(6818829) JES6: GF2.1: can NOT log out from admin GF page

Description

After clicking the Logout button on the GlassFish Enterprise Server admin page, an empty confirmation alert is displayed. Clicking OK causes the console page to be reloaded, but the user is still not logged out.

This issue affects Access Manager 7.x and GlassFish 2.1/2.1.1, and has been addressed in the latest Access Manager patch. The problem occurs when Application Server 8.x has been updated to GlassFish 2.x without also applying the latest Access Manager patch or upgrading to OpenSSO Enterprise Edition.

Solution

In the GlassFish Enterprise Server server.policy file, change the lines:

permissiion java.security.AllPermission "MonitoringAuth.*";

permission java.security.AllPermission "MonitoringPolicy.*";

to the following:

permission javax.management.MBeanServerPermission "*";

permission javax.management.MBeanPermission "*", "*";

permission javax.management.MBeanTrustPermission "*";

permission java.io.FilePermission "//var/opt/SUNWmfwk/logs/*", "delete,write";

Note that the path in the last line begins with two slashes (//). The first slash represents the installation directory of SUNWmfwk-rt. The default installation directory, /opt on Solaris or /opt/sun on Linux, equates to the single slash.