java.security.AccessControlException:访问tomcat上的拒绝异常

时间:2012-01-07 12:56:07

标签: java networking

我的程序在本地桌面上工作正常但是当我在域上部署它并运行相同的程序时,它显示以下异常。

java.security.AccessControlException: access denied (java.net.SocketPermission www.abc.com:80 connect,resolve)

at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)

at java.security.AccessController.checkPermission(AccessController.java:546)

at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)

at java.lang.SecurityManager.checkConnect(SecurityManager.java:1034)

at sun.net.www.http.HttpClient.openServer(HttpClient.java:527)

at sun.net.www.http.HttpClient.(HttpClient.java:233)

at sun.net.www.http.HttpClient.New(HttpClient.java:306)

at sun.net.www.http.HttpClient.New(HttpClient.java:323)

at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:852)

at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:793)

at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:718)

at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:896)

at pnr.PnrServlet.processRequest(PnrServlet.java:46)

at pnr.PnrServlet.doGet(PnrServlet.java:81)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:690)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:597)

at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)

at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)

at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:283)

at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:56)

at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:189)

at java.security.AccessController.doPrivileged(Native Method)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:185)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:263)

at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)

at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:584)

at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)

at java.lang.Thread.run(Thread.java:619)

我的程序是使用java.net包连接其他网站 并显示相关数据 我在apache tomcat上运行此代码 请帮我。

1 个答案:

答案 0 :(得分:2)

本地计算机上的Tomcat可能在未启用安全性的情况下运行。在实际的服务器上,情况并非如此,安全管理器处于活动状态。可以为您的应用程序授予所需的SocketPermission权限,例如将以下内容放入Tomcat安全策略文件中:

grant codeBase "file:${catalina.base}/webapps/your_app_root/-" {
  permission java.net.SocketPermission "www.abc.com:80", "connect";
};

这应该进入策略文件,该文件通常位于conf/catalina.policy下,但您的安装可能会有所不同。您应该使用正确的URI替换file: URI。

请在此处阅读有关Tomcat安全管理器的详细文档:http://tomcat.apache.org/tomcat-6.0-doc/security-manager-howto.html