Oracle Driver (ojdbc5.jar) security exception when run on server

HCL Domino Domino Forum
1

Hello. If anybody has a minute, I am converting a server based agent which performs SQL against legacy SQL Server (using jtds.jar) to interfacing with Oracle (thin, ojdbc5.jar).

I’ve done all the recoding locally, added ojdbc5.jar to the agent and the local jvm/lib/ext and it works ok. Now when I try to run this on the server, adding ojdbc5.jar to jvm/lib/ext on the server, I get…

Error while registering Oracle JDBC Diagnosability MBean…java.security.AccessControlException: access Denied (javax.management.MBeanServerPermissioncreateMBeanServer)

The legacy “parallel” agent with the SQL Server driver (jtds.jar) is running fine and has been for years. The legacy and new agent have security level set to 2 and signer has permissions in the Server document. The policy file looks good with All Permissions and pointing to jvm/lib/ext. Would anybody know what I am missing here and why the server is ok with jtds.jar and not ojdbc5.jar. As I said, I did all development on my local Notes and it was running well there. Thank you so much for reading.

2

Subject: Server security

The security is a lot tighter on the server than the Notes client. A java.security.AccessControlException: access Denied exception is definitely due to security. A quick test would be to grant all permissions on the Domino server, restart and see if your agent runs.

grant{
permission java.security.AllPermission;
}

If that works, then you can adjust to open allow the needed classes access. From the exception, looks like javax.management.MBeanServerPermissioncreateMBeanServer needs the permission. I found the following example:

Adding Security Permissions For a Web Container (Sun OpenSSO Enterprise 8.0 Installation and Configuration Guide) http://docs.oracle.com/cd/E19575-01/820-3320/ghnpe/index.html