wdk portlets

Does anyone know how to deploying the Documentum Portlets on glassfish ?

It seems like dm_bof_registry want to have write permission on /System folder

This is the error message::

WARN [pool-1-thread-4] com.documentum.fc.client.security.internal.RegistrationMgr - [DFC_SECURITY_GR_PUBLICATION_FAILED] Publication of DFC instance with global registry failed
DfException:: THREAD: pool-1-thread-4; MSG: [DM_SYSOBJECT_E_LINK_PERMIT2]error: "Linking or unlinking to the folder '/System' failed on sysobject '080030398002fef3'. WRITE permit is required on the folder, when using folder security."; ERRORCODE: 100;

NEXT: null
    at com.documentum.fc.client.impl.docbase.DocbaseExceptionMapper.newException(DocbaseExceptionMapper.java:57)
    at com.documentum.fc.client.impl.connection.docbase.MessageEntry.getException(MessageEntry.java:39)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseMessageManager.getException(DocbaseMessageManager.java:137)
    at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.checkForMessages(NetwiseDocbaseRpcClient.java:305)
    at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.applyForInt(NetwiseDocbaseRpcClient.java:576)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection$6.evaluate(DocbaseConnection.java:1200)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.evaluateRpc(DocbaseConnection.java:1007)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.applyForInt(DocbaseConnection.java:1193)
    at com.documentum.fc.client.impl.docbase.DocbaseApi.parameterizedSave(DocbaseApi.java:766)
    at com.documentum.fc.client.DfSysObject$1.evaluate(DfSysObject.java:353)
    at com.documentum.fc.client.DfSysObject.doSaveImpl(DfSysObject.java:383)
    at com.documentum.fc.client.DfSysObject.doSave(DfSysObject.java:185)
    at com.documentum.fc.client.DfPersistentObject.saveEx(DfPersistentObject.java:899)
    at com.documentum.fc.client.DfPersistentObject.save(DfPersistentObject.java:894)
    at com.documentum.fc.client.privilege.impl.PublicKeyCertificate___PROXY.save(PublicKeyCertificate___PROXY.java)
    at com.documentum.fc.client.security.impl.IpAndRcHelper.fillAndSavePersistentCertificate(IpAndRcHelper.java:107)
    at com.documentum.fc.client.security.impl.IpAndRcHelper.createNewCertificateObjectIfNeeded(IpAndRcHelper.java:369)
    at com.documentum.fc.client.security.impl.DfcIdentityPublisher.createCertificateAndRegistration(DfcIdentityPublisher.java:427)
    at com.documentum.fc.client.security.impl.DfcIdentityPublisher.publish(DfcIdentityPublisher.java:145)
    at com.documentum.fc.client.security.impl.DfcIdentityPublisher.publish(DfcIdentityPublisher.java:102)
    at com.documentum.fc.client.security.internal.RegistrationMgr.register(RegistrationMgr.java:34)
    at com.documentum.fc.impl.RuntimeContext.<clinit>(RuntimeContext.java:191)
    at com.documentum.fc.client.DfClient.<clinit>(DfClient.java:703)
    at com.documentum.com.DfClientX.getLocalClient(DfClientX.java:44)
    at com.documentum.web.env.NotificationManager.contextInitialized(NotificationManager.java:99)
    at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4632)
    at org.apache.catalina.core.StandardContext.start(StandardContext.java:5312)
    at com.sun.enterprise.web.WebModule.start(WebModule.java:353)
    at com.sun.enterprise.web.LifecycleStarter.doRun(LifecycleStarter.java:58)
    at com.sun.appserv.management.util.misc.RunnableBase.runSync(RunnableBase.java:304)
    at com.sun.appserv.management.util.misc.RunnableBase._submit(RunnableBase.java:176)
    at com.sun.appserv.management.util.misc.RunnableBase.submit(RunnableBase.java:192)
    at com.sun.enterprise.web.VirtualServer.startChildren(VirtualServer.java:1742)
    at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1247)
    at org.apache.catalina.core.StandardHost.start(StandardHost.java:971)
    at com.sun.enterprise.web.LifecycleStarter.doRun(LifecycleStarter.java:58)
    at com.sun.appserv.management.util.misc.RunnableBase.runSync(RunnableBase.java:304)
    at com.sun.appserv.management.util.misc.RunnableBase.run(RunnableBase.java:341)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    at java.util.concurrent.FutureTask.run(FutureTask.java:138)
    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
    at java.lang.Thread.run(Thread.java:619)

looking forward for ur reply, thanks

Find more posts tagged with

Comments

RaviJha

Hi,

I dont remember hearing any complaints about Documentum webapps deployment on Glassfish.

