• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

about security manager

 
Jimmy Chen
Ranch Hand
Posts: 54
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I'm reading <Java RMI>(O'reilly).I find difficulty in understanding a sentence in this book, which says: "You don't have to use a security manager with your RMI application. The only basic feature of RMI that won't work is dynamic classloading. However, both the RMI registry and the activation daemon do use security policies".

Although RMI registry uses the security policies why "You don't have to use a security manager with your RMI application"? It seems inconsistent.

Actually, I can run rmiregistry and RMI application without the security manager.

So, who can help me to resolve this apparent conflict?

Many, many, many, many thanks!!!
 
sopal Pal
Ranch Hand
Posts: 83
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
A security manager is required in any JVM that needs to download code, and RMI clients need to download RMI stubs (as well as any other custom classes or interfaces needed to communicate with the RMI server).
 
Jimmy Chen
Ranch Hand
Posts: 54
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thank you sopal!
But why I can run rmiregistry and RMI application without use the security manager?

The book also says:"You don't have to use a security manager with your RMI application".

I'm confused!
 
sopal Pal
Ranch Hand
Posts: 83
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
because the code is not being downloaded for u. It can be found in its local classpath
 
Jimmy Chen
Ranch Hand
Posts: 54
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
thanks a lot. I got it
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic