Data and configuration directories

Learn about which directories security.manager for OGC uses as data and configuration directories.

security.manager for OGC requires access to the following directories:

  • Data directory: Contains temporary files and by default the configuration files of security.manager for OGC.

  • Configuration directory: Contains the configuration files of security.manager for OGC.

Data directory

security.manager for OGC uses the directory ${user.home}/.secman-ogc as the default data directory. Read the Determining "user.home" section to learn how to determine the actual path for user.home.

security.manager for OGC automatically creates the data directory if it does not exist. In addition, security.manager for OGC creates a temp directory in the data directory that is used for temporary files. Therefore, it is necessary that the account starting the Java process has write permissions for the data directory.

You can change the path of the data directory by using one of the methods described in the how-to Change the data directory.

Configuration directory

The configuration directory is the path from which security.manager for OGC reads its configuration.

By default, security.manager for OGC also uses the data directory path for the configuration directory. Therefore, the default path for the configuration directory is also ${user.home}/.secman-ogc. If you change the path of the data directory, the path of the configuration directory also changes, unless you explicitly set the path of the configuration directory.

You can explicitly set the path of the configuration directory by using one of the methods described in the how-to Change the configuration directory.

The configuration directory requires read access for the account that starts the Java process.

Determining "user.home"

user.home is a Java System Property through which the Java Virtual Machine (JVM) provides the path to the home directory of the account that started the JVM process. security.manager for OGC uses this path by default as the base for the data directory .secman-ogc.

This means that if you run security.manager with a standard account named "userX", the data directory is by default located at /home/userX/.secman-ogc (Linux) or C:\Users\userX\.secman-ogc (Windows).

If you run Tomcat as a system service, it depends on the configuration of the system service to which path user.home resolves. Accounts for running system services often do not use regular home directories.

On Windows, for example, you can run the Tomcat server with the system account "Local Service" instead of a standard account. In this case, the directory is created at the following path: %systemroot%\ServiceProfiles\LocalService\.secman-ogc\.

If in doubt, you can determine the actual path of the data directory by starting security.manager for OGC and opening the log file [TOMCAT]/logs/ct-secman-ogc.log. There you will find an entry that outputs the path when security.manager for OGC starts:

[INFO]... Configuration directory is '/home/userX/.secman-ogc'

To define the data directory independently of accounts, you should explicitly set the path of the data directory.