AccesscontrolException

[rajani adapa]

WHen i run my server in the rmi program iam getting an error message saying,
java.security.AccessControlException: access denied (java.net.SocketPermission 1
27.0.0.1:1099 connect,resolve)
I've no idea what is going on over there.
Can anybody help me
please........
rajini

[Fredrik Safstrom]

Rajini,
Try adding upp the following lines in your {Java Home}\jre\lib\security\java.policy file:
// Special permission for RMI.
permission java.net.SocketPermission "*", "connect";
permission java.net.SocketPermission "*", "accept";
Your file should then look something like this:

// Standard extensions get all permissions by default
grant codeBase "file:${java.home}/lib/ext/*" {
permission java.security.AllPermission;
};
// default permissions granted to all domains
grant { 
// Allows any thread to stop itself using the java.lang.Thread.stop()
// method that takes no argument.
// Note that this permission is granted by default only to remain
// backwards compatible.
// It is strongly recommended that you either remove this permission
// from this policy file or further restrict it to code sources
// that you specify, because Thread.stop() is potentially unsafe.
// See "http://java.sun.com/notes" for more information.
permission java.lang.RuntimePermission "stopThread";
// allows anyone to listen on un-privileged ports
permission java.net.SocketPermission "localhost:1024-", "listen";
// "standard" properies that can be read by anyone
permission java.util.PropertyPermission "java.version", "read";
permission java.util.PropertyPermission "java.vendor", "read";
permission java.util.PropertyPermission "java.vendor.url", "read";
permission java.util.PropertyPermission "java.class.version", "read";
permission java.util.PropertyPermission "os.name", "read";
permission java.util.PropertyPermission "os.version", "read";
permission java.util.PropertyPermission "os.arch", "read";
permission java.util.PropertyPermission "file.separator", "read";
permission java.util.PropertyPermission "path.separator", "read";
permission java.util.PropertyPermission "line.separator", "read";
permission java.util.PropertyPermission "java.specification.version", "read";
permission java.util.PropertyPermission "java.specification.vendor", "read";
permission java.util.PropertyPermission "java.specification.name", "read";
permission java.util.PropertyPermission "java.vm.specification.version", "read";
permission java.util.PropertyPermission "java.vm.specification.vendor", "read";
permission java.util.PropertyPermission "java.vm.specification.name", "read";
permission java.util.PropertyPermission "java.vm.version", "read";
permission java.util.PropertyPermission "java.vm.vendor", "read";
permission java.util.PropertyPermission "java.vm.name", "read";

// Special permission for RMI.
permission java.net.SocketPermission "*", "connect";
permission java.net.SocketPermission "*", "accept";
};

You also have to start the rmiregistry in a second dos-prompt (or second shell on unix). Just start a new dos-prompt and type rmiregistry.
/Bamse

[rajani adapa]

Thank you .
It's working now.
And i 've one more question.
IAm trying to use bean in my client program.
When iam trying to include all three files in a single package as,package mypkg;
in all three files of my rmi application,Neither of my server and client not accessing the interface.
What is the problem?
please correct me if iam wrong
rajini

[rajani adapa]

Sorry ,
Oops!! I FORGOT TO INCLUDE THE PACKAGE IN SPECIFIED DIRECTORY.
sORRY FOR THE INCONVENIENCE.
And now i got it's working fine.
Once again thanku very much
rajini

[chr rosa]

What are the security implications of adding
// Special permission for RMI.
permission java.net.SocketPermission "*", "connect";
permission java.net.SocketPermission "*", "accept";
to {Java Home}\jre\lib\security\java.policy file
That is, while it is necessary to make the aforementioned
modifications in order to activate the rmi service
functionality, is there any danger
in terms of overall security on the Unix server.
Thanks for your thoughts.
Best regards

[sreenath reddy]

Hi

I am using tomcat as my webserver and i am facing the problem while viewing the applet in IE . Its giving the exception saying java.security.AccessControlException:access denied ....But the same works fine when i use an IDE like eclipse for running the same applet

I tried editing the java policy file and even the catalina (Tomcat's policy file) by adding

permission java.net.SocketPermission "*", "connect";
permission java.net.SocketPermission "*", "accept";

But still i am getting the same error . Can any one let me know why this is still coming ??

[Nathan Pruett]

An applet will run differently in Eclipse vs. Tomcat because (most likely) Eclipse is using AppletViewer to run the applet - AppletViewer is like a "test environment" to quickly test your applet and make sure it is working without going through deploying the applet to a webserver, etc. One of the main things AppletViewer "skimps on" is the applet sandbox - this is why you are getting an AccessControlException. Changing Tomcat's policy file isn't going to help you here - the applet is really running in the client's browser, not Tomcat.

Read up on the "Applet Sandbox". Of primary interest is this - " It cannot make network connections except to the host that it came from."

If you really need to do whatever you're doing to cause the AccessControlException, you'll need to make a signed applet.

[Nathan Pruett]

By the way - this really should have been a new post, rather than added on to the existing thread... and it should have been in the "Applets" forum...