SA-12

Summary

User encounters UI error "Error 503: PegaRULES server not available" on login.

Error Messages

PRPC failed to start with exception below in the logs

[6/10/14 11:54:57:974 CDT] 0000001b webapp        I com.ibm.ws.webcontainer.webapp.WebGroupImpl WebGroup SRVE0169I: Loading Web Module: prweb.war.
[6/10/14 11:54:58:135 CDT] 0000001b WASSessionCor I SessionContextRegistry getSessionContext SESN0176I: Will create a new session context for application key default_hostprweb
[6/10/14 11:54:58:402 CDT] 0000001b SecurityManag W   SECJ0314W: Current Java 2 Security policy reported a potential violation of Java 2 Security Permission. Refer to the InfoCenter for further information.

Permission:
      accessClassInPackage.com.ibm.oti.shared : Access denied (java.lang.RuntimePermission accessClassInPackage.com.ibm.oti.shared)
Code:
    com.pega.pegarules.internal.bootstrap.PRSecureLoader  in  {file:/opt/WAS70/AppServer/profiles/Custom01/installedApps/gbapegawasdmdevCell01/DEVprpc_j2ee14.ear/APP-INF/lib/prbootstrap.jar}

Stack Trace:
java.security.AccessControlException: Access denied (java.lang.RuntimePermission accessClassInPackage.com.ibm.oti.shared)
 at java.security.AccessController.throwACE(AccessController.java:100)
 at java.security.AccessController.checkPermission(AccessController.java:174)
 at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
 at com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java:206)
 at java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1539)
 at java.lang.Class.checkMemberAccess(Class.java:131)
 at java.lang.Class.getConstructor(Class.java:344)
 at org.eclipse.osgi.framework.internal.core.ConditionalPermissionInfoImpl.addPermissions(ConditionalPermissionInfoImpl.java:155)
 at org.eclipse.osgi.framework.internal.core.ConditionalPermissionSet.implies(ConditionalPermissionSet.java:217)
 at org.eclipse.osgi.framework.internal.core.BundleCombinedPermissions.implies(BundleCombinedPermissions.java:124)
 at java.security.ProtectionDomain.implies(ProtectionDomain.java:213)
 at java.security.AccessController.checkPermission(AccessController.java:173)
 at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
 at com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java:206)
 at com.ibm.oti.shared.SharedAbstractHelperFactory.checkPermission(SharedAbstractHelperFactory.java:74)
 at com.ibm.oti.shared.SharedAbstractHelperFactory.canFind(SharedAbstractHelperFactory.java:83)
 at com.ibm.oti.shared.SharedClassHelperFactoryImpl.getURLClasspathHelper(SharedClassHelperFactoryImpl.java:168)
 at java.net.URLClassLoader.initializeSharedClassesSupport(URLClassLoader.java:180)
 at java.net.URLClassLoader.<init>(URLClassLoader.java:217)
 at com.pega.pegarules.internal.bootstrap.PRSecureLoader.<init>(PRSecureLoader.java:82)
 at com.pega.pegarules.internal.bootstrap.PRBaseLoader.<init>(PRBaseLoader.java:55)
 at com.pega.pegarules.internal.bootstrap.PRBootstrap.checkForStartup(PRBootstrap.java:421)
 at com.pega.pegarules.internal.bootstrap.PRBootstrap.invokeMethodPropagatingThrowable(PRBootstrap.java:292)
 at com.pega.pegarules.internal.bootstrap.PRBootstrap.invokeMethod(PRBootstrap.java:344)
 at com.pega.pegarules.internal.web.servlet.WebAppLifeCycleListenerBoot.contextInitialized(WebAppLifeCycleListenerBoot.java:69)
 at com.ibm.ws.webcontainer.webapp.WebApp.notifyServletContextCreated(WebApp.java:1718)

Steps to Reproduce

Not Applicable

Root Cause

Websphere "Java 2 security" is enabled without providing the required permissions for PRPC application resources via the policy file.

Resolution

Disable Websphere "Java 2 security"