||unity-dev|| Temporary Patch forFlashPlayer9.0.124.0SecurityRestrictions

Discussion list for Unity developers. unity-dev at moock.org
Thu Apr 10 19:37:14 CDT 2008


This particular problem, with uadmin and u2, and not having anything to do
with this patch, has been a long-standing problem for me and many of my
hosted u2 clients. I've brought this up to Colin and Derek a few times in
the last 3 years (but a long while ago), and it has never been reliably
reproduced and never fixed.

again, this issue, has nothing to do with this new patch.

On Thu, Apr 10, 2008 at 8:26 PM, Discussion list for Unity developers. <
unity-dev at moock.org> wrote:

> ok, so here are the logs when starting unity, where policy seems to be ok:
> 2008-04-11 02:21:34,830 INFO  - Creating namespace level udefault for full
> name udefault
> 2008-04-11 02:21:34,838 WARN  - Room type null initialized and started
> under
> id: unity
> 2008-04-11 02:21:34,838 WARN  - Spawned Server Room 'unity'.
> 2008-04-11 02:21:34,838 WARN  - RoomManager started.
> 2008-04-11 02:21:34,838 WARN  - No custom MessageRouter set.  Loaded
> UPCMessageRouter.
> 2008-04-11 02:21:34,840 WARN  - Directory /root/unity/services added to
> the
> classpath for loading Services.
> 2008-04-11 02:21:34,840 WARN  - ServicesManager started.
> 2008-04-11 02:21:34,841 WARN  - Policy File Server started on port [843]
> 2008-04-11 02:21:34,841 WARN  - Service PolicyFileService loaded.
> 2008-04-11 02:21:34,842 WARN  - Unity Started...OK
>
> and then when i try to connect the uadmin:
>
> 2008-04-11 02:24:21,869 ERROR - Exception in Admin.
> java.lang.NullPointerException
>
>
> i add hundreds of these messages / second !!!
> i add to stop unity to avoid server crash...
>
> gabriel
>
> ----- Original Message -----
> From: "Discussion list for Unity developers." <unity-dev at moock.org>
> To: <unity-dev at moock.org>
> Sent: Friday, April 11, 2008 2:06 AM
> Subject: Re: ||unity-dev|| Temporary Patch
> forFlashPlayer9.0.124.0SecurityRestrictions
>
>
> > ok, so excuse my silly question:
> >
> > i guess it s in startserver.sh that i have to put this, but what would
> be
> > the correct synthax ?
> >
> > thx!
> >
> > Gabriel
> >
> > ----- Original Message -----
> > From: "Discussion list for Unity developers." <unity-dev at moock.org>
> > To: <unity-dev at moock.org>
> > Sent: Friday, April 11, 2008 1:53 AM
> > Subject: Re: ||unity-dev|| Temporary Patch forFlash
> > Player9.0.124.0SecurityRestrictions
> >
> >
> >> as I recall from memory atm, it looks like you are not specifying the
> >> unity_optional.jar in the classpath that starts unity... take a look at
> >> that
> >>
> >> -Jayson
> >>
> >> On Thu, Apr 10, 2008 at 6:01 PM, Discussion list for Unity developers.
> <
> >> unity-dev at moock.org> wrote:
> >>
> >>> and here is a snippet of unity log.txt
> >>>
> >>> 2008-04-10 18:53:34,691 WARN  - Error loading Service
> PolicyFileService
> >>> java.lang.ClassNotFoundException:
> >>> org.moock.unity.opt.policyserver.PolicyServer
> >>>         at java.net.URLClassLoader$1.run(Unknown Source)
> >>>        at java.security.AccessController.doPrivileged(Native Method)
> >>>        at java.net.URLClassLoader.findClass(Unknown Source)
> >>>        at java.lang.ClassLoader.loadClass(Unknown Source)
> >>>        at java.lang.ClassLoader.loadClass(Unknown Source)
> >>>        at org.moock.unity.core.n.a(Unknown Source)
> >>>        at org.moock.unity.core.u.a(Unknown Source)
> >>>        at org.moock.unity.core.d.byte(Unknown Source)
> >>>        at org.moock.unity.core.d.<init>(Unknown Source)
> >>>        at org.moock.unity.core.Unity.<init>(Unknown Source)
> >>>
> >>> hope that'll helps
> >>>
> >>> Gabriel
> >>>
> >>> ----- Original Message -----
> >>> From: "Discussion list for Unity developers." <unity-dev at moock.org>
> >>> To: <unity-dev at moock.org>
> >>> Sent: Thursday, April 10, 2008 8:08 PM
> >>> Subject: Re: ||unity-dev|| Temporary Patch forFlash Player9.0.124.0
> >>> SecurityRestrictions
> >>>
> >>>
