db-derby-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Wiki <wikidi...@apache.org>
Subject [Db-derby Wiki] Update of "DerbyJMXQuickStart" by JohnHEmbretsen
Date Thu, 17 Apr 2008 13:00:30 GMT
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Db-derby Wiki" for change notification.

The following page has been changed by JohnHEmbretsen:
http://wiki.apache.org/db-derby/DerbyJMXQuickStart

The comment on the change is:
Added security debug flag info

------------------------------------------------------------------------------
  
  For more information about Derby's JMX features, see ["DerbyJMX"].
  
- [[TableOfContents(2)]]
+ [[TableOfContents(3)]]
  
  = JMX QUICK START =
  
@@ -258, +258 @@

  
  For more information about policy files, granting permissions, and property expansion, see
[http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html Default Policy
Implementation and Policy File Syntax] and [http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyGuide.html
Policy File Creation and Management].
  
+ ==== Debugging permission issues ====
+ 
+ Dealing with security managers, policy files and permissions is not always easy. Sometimes,
some action you want to perform fails due to some security/permission issue, and you don't
know why. Well, here's a tip that may help you along the way:
+ 
+ When starting the JVM being protected by the seurity manager, add a `java.security.debug`
flag to see detailed output relating to security policy and permission usage. For a list of
valid options, run
+ {{{
+ java -Djava.security.debug=help
+ }}}
+ or see [http://java.sun.com/developer/onlineTraining/Security/Fundamentals/Security.html#secAccessController
Sun's online training documents for Java security].
+ 
+ For example, setting
+ {{{
+ -Djava.security.debug=access:failure
+ }}}
+ when starting the Derby Network Server from the command line will print lots of output to
the console which allows you to find out specifically which permissions are granted and which
are missing. It may be wise to store the output in a file and search through it afterwards.
  
  [[Anchor(JConsoleAccess)]]
  == Using JConsole to access Derby's MBeans ==

Mime
View raw message