NonStop Servlets for JavaServer Pages (NSJSP) 6.1 System Administrator's Guide

Security Considerations
NonStop Servlets for JavaServer Pages (NSJSP) 6.1 System Administrator’s Guide—596210-006
8-41
Troubleshooting the Java Security Manager
Troubleshooting the Java Security Manager
The security manager can be configured to write debug logs by using the
java.security.debug property. This can be useful in identifying the call and
permission that caused a security exception from being thrown. All logs are written to
the STDOUT file. By default, the file referenced by the STDOUT server class attribute is
located in the <NSJSP_HOME>/logs directory. For more information on the
java.security.debug property options, see
http://java.sun.com/javase/6/webnotes/trouble/TSG-VM/html/envvars.html.
In addition to these options, the value all prints a large amount of information (the
size of which can grow to several MBs). HP recommends that you use the
access,failure value. Following is a sample definition:
-Djava.security.debug=access,failure
Additionally, printing too many log messages may result in slower NSJSP startup time.
Example 8-11 shows how to set the Java Security Manager debug information in the
servlet.config file.
Manager Web Application and NSJSP Manager
Security
NSJSP provides several Web Applications for administering and monitoring purposes.
The Admin Web application in NSJSP enables you to administer container objects and
manage resources, such as users and roles. The following Manager Web applications
in NSJSP enable you to manage web applications in an NSJSP deployment:

Manager Web Application

NSJSP Manager
Example 8-11. Setting the Java Security Debug Information
Arglist -Xmx64m -Xss128k -Xnoclassgc \
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager \
-Djava.util.logging.config.file=$env(NSJSP_HOME)/conf/logging.properties
\
-Djavax.management.builder.initial=com.tandem.servlet.jmx.NSJSPMBeanServ
erBuilder \
-Djava.security.debug=access,failure \
$NSJSP_SECMGR \
$NSJSP_SECMGR_POLICY \
$NSJSP_JAAS_CONFIG \
-Dcatalina.home=$env(NSJSP_HOME) \
-Dcatalina.base=$env(NSJSP_HOME) \
-Djava.io.tmpdir=$env(NSJSP_HOME)/temp \
org.apache.catalina.startup.Bootstrap start