aspose file tools*
The moose likes Developer Certification (SCJD/OCMJD) and the fly likes How important is codebase and security Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Certification » Developer Certification (SCJD/OCMJD)
Bookmark "How important is codebase and security" Watch "How important is codebase and security" New topic
Author

How important is codebase and security

Rajesh Matti
Ranch Hand

Joined: Jan 07, 2002
Posts: 121
I am not an expert in RMI, so not sure, how significant codebase and security for this exam.

Please comment on my approach.
1. I am planning to include the stubs with the client.
2. I am not planning to suggest the usage of codebase.
3. I will use a policy file, does this mean that I must intialize security manager too ?.
Please help me get educated.
Thanks,
-Rajesh
Peter den Haan
author
Ranch Hand

Joined: Apr 20, 2000
Posts: 3252
Without a security manager, a policy file doesn't do anything. You do not need an RMISecurityManager, the bog standard SecurityManager is enough. In fact you do not strictly need security at all, although I would recommend it certainly on the server side.
- Peter
Rajesh Matti
Ranch Hand

Joined: Jan 07, 2002
Posts: 121
Peter, Thanks for the information. How about code base ?. I finished the assignment very quickly and just class documentation took lots of time, now these minor issues are killing me.
Thanks again,
-Rajesh
Sai Prasad
Ranch Hand

Joined: Feb 25, 2002
Posts: 560
If you want to use the java.rmi.server.codebase property during the server startup, you need to use absolute URL which is not possible for my implementation since I didn't use a HTTP server or didn't want to hardcode the drive letter. Also the codebase property really matters only when the rmiregistry tries to instantiate the _Stub instance.
Take a look at the thread for my explanation.
Mark Spritzler
ranger
Sheriff

Joined: Feb 05, 2001
Posts: 17259
    
    6

I wish I had the link, but yesterday Peter said that we don't need the security manager on either side, since we are not downloading the stubs dynamically. I myself put a SercurityManager only on the client. I could never get it to work on the server. I have a policy file, but it gives all access, so if there was no SecurityManager on the client, I wouldn't have needed it at all. I did not have a policy file for the server
Mark

Sheesh you walk away for a 30 minute meeting and everyone posts before you. What they just said.
[ April 16, 2002: Message edited by: Mark Spritzler ]

Perfect World Programming, LLC - Two Laptop Bag - Tube Organizer
How to Ask Questions the Smart Way FAQ
Peter den Haan
author
Ranch Hand

Joined: Apr 20, 2000
Posts: 3252
Ultimately it's easy to see if you need a SecurityManager, isn't it? --- Comment out the code and run Then, if you wish, use -Djava.security.manager= and -Djava.security.policy= to experiment a bit with the things.
- Peter
Rajesh Matti
Ranch Hand

Joined: Jan 07, 2002
Posts: 121
My Thanks to all of you. Great forum with great people.
-Rajesh
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: How important is codebase and security