> >>> > which log says that? (please post log excerpts and indicate which
> log
> >>> > you're quoting in all trouble-shooting reports. thanks!)
> >>> >
> >>> > if you're referring to the uClientCore log, you can ignore the
> message
> >>> > about no port being set. you're running a master policy file server,
> >>> > so
> >>> > no port is required.
> >>> >
> >>> > remember, you must have root access to start a master policy file
> >>> server.
> >>> >
> >>> > please check the logs i mentioned earlier in this thread.
> >>> >
> >>> > the config files look fine.
> >>> >
> >>> > colin
> >>> >
> >>> > Discussion list for Unity developers. wrote:
> >>> >> well, in my logs it says "no policy port set"...but i did set these
> >>> >> following the infos you provided...were my config files ok?
> >>> >>
> >>> >> thx
> >>> >>
> >>> >> Gabriel
> >>> >>
> >>> >> ----- Original Message -----
> >>> >> From: "Discussion list for Unity developers." <unity-dev at moock.org>
> >>> >> To: <unity-dev at moock.org>
> >>> >> Sent: Thursday, April 10, 2008 7:39 PM
> >>> >> Subject: Re: ||unity-dev|| Temporary Patch for Flash
> Player9.0.124.0
> >>> >> SecurityRestrictions
> >>> >>
> >>> >>
> >>> >>> hi gabriel,
> >>> >>> unless your clients *only* connect via:
> >>> >>> mydomain.ovh.net
> >>> >>>
> >>> >>> you'll need to use a wildcard, as in:
> >>> >>> *.mydomain.ovh.net
> >>> >>>
> >>> >>> to diagnose your client connection failures, please check your
> flash
> >>> >>> player policy file log, as described here:
> >>> >>>
> >>> >>>
> >>>
> http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security_05.html
> >>> >>>
> >>> >>> please also check unity's log.txt to verify that your policy file
> >>> server
> >>> >>> is starting properly.
> >>> >>>
> >>> >>> colin
> >>> >>>
> >>> >>>
> >>> >>> Discussion list for Unity developers. wrote:
> >>> >>>> hi
> >>> >>>>
> >>> >>>> i've updated the file and here are:
> >>> >>>>
> >>> >>>> policy.xml
> >>> >>>> <cross-domain-policy>
> >>> >>>>   <site-control permitted-cross-domain-policies="all"/>
> >>> >>>>   <allow-access-from domain="mydomain.ovh.net"
> to-ports="9100,9101"
> >>> />
> >>> >>>> </cross-domain-policy>
> >>> >>>>
> >>> >>>> uconfig.xml
> >>> >>>> <UNITY>
> >>> >>>>     <SERVER>
> >>> >>>>         <SERVER_PORT>9100</SERVER_PORT>
> >>> >>>>         <ADMIN_PORT>9101</ADMIN_PORT>
> >>> >>>>         <ADMIN_PASSWORD>password</ADMIN_PASSWORD>
> >>> >>>>         <CLIENT_TIMEOUT>100</CLIENT_TIMEOUT>
> >>> >>>>         <MAX_CLIENTS>400</MAX_CLIENTS>
> >>> >>>>    <SERVICE>
> >>> >>>>    <ID>PolicyFileService</ID>
> >>> >>>>
> >>>  <CLASSNAME>org.moock.unity.opt.policyserver.PolicyServer</CLASSNAME>
> >>> >>>>    <ATTRIBUTES>
> >>> >>>>      <PORT>843</PORT>
> >>> >>>>      <POLICY_FILE>policy.xml</POLICY_FILE>
> >>> >>>>    </ATTRIBUTES>
> >>> >>>> </SERVICE>
> >>> >>>>     </SERVER>
> >>> >>>>     <TYPES>
> >>> >>>>     </TYPES>
> >>> >>>>     <INSTANCES>
> >>> >>>>     </INSTANCES>
> >>> >>>>     <UPCROOM_GLOBALS>
> >>> >>>>         <CREATE_UNITY_ROOM>true</CREATE_UNITY_ROOM>
> >>> >>>>         <CLIENT_PERMISSIONS>all</CLIENT_PERMISSIONS>
> >>> >>>>     </UPCROOM_GLOBALS>
> >>> >>>> </UNITY>
> >>> >>>>
> >>> >>>> and my apps are still not connecting after restarting unity...did
> i
> >>> >>>> made
> >>> >>>> something wrong ?
> >>> >>>>
> >>> >>>> thx for your help
> >>> >>>>
> >>> >>>> Gabriel
> >>> >>>>
> >>> >>>>
> >>> >>>> ----- Original Message -----
> >>> >>>> From: "Discussion list for Unity developers." <
> unity-dev at moock.org>
> >>> >>>> To: <unity-dev at moock.org>
> >>> >>>> Sent: Thursday, April 10, 2008 6:27 PM
> >>> >>>> Subject: ||unity-dev|| Temporary Patch for Flash Player 9.0.124.0
> >>> >>>> SecurityRestrictions
> >>> >>>>
> >>> >>>>
> >>> >>>>> a temporary patch is now available to address the new security
> >>> >>>>> restrictions on socket connections made by Flash Player.
> >>> >>>>>
> >>> >>>>> you can download the patch here:
> >>> >>>>>
> >>> >>>>> http://www.moock.org/unity/patches/unity_optional.jar
> >>> >>>>>
