Create explanation-of-the-security-manager-for-the-JDBC-driver-and-th… #174

PeggySchmidtMittenzwei · 2025-09-12T10:48:39Z

…e-impact-of-disabling-it.md

https://exasol.lightning.force.com/lightning/r/Case/500aV00000ZhIDgQAN/view

…e-impact-of-disabling-it.md https://exasol.lightning.force.com/lightning/r/Case/500aV00000ZhIDgQAN/view

exaSR · 2025-09-12T10:56:41Z

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md

+## Problem
+
+You can disable the Security Manager by setting NOSECURITY=YES in the JDBC driver configuration, as shown in the following example:


That is not a problem, but a solution to the problem.

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md

…e-impact-of-disabling-it.md Problem => Question

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md

exaSR · 2025-09-12T11:01:28Z

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md

+
+## Recommendation
+
+To ensure security, always download the Exasol JDBC driver from an official and trusted source. After downloading, verify the checksum to confirm the file’s integrity and that it hasn’t been tampered with.


It is less about the Exasol JDBC driver, but about JDBS drivers required by virtual schemas and the IMPORT command.

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md

…JDBC-driver-and-the-impact-of-disabling-it.md Co-authored-by: Christoph Pirkl <[email protected]>

…e-impact-of-disabling-it.md

allipatev

I left a couple of suggestions.

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md

allipatev · 2025-09-15T07:33:45Z

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md

+
+Setting the NOSECURITY flag to YES disables Java Security Manager, allowing function calls without additional checks.
+
+The Java Security Manager provides detailed control over which functions are permitted to run in your environment. However, configuring these settings can be complex and time-consuming.  In the past, we tried to whitelist only the functions that JDBC drivers required. However, because the drivers frequently change and add new functions with each update, maintaining an accurate whitelist soon became impractical—especially since ExaLoader would then require a comprehensive list covering all functions for all drivers.


While that's true in general, for the latest occurrences JDBC connection that IMPORT tried to establish just hung until one disables Security Manager. So we had no exception stating which class / method wasn't allowed so we had no particular item to whitelist.

So it's not only time consuming (many third party drivers) and in vain (because the component is deprecated by Java platform), but also simply not always possible. This aspect might show us in even better light, so maybe you can adapt the article accordingly?

…JDBC-driver-and-the-impact-of-disabling-it.md Co-authored-by: allipatev <[email protected]>

…e-impact-of-disabling-it.md

Create explanation-of-the-security-manager-for-the-JDBC-driver-and-th…

d4b6b9a

…e-impact-of-disabling-it.md https://exasol.lightning.force.com/lightning/r/Case/500aV00000ZhIDgQAN/view

exaSR reviewed Sep 12, 2025

View reviewed changes

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md Outdated Show resolved Hide resolved

Update explanation-of-the-security-manager-for-the-JDBC-driver-and-th…

bf22e7d

…e-impact-of-disabling-it.md Problem => Question

exaSR reviewed Sep 12, 2025

View reviewed changes

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md Show resolved Hide resolved

exaSR reviewed Sep 12, 2025

View reviewed changes

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md Outdated Show resolved Hide resolved

exaSR reviewed Sep 12, 2025

View reviewed changes

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md Outdated Show resolved Hide resolved

kaklakariada approved these changes Sep 12, 2025

View reviewed changes

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md Outdated Show resolved Hide resolved

...es/explanation-of-the-security-manager-for-the-JDBC-driver-and-the-impact-of-disabling-it.md Outdated Show resolved Hide resolved

PeggySchmidtMittenzwei and others added 2 commits September 12, 2025 13:42

Update Database-Features/explanation-of-the-security-manager-for-the-…

64b375d

…JDBC-driver-and-the-impact-of-disabling-it.md Co-authored-by: Christoph Pirkl <[email protected]>

Update explanation-of-the-security-manager-for-the-JDBC-driver-and-th…

328f8cd

…e-impact-of-disabling-it.md

allipatev requested changes Sep 15, 2025

View reviewed changes

PeggySchmidtMittenzwei and others added 3 commits September 15, 2025 09:43

Update Database-Features/explanation-of-the-security-manager-for-the-…

3e0b4d1

…JDBC-driver-and-the-impact-of-disabling-it.md Co-authored-by: allipatev <[email protected]>

Update explanation-of-the-security-manager-for-the-JDBC-driver-and-th…

81c309e

…e-impact-of-disabling-it.md

Update explanation-of-the-security-manager-for-the-JDBC-driver-and-th…

1299bf0

…e-impact-of-disabling-it.md

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Create explanation-of-the-security-manager-for-the-JDBC-driver-and-th… #174

Create explanation-of-the-security-manager-for-the-JDBC-driver-and-th… #174

Uh oh!

PeggySchmidtMittenzwei commented Sep 12, 2025

Uh oh!

exaSR Sep 12, 2025

Uh oh!

Uh oh!

Uh oh!

exaSR Sep 12, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

allipatev left a comment

Uh oh!

Uh oh!

allipatev Sep 15, 2025

Uh oh!

Uh oh!

		## Problem

		You can disable the Security Manager by setting NOSECURITY=YES in the JDBC driver configuration, as shown in the following example:


		## Recommendation

		To ensure security, always download the Exasol JDBC driver from an official and trusted source. After downloading, verify the checksum to confirm the file’s integrity and that it hasn’t been tampered with.


		Setting the NOSECURITY flag to YES disables Java Security Manager, allowing function calls without additional checks.

		The Java Security Manager provides detailed control over which functions are permitted to run in your environment. However, configuring these settings can be complex and time-consuming. In the past, we tried to whitelist only the functions that JDBC drivers required. However, because the drivers frequently change and add new functions with each update, maintaining an accurate whitelist soon became impractical—especially since ExaLoader would then require a comprehensive list covering all functions for all drivers.

Create explanation-of-the-security-manager-for-the-JDBC-driver-and-th… #174

Are you sure you want to change the base?

Create explanation-of-the-security-manager-for-the-JDBC-driver-and-th… #174

Uh oh!

Conversation

PeggySchmidtMittenzwei commented Sep 12, 2025

Uh oh!

exaSR Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

exaSR Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

allipatev left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

allipatev Sep 15, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!