Arch Linux

redhat_boy

Member

From: India

Registered: 2016-07-08

Posts: 12

Website

[SOLVED] Java blocks KVM/IPMI applet from running on Arch system

Hi,

I have installed OpenJDK and icedtea-web on my Arch system for the purpose of accessing KVM/IPMI consoles of servers. I see they are working fine, but due to high security, access to console ports in KVM are being blocked by java. Check the screenshot here

[buddy@archlinux ~]$ java -version
java version "1.7.0_101"
OpenJDK Runtime Environment (IcedTea 2.6.6) (Arch Linux build 7.u101_2.6.6-1-x86_64)
OpenJDK 64-Bit Server VM (build 24.95-b01, mixed mode)

[buddy@archlinux ~]$ javaws -version
icedtea-web 1.6.2

[buddy@archlinux ~]$ ll /usr/lib/mozilla/plugins/
total 88
drwxr-xr-x 2 root root  4096 Jul  9 22:05 ./
drwxr-xr-x 3 root root  4096 Jun 12 07:54 ../
lrwxrwxrwx 1 root root    43 May 12 16:49 IcedTeaPlugin.so -> /usr/share/icedtea-web/lib/IcedTeaPlugin.so*

Any idea how to override this and give exception for the particular KVM/IPMI URL I am trying to access/work on?.

Last edited by redhat_boy (2016-07-10 17:01:56)

redhat_boy

Member

From: India

Registered: 2016-07-08

Posts: 12

Website

Re: [SOLVED] Java blocks KVM/IPMI applet from running on Arch system

Hey all, I sorted this out myself

I removed all the current IcedTea Java stuff from the system and then installed jre from AUR >> https://aur.archlinux.org/packages/jre

Install command:

yaourt -S jre

You will have the following Java related binaries installed on the system:

[buddy@archlinux ~]$ java -version
java version "1.8.0_92"
Java(TM) SE Runtime Environment (build 1.8.0_92-b14)
Java HotSpot(TM) 64-Bit Server VM (build 25.92-b14, mixed mode)

and java web start

[buddy@archlinux ~]$ javaws 
Java(TM) Web Start 11.92.2.14-fcs 
Usage:  javaws [run-options] <jnlp-file>
        javaws [control-options]

where run-options include:
  -verbose              display additional output
  -offline              run the application in offline mode
  -system               run the application from the system cache only
  -Xnosplash            run without showing a splash screen
  -J<option>            supply option to the vm
  -wait                 start java process and wait for its exit

control-options include:
  -viewer               show the cache viewer in the java control panel
  -clearcache           remove all non-installed applications from the cache
  -uninstall            remove all applications from the cache
  -uninstall <jnlp-file>                remove the application from the cache
  -import [import-options] <jnlp-file>  import the application to the cache

import-options include:
  -silent               import silently (with no user interface)
  -system               import application into the system cache
  -codebase <url>       retrieve resources from the given codebase
  -shortcut             install shortcuts as if user allowed prompt
  -association          install associations as if user allowed prompt

Reducing the security level and URL exception for security check can be done through javaws control panel.

Open javaws control panel using the following command and do it through 'security' tab on it.

[buddy@archlinux ~]$ javaws -viewer

Marking this as resolved

Last edited by redhat_boy (2016-07-10 17:02:32)