EHC ❯ Issue with ehcache 1.7, logging and Java security
-
Bug
-
Status: Closed
-
2 Major
-
Resolution: Fixed
-
ehcache,ehcache-core
-
-
mallen
-
Reporter: lima
-
November 12, 2009
-
0
-
Watchers: 2
-
July 27, 2012
-
October 12, 2010
Description
A client reported an issue with EHCache 1.7. Looks like it has something to do with Java security and logging 1.7 is using. There was no problem when they were using EHCache 1.5. After they replaced the jar, the problem shows up.
Hi Li,
So far, I was unable to replicate the problem on a standalone application. In other words, the problem persists in the context of Escenic enterprise application which is our Presentation Tier.
However, I conducted more experiments in Escenic environment.
-
To answer your question: the actual placement of ehcache-core-1.7.0.jar file may be irrelevant or may be not. But, for the presentation tier, ehcache is being used for those tasks that necessitate its placement into the shared lib directory - there is simply no other way around. OK, let us forget about this for now.
-
One of web applications that comprise Escenic enterprise archive is “Escenic Content Studio”. This is in fact a rich client application being launched using Java Web Start technology. Details of its implementation and source code won’t be disclosed to us. However, based on my observations, the application uses its own security manager which is kind of restrictive and ignores java.security.policy setting which refers to the file granting all possible permissions:
grant { permission java.security.AllPermission; };
As a result, an exception is thrown on the first attempt to access ehcache in the static initializer of com.tgam.escenic.util.CacheUtils class (I wrote it).
java.lang.ExceptionInInitializerError
at com.tgam.escenic.util.CacheUtils.
Obviously, the problem arises on attempt to log which is made by net.sf.ehcache.CacheManager.
There was no such problem in the previous version of ehcache that relied on commons-logging.
I can try and ask Escenic tech support as to whether there is an undocumented way to set up permissions for their Content Studio application.
Probably there is a way to switch ehcache logging back to jakarta commons or use log4j - which are obviously less restrictive in terms of security permissions. Actually, based on what I saw on http://ehcache.org/documentation/logging.html , it should be easy since, starting with version 1.7.1, you switched over to slf4j which is supposed to plug in preferred loggin mechanism fairly easily. But I could not locate ehcache 1.7.1 on the download page . Your advice/help would be appreciated.
Just want to stress it again: transition to ehcache 1.7 on Presentation Tier is not critical for the purposes of the project we are working on now, It would be a showstopper in the future when we’ll move on with either merging PT and MT or replacing RMI/REST as communication medium between tiers by Terracotta.
Thanks,
Igor.
Comments
Alex Miller 2009-11-17
gluck 2010-10-12
Ehcache 1.7.1 and higher uses SLF4J. You can plug your own logger in under this. So the java.util.logging problem will be resolved by switching in another logger.
Of interest is that Ehcache 1.7.1 uses SLF4J for logging instead of directly using the java.util.logging framework. With SLF4J you can choose to use another logger and that might avoid this issue entirely.