14

How can i install Apache web server and Apache tomcat to avoid get errors like this:

java.io.FileNotFoundException: /usr/local/apache-tomcat-7.0.5/work/Catalina/localhost/_/SESSIONS.ser (Permission denied)

in /usr/local/apache-tomcat-7.0.5/logs/catalina.out

I think I should do something for Apache user, because when I chmod 777 -R ./ on tomcat folder all errors disappear.

3
  • 1
    chown the SESSSIONS.ser to Apache's user/group and/or set it to mode 666
    – Marc B
    Jan 12, 2011 at 17:50
  • is this issue limited to sessions.rer? if I chown just this file, is it possible I get same error tonight on other files? I think I should do this on /usr/local/apache-tomcat-7.0.5 directory, but I'm not sure this is limited to /usr/local/apache-tomcat-7.0.5. by this chown or chmod 666 what will happend to my server security? Jan 14, 2011 at 8:58
  • Seems like this question should be on sister site ServerFault.com rather than here on Stack Overflow as it does not involve a specific programming problem. Jul 25, 2019 at 20:05

3 Answers 3

24
$ chmod -R 777 webapps temp logs work conf

Is VERY dangerous, do not do it, did I write "not do it" ? DO NOT DO IT! Guess where your tomcat-users.xml is with your usernames and plain-text passwords ?

Giving world read-write-execute anywhere on UNIX except /tmp (and even then, in prod, NEVER do that either) is plain stupid. And, it makes your first line, chown -R tomcat6 completely useless.

make sure tomcat runs as tomcat7 (it is tomcat6 for tomcat 6) and simply do:

$ cd $TOMCAT_BASE
$ chown -R tomcat7:tomcat7 webapps temp logs work conf
$ chmod -R 660 webapps temp logs work conf

[EDIT] changed 770 to 660 following comment, because the files in question need not be executed.

If you want to be able to read, write, or execute stuff there, add yourself to the tomcat7 group.

2
  • 770 makes configuration files executable Apr 19, 2019 at 11:26
  • but it would make a directory unaccessible Apr 24, 2019 at 12:43
6

Can't vouch for the security of doing so, but

$ cd /usr/local/tomcat/ #or /usr/shared/tomcat6, whatever your $TOMCAT_BASE dir
$ chown -R tomcat6 webapps temp logs work conf
$ chmod -R 777 webapps temp logs work conf

works a treat for these situations.

My tomcat install was borked with permission errors, but throwing open the gates thusly fixed everything.

2
  • 20
    Setting configuration files to 777 = FAIL Jul 2, 2014 at 0:13
  • @DrStrangepork - agreed. Don't do this. It might fix your immediate problem, but it's a huge security fail, akin to smashing your own windows because you locked yourself out of the house.
    – candu
    Nov 21, 2014 at 21:12
0

Ran into a similar situation like this with an older Tomcat-6 implementation...

...
SEVERE: Error deploying web application directory host-manager
java.io.FileNotFoundException: /opt/tomcat-6/conf/Catalina/localhost/host-manager.xml (Permission denied)
...

And, the webapp XMLs were all there and the ownership and permissions were all "tomcat:tomcat" and "644".

For me, the solution was to set the overall permissions to what Tomcat prefers, namely "0755".

And, as a note for the security-conscious, the server.xml for that implementation is using a JDBC Realm for authentication, so we don't even use tomcat-users.xml. So, it is the default file that comes with the installation and even commented out the default user accounts within it (e.g. "tomcat" and "manager"). I know in Tomcat-7, the accounts in tomcat-users.xml are commented by default.

HTH.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.