Hi,We have developed the following for an action system written entirely in Java:- SQL Server database- CORBA server (connects to db using JDBC/ODBC)- Applet client connecting to server using CORBA technology.When we access the applet from the local computer using Internet Explorer everything ...

JAAS comes with the NT and Solaris example LoginModules; but I need a JAAS LoginModule for the Apache web server (and/or Tomcat serlvet runner). If you know of one or have any advice on writting one, I would sincerely appreciate it.Thanks,-David :-)

hello all,boolean isProbablePrime(int certainty) could some one kindly tell me what are the range of values the parameter "certainty" can take in this method in the class BigInteger ?i want to find a prime number that is greater than a certain number say, 1234563738392992278474612.this function ...

Hi everybody,I have the following problem. My applet shall be able to retrieve and change manufacturing instructions in a database. Some of the data are images which shall be displayed in a browser, e.g. IE 5.5. The images are stored as SQL Blob data type. A colleague wrote a program in C++ , ...

Hi,I am using JAAS authentication from a web application, the problem is that the login modules that I use, and all the classes that the LoginModule uses are not loaded from the WEB-INF/classes or WEB_INF/lib folder. I have to put them on the jdk/jre/lib/ext. The problem is that the classes I ...

I worte a web page fetcher program and wish to let it supportSSL and Https protocol.I've surveyed the RFC2616 documentation of HTTP1.1 and it doesn't mention anything about SSL or Https...Does anybody know how to enhance it ? Are thereany documentations talking about this? Any help is ...

I am aware that with j2sdk v1.4 beta3 that the jce is packaged with Strong encryption, dictated buy the jurisdiction policy files, local_policy.jar and us_export_policy.jar and that these can be replaced with files that allow 'unlimited' strength encryption! But what about jce1.2.1. I am ...

hi. for a local applet running on IE5 i give full java permissions, but i still get security exceptions.is there a way to run it on IE5 without a plug-in, and without changing policy files, only by changing the browser's configuration?Many thanks.Shay.

Hi,I think I have a security problem with an applet. I created an Authenticator in my applet, it works fine with the applet viewer but with the browsers I get :java.lang.ClassNotFoundException: Java.net.Authenticator with IE and # Verifier error main.init()V: Cannot find class ...

We are currently having a problem running a batch applet from a command prompt on Windows 2000.We are getting the UnknownHostException error.We are using Sun's iPlanet WebServer 4.1 SP7 with SSL enabled using a Verisign Class 3 Server Certificate, behind a Raptor Firewall that utilizes Service ...

I am trying to write a local file from an applet. I have read hundreds of pages about security and I think that I understad the permissions mechanism implemented in the policy files.I have executed with success a sample applet from java.sun.com that writes a file in the actual directory of the ...

Would like to know how to excrypt the .class file (object), so that you cannot decompile the file to generate the .java file (source).Request you to kindly respond to this query at the earliest.ThanksGowri.O

Hello,I download jaas1_0.zip on sun.com. I want to test it. So I make a batch file : -@ECHO OFFecho "Starting JAAS Example..."C:\jdk1.3.1_02\jre\bin\java -classpath lib\jaas.jar;doc\samples\sample.jar;doc\samples\sample_action.jar;doc\samples\sample_module.jar -Djava.security.manager ...

When I run my client app build by the deplytool I get this error:ERROR: Unexpected java.lang.Exception.java.security.AccessControlException: access denied (java.util.PropertyPermission * read,write)at java.security.AccessControlContext.checkPermission(AccessControlContext.java:272)at ...

I am creating for a project a web application which will allow companys to store there business data on a database on a remote server. My problem is that I want to store each individual bussinesses data on seperate tables rather than in seperate databases as it is easier to create seperate ...

my system require:Apache1.3.20+mod_ssl2.8.4-1.3.20+openssl0.9.6c+jdk1.3.1_02+tomcat3.3a+mod_jkin mod_jk.conf-LoadModule jk_module libexec/mod_jk.so<IfModule mod_jk.c>JkWorkersFile /usr/local/tomcat3.3/conf/jk/workers.propertiesJkLogFile /usr/local/apache/logs/jk.logJkLogLevel errorJkMount ...

