Problem : java.nt.SocketPermission

Question

Hi.
I use j2sdk1.4.0 + Apache2 + Tomcat4.0.4
My applet access tomcat servlets to query an Ora9i database.
Most of the client W98, NT4 and W-XP can access my applet to query the servlets with the exception of 2.
One client uses java 1.3.1_03 and when he tries to use applet over www , java console throws these error :
RemotedemoClient : set URL to http://<my site> :   java.security.AccessControlException access denied (java.nt.SocketPermission proxy-iap resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at java.net.InetAddress.getAllByName0(Unknown Source)
at java.net.InetAddress.getAllByName0(Unknown Source)
at java.net.InetAddress.getByName(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getHttpProxyAuthentication(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.checkCookieHeader(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
at com.developer.Tunnel.QueryCollection.retrieveQueries(QueryCollection.java:62)
at com.developer.Tunnel.QueryCollection.run(QueryCollection.java:38)
at java.lang.Thread.run(Unknown Source)
java.security.AccessControlException: access denied (java.net.SocketPermission proxy-iap resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at java.net.InetAddress.getAllByName0(Unknown Source)
at java.net.InetAddress.getAllByName0(Unknown Source)
at java.net.InetAddress.getByName(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getHttpProxyAuthentication(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.checkCookieHeader(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
at com.developer.Tunnel.client.BaseTunnelClient._invokeMethod(BaseTunnelClient.java:193)
at com.developer.Tunnel.client.BaseTunnelClient._initialize(BaseTunnelClient.java:89)
at com.developer.Tunnel.RemotedemoClient.<init>(RemotedemoClient.java:28)
at com.developer.Tunnel.demoApplet.init(demoApplet.java:80)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
java.security.AccessControlException: access denied (java.net.SocketPermission proxy-iap resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at java.net.InetAddress.getAllByName0(Unknown Source)
at java.net.InetAddress.getAllByName0(Unknown Source)
at java.net.InetAddress.getByName(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getHttpProxyAuthentication(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.checkCookieHeader(Unknown Source)
at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
at com.developer.Tunnel.QueryCollection.retrieveQueries(QueryCollection.java:62)
at com.developer.Tunnel.QueryCollection.run(QueryCollection.java:38)
at java.lang.Thread.run(Unknown Source)Is this a firewall problem from their end ???
Is this a catalina.policy problem from my end ???

Answer 1

Yes it is a proxy problem. You can't do anything on the server side.
Here's an article which you should read before you solve the problem:
Java Tip 42: Write Java apps that work with proxy-based firewalls
How to use Java to connect with HTTP servers outside your corporate firewall
Summary
This tip will show you how to write Java applications that can get past
your corporate proxy and access Web servers on the Internet. Adding
proxy support to your Java applications involves writing just a few
additional lines of code and doesn't rely on any security "loopholes." (675 words)
By Ron Kurr
Almost every company is concerned with protecting its internal network from hackers and thieves. One common security measure is to completely disconnect the corporate network from the Internet. If the bad guys can't connect to any of your machines, they can't hack into them. The unfortunate side effect of this tactic is that internal
users can't access external Internet servers, like Yahoo or JavaWorld. To address this problem, network administrators often install something called a "proxy server." Essentially, a proxy is a service that sits between the Internet and the internal network and manages connections between the two worlds. Proxies help reduce outside security threats while still allowing internal users to access Internet services. While Java makes it easy to write Internet clients, these clients are useless unless they can get past your proxy. Fortunately, Java makes it easy to work with proxies -- if you know the magic words, that is.
The secret to combining Java and proxies lies in activating certain system properties in the Java runtime. These properties appear to be undocumented, and are whispered between programmers as part of the Java
folklore. In order to work with a proxy, your Java application needs to specify information about the proxy itself as well as specify user information for authentication purposes. In your program, before you begin to work with any Internet protocols, you'll need to add the following lines:
System.getProperties().put( "proxySet", "true" );
System.getProperties().put( "proxyHost", "myProxyMachineName" );
System.getProperties().put( "proxyPort", "85" );
The first line above tells Java that you'll be using a proxy for your connections, the second line specifies the machine that the proxy lives on, and the third line indicates what port the proxy is listening on. Some proxies require a user to type in a username and password before Internet access is granted. You've probably encountered this behavior if you use a Web browser behind a firewall. Here's how to perform the authentication:
URLConnection connection = url.openConnection();
String password = "username:password";
String encodedPassword = base64Encode( password );
connection.setRequestProperty( "Proxy-Authorization", encodedPassword );
The idea behind the above code fragment is that you must adjust your HTTP header to send out your user information. This is achieved
with the setRequestProperty() call. This method allows you to manipulate the HTTP headers before the request is sent out. HTTP
requires the user name and password to be base64 encoded. Luckily, there are a couple of public domain APIs that will perform the
encoding for you (see the Resources section).
As you can see, there's not a whole lot to adding proxy support to your Java application. Given what you now know, and a little research
(you'll have to find out how your proxy handles the protocol you're interested in and how to deal with user authentication), you can
implement your proxy with other protocols.
Proxying FTP
Scott D. Taylor sent in the magic incantation to deal with proxying the FTP protocol:
defaultProperties.put( "ftpProxySet", "true" );
defaultProperties.put( "ftpProxyHost", "proxy-host-name" );
defaultProperties.put( "ftpProxyPort", "85" );
You can then access the files URLs using the "ftp" protocol via something like:
URL url = new URL("ftp://ftp.netscape.com/pub/navigator/3.04/windows/readme.txt" );
The base64Encode() method is in the HTTPClient.Codecs class. Get the HTTPClient source from <http://www.innovation.ch/java/HTTPClient/>