Applets, databases, policies, signing, etc...

Hello,
Well, I am deploying an applet application which needs to connect with a postgres database.
I put my application in my hosting then I changed my local java.policy file adding a line as
permission java.net.SocketPermission "127.0.0.1:5432", "connect,resolve";And my applet works... but I don't want that the user needs to change his policies file.
I read in somewhere in the forum if the applet is signed the user doesn't need to change anything... then I sign the applet. But it doesn't work. It looks to me that signing the applet is not enough to allows the connection.
But I don't sure.
Some body had had the same problem or am I doing some thing wrong?? Other Ideas
By the way, sorry for my bad english, I hope you can understand what I am saying.
Bye, and thanks by advance

The standard AccessControlException:
java.security.AccessControlException: access denied (java.lang.RuntimePermission getClassLoader)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:270)
at java.security.AccessController.checkPermission(AccessController.java:401)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
at java.lang.ClassLoader.getParent(ClassLoader.java:701)
Or something like that.
That's what I'm trying to solve, I wish to use the Java Security Policy system to allow my applet access to various resources, such as writing files. Now I've seen that signing an applet will give it full access (in my view, this is rather insecure, but anyway), however following the steps to sign an applet two or three times has still presented me with the same problem. The signing is ignored, and the exception is thrown.
Applet signing aside, I fail to see any documentation stating how the policy file is used by the VM when running on a browser. I assumed it might be an entry in the Jar's manifest file, but again, I can find no documentation.
It's all very annoying, and Sun have done quite a bad job at documenting this. For example, their example talkes about -D-Jjava.security.policy=.... being passed to appletviewer. Who on earth uses appletviewer! If policies only work with that, then they are useless. I want them to work with whatever browser the applet is being run within.
Surely this isn't too much to ask? :)

Similar Messages

Signed Applet Database Connection..

it works in my Test HTML..
<html>
<head>
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" >
 <title>Java Applet</title>
</head>
<body>
 Applet Test
 
 <applet code="Main.class" archive="flowchart.jar" width="90%" height="90%" alt="Sorry, you need Java to run this Applet">
 <param name="Username" value="root" />
 <param name="DatabaseType" value="MySQL" />
 <param name="Database" value="OQMcontrolec30_validatie_mysql" />
 <param name="Server" value="192.168.5.4" />
 <param name="ProcesID" value="72" />
 </applet>
 
</body>
</html>it doesn't work on the server..
<body BOTTOMMARGIN=0 LEFTMARGIN=0 MARGINHEIGHT=0 MARGINWIDTH=0 SCROLL=no>
<APPLET code="Main.class" codebase="./" height="100%" width="100%" archive="flowchart.jar">
<param name="Username" value="root" />
<param name="DatabaseType" value="MySQL" />
<param name="Database" value="OQMcontrolec30_validatie_mysql" />
<param name="Server" value="192.168.5.4" />
<param name="ProcesID" value="<?=$_GET['id']?>" />
 
Sorry, your browser doesn't support Java.
 
</APPLET>I get this for an error in Java Console (using firefox)
jdbc:mysql://192.168.5.4:3306/OQMcontrolec30_validatie_mysql
com.mysql.jdbc.CommunicationsException: Communications link failure due to underlying exception:
** BEGIN NESTED EXCEPTION **
java.net.SocketException
MESSAGE: java.security.AccessControlException: access denied (java.net.SocketPermission 192.168.5.4:3306 connect,resolve)
STACKTRACE:
java.net.SocketException: java.security.AccessControlException: access denied (java.net.SocketPermission 192.168.5.4:3306 connect,resolve)
 at com.mysql.jdbc.StandardSocketFactory.connect(StandardSocketFactory.java:156)
 at com.mysql.jdbc.MysqlIO.<init>(MysqlIO.java:277)
 at com.mysql.jdbc.Connection.createNewIO(Connection.java:2668)
 at com.mysql.jdbc.Connection.<init>(Connection.java:1531)
 at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:266)
 at java.sql.DriverManager.getConnection(DriverManager.java:582)
 at java.sql.DriverManager.getConnection(DriverManager.java:185)
 at Main.init(Main.java:200)
 at sun.applet.AppletPanel.run(AppletPanel.java:419)
 at java.lang.Thread.run(Thread.java:619)
** END NESTED EXCEPTION **
Last packet sent to the server was 157 ms ago.
 at com.mysql.jdbc.Connection.createNewIO(Connection.java:2741)
 at com.mysql.jdbc.Connection.<init>(Connection.java:1531)
 at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:266)
 at java.sql.DriverManager.getConnection(DriverManager.java:582)
 at java.sql.DriverManager.getConnection(DriverManager.java:185)
 at Main.init(Main.java:200)
 at sun.applet.AppletPanel.run(AppletPanel.java:419)
 at java.lang.Thread.run(Thread.java:619)and that sort of repeats itself on every query I do..
now I've read around the forum that when calling an applet from javascript it isn't trusted.. even when it's signed
this here is called with PHP.. and I think it isn't trusted either
how do I make it trusted?
Edited by: Nizzle on Nov 19, 2007 10:28 AM