> >>> >>>>> instruction for applying the patch:
> >>> >>>>>
> >>> >>>>> 1) Stop Unity Multiuser Server.
> >>> >>>>> 2) Copy unity_optional.jar into your existing installation
> >>> directory's
> >>> >>>>> /lib/ folder, replacing the existing file of the same name.
> >>> >>>>> 3) In your existing installation directory, edit uconfig.xml.
> >>> >>>>> 4) Nested *inside* the existing <SERVER> tag, insert the
> following
> >>> XML
> >>> >>>>> code. Change 9102 to the port on which you wish to serve policy
> >>> files
> >>> >>>>> (for help deciding on a port, see
> >>> >>>>> http://moock.org/unity/technotes/00001.html).
> >>> >>>>>
> >>> >>>>> <SERVICE>
> >>> >>>>>   <ID>PolicyFileService</ID>
> >>> >>>>>
> >>> <CLASSNAME>org.moock.unity.opt.policyserver.PolicyServer</CLASSNAME>
> >>> >>>>>   <ATTRIBUTES>
> >>> >>>>>     <PORT>9102</PORT>
> >>> >>>>>     <POLICY_FILE>policy.xml</POLICY_FILE>
> >>> >>>>>   </ATTRIBUTES>
> >>> >>>>> </SERVICE>
> >>> >>>>>
> >>> >>>>> 5) Configure Unity to serve a socket master policy file (see
> >>> >>>>> instructions at http://moock.org/unity/technotes/00003.html) or
> a
> >>> >>>>> regular socket policy file (see instructions at
> >>> >>>>> http://moock.org/unity/technotes/00004.html).
> >>> >>>>> 6)  Start Unity Multiuser Server.
> >>> >>>>>
> >>> >>>>> Please report problems or questions to the list.
> >>> >>>>>
> >>> >>>>> thanks!
> >>> >>>>> colin
> >>> >>>>>
> >>> >>>>> --
> >>> >>>>> you're a unity-dev subscriber. to unsubscribe, visit
> >>> >>>>> www.moock.org/mailman/listinfo/unity-dev/
> >>> >>>>>
> >>> >>>>> superb hosting for this list and moock.org is generously
> provided
> >>> >>>>> by
> >>> >>>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
> >>> >>>>>
> >>> >>>>>
> >>> >>>>
> >>> >>>>
> >>> >>>> --
> >>> >>>> you're a unity-dev subscriber. to unsubscribe, visit
> >>> >>>> www.moock.org/mailman/listinfo/unity-dev/
> >>> >>>>
> >>> >>>> superb hosting for this list and moock.org is generously provided
> >>> >>>> by
> >>> >>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
> >>> >>> --
> >>> >>> you're a unity-dev subscriber. to unsubscribe, visit
> >>> >>> www.moock.org/mailman/listinfo/unity-dev/
> >>> >>>
> >>> >>> superb hosting for this list and moock.org is generously provided
> by
> >>> >>> Rackspace. See: http://www.rackspace.com/?supbid=moock
> >>> >>>
> >>> >>>
> >>> >>
> >>> >>
> >>> >>
> >>> >> --
> >>> >> you're a unity-dev subscriber. to unsubscribe, visit
> >>> >> www.moock.org/mailman/listinfo/unity-dev/
> >>> >>
> >>> >> superb hosting for this list and moock.org is generously provided
> by
> >>> >> Rackspace. See: http://www.rackspace.com/?supbid=moock
> >>> > --
> >>> > you're a unity-dev subscriber. to unsubscribe, visit
> >>> > www.moock.org/mailman/listinfo/unity-dev/
> >>> >
> >>> > superb hosting for this list and moock.org is generously provided by
> >>> > Rackspace. See: http://www.rackspace.com/?supbid=moock
> >>> >
> >>> >
> >>>
> >>>
> >>>
> >>> --
> >>> you're a unity-dev subscriber. to unsubscribe, visit
> >>> www.moock.org/mailman/listinfo/unity-dev/
> >>>
> >>> superb hosting for this list and moock.org is generously provided by
> >>> Rackspace. See: http://www.rackspace.com/?supbid=moock
> >>>
> >> --
> >> you're a unity-dev subscriber. to unsubscribe, visit
> >> www.moock.org/mailman/listinfo/unity-dev/
> >>
> >> superb hosting for this list and moock.org is generously provided by
> >> Rackspace. See: http://www.rackspace.com/?supbid=moock
> >>
> >>
> >
> >
> >
> > --
> > you're a unity-dev subscriber. to unsubscribe, visit
> > www.moock.org/mailman/listinfo/unity-dev/
> >
> > superb hosting for this list and moock.org is generously provided by
> > Rackspace. See: http://www.rackspace.com/?supbid=moock
> >
> >
>
>
>
> --
> you're a unity-dev subscriber. to unsubscribe, visit
> www.moock.org/mailman/listinfo/unity-dev/
>
> superb hosting for this list and moock.org is generously provided by
> Rackspace. See: http://www.rackspace.com/?supbid=moock
>


More information about the unity-dev mailing list