Discussion list for Unity developers.
unity-dev at moock.org
Sat Apr 12 09:43:43 CDT 2008
and here is the startserver.sh : #!/bin/sh java -cp lib/unity_optional.jar:lib/xerces.jar:lib/xml-apis.jar:lib/unity_core.jar:lib/log4j.jar:lib/jdom.jar -Dlog4j.configuration=file:ss.lcf org.moock.unity.core.Unity start & is that correct ? Thx Gabriel ----- Original Message ----- From: "Discussion list for Unity developers." <unity-dev at moock.org> To: <unity-dev at moock.org> Sent: Saturday, April 12, 2008 4:28 PM Subject: Re: ||unity-dev|| testing Unity's policy file server > ok here's my deal.. I've not seen the crash in a couple u2 instances on my > servers with this patch. However, I cannot use this patch, so I've rolled > it > back. > > This is why: > > I have several servers with more than a few U2 instances on the same IP, > but > listening for the clients on different ports. Now, the easiest thing is to > not specify a port other than 843 for the security check.. why? because > then > I'd have to mess around with port hopping to choose one available for EACH > instance.. and then, the client would have to make an swf code change to > load the policy file from THAT port explicitly.. PITA! > > So.. I have expanded my custom solution of a standalone policy server for > EACH ip on 843, that serves up all the allowed domains and ports-to.. it's > the only way I can think of making it work, and easier to manage. Mind > you, > this would mean that people can see what domains use a particular port-set > on my servers... so "technically" a breach of privacy but not really a > security threat. > > Now a note to Gabriel -- are you SURE you placed the new jar in the > correct > location?? the class not found error means to me that you either don't > have > it in the right place, or, you have a path issue -- OR --- you perhaps > have > a filename CASE issue? on unix, unity_optional.jar is NOT the same as > Unity_optional.jar, or unity_Optional.jar, etc... double check those.. > > -Jayson > > On Fri, Apr 11, 2008 at 3:02 PM, Discussion list for Unity developers. < > unity-dev at moock.org> wrote: > >> yup, that's all definitely true. (except for the stupid adobe part. as >> much as it's annoying, security is critical for flash player's success. >> just recently, usatoday.com was subject to a redirect attack that >> exploited flash player's old security model. if flash player gets a >> reputation for being insecure, the platform will die quickly.) >> >> jayson, have you tried the patch approach yet? for testing purposes, >> we'd like to get as many installations as possible with the patch >> approach while we work on the real fix. >> >> colin >> >> >> Discussion list for Unity developers. wrote: >> > fwiw, I took an old copy of Unity1 and simply modified the room >> dispatcher >> > to wait for the policy request, and then to send out the policy from a >> file >> > system file. ..this is working for me and a few clients right now >> without >> > issue.. the downside is that it's a second "application" to manage, and >> uses >> > up more resources than should be necessary.. but it works.. no restart >> of >> > the primary service or changes otherwise >> > >> > this could be done by any simple server created with any language >> running >> > along side U2 -- in java, vb or whatever.. it literally just has to >> accept >> > connections on port 843 (or whatever you want), and wait for the >> request, >> > and then send out the policy data and terminate the connection. In my >> case, >> > 843 worked easily enough with no code changes anywhere else whatsoever. >> > >> > stupid adobe. >> > >> > >> > >> > -Jayson >> > >> > On Fri, Apr 11, 2008 at 8:30 AM, Discussion list for Unity developers. >> > < >> > unity-dev at moock.org> wrote: >> > >> >> HI all and thanks for all your replies and sorry for being so >> stressed... >> >> >> >> so here is the result of testing with realterm: >> >> >> >> each time i'm clicking on "open" button with mydomain.com:843, unity >> >> log.txt >> >> write the following: >> >> >> >> >> >> Exception in thread "Thread-5" java.lang.NoClassDefFoundError: >> >> org/moock/unity/core/ClientBufferedReader >> >> at >> >> >> >> >> org.moock.unity.opt.policyserver.PolicyServer$Client.<init>(PolicyServer.java:122) >> >> at >> >> org.moock.unity.opt.policyserver.PolicyServer.run(PolicyServer.java:85) >> >> at java.lang.Thread.run(Unknown Source) >> >> >> >> i have 2.0.2 release running for theses tests... >> >> >> >> Regards >> >> >> >> Gabriel >> >> >> >> ----- Original Message ----- >> >> From: "Discussion list for Unity developers." <unity-dev at moock.org> >> >> To: <unity-dev at moock.org> >> >> Sent: Friday, April 11, 2008 8:17 AM >> >> Subject: ||unity-dev|| testing Unity's policy file server >> >> >> >> >> >>> a quick note for those troubleshooting unity's policy file server. >> >>> >> >>> To test whether the Policy File Server is running properly on the >> >>> intended port, use a terminal to telnet to the port, then send the >> >>> string "<policy-file-request/>" followed by a null byte (ASCII 0). On >> >>> Windows, the free software RealTerm (http://realterm.sourceforge.net) >> >>> can be used to connect and send the required message. >> >>> >> >>> Steps for testing with RealTerm: >> >>> 1) on the Display tab, check "Half Duplex" >> >>> 2) on the Port tab, in the port pulldown, enter your domain and port >> in >> >>> the following format: >> >>> >> >>> yourdomain.com:nnn >> >>> >> >>> (where nnn is your port) >> >>> 3) Click "Open" >> >>> 4) on the Send tab, in the first pulldown menu to the left of "Send >> >>> Numbers", enter <policy-file-request/> >> >>> 5) click Send ASCII >> >>> 6) click the "0" button >> >>> >> >>> if the policy file server is working properly, you should see the >> >>> contents of your policy.xml file appear in the terminal window. >> >>> >> >>> colin >> >>> >> >>> -- >> >>> you're a unity-dev subscriber. to unsubscribe, visit >> >>> www.moock.org/mailman/listinfo/unity-dev/ >> >>> >> >>> superb hosting for this list and moock.org is generously provided by >> >>> Rackspace. See: http://www.rackspace.com/?supbid=moock >> >>> >> >>> >> >> >> >> >> >> -- >> >> you're a unity-dev subscriber. to unsubscribe, visit >> >> www.moock.org/mailman/listinfo/unity-dev/ >> >> >> >> superb hosting for this list and moock.org is generously provided by >> >> Rackspace. See: http://www.rackspace.com/?supbid=moock >> >> >> > -- >> > you're a unity-dev subscriber. to unsubscribe, visit >> www.moock.org/mailman/listinfo/unity-dev/ >> > >> > superb hosting for this list and moock.org is generously provided by >> Rackspace. See: http://www.rackspace.com/?supbid=moock >> -- >> you're a unity-dev subscriber. to unsubscribe, visit >> www.moock.org/mailman/listinfo/unity-dev/ >> >> superb hosting for this list and moock.org is generously provided by >> Rackspace. See: http://www.rackspace.com/?supbid=moock >> > -- > you're a unity-dev subscriber. to unsubscribe, visit > www.moock.org/mailman/listinfo/unity-dev/ > > superb hosting for this list and moock.org is generously provided by > Rackspace. See: http://www.rackspace.com/?supbid=moock > >