sabre150 wrote:
Nizzle wrote:
Yes =)
I'm pretty sure it has something to do with the applet being "Self-Signed"I don't think so. I use "Self-Signing" without problems like this.it seems that I have a .java.policy file in my userfolder..
which granted permissions for me on local applet test stuff..
so now I've removed that the signed doesn't do anything.. anywhere =(
I signed it like this:
keytool -genkeypair -dname "cn=TAG Software, ou=TAG Software, o=TAG Software, c=NL" -alias business -keypass w8woord135 -keystore /home/niels/TAGkeystore -storepass w8woord -validity 365
jarsigner -keystore TAGkeystore -storepass w8woord -keypass w8woord135 flowchart.jar business

I am trying to fill in a form in adobe exportpdf. How can I fill in numbers and symbols? Parenthesis, dollar sign etc.

I am trying to fill in a form in adobe exportpdf. How can I fill in numbers and symbols? Parenthesis, dollar sign etc.

Hi;
Can you provide a little more detail, maybe a screenshot? ExportPDF only converts PDFs to other file types, what exactly are you using to try to fill out the form? The two Adobe form filling tools I would recommend would be:
1) Adobe Reader - a free download you can install on your computer and can be used to fill out most any form. For numbers, symbols etc it can depend on the field you are entering data into, some fields have restrictions, but you would use those keys on your keyboard, if nothing is entered then that field probably has restrictions.
2) Adobe Fill & Sign: https://cloud.acrobat.com/fillsign - using the Fill & Sign tab on the acrobat.com website you can fill out most PDFs. To enter numbers, symbols, etc you would simply add them using your keyboard.
Thanks,
Josh

Is it possible to mailmerge a form letter to recipients identified in a database (names, addresses, etc.)?

Is it possible to mailmerge a form letter so that the mailmerge process produces separate pdf files, one for each recipient identified in a database (names, addresses, etc.)?
Or is is it possible to mailmerge a form letter so that the mailmerge process produces one big file that contains a copy of the form letter for each recipient identified in a database?

Hi marceepoo,
If you're using Word for Windows, you sure can. See Adobe Acrobat X Pro * Create PDFs from Word mail merges
Best,
Sara

RETURN/ENTER and SHIFT keys no longer work, and my number keys only work as numbers - no longer do they serve as exclamation points or dollar signs etc.

After downloading OS X Yosemite my RETURN/ENTER and SHIFT keys no longer work, and my number keys only work as numbers - no longer do they serve as exclamation points or dollar signs etc. PLEASE HELP

Does this bad behavior persist when logging in as a different user, e.g., Guest? Does it persist when starting up in Safe Mode?

Question about Java Applet Jar file signing.

These questions pertain to Java 6 Standard Edition 1.6.0_22-b04 and later.
I have gone through the Oracle Java Tutorial for generate public and private key information
to sign a jar file, and how to sign the jar itself, all at
[http://java.sun.com/developer/onlineTraining/Programming/JDCBook/signed.html|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/signed.html]
, and seek some clarification on the following related questions:
-In order to "escape" the java applet sandbox that exists around the client's
copy of the applet running in their web browser, ie.
(something forbidden by default), is verification of the signed applet enough, or is a policy file required
to stipulate these details?
-using the policytool policy file generator, what do I need to add under "Principals"
(if anything) when dealing with a Java applet? Are Codebase and SignedBy simply author information?
-If I choose to use a java.security.Permission subclass object set up in equivalent fashion within the Applet,
which class within the Applet jar do I instantiate that object in? Does it need to be mentioned
in the applet's jar Manifest.MF file?
-Is the "keystore database" a java language service/process which runs in
the Server's memory and is simply accessed and started by default
by the client verifier program (appletview/web browser)?
-The public key certificate file (*.cer) is put in the webserver directory holding
the Applet jar file (ie. Apache Tomcat, for example).
-Presumably, the web browser detects the signed jar
and certificate file, and provides the browser pop up menu asking the user
about a new, non recognised certificate (initially).
Is this so?
-With this being the case, can the applet now escape
the sandbox, be it with or without the stipulated
policy permissions?

