Consultor Eletrônico



Kbase P31662: Security role warning when starting Tomcat
Autor   Progress Software Corporation - Progress
Acesso   Público
Publicação   1/27/2009
Status: Verified

SYMPTOM(s):

Security role warning when starting Tomcat

WARNING: Security role name PSCAdmin used in an <auth-constraint> without being
defined in a <security-role>

WARNING: Security role name PSCOper used in an <auth-constraint> without being
defined in a <security-role>

FACT(s) (Environment):

OpenEdge 10.0x
All Supported Operating Systems

CAUSE:

Security is enabled in the ubroker.properties, but is not properly configured.

FIX:

Declare which roles this application uses by adding this to the the web.xml located in [Tomcat]\webapps\wsa\WEB-INF.
After the </login-config> element add the following:

<!-- Security roles referenced by this web application -->
<security-role>
<role-name>PSCAdmin</role-name>
</security-role>
<security-role>
<role-name>PSCOper</role-name>
</security-role>
- OR -
Disable security by following these steps:

1.) Check that the following entries are disabled in the ubroker.properties file:
adminAuth=0
webServerAuth=0

2.) Disable security constraint defined in the web.xml file by commenting out the following section:

<!--
<security-constraint>
<web-resource-collection>
<web-resource-name>wsa1 Admin</web-resource-name>
<url-pattern>/wsa1/admin/*</url-pattern>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>PSCAdmin</role-name>
<role-name>PSCOper</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
-->