||unity-dev|| Temporary Patch forFlash Player9.0.124.0 SecurityRestrictions

Discussion list for Unity developers. unity-dev at moock.org
Thu Apr 10 22:51:13 CDT 2008


hi gabriel,
looks like you got the classpath issue resolved, but for the record, 
jayson is right about needing to add unity_optional.jar to the 
classpath. sorry i forgot to mention that in the original post. so you 
would change your startup script (e.g., startserver.sh) from something 
like this:

java -cp 
lib\xerces.jar;lib\xml-apis.jar;lib\unity_core.jar;lib\log4j.jar;lib\jdom.jar 
-Dlog4j.configuration=file:ss.lcf org.moock.unity.core.Unity start

to this:

java -cp 
lib\xerces.jar;lib\xml-apis.jar;lib\unity_core.jar;lib\unity_optional.jar;lib\log4j.jar;lib\jdom.jar 
-Dlog4j.configuration=file:ss.lcf org.moock.unity.core.Unity start

colin


Discussion list for Unity developers. wrote:
> as I recall from memory atm, it looks like you are not specifying the
> unity_optional.jar in the classpath that starts unity... take a look at that
> 
> -Jayson
> 
> On Thu, Apr 10, 2008 at 6:01 PM, Discussion list for Unity developers. <
> unity-dev at moock.org> wrote:
> 
>> and here is a snippet of unity log.txt
>>
>> 2008-04-10 18:53:34,691 WARN  - Error loading Service PolicyFileService
>> java.lang.ClassNotFoundException:
>> org.moock.unity.opt.policyserver.PolicyServer
>>         at java.net.URLClassLoader$1.run(Unknown Source)
>>        at java.security.AccessController.doPrivileged(Native Method)
>>        at java.net.URLClassLoader.findClass(Unknown Source)
>>        at java.lang.ClassLoader.loadClass(Unknown Source)
>>        at java.lang.ClassLoader.loadClass(Unknown Source)
>>        at org.moock.unity.core.n.a(Unknown Source)
>>        at org.moock.unity.core.u.a(Unknown Source)
>>        at org.moock.unity.core.d.byte(Unknown Source)
>>        at org.moock.unity.core.d.<init>(Unknown Source)
>>        at org.moock.unity.core.Unity.<init>(Unknown Source)
>>
>> hope that'll helps
>>
>> Gabriel
>>
>> ----- Original Message -----
>> From: "Discussion list for Unity developers." <unity-dev at moock.org>
>> To: <unity-dev at moock.org>
>> Sent: Thursday, April 10, 2008 8:08 PM
>> Subject: Re: ||unity-dev|| Temporary Patch forFlash Player9.0.124.0
>> SecurityRestrictions
>>
>>
>>> which log says that? (please post log excerpts and indicate which log
>>> you're quoting in all trouble-shooting reports. thanks!)
>>>
>>> if you're referring to the uClientCore log, you can ignore the message
>>> about no port being set. you're running a master policy file server, so
>>> no port is required.
>>>
>>> remember, you must have root access to start a master policy file
>> server.
>>> please check the logs i mentioned earlier in this thread.
>>>
>>> the config files look fine.
>>>
>>> colin
>>>
>>> Discussion list for Unity developers. wrote:
>>>> well, in my logs it says "no policy port set"...but i did set these
>>>> following the infos you provided...were my config files ok?
>>>>
>>>> thx
>>>>
>>>> Gabriel
>>>>
>>>> ----- Original Message -----
>>>> From: "Discussion list for Unity developers." <unity-dev at moock.org>
>>>> To: <unity-dev at moock.org>
>>>> Sent: Thursday, April 10, 2008 7:39 PM
>>>> Subject: Re: ||unity-dev|| Temporary Patch for Flash Player9.0.124.0
>>>> SecurityRestrictions
>>>>
>>>>
>>>>> hi gabriel,
>>>>> unless your clients *only* connect via:
>>>>> mydomain.ovh.net
>>>>>
>>>>> you'll need to use a wildcard, as in:
>>>>> *.mydomain.ovh.net
>>>>>
>>>>> to diagnose your client connection failures, please check your flash
>>>>> player policy file log, as described here:
>>>>>
>>>>>
>> http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security_05.html
>>>>> please also check unity's log.txt to verify that your policy file
>> server
>>>>> is starting properly.
>>>>>
>>>>> colin
>>>>>
>>>>>
>>>>> Discussion list for Unity developers. wrote:
>>>>>> hi
>>>>>>
>>>>>> i've updated the file and here are:
>>>>>>
>>>>>> policy.xml
>>>>>> <cross-domain-policy>
>>>>>>   <site-control permitted-cross-domain-policies="all"/>
>>>>>>   <allow-access-from domain="mydomain.ovh.net" to-ports="9100,9101"
>> />
>>>>>> </cross-domain-policy>
>>>>>>
>>>>>> uconfig.xml
>>>>>> <UNITY>
>>>>>>     <SERVER>
>>>>>>         <SERVER_PORT>9100</SERVER_PORT>
>>>>>>         <ADMIN_PORT>9101</ADMIN_PORT>
>>>>>>         <ADMIN_PASSWORD>password</ADMIN_PASSWORD>
>>>>>>         <CLIENT_TIMEOUT>100</CLIENT_TIMEOUT>