848439 wrote:
-In order to "escape" the java applet sandbox that exists around the client's
copy of the applet running in their web browser, ie.
(something forbidden by default), is verification of the signed applet enough, or is a policy file required
to stipulate these details?Just sign the applet, the policy file is not necessary.
-Is the "keystore database" a java language service/process which runs in
the Server's memory and is simply accessed and started by default
by the client verifier program (appletview/web browser)?No.
-The public key certificate file (*.cer) is put in the webserver directory holding
the Applet jar file (ie. Apache Tomcat, for example).No. For a signed Jar, all the information is contained inside the Jar.
-Presumably, the web browser detects the signed jar
and certificate file, and provides the browser pop up menu asking the user
about a new, non recognised certificate (initially).
Is this so?No. It is the JVM that determines when to pop the confirmation dialog.
-With this being the case, can the applet now escape
the sandbox, ..Assuming the end-user OK's the trust prompt, yes.
..be it with or without the stipulated
policy permissions?Huh?

Applet & Database

ho un problema con un'applet java che si connette ad un database di Access 2000.
L'applet visualizza gli oggetti grafici e li popola con i dati letti dal database, quando la eseguo dal mio compilatore (JBuilder, JDeveloper); ma quando la eseguo all'interno di Internet Explorer, visualizza gli oggetti grafici ma non riesce a leggere i dati dal database. Perch�???
per connettermi al database ho creato una configurazione ODBC che ho chiamato "Dungeon".

Potete tradurre questo qui:
http://babelfish.altavista.com/tr
JBuilder and JDeveloper use special policys when executing the applet.
Sign the applet and make sure the jdbc jars can be found.
http://forum.java.sun.com/thread.jsp?forum=63&thread=524815
second post
A full trace might help you out as well.
To turn the full trace on (windows) you can start the java console, to be found here:
C:\Program Files\Java\j2re1.4...\bin\jpicpl32.exe
In the advanced tab you can fill in something for runtime parameters fill in this:
-Djavaplugin.trace=true -Djavaplugin.trace.option=basic|net|security|ext|liveconnect
if you cannot start the java console check here:
C:\Documents and Settings\userName\Application Data\Sun\Java\Deployment\deployment.properties
I think for linux this is somewhere in youruserdir/java (hidden directory)
add or change the following line:
javaplugin.jre.params=-Djavaplugin.trace\=true -Djavaplugin.trace.option\=basic|net|security|ext|liveconnect
for 1.5:
deployment.javapi.jre.1.5.0.args=-Djavaplugin.trace\=true -Djavaplugin.trace.option\=basic|net|security|ext|liveconnect
The trace is here:
C:\Documents and Settings\your user\Application Data\Sun\Java\Deployment\log\plugin...log
I think for linux this is somewhere in youruserdir/java (hidden directory)

