[ https://issues.apache.org/jira/browse/DERBY-3322?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dyre Tjeldvoll updated DERBY-3322: ---------------------------------- Derby Info: (was: [Patch Available]) Committed revision 633071. > Server guide refers to phantom property in template policy file for the Network Server > -------------------------------------------------------------------------------------- > > Key: DERBY-3322 > URL: https://issues.apache.org/jira/browse/DERBY-3322 > Project: Derby > Issue Type: Bug > Components: Documentation > Affects Versions: 10.3.1.4, 10.3.2.1 > Environment: N/A > Reporter: John H. Embretsen > Assignee: John H. Embretsen > Priority: Trivial > Fix For: 10.4.0.0 > > Attachments: d3322v01.diff, tadminnetservcustom.html > > > The Server and Administration guide contains a section about customizing the Network Server's security policy, based on the template policy: > http://db.apache.org/derby/docs/dev/adminguide/tadminnetservcustom.html > This section mentions that the variable ${derby.security.host} should be replaced with a suitable value. > > However, the template policy, at /demo/templates/server.policy (released binaries) or java/drda/org/apache/derby/drda/template.policy (SVN codeline), does not refer to any variable or property called ${derby.security.host}. Instead, the policy file specifies the wildcard address, with appropriate comments: > > // Accept connections from any host. Derby is listening to the host > // interface specified via the -h option to "NetworkServerControl > // start" on the command line, via the address parameter to the > // org.apache.derby.drda.NetworkServerControl constructor in the API > // or via the property derby.drda.host; the default is localhost. > // You may want to restrict allowed hosts, e.g. to hosts in a specific > // subdomain, e.g. "*.acme.com". > permission java.net.SocketPermission "*", "accept"; > > See also http://www.nabble.com/Customizing-the-Network-Server%27s-security-policy-%28docs-vs.-reality%29-td14841290.html -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.