[DERBY-3322] Server guide refers to phantom property in template policy file for the Network Server

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 10.3.1.4, 10.3.2.1
• Fix Version/s: 10.4.1.3
• Component/s: Documentation
• Environment: N/A
• Assignee: John Embretsen
• Reporter: John Embretsen
• Due: 21/Mar/08
• Created: 16/Jan/08 14:46
• Updated: 14/Mar/08 12:57
• Resolved: 14/Mar/08 12:57

Description

The Server and Administration guide contains a section about customizing the Network Server's security policy, based on the template policy:

http://db.apache.org/derby/docs/dev/adminguide/tadminnetservcustom.html

This section mentions that the variable ${derby.security.host} should be replaced with a suitable value.

However, the template policy, at /demo/templates/server.policy (released binaries) or java/drda/org/apache/derby/drda/template.policy (SVN codeline), does not refer to any variable or property called ${derby.security.host}. Instead, the policy file specifies the wildcard address, with appropriate comments:

<quote>
// Accept connections from any host. Derby is listening to the host
// interface specified via the -h option to "NetworkServerControl
// start" on the command line, via the address parameter to the
// org.apache.derby.drda.NetworkServerControl constructor in the API
// or via the property derby.drda.host; the default is localhost.
// You may want to restrict allowed hosts, e.g. to hosts in a specific
// subdomain, e.g. "*.acme.com".

permission java.net.SocketPermission "*", "accept";
</quote>

See also http://www.nabble.com/Customizing-the-Network-Server%27s-security-policy-%28docs-vs.-reality%29-td14841290.html

Issue Links

• is related to: DERBY-2820 Improve documentation in Admin Guide regarding Network Server security policy