Here's a sticky security questionI want my server to trust that a client has performed the operation it says it has on some data held by the client (the client performs the operation to reduce server load). The server can supply code to perform the operation to the client, via a serialized ...

Hello,I want to create a login JSP and was wondering the best way. The web server will be on SSL and I was thinking of 2 basic HTML text fields eg user id and password and then posting it. But I have read that this is not really a secure method - what would be the best method to do this ? ...

I'm having a problem retrieving private keys from a SUN JKS keystore that I populate programmatically. I use the setKeyEntry method of KeyStore that does *not* include the password, but rather includes an already encoded EncryptedPrivateKeyInfo byte array. The JDK API even states that "If the ...

[Reply]Sometimes, for no apparent reason that I can see, javakey installations gobananas (like mine currently has).When I do:javakey -cs mod truejavakey -gk mod DSA 1024I get:java.lang.NullPointerExceptionat sun.security.provider.Main.generateKeyPair(Main.java:1022)at ...

Hello,I have build an application with an authentication with a NT Domain. I have some authorization aspects, too. That means, not every authenticated user has the rights to do some actions. I have port this application to a webapp. The authentication part works fine. The user has to input his ...

PAM supports the notion of having differentmodules types, such as login, password, sessionand account modules.We are currently using JAAS for authentication/login.It would be nice if we have the same style of APIfor password management. Any plans from Sunto support the rest of the PAM designs? ...

Hi,I was wondering is there a way to create a simple Secure FTP client (SSH) using the Java libaries? I can only find external implementations and since I'm working on a commercial project I don't really want to use other people's code. Is there anyway of using the JSSE libraries to connect ...

Hi,I just need to change java.policy permissions dynamically in the program itself?. Can we do it?. I heard abt setPolcy() command but can anyone help me out to get a sample code in that, because it's not that clear in the API documentation.Thanks a lot.RegsCrishantha ...

I have problems to handle files (Just read a File) on the server when I put an RMISecurityManager. I don't understand because I have allowed all permissions in my policy. Could you help me?

I have a Verisign Java Code signing certificate and it's installed on my old machine. How do I move that certificate to my new machine?DO I just need to import it on the new machine? ? keytool -import -file cert.cer ?I tried that and get an error.Thanks-Mike A. ...

Can anyone tell me how to setup SocketPermission and / or policytool, to force a client Socket to throw an AccessControlException ?Thanks your for time,James (james@jcnet.fsnet.co.uk)

I have a applet that are using a JAAS for authentication. How do I tell JAAS the name of the configuration file when I can not set the system property "java.security.auth.login.config" in a applet or WebStart application? Does anyone have any solution for this?Regards Fredrik Bertilsson ...

Hi.. I am not sure if this is the right forum... but i cannot find one for JAAS.Anyways... i had a question with the callbacks.I want my callbackhandler to actually take a callback and display a JSP page instead of prompting the user for some input.The callback handler should wait unless the ...

hi ..... i'm asking about solution for my problem which is how can i let my browser (explorer oR Netscape) to read from file and write to file in my pc..my applet is working with AppletViewer which i can read and write to file in my pc ,but when i load it in the Browser(netscape) it just read ...

Well perhaps I am getting cracy but I think that there is some kind of viruses specially designed to slow down my Java applications.3 month ago I was working well with my FORTE, but 3 week ago it stated to fail in several situations and some times it is very very slow.I have re-installed Forte, ...

Hi everybody!I need to change the windows password with JAVA. How can i do it?Thanks a lot,Eduardo.

