Thanks to Myrna and Rick for your replies, but I am still having problems. I
have been
using derby for several years, but in the past I have used the Window batch
files in the
"bin" directory to start/stop the network server. I tried to follow the
guidelines for
using derbyrun.jar, but I am still having problems.
I copied the policy file 1010_server.policy to a local directory and tried
starting the
network server from the command line as shown below. Perhaps I am
misunderstanding how to
use derbyrun.jar with the policy file, but here is the error that I am seeing
now:
C:\>java -Djava.security.manager
-Djava.security.policy=C:\Java\db-derby\1010_server.policy -jar
%DERBY_HOME%\lib\derbyrun.jar server start
Wed Jan 22 07:07:51 EST 2014 : access denied ("java.util.PropertyPermission"
"derby.__serverStartedFromCmdLine" "write")
java.security.AccessControlException: access denied
("java.util.PropertyPermission"
"derby.__serverStartedFromCmdLine" "write")
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
at
java.security.AccessController.checkPermission(AccessController.java:559)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
at java.lang.System.setProperty(System.java:783)
at org.apache.derby.drda.NetworkServerControl$1.run(Unknown Source)
at org.apache.derby.drda.NetworkServerControl$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.derby.drda.NetworkServerControl.main(Unknown Source)
at org.apache.derby.iapi.tools.run.main(Unknown Source)
Any advice on how to proceed will be appreciated.
_________________________________________
John I. Moore, Jr.
SoftMoore Consulting
email: [email protected]
cell: 843-906-7887
From: Myrna van Lunteren [mailto:[email protected]]
Sent: Friday, January 17, 2014 1:32 PM
To: Derby Discussion
Subject: Re: Network Server Access Permissions and Java 1.7.0_51
Sent from my iPhone
On Jan 17, 2014, at 7:23 AM, "John I. Moore, Jr." <[email protected]> wrote:
Java version 1.7.0_51 (latest version) causes the following error when trying
to start the
network server. I can see from the issue tracker that there is a fix to be
added that
should correct this problem in the next release, but is there an easy
workaround that
exists now? Details would be appreciated.
_________________________________________
John I. Moore, Jr.
Hi John,
Yesterday we also attached releaseNote.html to DERBY_6438 which also describes
this
workaround: you need to use your own policyfile and start networkserver with
java -Djava.security.manager -Djava.security.policy=yourpolicyfilename
org.apache.derby.drda.NetworkServer start
For your convenience, I attach a copy of the updated default 10.10 policyfile to
DERBY-6438 ('1010_server.policy'). You can use that as a starting point.
As an alternative, I guess you *could* mess with the JVMs 'java.policy' file,
but I
imagine that's not supported by the JVM vendors, or they'd have added it to the
workarounds. Plus it will get overwritten by the next JVM update.
I think another alternative is to start networkserver at one of the 'ephemeral'
port
numbers (i.e. start with java org.apache.derby.drda.NetworkServer -p 50000
start), I tried
at port 50000 and that seemed to work. But then you might need to modify your
app to use
that port number.
Regards,
Myrna
