[DERBY-2811] Specifying -h 0.0.0.0 with default security manager bars clients from connecting from any host

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.3.1.4
• Fix Version/s: 10.3.1.4
• Component/s: Network Server
• Urgency: Blocker
• Issue & fix info: Release Note Needed
• Bug behavior facts: Security
• Assignee: Richard N. Hillegas
• Reporter: Dag H. Wanvik
• Created: 13/Jun/07 17:05
• Updated: 30/Jun/09 16:12
• Resolved: 29/Jun/07 00:08

Description

The default policy file installed has this stanza:
:
permission java.net.SocketPermission "${derby.drda.host}:*", "accept";
:

Normally, specifying -h 0.0.0.0 to NetworkServerControl lets clients connect
from any host, but with the default policy file installed
connecting fails even from localhost.

I think this is because SocketPermission only recognizes "*" as a catch-all.

Issue Links

• is related to: DERBY-2814 Specifying derby.* properties used in default policy file in derby.properties does not work
• relates to: DERBY-526 Network Client URL cannot take the IP Address as host name for IPV6 machines