Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: <derby-dev@db.apache.org>
Received-SPF: pass (asf.osuosl.org: local policy)
Date: Fri, 28 Apr 2006 09:36:24 +0200
From: Vemund Ostgaard <Vemund.Ostgaard@Sun.COM>
Subject: Re: [jira] Commented: (DERBY-1229) sysinfo and
 sysinfo_withproperties.java fail with java.lang.RuntimePermission
 getProtectionDomain when db2jcc.jar is in same dir as the derby-jars
In-reply-to: <29759647.1145665686442.JavaMail.jira@brutus>
Sender: Vemund.Ostgaard@Sun.COM
To: derby-dev@db.apache.org
Message-id: <4451C5F8.6050201@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=UTF-8
Content-transfer-encoding: QUOTED-PRINTABLE
References: <29759647.1145665686442.JavaMail.jira@brutus>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.7.12) Gecko/20050927

Bryan Pendleton (JIRA) wrote:

>    [ http://issues.apache.org/jira/browse/DERBY-1229?page=3Dcomment=
s#action_12375657 ]=20
>
>Bryan Pendleton commented on DERBY-1229:
>----------------------------------------
>
>Can you confirm that if you add the following line to derby_tests.po=
licy, the problem goes away? The line should be added to all three of=
 the derby.jar, derbynet.jar, and derbytools.jar sections, which is e=
asiest to do if you just search for "DERBY-622" and then add this lin=
e right after it:
>
>permission java.lang.RuntimePermission "getProtectionDomain";
> =20
>
Yes, this seems to solve the problem in my environment.

>In some ways, what's confusing about this bug is not that you have t=
o add this line, it's that nobody else has had to add this line. From=
 what I can tell by reading the Sun javadocs, everybody should have n=
eeded the getProtectionDomain permission, and certainly when I wrote =
a simple standalone test program, the program failed unless I gave it=
 the getProtectionDomain permission. So I don't understand why the re=
st of us have been getting away without having this permission in pla=
ce.
> =20
>
I don't have any good answer to this. I know that when I tested two=
=20
builds (one with debug and one without) of the same Derby version her=
e I=20
only saw the problem with one of the builds. Possibly it will only=
=20
happen if you have built Derby with a specific setting, or lacking a=
=20
specific setting?

>If you could please try adding the permission to the derby_tests.pol=
icy file, and verify that the sysinfo and sysinfo_withproperties test=
s then pass, that would be nice. Thanks!
>
> =20
>
Yes, both tests pass now. Thank you for looking into this, Bryan. :)