>>>>>>         <MAX_CLIENTS>400</MAX_CLIENTS>
>>>>>>    <SERVICE>
>>>>>>    <ID>PolicyFileService</ID>
>>>>>>
>>  <CLASSNAME>org.moock.unity.opt.policyserver.PolicyServer</CLASSNAME>
>>>>>>    <ATTRIBUTES>
>>>>>>      <PORT>843</PORT>
>>>>>>      <POLICY_FILE>policy.xml</POLICY_FILE>
>>>>>>    </ATTRIBUTES>
>>>>>> </SERVICE>
>>>>>>     </SERVER>
>>>>>>     <TYPES>
>>>>>>     </TYPES>
>>>>>>     <INSTANCES>
>>>>>>     </INSTANCES>
>>>>>>     <UPCROOM_GLOBALS>
>>>>>>         <CREATE_UNITY_ROOM>true</CREATE_UNITY_ROOM>
>>>>>>         <CLIENT_PERMISSIONS>all</CLIENT_PERMISSIONS>
>>>>>>     </UPCROOM_GLOBALS>
>>>>>> </UNITY>
>>>>>>
>>>>>> and my apps are still not connecting after restarting unity...did i
>>>>>> made
>>>>>> something wrong ?
>>>>>>
>>>>>> thx for your help
>>>>>>
>>>>>> Gabriel
>>>>>>
>>>>>>
>>>>>> ----- Original Message -----
>>>>>> From: "Discussion list for Unity developers." <unity-dev at moock.org>
>>>>>> To: <unity-dev at moock.org>
>>>>>> Sent: Thursday, April 10, 2008 6:27 PM
>>>>>> Subject: ||unity-dev|| Temporary Patch for Flash Player 9.0.124.0
>>>>>> SecurityRestrictions
>>>>>>
>>>>>>
>>>>>>> a temporary patch is now available to address the new security
>>>>>>> restrictions on socket connections made by Flash Player.
>>>>>>>
>>>>>>> you can download the patch here:
>>>>>>>
>>>>>>> http://www.moock.org/unity/patches/unity_optional.jar
>>>>>>>
>>>>>>> instruction for applying the patch:
>>>>>>>
>>>>>>> 1) Stop Unity Multiuser Server.
>>>>>>> 2) Copy unity_optional.jar into your existing installation
>> directory's
>>>>>>> /lib/ folder, replacing the existing file of the same name.
>>>>>>> 3) In your existing installation directory, edit uconfig.xml.
>>>>>>> 4) Nested *inside* the existing <SERVER> tag, insert the following
>> XML
>>>>>>> code. Change 9102 to the port on which you wish to serve policy
>> files
>>>>>>> (for help deciding on a port, see
>>>>>>> http://moock.org/unity/technotes/00001.html).
>>>>>>>
>>>>>>> <SERVICE>
>>>>>>>   <ID>PolicyFileService</ID>
>>>>>>>
>> <CLASSNAME>org.moock.unity.opt.policyserver.PolicyServer</CLASSNAME>
>>>>>>>   <ATTRIBUTES>
>>>>>>>     <PORT>9102</PORT>
>>>>>>>     <POLICY_FILE>policy.xml</POLICY_FILE>
>>>>>>>   </ATTRIBUTES>
>>>>>>> </SERVICE>
>>>>>>>
>>>>>>> 5) Configure Unity to serve a socket master policy file (see
>>>>>>> instructions at http://moock.org/unity/technotes/00003.html) or a
>>>>>>> regular socket policy file (see instructions at
>>>>>>> http://moock.org/unity/technotes/00004.html).
>>>>>>> 6)  Start Unity Multiuser Server.
>>>>>>>
>>>>>>> Please report problems or questions to the list.
>>>>>>>
>>>>>>> thanks!
>>>>>>> colin
>>>>>>>
>>>>>>> --
>>>>>>> you're a unity-dev subscriber. to unsubscribe, visit
>>>>>>> www.moock.org/mailman/listinfo/unity-dev/
>>>>>>>
>>>>>>> superb hosting for this list and moock.org is generously provided by
>>>>>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> --
>>>>>> you're a unity-dev subscriber. to unsubscribe, visit
>>>>>> www.moock.org/mailman/listinfo/unity-dev/
>>>>>>
>>>>>> superb hosting for this list and moock.org is generously provided by
>>>>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>>>> --
>>>>> you're a unity-dev subscriber. to unsubscribe, visit
>>>>> www.moock.org/mailman/listinfo/unity-dev/
>>>>>
>>>>> superb hosting for this list and moock.org is generously provided by
>>>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> you're a unity-dev subscriber. to unsubscribe, visit
>>>> www.moock.org/mailman/listinfo/unity-dev/
>>>>
>>>> superb hosting for this list and moock.org is generously provided by
>>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>> --
>>> you're a unity-dev subscriber. to unsubscribe, visit
>>> www.moock.org/mailman/listinfo/unity-dev/
>>>
>>> superb hosting for this list and moock.org is generously provided by
>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>>
>>>
>>
>>
>> --
>> you're a unity-dev subscriber. to unsubscribe, visit
>> www.moock.org/mailman/listinfo/unity-dev/
>>
>> superb hosting for this list and moock.org is generously provided by
>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>
> --
> you're a unity-dev subscriber. to unsubscribe, visit www.moock.org/mailman/listinfo/unity-dev/
> 
> superb hosting for this list and moock.org is generously provided by Rackspace. See: http://www.rackspace.com/?supbid=moock


More information about the unity-dev mailing list