java.security.AccessControlException: access denied (java.net.SocketPermission 127.0.0.1:1099

Hi , I am trying to establish a RMI connection on my local computer. I have created a Server class and generated Skeletons for that through rmic . The jdk version i am using is jdk1.4. When i run the Server class it successfully binds with the default port and localhost. But when i run the client class i get this error message.- java.security.AccessControlException: access denied (java.net.SocketPermission 127.0.0.1:1099 .
Please note that i also thought that it could be a certificate issue and hence i copied Server and Client class in the same directory and tried, but still received the same error.
The exception is raise while executing the following line in client.java
registry.lookup(name);
I will appreciate if anyone can help. I am attaching my Server and Client class.
Server.Java package test.rmi; import java.rmi.*; import java.rmi.registry.*; import java.rmi.server.UnicastRemoteObject; public class Server implements MyInterface { private static final long serialVersionUID = 1L; public Server()throws RemoteException { super(); } public String SaySomething() { return "Server Speaking"; } public static void main(String []args)throws Exception { System.setProperty( "java.security.policy", "java.policy" ); if(System.getSecurityManager() == null) System.setSecurityManager(new SecurityManager()); try { String name = "MyInterface"; MyInterface mi = new Server(); MyInterface stub =(MyInterface) UnicastRemoteObject.exportObject(mi,0); Registry registry = LocateRegistry.createRegistry(0); registry.rebind(name, stub); System.out.println("Server bound"); } catch (RemoteException ex) { ex.printStackTrace(); System.out.println("remote ex"); } catch (Exception e) { System.out.println("oops"); } } }


Client.java package test.rmi; import java.rmi.*; import java.rmi.registry.*; import java.security.AccessController; import java.security.PrivilegedAction; public class Client { public static void main(String []args) { Object obj = (Object)AccessController.doPrivileged( new PrivilegedAction() { String success= "false"; public Object run() { System.setProperty( "java.security.policy", "java.policy" ); if (System.getSecurityManager() == null) System.setSecurityManager(new SecurityManager()); try { String name = "MyInterface"; Registry registry = LocateRegistry.getRegistry("127.0.0.1",0); MyInterface mi = (MyInterface) registry.lookup(name); System.out.println(mi.SaySomething()); success= "true"; } catch (Exception e) { e.printStackTrace(); } return success; } } ); } }

MyInterface.java package test.rmi; import java.rmi.Remote; import java.rmi.RemoteException; public interface MyInterface extends Remote { public String SaySomething() throws RemoteException; }

You probably installed a SecurityManager (that's "normal" and often flat out necessary in RMI). If you did so, then it looks like you failed to grant your code the necessary permissions.

It's helpful, when learning this stuff, to create a security configuration that grants "AllPermission" to all code. That way, when you're learning the mechanics of the system, stuff works. Then, when it's working, you can / should reduce the permission set to the minimum actually required to work succesfully.

Thanks Simon for your feedback. I have verified that my Server is publishing my interface on the network. I verified it through netstat.

TCP jay-pc:1099 jay-pc.resource.labour.net:0 LISTENING
I have added full path for java.policy like:
System.setProperty( "java.security.policy","C:\\j2sdk1.4.2_03\\jre\\lib\\security\\java.policy" );

and now when i test to see if anything i find anything in registry before lookup i get no value. I am testing it by doing this:
Registry registry = LocateRegistry.getRegistry("127.0.0.1",1099); String[] list = registry.list(); if (list.length == 0) { System.out.println("No names bound in registry."); } else { System.out.println("Following names bound in registry: "); for (int i = 0; i < list.length; i++) { System.out.println(list[i]); } }
This shows that something is prohibiting my client to get the registry. It could be policy or anything else. I need your help in understanding what else i can try.

Thanks a mil
Jay

I managed to connect and get response from the Server when i kept the Server class and Client class in the same directory. I just checked through netstat that port 1099 was occupied by another process so i
changed the port to 3333 and i could get the response from server by calling my Client.
Now i am testing by keeping my Client and Server in two different projects. But i am getting the below error.

java.rmi.ConnectException: Connection refused to host: 10.*XX.XXX.XX; nested exception is: java.net.ConnectException: Connection refused: connect at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:567) at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:185) at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:171) at sun.rmi.server.UnicastRef.newCall(UnicastRef.java:313) at sun.rmi.registry.RegistryImpl_Stub.list(Unknown Source) at Client$1.run(Client.java:39) at java.security.AccessController.doPrivileged(Native Method) at Client.main(Client.java:22)

my question is do we have to copy the skelton classes which are generated by rmic to the Client directory?

It appears you're using the default security configuration. That one prohibits almost everything. You need to create a more flexible policy file and use that instead.

