Java security configuration
 

Having failed to get Sun's Java to work, I successfully installed Fedora's Iced Tea substitute and even the Sun website accepted it as Java. But, when I tried to use it to access a remote database I got the following:

java.security.AccessControlException: access denied
(java.net.SocketPermission appserve.londonlibrary.co.uk resolve)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:342)
at java.security.AccessController.checkPermission(AccessController.java:556)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:550)
at java.lang.SecurityManager.checkConnect(SecurityManager.java:1049)
at java.net.InetAddress.getAllByName0(InetAddress.java:1192)
at java.net.InetAddress.getAllByName0(InetAddress.java:1173)
at java.net.InetAddress.getAllByName(InetAddress.java:1120)
at com.citrix.client.io.net.ip.s.a(Unknown Source)
at com.citrix.client.io.net.ip.s.a(Unknown Source)
at com.citrix.client.module.td.tcp.TCPTransportDriver.t(Unknown Source)
at com.citrix.client.module.td.TransportDriver.run(Unknown Source)
at java.lang.Thread.run(Thread.java:675)

This is all Greek to me. Googling revealed that Iced Tea's security is "probably too strict" but not what to do about it. There seem to be about twenty document files on Java on my computer: that is more than I really want to know or have time to deal with.

Is there any quick and simple way to get the JRE Security Manager to access the Citrix server?

I've just tried that and I'm still getting exactly the same error message.

And if you remove the "codeBase "http://appserve.londonlibrary.co.uk"" part?

You mean just use

cat << EOC > $java.policy
{permission java.security.AllPermission;}
EOC

No luck. It's almost enough to drive a man to Windows.

The answer!
The command-line trick doesn't work because the code

grant codeBase {
permission java.security.AllPermission;
};

can only be inserted into the file java.policy by editing it. That solves the problem.