Problems enabling SAF Security

[Brian Robertson]

I am running JZOS 1.2.1 and tomcat 5.5 on zOS 1.4. It worked successfully until I implemented all the SAF changes.


Nov 11, 2005 3:34:01 PM org.apache.catalina.mbeans.GlobalResourcesLifecycleListener createMBeans
SEVERE: Exception processing Global JNDI Resources
javax.naming.NamingException: Cannot create resource instance
at org.apache.naming.factory.ResourceFactory.getObjectInstance(ResourceFactory.java:132)
at javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:313)
at org.apache.naming.NamingContext.lookup(NamingContext.java:792)
at org.apache.naming.NamingContext.lookup(NamingContext.java:152)
at org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.createMBeans(GlobalResourcesLifecycleListener.java:138)
at org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.createMBeans(GlobalResourcesLifecycleListener.java:108)
at org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.lifecycleEvent(GlobalResourcesLifecycleListener.java:80)
at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:673)
at org.apache.catalina.startup.Catalina.start(Catalina.java:536)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:79)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java(Compiled Code))
at java.lang.reflect.Method.invoke(Method.java:386)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:275)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)

I have double checked every step of the procedure and everything seems to be defined as documented on your docs/saf.html page.

Secondly, what ROLES should be defined to SAF for Apache? I only defined one so far called "admin". I have supported RACF for many years and was familiar with all of the steps you described.

extract from server.xml
<Listener className="org.apache.catalina.mbeans.ServerLifecycleListener"
debug="0" descriptors="/com/dovetail/jzos/tomcat/mbean-descriptors.xml"/>

<Resource name="UserDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="JZOS Role database. NOTE: users defined via RACF">
</Resource>
<ResourceParams name="UserDatabase">
<parameter>
<name>factory</name>
<value>com.dovetail.jzos.tomcat.JzosRoleDatabaseFactory</value>
</parameter>
<parameter>
<name>pathname</name>
<value>conf/jzos-roles.xml</value>
</parameter>
</ResourceParams>

[Guest]

We havent done much testing with the Tomcat 5.5 stream. We plan on working on this very soon, but for now, please use the latest stable 5.0.x release. It should work fine.

Thanks,
--Steve