Thanks Simon, I have been able to get connection. I just changed the java.policy file and granted access to all and it worked.
Now i am facing issues while transferring object over the network. I always get null value from the object at client side. The values are set on the server but when it reaches client it becomes null. Though if i set a string i can easily get that on the client side.
Here are my server and client classes.
package test.rmi; import java.rmi.*; import java.rmi.registry.*; import java.rmi.server.UnicastRemoteObject; import java.util.ArrayList; public class Server implements MyInterface { private static final long serialVersionUID = 1L; public Server()throws RemoteException { super(); } public ArrayList SaySomething(Citizen citizen) { ArrayList list = new ArrayList(); //Citizen cit = new Citizen(); citizen.setName("Jay"); citizen.setSurname("Singh"); for(int i = 0 ; i< list.size();i++) citizen = (Citizen)list.get(i); System.out.println("Name == " + citizen.getName()); System.out.println("Name == " + citizen.getSurname()); return list; } public static void main(String []args)throws Exception { System.setProperty( "java.security.policy", "C:\\j2sdk1.4.2_03\\jre\\lib\\security\\java.policy" ); if(System.getSecurityManager() == null) System.setSecurityManager(new SecurityManager()); try { Citizen cit = new Citizen(); cit.setName("Jay"); cit.setSurname("Singh"); String name = "MyInterface"; // MyInterface mi = new Server(); MyInterface mi = new Server(); // MyInterface stub =(MyInterface) UnicastRemoteObject.exportObject(mi,3333); MyInterface stub =(MyInterface) UnicastRemoteObject.exportObject(mi,3333); Registry registry = LocateRegistry.createRegistry(3333); System.setProperty("java.rmi.server.hostname","10.***.***.**"); registry.rebind(name, stub); String[] list = registry.list(); if (list.length == 0) { System.out.println("No names bound in registry."); } else { System.out.println("Following names bound in registry: "); for (int i = 0; i < list.length; i++) { System.out.println(list[i]); } } System.out.println("Server bound"); /* ArrayList arr = new ArrayList(); arr = mi.SaySomething(cit); Citizen citizen = new Citizen(); for(int i = 0 ; i< arr.size();i++) citizen = (Citizen)arr.get(i); System.out.println("Name == " + citizen.getName()); System.out.println("Name == " + citizen.getSurname()); */ } catch (RemoteException ex) { ex.printStackTrace(); System.out.println("remote ex"); } catch (Exception e) { System.out.println("oops"); } } }

This is the Client Class

package test.rmi; import java.rmi.*; import java.rmi.registry.*; import java.security.AccessController; import java.security.PrivilegedAction; import java.util.ArrayList; public class Client { public static void main(String []args) { Object obj = (Object)AccessController.doPrivileged( new PrivilegedAction() { String success= "false"; public Object run() { System.setProperty( "java.security.policy", "C:\\j2sdk1.4.2_03\\jre\\lib\\security\\java.policy" ); // System.getProperty( "java.security.policy"); if (System.getSecurityManager() == null) System.setSecurityManager(new SecurityManager()); // System.getSecurityManager().checkPropertyAccess("java.security.policy"); /* if(System.getProperty( "java.security.policy")!= null) String property = (String)System.getProperty("java.security.policy");*/ try { // System.getSecurityManager().checkPropertyAccess("java.security.policy"); String name = "MyInterface"; String value ; Registry registry = LocateRegistry.getRegistry("10.128.101.51",3333); String[] list = registry.list(); if (list.length == 0) { System.out.println("No names bound in registry."); } else { System.out.println("Following names bound in registry: "); for (int i = 0; i < list.length; i++) { System.out.println(list[i]); } } test.rmi.MyInterface mi = (MyInterface) registry.lookup(name); ArrayList alist = new ArrayList(); Citizen citizen = new Citizen(); alist = mi.SaySomething(citizen); for(int i = 0; i< alist.size();i++){ citizen = (Citizen)alist.get(i); System.out.println(citizen.getName()); System.out.println(citizen.getSurname()); } success= "true"; } catch (Exception e) { e.printStackTrace(); } return success; } } ); } }

Citizen Class

package test.rmi; import java.io.Serializable; import java.rmi.Remote; public class Citizen implements Serializable,Remote { private static String name ; private static String surname; public static String getName() { return name; } public static void setName(String name) { Citizen.name = name; } public static String getSurname() { return surname; } public static void setSurname(String surname) { Citizen.surname = surname; } }

Objects in RMI can be passed by value, or by reference. Your code looks like you're trying to have the server modify the object created by the client. For that, you need the client object to be passed by reference. That only happens if you export it as an RMI remote object. If you do that, it doesn't need to be Serializable. Serializable is use to pass by value, and since you never add the citizen to the array list in the server, then no copy of the modified object will ever get back to the client.

I suggest that pass by value is probably the more robust semantic, since passing references around, while very powerful, does mean you must address any potential concurrency issues.

Hi Simon
Thanks for highlighting that i missed to add the citizen object to the list. I made that mistake while pasting the code into the code section. But actually i am adding citizen object in SaySomething() method.
I just want to achieve a scenario where i pass an object to the server(say in this case citizen ), and the server return that object with Values which can be used on the Client side.
In my example i am passing an empty citizen object to the Server and setting name and surname values to the object and returning it back to the client.
I strongly believe i am making mistake in implementing serialization, the reason being i can receive primitive values like Strings values from server but fail to receive object values.
I want your feedback if i am doing the below things correct:
1. I copied the generated Skelton server classes into my Client directory.
2. I have MyInterface interface on both client side and server side which extends Remote public interface MyInterface extends Remote
3. I have Citizen class which implements Serializable,Remote public class Citizen implements Serializable,Remote {
4. I have the citizen class on both Server and Client side.

Please guide me correcting anything thats not fine here.

regards
Jay

If you're passing objects by value (copying the values and creating a new object on the receiving side) which I believe you are, then the objects in question should not be remote, and should not be exported. They should be Serializable, and nothing else.

If you make something into an exported Remote object, then the stub to it is passed around, and you're modifying the "server side" (i.e. original) object, not creating a new one and passing it around.

RESOLVED

I managed to resolve the issue where i was not able to receive values from my object which was set on the Server side. My object value always used to be null on the Client side.
I was only making one mistake of declaring the variables as static. I removed the static keyword and can pass the objects between Client and Server.
Rest of the things remains as its declared in my previous post.

Regards
Jay