db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Manjula Kutty" <manjula.ku...@gmail.com>
Subject Question on starting network server with default security manager
Date Tue, 20 Nov 2007 23:40:03 GMT
Hi

I have some problem while starting the network server with default policy
file. I know there was some discussion regarding the default security
manager and derbynet.jar in classpath.

Here are the scenarios I used,

1. Have only classes in the classpath : Theoretically this should work, but
I'm getting error message
$ echo $CLASSPATH
c:/workspace/trunk/classes
$ java org.apache.derby.drda.NetworkServerControl start
Cannot find derbynet.jar on the classpath.

But works if I give noSecurityManager option
$ java org.apache.derby.drda.NetworkServerControl start -noSecurityManager
Apache Derby Network Server - 10.4.0.0 alpha - (596490M) started and ready
to ac
cept connections on port 1527 at 2007-11-20 23:04:08.410 GMT

2. Now I gave derbynet.jar in the Classpath, but after the classes, still
getting the same error message, *see I have derbynet.jar in my classpath*
$ export
CLASSPATH="c:/workspace/trunk/classes;c:/workspace/trunk/jars/insane/de
rbynet.jar"
$ java org.apache.derby.drda.NetworkServerControl start
Cannot find derbynet.jar on the classpath.

It works only if I give the derbynet.jar first in the classpath
$ export
CLASSPATH="c:/workspace/trunk/jars/insane/derbynet.jar;c:/workspace/tru
nk/jars/insane/derby.jar;c:/workspace/trunk/classes"
$ java org.apache.derby.drda.NetworkServerControl start
Security manager installed using the Basic server security policy.
Apache Derby Network Server - 10.4.0.0 alpha - (577421M) started and ready
to ac
cept connections on port 1527 at 2007-11-20 23:09:09.353 GMT

3. It works with only classes in the directory if I'm using policy file
other than the default policy file
$ export CLASSPATH="c:/workspace/trunk/classes"
$ java -Djava.security.manager -
Djava.security.policy=/workspace/trunk/java/test
ing/org/apache/derbyTesting/functionTests/util/derby_tests.policy
org.apache.der
by.drda.NetworkServerControl start
2007-11-20 23:13:36.697 GMT Thread[main,5,main]
java.security.AccessControlExcep
tion: access denied (java.io.FilePermission derby.log read)
Apache Derby Network Server - 10.4.0.0 alpha - (596490M) started and ready
to ac
cept connections on port 1527 at 2007-11-20 23:13:36.777 GMT
Apache Derby Network Server - 10.4.0.0 alpha - (596490M) started and ready
to ac
cept connections on port 1527 at 2007-11-20 23:13:36.777 GMT



So is there a way to adjust the default policy file to accept classes?

If there is a way, do we want that in the default policy file?

Thanks,
Manjula.

Mime
View raw message