Main   Products   Offshore Outsourcing   Customers   Partners   ContactUs  
JDBC Databases
  HXTT Access v5.2
  HXTT Cobol v2.1
  HXTT DBF v5.2
 
  Buy Now
  Support
  Download
  Document
  FAQ
  HXTT Excel v4.2
  HXTT Paradox v5.2
  HXTT Text(CSV) v5.2
  HXTT XML v1.2
Offshore Outsourcing
Oracle Data Import/Export
DB2 Data Import/Export
Sybase Data Import/Export
Free Resources
  Firewall Tunneling
  Search Indexing Robot
  Conditional Compilation
  Password Recovery for MS Access
  Password Recovery for Corel Paradox
  Checksum Tool for MD5
  Character Set Converter
  Pyramid - Poker of ZYH
   
   
   
Hongxin Technology & Trade Ltd. of Xiangtan City (abbr, HXTT)

HXTT DBF
DBFServer Security
Joe Gooch
2006-01-30 00:00:00.0
Do you have any examples of policy files that restrict access to specific IP addresses?
Re:DBFServer Security
HXTT Support
2006-01-30 00:00:00.0
A manual modfied policy file maybe contain error. You should use policytool(GUI tool for managing policy files) to produce your policy file.
For unix, you can read http://java.sun.com/j2se/1.4.2/docs/tooldocs/solaris/policytool.html .
For Windoows, you should read http://java.sun.com/j2se/1.4.2/ docs/tooldocs/windows/policytool.html .

Re:DBFServer Security
Joe Gooch
2006-01-30 00:00:00.0
Is it possible to use the policy file to restrict remote access to the server to a specific user or ip?
Re:Re:Re:DBFServer Security
HXTT Support
2006-01-30 00:00:00.0
>Is it possible to use the policy file to restrict remote access to the server
> to a specific user or ip?
I don't konw how to use policy file to limit specific user. For ip 192.168.10.5,, you can try:
permission java.net.SocketPermission "192.168.10.5:1024-", "listen, accept, connect, listen, resolve";
BTW, you can use jdbc:dbf:/yourURL?user=auserName;password=apassword on the server side to start a service, then all clients without the correct username or password, will be denied.
Re:DBFServer Security
Joe Gooch
2006-01-30 00:00:00.0
The ?user/password stuff on the DBFServer works like a charm! Thanks.

The policy file, however, doesn't appear to do much of anything. After removing AllPermission and putting in the SocketPermission with an ip, it doesn't seem to restrict anything.

As long as I can restrict by username and password, I'm happy. I'd rather not open up my data to the world.

Does DBFServer support SSL encryption? (Or any other type of network encryption)
Re:DBFServer Security
Joe Gooch
2006-01-30 00:00:00.0
The ?user/password stuff on the DBFServer works like a charm! Thanks.

The policy file, however, doesn't appear to do much of anything. After removing AllPermission and putting in the SocketPermission with an ip, it doesn't seem to restrict anything.

As long as I can restrict by username and password, I'm happy. I'd rather not open up my data to the world.

Does DBFServer support SSL encryption? (Or any other type of network encryption)
Re:Re:Re:Re:Re:Re:DBFServer Security
HXTT Support
2006-01-30 00:00:00.0
For instance, you open jdbc:dbf:////user/data/adir?user=a service, then all subdirectories of adir can be remote access with correct user, but other directories of data are forbidden.

DBFServer uses DES for handshaking so that it's impossible to sniff and get user/password information through TCIP/IP package. It provides DES, TRIDES, BLOWFISH functions to encrypt sensitive data in sql.

Re:DBFServer Security
Joe Gooch
2006-03-08 00:00:00.0
This no longer seems to work. (build 126)

It seems that as of build 126, you need to use username= and password=, user= does not work.
Re:Re:Re:Re:Re:Re:Re:Re:DBFServer Security
HXTT Support
2006-03-08 00:00:00.0
You should use user= still. Fixed. please download the latest package. HXTT DBF has supported ssl connection at http://www.hxtt.com/dbf/advanced.html#sslconnection and customer connection at http://www.hxtt.com/dbf/openapi.html#customerconnection . You can use ssl connection or not.
Re: DBFServer Security
Joe Gooch
2006-03-09 00:00:00.0
Works now. And the SSL stuff is very helpful. Thank you!

Search Key   Search by Last 50 Questions




Google
 

Address: 9 Station Rd., Xiangtan City, Hunan Province, P.R. China
Postcode: 411100
Phone: (86)731-58225727
Fax: (86)731-58225727
Email: webmaster@hxtt.com
Copyright © 1999-2011 Hongxin Technology & Trade Ltd. | All Rights Reserved. | Privacy | Legal | Sitemap