||unity-dev|| testing Unity's policy file server

Discussion list for Unity developers. unity-dev at moock.org
Sat Apr 12 08:53:19 CDT 2008


Hello all

any news ?

regards

Gabriel

----- Original Message ----- 
From: "Discussion list for Unity developers." <unity-dev at moock.org>
To: <unity-dev at moock.org>
Sent: Friday, April 11, 2008 9:02 PM
Subject: Re: ||unity-dev|| testing Unity's policy file server


> yup, that's all definitely true. (except for the stupid adobe part. as
> much as it's annoying, security is critical for flash player's success.
> just recently, usatoday.com was subject to a redirect attack that
> exploited flash player's old security model. if flash player gets a
> reputation for being insecure, the platform will die quickly.)
>
> jayson, have you tried the patch approach yet? for testing purposes,
> we'd like to get as many installations as possible with the patch
> approach while we work on the real fix.
>
> colin
>
>
> Discussion list for Unity developers. wrote:
>> fwiw, I took an old copy of Unity1 and simply modified the room 
>> dispatcher
>> to wait for the policy request, and then to send out the policy from a 
>> file
>> system file. ..this is working for me and a few clients right now without
>> issue.. the downside is that it's a second "application" to manage, and 
>> uses
>> up more resources than should be necessary.. but it works.. no restart of
>> the primary service or changes otherwise
>>
>> this could be done by any simple server created with any language running
>> along side U2 -- in java, vb or whatever.. it literally just has to 
>> accept
>> connections on port 843 (or whatever you want), and wait for the request,
>> and then send out the policy data and terminate the connection. In my 
>> case,
>> 843 worked easily enough with no code changes anywhere else whatsoever.
>>
>> stupid adobe.
>>
>>
>>
>> -Jayson
>>
>> On Fri, Apr 11, 2008 at 8:30 AM, Discussion list for Unity developers. <
>> unity-dev at moock.org> wrote:
>>
>>> HI all and thanks for all your replies and sorry for being so 
>>> stressed...
>>>
>>> so here is the result of testing with realterm:
>>>
>>> each time i'm clicking on "open" button with mydomain.com:843, unity
>>> log.txt
>>> write the following:
>>>
>>>
>>> Exception in thread "Thread-5" java.lang.NoClassDefFoundError:
>>> org/moock/unity/core/ClientBufferedReader
>>>        at
>>>
>>> org.moock.unity.opt.policyserver.PolicyServer$Client.<init>(PolicyServer.java:122)
>>>        at
>>> org.moock.unity.opt.policyserver.PolicyServer.run(PolicyServer.java:85)
>>>        at java.lang.Thread.run(Unknown Source)
>>>
>>> i have 2.0.2 release running for theses tests...
>>>
>>> Regards
>>>
>>> Gabriel
>>>
>>> ----- Original Message -----
>>> From: "Discussion list for Unity developers." <unity-dev at moock.org>
>>> To: <unity-dev at moock.org>
>>> Sent: Friday, April 11, 2008 8:17 AM
>>> Subject: ||unity-dev|| testing Unity's policy file server
>>>
>>>
>>>> a quick note for those troubleshooting unity's policy file server.
>>>>
>>>> To test whether the Policy File Server is running properly on the
>>>> intended port, use a terminal to telnet to the port, then send the
>>>> string "<policy-file-request/>" followed by a null byte (ASCII 0). On
>>>> Windows, the free software RealTerm (http://realterm.sourceforge.net)
>>>> can be used to connect and send the required message.
>>>>
>>>> Steps for testing with RealTerm:
>>>> 1) on the Display tab, check "Half Duplex"
>>>> 2) on the Port tab, in the port pulldown, enter your domain and port in
>>>> the following format:
>>>>
>>>> yourdomain.com:nnn
>>>>
>>>> (where nnn is your port)
>>>> 3) Click "Open"
>>>> 4) on the Send tab, in the first pulldown menu to the left of "Send
>>>> Numbers", enter <policy-file-request/>
>>>> 5) click Send ASCII
>>>> 6) click the "0" button
>>>>
>>>> if the policy file server is working properly, you should see the
>>>> contents of your policy.xml file appear in the terminal window.
>>>>
>>>> colin
>>>>
>>>> --
>>>> you're a unity-dev subscriber. to unsubscribe, visit
>>>> www.moock.org/mailman/listinfo/unity-dev/
>>>>
>>>> superb hosting for this list and moock.org is generously provided by
>>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>>>
>>>>
>>>
>>>
>>> --
>>> you're a unity-dev subscriber. to unsubscribe, visit
>>> www.moock.org/mailman/listinfo/unity-dev/
>>>
>>> superb hosting for this list and moock.org is generously provided by
>>> Rackspace. See: http://www.rackspace.com/?supbid=moock
>>>
>> --
>> you're a unity-dev subscriber. to unsubscribe, visit 
>> www.moock.org/mailman/listinfo/unity-dev/
>>
>> superb hosting for this list and moock.org is generously provided by 
>> Rackspace. See: http://www.rackspace.com/?supbid=moock
> --
> you're a unity-dev subscriber. to unsubscribe, visit 
> www.moock.org/mailman/listinfo/unity-dev/
>
> superb hosting for this list and moock.org is generously provided by 
> Rackspace. See: http://www.rackspace.com/?supbid=moock
>
> 





More information about the unity-dev mailing list