OS X 10.5.6, Safari 3.2.1 hangs when second applet loaded is signed applet

Dear Forum,
I've been investigating a customer's problem. She is trying to use our
VoIP applet, but it continuously freezes Safari when the Trust dialog shows.
A "Force Quit" is necessary.
I managed to reproduce the problem consistently on
- PowerMac7 OS X 10.5.6 (Build 9G55)
- Architecture: ppc
- Safari 3.2.1 (5525.27.1)
- JVM 1.5.0_16 from Apple
The problem is persistent when:
- the signed applet is loaded as second applet in the browser
- the signed applet is cached by the JVM
Our customer uses:
- Mac Book ProOS X 10.5.6
- Safari 3.2.1
- JVM 1.5.0_16 from Apple
This problem does not occur on:
- Mac OS X 10.4.11 (Mac Powerbook G4)
- Safari 3.2.1 (4525.27.1)
- JVM 1.5.0_16 from Apple
and not on:
- MacBook Air, OS X 10.5.6, 1.6 Ghz Intel core 2 duo
- Safari Version 3.2.1 (5525.27.1)
- JVM 1.5.0_16 from Apple
Steps to reproduce the problem:
Launch Safari.
In (first) page/tab go to
http://www.javatester.org/version.html
(this uses a non signed applet)
Open a second tab. Here go to:
http://ukapi.phonefromhere.com/talk/vtop2.xsql?key=01612884242
This is a signed applet that will ring our office over VoIP.
Click the "Trust" button (signed by PhoneFromHere).
As long as this applet isn't cached by the JVM this will work, so
the first time you will succeed.
Now Quit Safari (not "just" close all Safari windows, but a "real" quit) and repeat the exercise.
The second (and next) time this will fail (only if the signed applet is loaded as second, so the order is important)! This keeps failing until I go (back) to the Java Preference window (via Finder) and explicitly delete the cached files.
The URL will work when loaded first (cached or not).
Some diagnostics, that might help:
I configured the Java Preference window to "enable Logging, Tracing and Show applet livecycle exceptions".
When the applet fails to load (and Safari freezes/hangs), the last few records of the plugin150.log are:
<message>basic: Loading http://ukapi.phonefromhere.com/talk/lib/pfh.jar from cache
<message>basic: Reading cached JAR file from JRE 1.5 release
<message>basic: Certificates for http://ukapi.phonefromhere.com/talk/lib/pfh.jar is read from JAR cache
<message>security: Loading certificates from Deployment session certificate store
<message>security: Loaded certificates from Deployment session certificate store
<message>security: Checking if certificate is in Deployment session certificate store
(and then nothing)
whereas when it succeeds to load, as soon as I click the "Trust" button, it's say:
<message>security: User has granted the priviledges to the code for this session only
The Report is a bit too long to port, I'll include the same text above when sending it.
Model: PowerMac7,2, BootROM 5.1.3f0, 2 processors, PowerPC 970 (2.2), 1.8 GHz, 2 GB
To cut a long story short? Is this a know bug (I couldn't find anything, but you never know)? Does anyone have any ideas how to fix this?
Thanks, Birgit

I have the same issue now after downgrading my Flash plugin. I downgraded from 10 to 9 latest because I like using Camino and for some reason Flash 10 doesn't play nice with Camino. But all of a sudden as I use Camino 2b2 for everyday and Safari 3.2 for banking and such, the browser hangs requiring a forced quit when I close it. I've re-installed the browser twice now with all the previous folders, and preferences erased and caches emptied. I even when to re-installing 10.5.6 and it still crashes, it's odd. Maybe 10.5.7 will address this.

DataProcessor generating XML containing special ampersand, equals sign etc

Hi,
Using 10.1.3.3.3
I am using the BIP API's to generate reports for an application, but have a problem where the DataProcessor is generating XML containing ampersands and equal signs '&', '=' from the database.
The characters are causing the FOProcessor to throw and exception when reading the generated XML:
oracle.xml.parser.v2.XMLParseException: Expected name instead of .
08/08/06 12:12:22 at oracle.xml.parser.v2.XMLError.flushErrors1(XMLError.java:320)
If I remove the '&' and '=' the PDF is generated successfully.
It is not pratical to convert these characters as part of the queries (40+ tables times x columns).
Is there anything I can put in the data template or config to get it to properly escape these characters when generating in the XML data?
Apologies if this has been answered in another thread.
Brenden

You must replace '&' by &
'=' work fine.
look here for additional character encoding
http://llizard.etherwork.net/cwc/charactmap.html
Skobelev Max

Realy no one knows how to remove the word "java applet window" besides sign

Hi, everyone,
I am trying to remove the line "java applet window" from my nice/colorful interface, but what I was told is that I can not remove if i do not sign for digital singiture. Is this really a limition of Applet?
I do not know why t he design want to add this stupid feature. As most people are not technical people, they do not care whether it is applet or not. For technical people, they should know that some thing popup from the browser and have a "java" sign on the right top corner is Applet.
Only too sad about that.

In the browser window, the address bar will also display the correct URL for the page being displayed.
An applet window could spoof this address bar and otherwise mimic the look and feel of the browser (or any other application), thus tricking the user into believing the window to be legitimate.
Just because there are already potential security/privacy issues in the applet specification, doesn't mean we want to open up another one! Why do you want an unsigned applet with a window without a warning message? You'll need a certificate anyway if you're planning on using secure communication - sending client data across an unsecure connection is rather less professional than spawning a window with a well-known and generally-ignored warning message.

