A basic server policy (which you should customize) can be found in the Derby Security Guide at http://db.apache.org/derby/docs/10.15/security/rsecbasicserver.html It is also located in the bin distribution at demo/templates/serverTemplate.policy.

Hope this helps,
-Rick

On 11/8/19 2:26 AM, Zero wrote:
On 11/8/19 11:10 AM, Kerry wrote:
1. If you don't have $DERBY_HOME set then I do believe Derby will take it's bike from whichever directory it has been started from. 2. Your Derby log confirms it's a permissions error. A *CRUDE* fix for this is:

Locate the file 'java.policy'. it's probably located in /etc/java-11-openjdk/security.
Add the following immediately above other permissions within that file:

permission java.security.AllPermission;

This however should not be a long term fix and you should investigate a more secure solution. Maybe others on this mailing list might have a more informed solution.

Kerry


Better specify separately the security policy for the database.

Include on the command line

-Djava.security.manager -Djava.security.policy=$DERBY_HOME/server.policy"

Maybe there is in the derby demo directory an example.

Harm-Jan


Sent from BlueMail <http://www.bluemail.me/r?b=15726>
On 8 Nov 2019, at 09:40, Banibrata Dutta <banibrata.du...@gmail.com <mailto:banibrata.du...@gmail.com>> wrote:

    Thanks Kerry. Finally found 'derby.log' which was in my $HOME (not
    in $DERBY_HOME), perhaps because that's where I started derby
    network from.
    The log file has following 3 entries towards the end, and indeed
    it seems to be permission problem:

    Fri Nov 08 12:34:46 IST 2019 Thread[DRDAConnThread_4,5,main]
    (DATABASE = seconddb), (DRDAID = {5}), Failed to create database
    'seconddb', see the next exception for details.
    Fri Nov 08 12:34:46 IST 2019 Thread[DRDAConnThread_4,5,main]
    (DATABASE = seconddb), (DRDAID = {5}), Startup failed due to an
    exception. See next exception for details.
    Fri Nov 08 12:34:46 IST 2019 Thread[DRDAConnThread_4,5,main]
    (DATABASE = seconddb), (DRDAID = {5}), Java exception: 'access
    denied ("java.lang.RuntimePermission" "getenv.SOURCE_DATE_EPOCH"):
    java.security.AccessControlException'.

    What should be done to provide permissions ? Is the permission
    going to be Derby specific ?

    On Fri, Nov 8, 2019 at 2:44 PM Kerry <
    karaf-u...@avionicengineers.com
    <mailto:karaf-u...@avionicengineers.com>> wrote:

        Hi,

        This sounds like it might be a Java permissions error as you
        are using Open JDK 11. If you look in the derby.log file
        located in $DERBY_HOME it will give an indication. Post the
        content of it here.

        Kerry

        Sent from BlueMail <http://www.bluemail.me/r?b=15726>
        On 8 Nov 2019, at 07:29, Banibrata Dutta <
        banibrata.du...@gmail.com <mailto:banibrata.du...@gmail.com>>
        wrote:

            Hi Folk,

            Trying to use Derby for the first time. I am not an expert
            Java developer but dabbling for learning me some. I
            followed the official Derby instructions for installing
            the latest Derby on my freshly minted Lubuntu (lighter
            Ubuntu using LXDE) 64-bit 18.04.3 setup, with OpenJDK11
            (default).

            Have started Derby in network server mode like this:
            $ java -jar $DERBY_HOME/lib/derbyrun.jar server start

            And then trying to using ij to create the database like this:
            $ ij
            ij version 10.15
            ij> CONNECT
            'jdbc:derby://localhost:1527/seconddb;create=true';
            ERROR XJ041: DERBY SQL error: ERRORCODE: 40000, SQLSTATE:
            XJ041, SQLERRMC: Failed to create database 'seconddb', see
            the next exception for details.::SQLSTATE:
            XBM01::SQLSTATE: XJ001
            ij>

            Trying to read around, there are suggestions to look into
            derby.log file, but I found none so far. What gives ? How
            to proceed ? Didn't find any general troubleshooting
            instructions in the docs. Tried the FAQ, but no obvious
            clues.

            cheers,
            B






Reply via email to