Vemund

> =20
>
>>sysinfo and sysinfo_withproperties.java fail with java.lang.Runtime=
Permission getProtectionDomain when db2jcc.jar is in same dir as the =
derby-jars
>>-------------------------------------------------------------------=
---------------------------------------------------------------------=
----------
>>
>>         Key: DERBY-1229
>>         URL: http://issues.apache.org/jira/browse/DERBY-1229
>>     Project: Derby
>>        Type: Test
>>   =20
>>
>
> =20
>
>>  Components: Security, Test, Tools
>>    Versions: 10.2.0.0
>> Environment: Solaris 10 x86
>>Sun JDK=20
>>java version "1.5.0_06"
>>Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_06-b0=
5)
>>Java HotSpot(TM) Client VM (build 1.5.0_06-b05, mixed mode, sharing=
)
>>    Reporter: Vemund =C3=98stgaard
>>    Priority: Minor
>>   =20
>>
>
> =20
>
>>The problem I've been seeing is that if I run:
>>java -Dframework=3DDerbyNetClient org.apache.derbyTesting.functionT=
ests.harness.RunTest derbynet/sysinfo.java
>>in a configuration where my db2jcc.jar is located in the same direc=
tory as all the other derby-jars, then the test fails with a diff cau=
sed by a RuntimeException. If I change nothing else then moving that =
db2jcc.jar out of that directory (and making the appropriate classpat=
h change) then the test succeeds.
>>The reason is that the test fails to get the permission for doing g=
etProtectionDomain().getCodeSource() on class com.ibm.db2.jcc.DB2Driv=
er. Below follows relevant output from my system that might be useful=
 to debug this:
>>---
>>vo136787@khepri32:~/tmp/test> env |grep CLAS CLASSPATH=3D/home/vo13=
6787/derby/tmp/testbuild/lib/derby.jar:/home/vo136787/derby/tmp/testb=
uild/lib/derbyTesting.jar:/home/vo136787/derby/tmp/testbuild/lib/derb=
ytools.jar:/home/vo136787/derby/tmp/testbuild/lib/derbynet.jar:/home/=
vo136787/derby/tmp/testbuild/lib/derbyclient.jar:/home/vo136787/derby=
/tmp/testbuild/lib/derbyrun.jar:/home/vo136787/derby/tmp/testbuild/li=
b/junit.jar:/home/vo136787/derby/tmp/testbuild/lib/db2jcc.jar:/home/v=
o136787/derby/tmp/testbuild/lib/db2jcc_license_c.jar:/home/vo136787/d=
erby/tmp/testbuild/lib/jakarta-oro-2.0.8.jar:/home/vo136787/derby/tmp=
/testbuild/lib/derbyLocale_de_DE.jar:/home/vo136787/derby/tmp/testbui=
ld/lib/derbyLocale_es.jar:/home/vo136787/derby/tmp/testbuild/lib/derb=
yLocale_fr.jar:/home/vo136787/derby/tmp/testbuild/lib/derbyLocale_it.=
jar:/home/vo136787/derby/tmp/testbuild/lib/derbyLocale_ja_JP.jar:/hom=
e/vo136787/derby/tmp/testbuild/lib/derbyLocale_ko_KR.jar:/home/vo1367=
87/derby/tmp/testbuild/lib/derbyLocale_pt_BR.jar:/home/vo136787/derby=
/tmp/testbuild/lib/derbyLocale_zh_CN.jar:/home/vo136787/derby/tmp/tes=
tbuild/lib/derbyLocale_zh_TW.jar
>>vo136787@khepri32:~/tmp/test> java -Dframework=3DDerbyNetClient org=
.apache.derbyTesting.functionTests.harness.RunTest derbynet/sysinfo.j=
ava
>>*** Start: sysinfo jdk1.5.0_06 DerbyNetClient 2006-04-19 13:00:33 *=
**
>>Initialize for framework: DerbyNetClient
>>java -Dderby.system.home=3D/home/vo136787/tmp/test/DerbyNetClient/s=
ysinfo -Djava.security.manager -Djava.security.policy=3D/home/vo13678=
7/tmp/test/derby_tests.policy -DderbyTesting.codejar=3Dfile:/home/vo1=
36787/derby/tmp/testbuild/lib/ -DderbyTesting.codedir=3D/home/vo13678=
7/derby/tmp/testbuild/lib -DderbyTesting.serverhost=3Dlocalhost -Dder=
byTesting.clienthost=3Dlocalhost -DderbyTesting.codeclasses=3Dfile://=
unused/ org.apache.derby.drda.NetworkServerControl start
>>-- SecurityManager not installed --
>>Attempt to shutdown framework: DerbyNetClient
>>14a15
>>   =20
>>
>>>[Unable to access Protection Domain or Code Source for class class=
 com.ibm.db2.jcc.DB2Driver: access denied (java.lang.RuntimePermissio=
n getProtectionDomain)] 2.4 - (17)
>>>     =20
>>>
>>41a43
>>   =20
>>
>>>[Unable to access Protection Domain or Code Source for class class=
 com.ibm.db2.jcc.DB2Driver: access denied (java.lang.RuntimePermissio=
n getProtectionDomain)] 2.4 - (17)
>>>     =20
>>>
>>69a72
>>   =20
>>
>>>[Unable to access Protection Domain or Code Source for class class=
