SAF Security with Tomcat 6 and Java 7.0

Issues and Questions related to running Apache Tomcat on z/OS
Post Reply
c903353
Posts: 3
Joined: Fri Mar 09, 2012 5:21 am

SAF Security with Tomcat 6 and Java 7.0

Post by c903353 »

We have Tomcat downloaded from Apache and running for many years. Now I am trying to activate SAF security.
Tomcat release is 6.0.32, Java is 7.0, z/OS release is V1R13.
I have downloaded your T:Z Quickstart and copied the zos-tomcat.jar to the lib directory, also downloaded the SAF zip file and copied the saf_realm.jar to the lib directroy and created a saf-roles.xml
After these modifications to the server.xml:
<Listener className="com.dovetail.zos.tomcat.SafLifecycleListener" />
<Resource name="SafRoleDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="z/OS SAF Role Database"
factory="com.dovetail.zos.tomcat.SafRoleDatabaseFactory"
pathname="conf/saf-roles.xml"
readonly="true" />
<Realm className="com.dovetail.zos.tomcat.SafRealm"
resourceName="SafRoleDatabase"/>
I get the following message at Tomcat startup:
WARNING: ÝSetPropertiesRule¨{Server/Service/Engine/Realm} Setting property 'resourceName' to 'SafRoleDatabase' did not find a matching property.
I cannot figure out what's still wrong. Is there anything missing?
dovetail
Site Admin
Posts: 2022
Joined: Thu Jul 29, 2004 12:12 pm

Re: SAF Security with Tomcat 6 and Java 7.0

Post by dovetail »

I would suggest that you first try to get SAF security working in the distribution of Tomcat 6 that is included in T:Z, rather than trying to copy piecemeal into another distribution.
c903353
Posts: 3
Joined: Fri Mar 09, 2012 5:21 am

Re: SAF Security with Tomcat 6 and Java 7.0

Post by c903353 »

Yes, your T:Z distribution is ok. You don't have the saf_realm.jar in your distribution.
After removing saf_realm.jar from our Tomcat installation, everything works. Looks like the zos-tomcat.jar is doing the job.
Thank you.
dovetail
Site Admin
Posts: 2022
Joined: Thu Jul 29, 2004 12:12 pm

Re: SAF Security with Tomcat 6 and Java 7.0

Post by dovetail »

Yes, that is correct: zos-tomcat.jar includes the new SAF realm for Java 6 (package com.dovetail.zos.tomcat).
Post Reply