Master-slave and codebase integrity problem

Jack Ruminski <[email protected]>
Newsgroups gmane.comp.java.sun.javaspaces
Message-ID <LISTSERV%[email protected]>
I am working with JavaSpace for a few years but now I have some (probably
simple) problem.
I am using master-slave pattern with JavaSpaces. Recently I have decided to
test codebase integrity using httpmd. Everythink was fine except...

I have got a UnusableEntryException caused by ClassNotFoundException related
to a class (TaskImpl) which should be downloaded from the HTTPD server.

I use outrigger (httpmd - OK), reggie and mahalo. The Master produces data
to be processed by slaves. The Master exports (using write()) entries to
outrigger and supports the clients with master.jar package, which is present
on the HTTPD server. The startup script for a master is:

(...)
-Djava.protocol.handler.pkgs=net.jini.url
-Djava.rmi.server.codebase=httpmd://localhost:8111/lib/master.jar;md5=4edeff5943c00a4e289ad9e68b0f1b8c
-Djava.security.policy=policy.all -jar master.jar

When I start the client I see (in httpd window) information on requesting
the master.jar. Even more, in logging files (integrity) I see

FINE: integrity verifiers
[net.jini.url.httpmd.HttpmdIntegrityVerifier@174d93a,
net.jini.url.https.HttpsIntegrityVerifier@61a907,
net.jini.url.file.FileIntegrityVerifier@1a0225b]
2006-03-01 14:28:16 net.jini.security.Security verifyCodebaseIntegrity
FINE: net.jini.url.httpmd.HttpmdIntegrityVerifier@174d93a verifies
httpmd://localhost:8111/lib/master.jar;md5=4edeff5943c00a4e289ad9e68b0f1b8c

But when I performing some read/take operations (in the client) I receiving

net.jini.core.entry.UnusableEntryException
(...)
Total unmarshalling failure, cause was:
java.rmi.UnmarshalException: Encountered a ClassNotFoundException while
unmarshalling org.cemte.TaskImpl; nested exception is:
 java.lang.ClassNotFoundException: org.cemte.TaskImpl
 at
com.sun.jini.outrigger.EntryRep.throwNewUnusableEntryException(EntryRep.java:899)
 at com.sun.jini.outrigger.EntryRep.entry(EntryRep.java:476)
(...)

The is no exceptions on verification, etc. It looks like it is nor possible
for the client to read classes from downloaded jar package.

I used exactly the same code, but without httpmd support, and it worked.

Looking for any help...

Did anybody has an experience (and some written reports) about secure
maste-slave JavaSpaces applications?

Thanks in advance
Jacek

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff JAVASPACES-USERS".  For general help, send email to
[email protected] and include in the body of the message "help".

To view past JAVASPACES-USERS postings, please see:
http://archives.java.sun.com/archives/javaspaces-users.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.