Article Number
000029926
Applies To
RSA Product Set: ClearTrust
RSA Product/Service Type: Access Manager
RSA Version/Condition: 6.2
Platform: Windows
Platform (Other): null
O/S Version: 2008 Server R2 Standard (64 bit)
Product Name: RSA-0010020
Product Description: Access Manager
Issue
When attempting to deploy the RSA Access Manager Entitlements Manager (AdminGUI) on Tomcat 8.0 the application fails to deploy or generates an error when launched.
The following error message is logged in the catalina.log file:
26-Mar-2015 16:00:24.025 SEVERE [localhost-startStop-1] org.apache.catalina.core.StandardContext.startInternal Error listenerStart
26-Mar-2015 16:00:24.115 SEVERE [localhost-startStop-1] org.apache.catalina.core.StandardContext.startInternal Context [/axm-admin-gui-6.2.2] startup failed due to previous errors
The following error is logged when the axm-admin-gui.war file is deployed with console logging enabled.
26-Mar-2015 16:00:24.023 SEVERE [localhost-startStop-1] org.apache.catalina.core.StandardContext.listenerStart Exception sending context initialized event to listener instance of class org.owasp.csrfguard.CsrfGuardServletContextListener
java.lang.RuntimeException: java.lang.NullPointerException
at org.owasp.csrfguard.CsrfGuardServletContextListener.contextInitialized(CsrfGuardServletContextListener.java:80)
at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4728)
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5162)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:725)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:701)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717)
at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:917)
at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1701)
at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
at java.util.concurrent.FutureTask.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.lang.NullPointerException
at java.io.File.<init>(Unknown Source)
at org.owasp.csrfguard.CsrfGuardServletContextListener.getResourceStream(CsrfGuardServletContextListener.java:120)
at org.owasp.csrfguard.CsrfGuardServletContextListener.contextInitialized(CsrfGuardServletContextListener.java:67)
... 13 more
If you attempt to run the application the following error is logged to the catalina.log file:
24-Mar-2015 23:33:19.767 SEVERE [localhost-startStop-1] org.apache.catalina.session.StandardSession.tellNew Session event listener threw exception
java.lang.RuntimeException: java.lang.NullPointerException
Cause
The NullPointerException in the java.io.File method occurs when the CsrfGuard servlet is unable to locate the /csrfguard.properties file on startup. This file contains the configuration information for CsrfGuard. The issue occurs because Tomcat 8.0 requires a leading slash when using a directory for the location of the file.
Resolution
This issue is fixed in RSA Access Manager 6.2.3 (SP3).
Workaround
After deploying the axm-admin-gui.war file modify the web.xml file and add a slash in front of the path for the properties file.
" /WEB-INF/csrfguard.properties" instead of "WEB-INF/csrfguard.properties"
