sumit S ahuja

Hello,

We are using Websphere MQ and there is JAAS in place. It was all working fine but suddenly one day i started getting exception as below :

java.security.AccessControlException: Access denied (java.net.SocketPermission <<machine_name>> resolve) at java.security.AccessController.checkPermission(AccessController.java:108) at java.lang.SecurityManager.checkPermission(SecurityManager.java:558) at java.lang.SecurityManager.checkConnect(SecurityManager.java:1057) at java.net.InetAddress.getAllByName0(InetAddress.java:1236) at java.net.InetAddress.getAllByName(InetAddress.java:1174) at java.net.InetAddress.getAllByName(InetAddress.java:1097) at java.net.InetAddress.getByName(InetAddress.java:1047) at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection$3.run(RemoteTCPConnection.java:372) at java.security.AccessController.doPrivileged(AccessController.java:197) at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection.resolveHostname(RemoteTCPConnection.java:369) at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection.parseConnectionName(RemoteTCPConnection.java:276) at com.ibm.mq.jmqi.remote.internal.RemoteTCPConnection.protocolConnect(RemoteTCPConnection.java:930) at com.ibm.mq.jmqi.remote.internal.system.RemoteConnection.connect(RemoteConnection.java:1112) at com.ibm.mq.jmqi.remote.internal.system.RemoteConnectionPool.getConnection(RemoteConnectionPool.java:350) at com.ibm.mq.jmqi.remote.internal.RemoteFAP.jmqiConnect(RemoteFAP.java:1599) at com.ibm.mq.jmqi.remote.internal.RemoteFAP.jmqiConnect(RemoteFAP.java:1227) at com.ibm.mq.MQSESSION.MQCONNX_j(MQSESSION.java:915) at com.ibm.mq.MQManagedConnectionJ11.<init>(MQManagedConnectionJ11.java:227) at com.ibm.mq.MQClientManagedConnectionFactoryJ11._createManagedConnection(MQClientManagedConnectionFactoryJ11.java:505) at com.ibm.mq.MQClientManagedConnectionFactoryJ11.createManagedConnection(MQClientManagedConnectionFactoryJ11.java:547) at com.ibm.mq.StoredManagedConnection.<init>(StoredManagedConnection.java:95) at com.ibm.mq.MQSimpleConnectionManager.allocateConnection(MQSimpleConnectionManager.java:182) at com.ibm.mq.MQQueueManagerFactory.obtainBaseMQQueueManager(MQQueueManagerFactory.java:869) at com.ibm.mq.MQQueueManagerFactory.procure(MQQueueManagerFactory.java:761) at com.ibm.mq.MQQueueManagerFactory.constructQueueManager(MQQueueManagerFactory.java:712) at com.ibm.mq.MQQueueManagerFactory.createQueueManager(MQQueueManagerFactory.java:171) at com.ibm.mq.MQQueueManager.<init>(MQQueueManager.java:603)

Though i cleared it by providing SocketPermission to machine_name in policy file.
I had to add some more permission in policy file to get it worked, as below :

permission java.util.PropertyPermission "user.name", "read"; permission java.util.PropertyPermission "user.dir", "read"; permission java.util.PropertyPermission "com.ibm.mq.commonservices", "read"; permission java.util.logging.LoggingPermission "control";

But the thing i really dont know is why it was working earlier and why it needed those changes, when the code is not changed. Does it have anything to do with machine configuration, machine is running on AIX. Please help me here, I am new to MQ and JAAS.

We are applying policy file for JAAS using "-Djava.security.auth.policy=filename" and "-Djava.security.policy=filename".

according to one question at javaranch round up game, following will return false :
Integer a = new Integer(5);
Integer b = new Integer(5);
if (a==b);

this if statement will return false according to java ranch but the correct answer is true as JVM keeps single object for Integer and Short within the range -128 to 127.

hence the result of this if should be true