You are seeing two issues:

1. DFC_SECURITY_GR_PUBLICATION_FAILED means the DFC instance which came up failed to publish its identity to global registry docbase that you have mentioned in the dfc.properties file (generally in WEB-INF/classes directory).

You just need to recheck the credentials of the user indicated for global registry docbase.

It will be something like:

dfc.globalregistry.repository=Global_Repo_name
dfc.globalregistry.username=user_name_in_cleartext
dfc.globalregistry.password=password_in_cleartext

If the user is set to default one - dm_bof_registry, probably you would want to change it a different user (and password) and test. But theoretically using "dm_bof_registry" user which is a "inline user" with just read permission on /System/modules should also be fine.

2. DM_SYSOBJECT_E_LINK_PERMIT2. You see this exception because you have folder security turned on. If the issue doesnt go after the trying suggestion for issue, 1,you will need to check whether toggling folder_security helps. It can be done from IAPI on content server/webtop API tester as follows:

API>fetch,c,docbaseconfig

API> set,c,l,folder_security

SET>F

API>save,c,l

API>reinit,c,server_config_name

If all these dont help, please post the dump of the /System cabinet object and its associated ACL.

Ravi

mdev

Thx so much for ur reply, folder security was turned on, and i also create new user with read permission on /System/modules and change my dfc.properties

but now i have this error :

10:04:01,697 WARN [pool-1-thread-4] com.documentum.fc.client.security.internal.RegistrationMgr - [DFC_SECURITY_GR_PUBLICATION_FAILED] Publication of DFC instance with global registry failed
DfException:: THREAD: pool-1-thread-4; MSG: [DM_DCNFG_E_CLIENTREG_NOT_UNIQUE]error: "Object value ('dfc_computerName.domain_kRaIUa') not unique in field 'object_name'. Conflicts with existing object."; ERRORCODE: 100; NEXT: null
    at com.documentum.fc.client.impl.docbase.DocbaseExceptionMapper.newException(DocbaseExceptionMapper.java:57)
    at com.documentum.fc.client.impl.connection.docbase.MessageEntry.getException(MessageEntry.java:39)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseMessageManager.getException(DocbaseMessageManager.java:137)
    at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.checkForMessages(NetwiseDocbaseRpcClient.java:305)
    at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.applyForInt(NetwiseDocbaseRpcClient.java:576)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection$6.evaluate(DocbaseConnection.java:1200)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.evaluateRpc(DocbaseConnection.java:1007)
    at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.applyForInt(DocbaseConnection.java:1193)
    at com.documentum.fc.client.impl.docbase.DocbaseApi.parameterizedSave(DocbaseApi.java:766)
    at com.documentum.fc.client.DfSysObject$1.evaluate(DfSysObject.java:353)
    at com.documentum.fc.client.DfSysObject.doSaveImpl(DfSysObject.java:383)
    at com.documentum.fc.client.DfSysObject.doSave(DfSysObject.java:185)
    at com.documentum.fc.client.DfPersistentObject.saveEx(DfPersistentObject.java:899)
    at com.documentum.fc.client.DfPersistentObject.save(DfPersistentObject.java:894)
    at com.documentum.fc.client.privilege.impl.ClientRegistration___PROXY.save(ClientRegistration___PROXY.java)
    at com.documentum.fc.client.security.impl.IpAndRcHelper.fillAndSaveClientRegistration(IpAndRcHelper.java:149)
    at com.documentum.fc.client.security.impl.DfcIdentityPublisher.createCertificateAndRegistration(DfcIdentityPublisher.java:433)
    at com.documentum.fc.client.security.impl.DfcIdentityPublisher.publish(DfcIdentityPublisher.java:145)
    at com.documentum.fc.client.security.impl.DfcIdentityPublisher.publish(DfcIdentityPublisher.java:102)
    at com.documentum.fc.client.security.internal.RegistrationMgr.register(RegistrationMgr.java:34)
    at com.documentum.fc.impl.RuntimeContext.<clinit>(RuntimeContext.java:191)
    at com.documentum.fc.client.DfClient.<clinit>(DfClient.java:703)
    at com.documentum.com.DfClientX.getLocalClient(DfClientX.java:44)
    at com.documentum.web.env.NotificationManager.contextInitialized(NotificationManager.java:99)
    at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4632)
    at org.apache.catalina.core.StandardContext.start(StandardContext.java:5312)
    at com.sun.enterprise.web.WebModule.start(WebModule.java:353)
    at com.sun.enterprise.web.LifecycleStarter.doRun(LifecycleStarter.java:58)
    at com.sun.appserv.management.util.misc.RunnableBase.runSync(RunnableBase.java:304)
    at com.sun.appserv.management.util.misc.RunnableBase.run(RunnableBase.java:341)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    at java.util.concurrent.FutureTask.run(FutureTask.java:138)
    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
    at java.lang.Thread.run(Thread.java:619)