 com.ibm.db2.jcc.DB2Driver: access denied (java.lang.RuntimePermissio=
n getProtectionDomain)] 2.4 - (17)
>>>     =20
>>>
>>Test Failed.
>>*** End:   sysinfo jdk1.5.0_06 DerbyNetClient 2006-04-19 13:00:40 *=
**
>>vo136787@khepri32:~/tmp/test> java org.apache.derby.tools.sysinfo
>>------------------ Java Information ------------------
>>Java Version:    1.5.0_06
>>Java Vendor:     Sun Microsystems Inc.
>>Java home:       /usr/jdk/instances/jdk1.5.0/jre
>>Java classpath:  /home/vo136787/derby/tmp/testbuild/lib/derby.jar:/=
home/vo136787/derby/tmp/testbuild/lib/derbyTesting.jar:/home/vo136787=
/derby/tmp/testbuild/lib/derbytools.jar:/home/vo136787/derby/tmp/test=
build/lib/derbynet.jar:/home/vo136787/derby/tmp/testbuild/lib/derbycl=
ient.jar:/home/vo136787/derby/tmp/testbuild/lib/derbyrun.jar:/home/vo=
136787/derby/tmp/testbuild/lib/junit.jar:/home/vo136787/derby/tmp/tes=
tbuild/lib/db2jcc.jar:/home/vo136787/derby/tmp/testbuild/lib/db2jcc_l=
icense_c.jar:/home/vo136787/derby/tmp/testbuild/lib/jakarta-oro-2.0.8=
.jar:/home/vo136787/derby/tmp/testbuild/lib/derbyLocale_de_DE.jar:/ho=
me/vo136787/derby/tmp/testbuild/lib/derbyLocale_es.jar:/home/vo136787=
/derby/tmp/testbuild/lib/derbyLocale_fr.jar:/home/vo136787/derby/tmp/=
testbuild/lib/derbyLocale_it.jar:/home/vo136787/derby/tmp/testbuild/l=
ib/derbyLocale_ja_JP.jar:/home/vo136787/derby/tmp/testbuild/lib/derby=
Locale_ko_KR.jar:/home/vo136787/derby/tmp/testbuild/lib/derbyLocale_p=
t_BR.jar:/home/vo136787/derby/tmp/testbuild/lib/derbyLocale_zh_CN.jar=
:/home/vo136787/derby/tmp/testbuild/lib/derbyLocale_zh_TW.jar
>>OS name:         SunOS
>>OS architecture: x86
>>OS version:      5.10
>>Java user name:  vo136787
>>Java user home:  /home/vo136787
>>Java user dir:   /home/vo136787/tmp/test
>>java.specification.name: Java Platform API Specification
>>java.specification.version: 1.5
>>--------- Derby Information --------
>>JRE - JDBC: J2SE 5.0 - JDBC 3.0
>>[/home/vo136787/derby/tmp/testbuild/lib/derby.jar] 10.2.0.0 alpha -=
 (394991)
>>[/home/vo136787/derby/tmp/testbuild/lib/derbytools.jar] 10.2.0.0 al=
pha - (394991)
>>[/home/vo136787/derby/tmp/testbuild/lib/derbynet.jar] 10.2.0.0 alph=
a - (394991)
>>[/home/vo136787/derby/tmp/testbuild/lib/derbyclient.jar] 10.2.0.0 a=
lpha - (394991)
>>[/home/vo136787/derby/tmp/testbuild/lib/db2jcc.jar] 2.4 - (17)
>>[/home/vo136787/derby/tmp/testbuild/lib/db2jcc_license_c.jar] 2.4 -=
 (17)
>>------------------------------------------------------
>>----------------- Locale Information -----------------
>>Current Locale :  [English/United States [en_US]]
>>Found support for locale: [de_DE]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [es]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [fr]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [it]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [ja_JP]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [ko_KR]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [pt_BR]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [zh_CN]
>>        version: 10.2.0.0 alpha - (394991)
>>Found support for locale: [zh_TW]
>>        version: 10.2.0.0 alpha - (394991)
>>------------------------------------------------------
>>vo136787@khepri32:~/tmp/test> java org.apache.derby.tools.sysinfo -=
cp
>>Testing for presence of all Derby-related libraries; typically, onl=
y some are needed.
>>For a list of possible arguments, type java org.apache.derby.tools.=
sysinfo -cp args
>>FOUND IN CLASS PATH:
>>  Derby embedded engine library (derby.jar)
>>  /home/vo136787/derby/tmp/testbuild/lib/derby.jar
>>  Derby embedded engine library (derby.jar)
>>  /home/vo136787/derby/tmp/testbuild/lib/derby.jar
>>  Derby Network Server library (derbynet.jar)
>>  /home/vo136787/derby/tmp/testbuild/lib/derbynet.jar
>>  Derby Client libraries (db2jcc.jar)
>>  /home/vo136787/derby/tmp/testbuild/lib/db2jcc.jar
>>  Derby Client libraries (derbyclient.jar)
>>  /home/vo136787/derby/tmp/testbuild/lib/derbyclient.jar
>>NOT FOUND IN CLASS PATH:
>>  Derby tools library (derbytools.jar)
>>   (org.apache.derby.tools.ij not found.)
>>   =20
>>
>
> =20
>