Custom Realm and JarHell

[jhn134910 (John)]

I see somebody else had the same issue:

How to customize plugin-security.policy for custom realm

So, now, after installing the custom realm extension I have a file named x-pack-extension-security.policy in /usr/share/elasticsearch/plugins/x-pack/extensions/mycustomrealm. The contents of the file is: grant { permission java.net.NetPermission "getProxySelector"; }; I am still getting an error: java.security.AccessControlException: access denied ("java.net.NetPermission" "getProxySelector") when the client is instantiated. Any ideas? This is with 5.1.1.

I followed the steps suggested there. Unfortunately, though it doesn't seem to be picking up the permission I specified in x-pack-extension-security.policy. I add code like:

if(sm != null) {
sm.checkPermission(new NetworkPermission("getProxySelector"));
}
AccessController.doPrivileged((PrivilegedAction) () -> {
final AsyncClient asyncClient = new AsyncClient.Builder()
.withConnectionTimeout(connectionTimeout).withSocketTimeout(socketTimeout)
.withMaxConnections(maxConnections).withMaxConnectionsPerHost(maxConnectionsPerHost).build();

this.imsClient = new IMSClient("http://localhost", Optional.of(asyncClient), imsCacheSize, imsCacheExpiryInMinutes);
return null;

});

However, the checkPermission is saying I don't have permission even after the I okayed the permissions when installing the custom realm plugin and the .policy file is present

[root@iel-dev-tfsr-vm1 tango-ims-realm]# pwd
/usr/share/elasticsearch/plugins/x-pack/extensions/tango-ims-realm
[root@iel-dev-tfsr-vm1 tango-ims-realm]# ls
ims-realm-1.0.0-SNAPSHOT.jar x-pack-extension-descriptor.properties x-pack-extension-security.policy