Automating the installation process,creating the database, creating tables etc at the

Hi,
We have a requirement to install oracle 8.1.6 on solaris box. The whole installtion process should be automated. This process includes changing the kernel parameters, creating the oracle account as per the installation guide, configuring the logical volumes, creating the database as per OFA recommendations, creating tables etc. How can i do this with out any interaction from user. Can the Oracle software packager handle all these. Please Let me know ASAP.
Thanks a bunch.

Agata,
The full retail should be white with a snow leopard on it but if you ordered from the on-line store you should be fine. If it is having problems booting while holding the C key, try restarting the computer but this time hold the Option key.
That will bring up a grey screen with the image of the Macintosh HD and an image of the CD. Click the image of the CD and let it boot that way.
Once booted, go through the install proceedure, choose language, etc. Still using the same CD but let's see if for some reason it does not like the way it is being told to boot.
Ralph

Internet Applet database access

Hi,
- Howto connect an internet-applet to a database?
+ I am thinking about using a 3 tier:
applet <---> (http port 80) <--->- appserver <---- (JDBC) ----> DB
+ on the web only port 80 I consider as available.
+ I could write a dedicated servlet which performs the DB-queries and sends the results back to the applet (for example by means of object-serializing OR flat text)
? Can it be done by means of SOAP/XML? is it fast enough? implementation tips?
? Can I use this construct also in a Swing app? (on the local network)
? Other suggestions?
Thanks!
Regards
Stephan

Hi,
Sure web services can be used here.
But to me it is not the most obvious solution in this case, based on what I've read (and build) on web services. Web services are generally used to leverage an open communication between heterogeneous applications, mostly on different sites/locations, i.e. applications that are loosely connected with each other and applications of different origin. An analogy: you would not use a database link to communicate between 2 schemas on the same database, you would use a database link between 2 different databases.
This situation does not occur here because the given application is a client intranet application talking to a local database. That's why I mentioned webforms, but a JClient application would an obvious option either.
I am not opting that you use webforms, I was giving alternative option ;-)
Stephan, to answer to your question:
--> But, how do you build such a meganism? Are there pre-defined servlet's available for sending objects? or frameworks?
Apache Struts (or JSF).
Kind Regards,

Applet database connection

I've written an applet that connects to a MS Access database. This applet works fine when run in Appletviewer (with the policy file included). The problem is when I try to run it in a Browser the applet is "not initialized" Can anyone suggest a solution. The point of this applet is to be placed on a web page and it will access the database on the same server. The applet will never have to talk to the machnine it's being run on. Thanks in advance

I just checked the error message in the Java Console and I get the following message.
java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.jdbc.odbc) at java.security.AccessControlContext.checkPermission(Unknown Source)
the applet simply looks in the database and outputs some text to the browser based on what's in the database. It write nothing to the server or anywhere else. I set up the permissions via a policy file. Is there a way to allow the browser to access the policy file??
for instance in appletviewer I can provide the following
appletviewer -J-Djava.security.policy=policyfile page.htm
where policyfile is the policy file with the appropriate permissions. How can I get the webbrowser to access this file???
thanks again

Applet - Database communication thro' browser

I want to know how to communicate applet with database using Internet Explorer Browser. We can communicate applet with database using appletviewer. But in IE it is showing "sun.jdbc.odbc.JdbcOdbcDriver not found" Exception. For that I took the sun.jdbc.odbc.JdbcOdbcDriver class from jdk, made it as a jar. I added the jar to the archive attribute of the applet tag. After that browser is showing suitable driver not found excption. How can I solve this problem? Please Help me.

Hi,
Microsoft changed the name of the JBDC driver.In order to get it
to work for IE you will need to change the name of the driver to
com.ms.jdbc.odbc.JdbcOdbcDriver.
Alternatively, you can install the Java 2 plugin for your browser.
HTML Converter will generate the .html to use the Java 2 plugin.
See the following for more information about the HTML for using the Java 2 plugin:
http://java.sun.com/products/plugin/index-1.4.html and
http://java.sun.com/products/plugin/1.3/features.html
Hope this helps.
Good Luck.
Gayam.Srinivasa Reddy
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support/

Applet database connection : access denied

Connections to my MySql database can only made from applications running on the host. So when I log on to my domain and run a Java application from the console, I can talk to the database. There's no problem with php either. But when I upload an applet, I get an access denied.
Anyone knows how to get around this problem?

Change MySQL so that it will accept connections from users running on whatever system the applet is running on.

Applets, databases, policies, signing, etc...

Similar Messages

Maybe you are looking for