Access Denied Socket Permission Error using 3rdParty jar in webstart

Question

Hi,
I am trying to create a multisocket in my application, and this app is downloaded through webstart,
Following are the things I ve done,
1. I use two jnlp file, one mail jnlp file (say a.jnlp) and the other an extension jnlp file (a_ext.jnlp) which contains the third party jars.
2. I used <security><allpermission/><security/> in both the jnlp files.
3. If I try to create a multisocket in my code that is downloaded through main jnlp i.e. a.jnlp file, then it is working fine.
4. But the problem is, the third party jar which is downloaded throught "a_ext.jnlp" file is trying to create a multisocket
and i am getting the following error,
+java.security.AccessControlException: access denied (java.net.SocketPermission 228.0.0.4 connect,accept,resolve)+
+ at java.security.AccessControlContext.checkPermission(Unknown Source)+
+ at java.security.AccessController.checkPermission(Unknown Source)+
+ at java.lang.SecurityManager.checkPermission(Unknown Source)+
+ at java.lang.SecurityManager.checkMulticast(Unknown Source)+
+ at java.net.MulticastSocket.joinGroup(Unknown Source)+
+ at inria.net.MulticastSession.initialize(MulticastSession.java:143)+
+ at inria.net.lrmp.LrmpImpl.<init>(LrmpImpl.java:105)+
+ at inria.net.lrmp.LrmpImpl.<init>(LrmpImpl.java:89)+
+ at inria.net.lrmp.Lrmp.<init>(Lrmp.java:194)+Please help me.
Note that I dont want to create any policy file, I want some configurations to be done in jnlp files or in the jars, because i cannot create a policy file and copy it manually in each client deployment.

Answer 1

>
And sorry that jnlp is a valid jnlp only, ..>
How do you know? Did you validate it, or are you just guessing?
>
..and it was a typing mistake, ..>So don't retype these things, instead copy/paste them.
>
it is </security> not <security/>>it is also <all-permissions/>, not <allpermission/>
>
and when i start through webstart it is asking for confirmation also, so i think this <security> tag is working fine.>Stop thinking and start validating.
>
But the problem is with security for the 3rdParty jar downloaded through jnlp extension. >So it will be most important to validate that. Note that if this 3rd party extension is signed by the people that supplied it, you should get a second security prompt.
>
... I hope JNLP doesnt check or give permission for the jars downloaded via extension jnlp?>What does that mean?
OTOH, I just noticed you assigned the princely sum of 1 entire duke star for this question. It is obviously of only minor importance to you, so my time is better spent elsewhere.
Good luck with it.