Nick Greeves wrote:
> My site has been bitten by this recent
> java.security.AccessControlException problem. It seems only to be FF/Win
> users who suffer.
>
And also FF/Linux users.
> Click on the bottom left structure in the reaction scheme once the page
> has loaded. You should see a new structure in the Jmol window. I'm using
> image maps to execute href="javascript:jmolScript('load
> model/cycloaddition/ozonolysis/step_2/step_2.xyz; and that seems to be
> required. The same command can be executed from the console as usual.
>
> http://www.chemtube3d.com/Cycloaddition%20-%20Ozonolysis.html has the
> problem
> http://138.253.125.24/~ng/external/Cycloaddition%20-%20Ozonolysis.html
> is fine - It is the same page on the same server!!
>
> Can any DNS expert advise on how to fix this? In case it is important
> the server is running Mac OS X 10.4.x server.
>
The problem is, that starting with Java 1.6.0_03 a security fix was
introduced. This fix apparently leads to a comparison between the domain
from which the applet was launched and the domain to which the address
(IP) of the server belongs from which a file is loaded into the applet.
The second domain apparently is determined by first asking a name server
for the IP address of the second server. And then the name server is
apparently asked for the name of the server with this address. If the
domain names are different this is considered as a higher security risk
and flagged as such.
Here comes in the difference between Firefox and Internet Explorer.
Internet Explorer doesn't care and loads the file into the applet.
Firefox does care and refuses to load the file.
So in your case the following output of the "host" command on Linux
(similar to "nslookup" on MacOS X) should resemble what happens:
1) host www.chemtube3d.com
www.chemtube3d.com is an alias for osxs.ch.liv.ac.uk.
osxs.ch.liv.ac.uk has address 138.253.125.24
2) host 138.253.125.24
24.125.253.138.in-addr.arpa domain name pointer osxs.ch.liv.ac.uk.
So it looks as if "osxs.ch.liv.ac.uk" would be in a different domain
than "www.chemtube3d.com".
If you don't provide a server name but only an IP then the comparison of
the domains is either not been done or will always lead to the same
domain (if the file load URL also uses the same IP). And this means the
page works also in Firefox.
Interestingly your page with "www.chemtube3d.com" did work with Firefox
2.0.0.14 and Java 1.6.0_05. In contrast our "JenaLib Jmol Viewer" which
had a similar problem, didn't work in this configuration.
In our case the renaming of the institute ("IMB Jena" -> "FLI Jena")
resulted in a new domain name for the website ("fli-leibniz.de") while
internally the servers still have their old domain ("imb-jena.de").
Our solution is currently to start the "JenaLib Jmol Viewer" with the
old domain name
("http://www.imb-jena.de/cgi-bin/3d_mapping.pl?CODE=1deh";) instead of
the new one ("http://www.imb-jena.de/cgi-bin/3d_mapping.pl?CODE=1deh";)
and it seems to work.
In your case this would mean to use "osxs.ch.liv.ac.uk" instead of
"www.chemtube3d.com" (or maybe define "www.ch.liv.ac.uk" as an alias and
use this). But I guess you won't like this solution because Jmol is
integral part of many of your pages and you prefer a more memorable
name. (And then you won't like using the IP instead either.)
You might actually shift "osxs.ch.liv.ac.uk" to "www.chemtube3d.com" so
that the name server requests will provide the correct domain for it's
IP. (But this might give you even more trouble. In our case this would
have meant a lot of work and potentioal problems for our system
administrator and we decided not to try this.)
It might also work if the server "www.chemtube3d.com" would do an
automatic redirection to "osxs.ch.liv.ac.uk".
Good luck,
Rolf
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Jmol-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jmol-users
