to admin GUI (i.e. http://localhost:4848 ; enter login/pass)
>>3) Choose the following from the tree: Resources -> JDBC -> Connection Pools
>>4) Click "New..."
>>5) Fill in the first form and click next (i.e. Name: "abc"; pick 1st
>>Resource Type and first DB Vendor)
>>6) Stop / Start server and watch log file... you'll see the 2 stack
>>traces above.
>>
>>Any suggestions?
>>
>>Thanks,
>>
>>Ken
>>
>>Jan Luehe wrote:
>>
>>
>>
>>>Ken,
>>>
>>>Ken Paulsen wrote On 02/13/06 13:38,:
>>>
>>>
>>>
>>>
>>>>Amy,
>>>>
>>>>You mentioned seeing the exception:
>>>>
>>>>[#|2006-02-06T16:12:36.390-0800|SEVERE|sun-appserver-pe9.0|org.apache.catalina.session.ManagerBase|_ThreadID=10;_ThreadName=main;_RequestID=c44ca3a1-bc4e-4736-82db-8d1cadfd3bc1;|Exception
>>>>loading sessions from persistent storage
>>>>java.lang.NullPointerException
>>>> at
>>>>com.sun.web.ui.model.CCManageChildrenModel.readObject(CCManageChildrenModel.java:545)
>>>>
>>>>
>>>>This NPE (which happens during deserialization and I suspect causes the
>>>>NotSerializableException) happens in Lockhart code. See the following
>>>>bug for details: 6330859. I haven't seen this in a while... but that
>>>>may be because I haven't turned on "FINER" lately.
>>>>
>>>>Anyway, this bug didn't used to show up because our server didn't use to
>>>>Serialize session data across restarts. Is there any way to turn off
>>>>this feature for a specific web app? If so, that would be the easiest
>>>>way to remove this error (which occurs in the admin GUI app).
>>>>
>>>>
>>>>
>>>>
>>>you may prevent memory-based sessions from being persisted
>>>across shutdown/restart by specifying an empty "sessionFilename"
>>>manager property in your webapp's sun-web.xml, as follows:
>>>
>>> <sun-web-app>
>>> <session-config>
>>> <session-manager>
>>> <property name="sessionFilename" value=""/>
>>> </session-manager>
>>> </session-config>
>>> </sun-web-app>
>>>
>>>
>>>Jan
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>>Thanks,
>>>>
>>>>Ken
>>>>
>>>>Amy Roh wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>Hi,
>>>>>
>>>>>I'm getting the same Runtime exception when I try to logon to roller
>>>>>app. Only warning log (after changing to log level to "FINE" is "null
>>>>>Subject used in SecurityContext construction". What can I do to get
>>>>>more info on this to debug further?
>>>>>Thanks,
>>>>>Amy
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|WARNING|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|SEC5052:
>>>>>null Subject used in SecurityContext construction.|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=setPolicyContext;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>Policy Context ID was: roller__roller|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=checkPermission;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>Generating a protection domain for Permission check.|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=checkPermission;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>Checking with Principal : nonlogin-principal|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=checkPermission;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>Codesource with Web URL: file:/roller__roller|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=checkPermission;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>Checking Web Permission with Principals : nonlogin-principal|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=checkPermission;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>Web Permission = (javax.security.jacc.WebResourcePermission
>>>>>/j_security_check POST)|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.921-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.enterprise.security.SecurityContext;MethodName=setCurrent;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|permission
>>>>>check done to set SecurityContext|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.937-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=hasResourcePermission;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>hasResource isGranted: true|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.937-0800|FINE|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;ClassName=com.sun.web.security.WebSecurityManager;MethodName=hasResourcePermission;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|[Web-Security]
>>>>>hasResource perm: (javax.security.jacc.WebResourcePermission
>>>>>/j_security_check POST)|#]
>>>>>
>>>>>
>>>>>
>>>>>[#|2006-02-13T11:02:03.937-0800|SEVERE|sun-appserver-pe9.0|javax.enterprise.system.container.web|_ThreadID=15;_ThreadName=httpWorkerThread-7777-0;_RequestID=e4c9c389-cb4b-482d-b714-fe788648296d;|StandardWrapperValve[default]:
>>>>>Servlet.service() for servlet default threw exception
>>>>>
>>>>>java.lang.RuntimeException: WEB5003: Exception in handleAfterEvent.
>>>>>
>>>>>
>>>>>
>>>>>Amy Roh wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Thanks. Changing to FINE logging, I'm finding the problem boils down
>>>>>>to o.a.c.realm.GenericPrincipal NotSerializableException. I've seen
>>>>>>similar postings on tomcat mailing lists. I'll look into this more
>>>>>>and let you know my findings.
>>>>>>
>>>>>>[#|2006-02-06T16:12:36.390-0800|SEVERE|sun-appserver-pe9.0|org.apache.catalina.session.ManagerBase|_ThreadID=10;_ThreadName=main;_RequestID=c44ca3a1-bc4e-4736-82db-8d1cadfd3bc1;|Exception
>>>>>>loading sessions from persistent storage
>>>>>>java.lang.NullPointerException
>>>>>> at
>>>>>>com.sun.web.ui.model.CCManageChildrenModel.readObject(CCManageChildrenModel.java:545)
>>>>>>
>>>>>>
>>>>>>[#|2006-02-06T16:12:43.515-0800|SEVERE|sun-appserver-pe9.0|org.apache.catalina.session.ManagerBase|_ThreadID=10;_ThreadName=main;_RequestID=c44ca3a1-bc4e-4736-82db-8d1cadfd3bc1;|IOException
>>>>>>while loading persisted sessions: java.io.WriteAbortedException:
>>>>>>writing aborted; java.io.NotSerializableException:
>>>>>>org.apache.catalina.realm.GenericPrincipal
>>>>>>java.io.WriteAbortedException: writing aborted;
>>>>>>java.io.NotSerializableException:
>>>>>>org.apache.catalina.realm.GenericPrincipal
>>>>>>
>>>>>>Vince.Kraemer_at_Sun.COM wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>you may want to follow the advice Jan gave me this morning... see
>>>>>>>
>>>>>>>https://glassfish.dev.java.net/servlets/ReadMsg?list=users&msgNo=122
>>>>>>>
>>>>>>>It seemed to help me find out more about what is 'going wrong' with
>>>>>>>my app which uses acecgi for security...
>>>>>>>
>>>>>>>vbk
>>>>>>>
>>>>>>>
>>>>>>>---------------------------------------------------------------------
>>>>>>>To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>>>>>>For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>---------------------------------------------------------------------
>>>>>>To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>>>>>For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>---------------------------------------------------------------------
>>>>>To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>>>>For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>---------------------------------------------------------------------
>>>>To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>>>For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>>
>>>>
>>>>
>>>>
>>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>>For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>
>>>
>>>
>>>
>>>
>
>
>