My question is if I can secure my application, with these needs:The class-file cannot be de-compiled so that the passwords and user-id's are recovered.On startup, I want the user to fill in his own user id and password, after which he gets restricted option in the program.Could you give me ...

Hi all,I try the ldap authentication with the sun LoginModule JndiLoginModule. I have a problem with it. I always an exception "User not found".My ldap looks like:dn: dc=mycompany,dc=comobjectClass: dcObjectobjectClass: organizationdc: mycompanyo: Example Organizationdesription: The Exmple ...

I am currently trying to get the JAAS module for Windows NT working. Originally, I was getting a SecurityException, based on trying to load the NT library. I made changes to my java2.policy file to resemble [ 1 ]. Now, I get a "OpenPolicy failed" message in a LoginException thrown from ...

Hi all, i hope someone can help me here before i have to go round and instal virtual machine on all my users. most of users have j2re for windows installed, and when accessing my extranet and open a java window a message box appears called enter network password with firewall then the name and ...

Hi,Though generally we give permissions to a codebase instead of particular .class file in the java.policy file. I want to grant special permissions to a particular class say in.files.MyFile and none other file in that package or codebase.

I try to verify users on a Linux-system using the UnixLoginModule(Java SDK 1.4). As a basis I used the sample program provided by sun with JAAS and adopted it for using the UnixLoginModule. When starting the program I get the following ...

I try to verify users on a Linux-system using the UnixLoginModule(Java SDK 1.4). As a basis I used the sample program provided by sun with JAAS and adopted it for using the UnixLoginModule. When starting the program I get the following ...

Hi.I try to write a login piece of code tht checks against a windows 200 Server Active Directory.I started from the tutorial code (see my code below). For simplicity, I have hardcoded the username and password. I specified the kerberos login module in my jaas.config file.I always get the ...

Hi,I'm want to do the following:A user enters in a computer (with windows 2000 or NT) and is authenticated, this authentication is valid to all the objects in the network (using kerberos), is it possible to use this authencation process so that users don't have to login again in applications ...

This may be covered in a previous discussion, but I have a need to authenticate against NT (no Active Directory or LDAP) from an application server running on Solaris. I see that there are login modules for NT and Solaris, but it's not clear to me that the two modules allow me to do what I ...

This may be covered in a previous discussion, but I have a need to authenticate against NT (no Active Directory or LDAP) from an application server running on Solaris. I see that there are login modules for NT and Solaris, but it's not clear to me that the two modules allow me to do what I ...

Hi:-)There is a way to deny the use of my applet in a html page that it isnt on my server web? If someone use my applet in a way like <applet .... CODEBASE=" http://myserver" eccc> (hot linking, ecc...)how can i protect myself?and....there is a way to avoid browser to cache my ...

I am using Sun JDK 1.4.0 on Windows 2000I would like to be able authenticate NT users via the JAAS API and NTLM.Has anybody been able to do this?I want users to be able to input their username and password so that I can authenticate them via NTLM.My (naively written) sample app is included ...

Hi,This class is in "com.sun.security.auth.callback " included in JDK 1.4.I'm trying to make an equivalent class. But here's my problem : my main class calls : --LoginContext loginContext = new LoginContext("Main", new DialogCallbackHandler());--I've made a DialogCallbackHandler class which ...

Hi I am implementing a client/server applet and I would like to know if there is any way to open a conexion from an applet to another applet that is in other machine over the internet without having to sign the applet.Thatnks

thanks ahead

I tried starting up BEA WebLogic Server 6.1 (which apparantly uses JAAS 1.0) with J2SDK 1.4. I got the following exception:java.lang.SecurityException: Unable to locate a login configurationat com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java:97)at ...

Hi,I just started reading info about JAAS to integrate it into my current project. So to have an inside view of how it works, I decide to write my own Configuration class. Instead of using standard files, I want to use XML files. That will also allow me to learn about XML and JDOM.But so far, I ...