Using Visibroker in Signed Applet - access denied (java.net.SocketPermissio

Hello,

I have an signed applet which using visibroker to connect to the server.

I'm getting this exception:

org.omg.CORBA.COMM_FAILURE: java.security.AccessControlException: access

denied (java.net.SocketPermission x.x.x.x:51175 connect,resolve) minor

code: 0 completed: No

The IP address listed in the stack trace is the same as the URL of the HTML

page containing the applet. So how do I get a security exception? And even

so, I do not understand how I have this error when my applet is signed.

The vbjorb.jar file is located on the client PC. My applet is located on

the server.

I have tried wrapping the call that fails with:

AccessController.doPrivileged(new PrivilegedAction() {

public Object run() {

but that doesn't work. I signed the vbjorb.jar but that didn't work. I

configured the java.policy to give the vbjbroker.jar file AllPermission but

that doesn't work. However, if in the java.policy file I put:

grant {

permission java.security.AllPermission;

};

it does work. So I know it's a problem related to security permissions.

I'm just not sure how to solve it. The next thing I'm going to try is to

combine my 2 jars (vbjorb.jar & applet.jar) into a single signed jar. If

this doesn't work then I will be completely out of ideas.

Here are the technical version details:

JDK 1.4.2_06

Visibroker 4.5

Windows XP

MS Internet Explorer 6

A few more odd things: This works with Windows 2000 at the client's site,

but not XP. The client mailed us one of their XP PCs and it works at our

place. I assume this is because it's deployed differently at the client

site but I cannot explain how it can work with Windows 2000 and not XP at

their site.

If anyone has any ideas I'd be very grateful. Thank you very much.

Michael

[1957 byte] By [cunparisa] at [2007-11-26 14:50:07]
# 1

I added to the .java.policy:

keystore "raystore";

grant SignedBy "susan" {

permission java.security.AllPermission;

};

grant codeBase "file:${java.home}/lib/endorsed/vbjorb.jar"

{

permission java.security.AllPermission;

};

and I now get a Connect Refused. So it's not an access denied like before. But what is weird is if I put in the basic grant AllPermission then it works! So something isn't getting permission and it's not giving a security exception access denied error either.

cunparisa at 2007-7-8 8:38:14 > top of Java-index,Security,Signed Applets...
# 2
are both jars signed?
zparticlea at 2007-7-8 8:38:14 > top of Java-index,Security,Signed Applets...