Mailing-List: contact derby-commits-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Derby Development" <derby-dev@db.apache.org>
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Apache Wiki <wikidiffs@apache.org>
To: derby-commits@db.apache.org
Date: Thu, 17 Apr 2008 13:00:30 -0000
Message-ID: <20080417130030.6949.44271@eos.apache.org>
Subject: [Db-derby Wiki] Update of "DerbyJMXQuickStart" by JohnHEmbretsen

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Db-derby Wiki" for change notification.

The following page has been changed by JohnHEmbretsen:
http://wiki.apache.org/db-derby/DerbyJMXQuickStart

The comment on the change is:
Added security debug flag info

------------------------------------------------------------------------------
  
  For more information about Derby's JMX features, see ["DerbyJMX"].
  
- [[TableOfContents(2)]]
+ [[TableOfContents(3)]]
  
  = JMX QUICK START =
  
@@ -258, +258 @@

  
  For more information about policy files, granting permissions, and property expansion, see [http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html Default Policy Implementation and Policy File Syntax] and [http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyGuide.html Policy File Creation and Management].
  
+ ==== Debugging permission issues ====
+ 
+ Dealing with security managers, policy files and permissions is not always easy. Sometimes, some action you want to perform fails due to some security/permission issue, and you don't know why. Well, here's a tip that may help you along the way:
+ 
+ When starting the JVM being protected by the seurity manager, add a `java.security.debug` flag to see detailed output relating to security policy and permission usage. For a list of valid options, run
+ {{{
+ java -Djava.security.debug=help
+ }}}
+ or see [http://java.sun.com/developer/onlineTraining/Security/Fundamentals/Security.html#secAccessController Sun's online training documents for Java security].
+ 
+ For example, setting
+ {{{
+ -Djava.security.debug=access:failure
+ }}}
+ when starting the Derby Network Server from the command line will print lots of output to the console which allows you to find out specifically which permissions are granted and which are missing. It may be wise to store the output in a file and search through it afterwards.
  
  [[Anchor(JConsoleAccess)]]
  == Using JConsole to access Derby's MBeans ==