Kbase 19528: SonicMQ: Security Exception Connecting to Broker with Applet
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
7/24/2000 |
|
SUMMARY:
This solution applies to Progress SonicMQ Version 2000.x. If you connect to a message broker from an applet with Microsoft Internet Explorer 5, the following security exception message appears if the location of the host remote SonicMQ message broker is different than the machine the internet service is on (for example, WWW with IIS):
com.ms.security.SecurityExceptionEx[progress/message
et/tcp/f.<init>]
: cannot connect to "testhost"
at com/ms/security/permissions/NetIOPermission.check
at com/ms/security/PolicyEngine.deepCheck
at com/ms/security/PolicyEngine.checkPermission
at com/ms/security/StandardSecurityManager.chk
at com/ms/security/StandardSecurityManager.chkex
at com/ms/security/StandardSecurityManager.checkConnect
at java
et/InetAddress.getAllByName0
at java
et/InetAddress.getByName
at java
et/Socket.<init>
at progress/message
et/tcp/f.<init>
at
progress/message
et/tcp/ProgressTcpSocketFactory.createProgressSocket
at progress/message
et/ProgressSocketFactory.createProgressSocket
at progress/message/zclient/Connection.openSocket
at progress/message/zclient/Connection.connect
at progress/message/zclient/Connection.connect
at progress/message/jclient/Connection.<init>
at progress/message/jclient/TopicConnection.<init>
at
progress/message/jclient/TopicConnectionFactory.createTopicConnection
SOLUTION:
The reason of the security exception is that by default un-trusted applets have no permissions to access network resources that are available to the machine the Internet Service Provider (ISP) is running on.
Tests show connections work fine if the SonicMQ Message Broker is running on the same machine as the internet service (for example, IIS is running).
Another solution is to redirect the messages over an application server on that machine and starting it with a user account that has the appropriate network access rights.