RaviJha

Upon re-examining the stack, I think that DFC is getting initialized in privileged mode for some reason.

Do you really need privilege DFC?

If you don't use (or don't know of it ), I would suggest the following setting in dfc.properties:

set

dfc.privilege.enable = false

and restart the appserver.

You can alternatively also set dfc.verify_registration=false

See if it helps.

Ravi

mdev

Hi ravi, thanks again for you reply, you have right, i dont need privilege DFC.. I change dfc.properties with this settings and documentum log seem right (for now ) but now i have one error when i trying to start wdkportlets from glassfish in app server [glassfish] log

[#|2009-07-09T09:25:48.828+0200|SEVERE|sun-appserver2.1|javax.enterprise.system.container.web|_ThreadID=22;_ThreadName=httpSSLWorkerThread-8080-1;_RequestID=3d1eaef4-698a-4ff7-b817-738c1e998f5f;|StandardWrapperValve[jsp]: PWC1406: Servlet.service() for servlet jsp threw exception
com.documentum.web.common.WrapperRuntimeException: Unable to bind environment to the session. Check your app.xml settings.
    at com.documentum.web.common.WrapperRuntimeException.fillInStackTrace(WrapperRuntimeException.java:128)
    at java.lang.Throwable.<init>(Throwable.java:218)
    at java.lang.Exception.<init>(Exception.java:59)
    at java.lang.RuntimeException.<init>(RuntimeException.java:61)
    at com.documentum.web.common.WrapperRuntimeException.<init>(WrapperRuntimeException.java:77)
    at com.documentum.web.common.WrapperRuntimeException.<init>(WrapperRuntimeException.java:54)
    at com.documentum.web.env.EnvironmentService.bindHttpRequest(EnvironmentService.java:103)
    at com.documentum.web.env.WDKController.setBindings(WDKController.java:434)
    at com.documentum.web.env.WDKController.doStartRequest(WDKController.java:158)
    at com.documentum.web.env.WDKController.processRequest(WDKController.java:92)
    at com.documentum.web.env.WDKController.doFilter(WDKController.java:83)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)
    at com.documentum.web.env.PortalRequestFilter.doFilter(PortalRequestFilter.java:92)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:313)
    at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:287)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:218)
    at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:648)
    at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:593)
    at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:94)
    at com.sun.enterprise.web.PESessionLockingStandardPipeline.invoke(PESessionLockingStandardPipeline.java:98)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:222)
    at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:648)
    at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:593)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:587)
    at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:1096)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:166)
    at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:648)
    at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:593)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:587)
    at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:1096)
    at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:288)
    at com.sun.enterprise.web.connector.grizzly.DefaultProcessorTask.invokeAdapter(DefaultProcessorTask.java:647)
    at com.sun.enterprise.web.connector.grizzly.DefaultProcessorTask.doProcess(DefaultProcessorTask.java:579)
    at com.sun.enterprise.web.connector.grizzly.DefaultProcessorTask.process(DefaultProcessorTask.java:831)
    at com.sun.enterprise.web.connector.grizzly.DefaultReadTask.executeProcessorTask(DefaultReadTask.java:341)
    at com.sun.enterprise.web.connector.grizzly.DefaultReadTask.doTask(DefaultReadTask.java:263)
    at com.sun.enterprise.web.connector.grizzly.DefaultReadTask.doTask(DefaultReadTask.java:214)
    at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:265)
    at com.sun.enterprise.web.connector.grizzly.ssl.SSLWorkerThread.run(SSLWorkerThread.java:106)
|#]

i edit only one thing in app.xml which is

<authentication>
     <!-- Default domain and docbase to authenticate against -->
     <domain></domain>
     <docbase>myrepositoryname</docbase> in wdk/app.xml

do you have any suggestion what to edit in app.xml or where is the problem.