Tomcat 6 on Windows - Enabling Security Manager
Results 1 to 2 of 2

Thread: Tomcat 6 on Windows - Enabling Security Manager

  1. #1
    Member
    Join Date
    Aug 2005
    Posts
    98

    Tomcat 6 on Windows - Enabling Security Manager

    Hi All,

    I am writing a Tomcat 6 on Windows hardening guide at the moment and I am looking at the process for enabling the security manager. On the Tomcat 6 documentation website http://tomcat.apache.org/tomcat-6.0-...ger-howto.html it says that on Windows all you need to do is run the following command:
    %CATALINA_HOME%\bin\catalina start -security

    Unfortunately though when I install Tomcat there is no such program as "catalina" in the bin directory so I can't run it like that. Within bin there is only bootstrap.jar, tomcat6.exe, tomcat6w.exe and tomcat-juli.jar

    Using the Tomcat monitor application there is a tab for startup and there is an input box for arguments that by default contains 'start' but if I try to add ' -security' to this argument text box the service fails to start at all.

    Can anyone help in advising me how you get tomcat 6.0.18 to start with a security manager. Note that tomcat was installed from the Tomcat Windows Service installer and it is running Windows Server 2003 SP2.

    Any help is appreciated, web searching has revealed nothing and I have been getting very frustrated :-)

    Cheers

  2. #2
    Member
    Join Date
    Aug 2005
    Posts
    98

    The solution

    Thanks to some help from the tomcat-users mailing list the solution to my problem was as follows:

    Stop all Tomcat instances/service. Open the "tomcat monitor" application and open the "configure" pop-up/window. Or open the "Configure Tomcat" application. On this window there is a "Java" tab, go there.

    Within the Java tab there is a text box for Java Options, in this text box append the following:
    -Djava.security.manager
    -Djava.security.policy=<path_to_security_policy_file>

    The standard Tomcat policy is located in Tomcat's conf/catalina.policy file, but you're free to specify whatever location you are using.

    Cheers

Similar Threads

  1. cmd.exe boxes flashing around screen on startup
    By sphanlon in forum Spyware / Adware
    Replies: 11
    Last Post: April 1st, 2013, 09:05 PM
  2. Any requests?
    By gore in forum Operating Systems
    Replies: 11
    Last Post: August 8th, 2004, 06:21 AM
  3. suse is crap on finding cdrom
    By rajunpl in forum Operating Systems
    Replies: 43
    Last Post: July 1st, 2004, 08:30 AM
  4. Windows XP Tips
    By Nokia in forum Tips and Tricks
    Replies: 4
    Last Post: June 18th, 2004, 05:24 PM
  5. OSs: What're they all about?
    By Jehnny in forum Other Tutorials Forum
    Replies: 1
    Last Post: November 15th, 2003, 02:49 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •