PR-CAB-0007 - Choose and Book Login problems
This document describes 3 problems which have been experienced to date in the configuration of PCs to
access Choose and Book. The issues described below have occurred during a small number of
installations of the IA client. The intended audience of this document is local IT teams supporting Choose
and Book deployments.
Problem 1
The user is presented with a screen with the following error message when attempting to log in to
Choose and Book “You do not have permission to login to this resource. Please contact your system
administrator”.
The Java Console window shows the following:
There are several causes resulting from potential issues in the IA install process that cause this error:
 the java.policy file hasn’t been updated with code granting access to the TicketAPI,
 a different java.policy file (other than the one created in the IA install process) is being used
VERSION 1
Page 1 of 6

the java.policy file has been incorrectly updated resulting in an invalid file.
In all these cases the TicketApiDll will not be loaded when you attempt to login to Choose and Book
because the access to this file is being denied by the Java security policy.
Problem 1 Solution
There are several steps to ensure that the correct java.policy file with the correct code will be loaded by
Internet Explorer.
1.
Determine which Java Runtime Environment (JRE) is being used
Open the Java Plug-in Control Panel (start --> Settings --> Control Panel --> Java Plug-in) and go to the
About Tab:
This shows that the default Plug-in is 1.4.2_04, which is currently the version installed by the Identity
Agent (IA) software version 7.8.0.
Now go to the Advanced Tab:
VERSION 1
Page 2 of 6
This shows that the default Plug-in is used in the Internet Explorer to run java applets. This is the
configuration installed by IA. Hence IE will use the JRE version 1.4.2_04. The JRE for this version is
installed in C:\Program Files\Java\j2re1.4.2_04 and its subdirectories.
This proves that the java.policy file installed as part of the IA installation is being used.
2.
Check for errors in the Java Console
By using the Java Console any error messages by the JRE can be seen.
Open IE.
Open the Java Console (Tools --> Sun Java Console)
Go to the Choose and Book website (https://nww.ebs.ncrs.nhs.uk/app-ebs)
If you see an error similar to “java.security.policy ….. access denied (java.lang.Runtime.Permission
loadLibrary.TicketApiDll” (also see screen shot below) then there is a problem with the java.policy file
This may be resolved using the steps below.
3.
Check the java.policy file
The java.policy file is located in the lib\security subdirectory of the used JRE. With the current IA
VERSION 1
Page 3 of 6
installation the file is C:\Program Files\Java\j2re1.4.2_04\lib\security\ java.policy. Open this file.
For the TicketApiDll to be loaded the following lines have to be in this file. They are usually placed at the
end of the file by the IA installation.
// Added for EBS
//
grant codeBase "https://nww.ebs.ncrs.nhs.uk/app-ebs/-" {
permission java.lang.RuntimePermission "loadLibrary.TicketApiDll";
};
If the above are not in the file then they need to be added.
There was an incident where the java.policy’s file was invalid due to the file being syntactically wrong.
Therefore ensure that the exact lines above are added.
The following java.policy file is the correct file and can be used to replace a user’s policy file or to be
compared against it.
If you continue to experience symptoms after completing the above activities, please complete the
following:







install Windows Update Q833989 for Internet Explorer 6 SP1
Uninstall IA at C:\iainstaller\Install\IAUninstall.ini
After this is completed, but before rebooting machine delete directories C:\TicketAPI & C:\Program
Files\Java
Reboot the machine
Re-Install Iainstaller C:\Iainstaller\Install
Reboot and log onto C&B
If not successful at first, the second attempt should work.
VERSION 1
Page 4 of 6
Problem 2
What to do if there is a newer JRE installed
The following errors are experienced:
Problem 2 Solution
To correct the above errors then the items below need to be executed.


Copy file C:\Program Files\Java\j2re1.4.2_04\lib\applet\GATicket.jar to C:\Program
Files\Java\<<latest JRE directory>>\applet
Update the C:\Program Files\Java\j2re1.4.2_04\lib\security\java.policy file – adding the line
grant codeBase "https://nww.ebs.ncrs.nhs.uk/app-ebs/-" { permission
java.lang.RuntimePermission "loadLibrary.TicketApiDll";};
VERSION 1
Page 5 of 6
Problem 3
The user opens Internet Explorer and enters the Choose and Book URL to launch the application. The IE
window closes after a few seconds.
Problem 3 Solution
The Choose and Book software opens a child window without any toolbars to run the Choose and Book
application and it closes the parent window.
Check if there is a popup-window blocking software is installed on the user’s PC or check if Internet
Explorer has been configured to block popup-windows. Windows XP Service Pack 2 installs this
functionality.
If either of the checks is positive then either the software needs to be disabled or IE should be configured
so nww.ebs.ncrs.nhs.uk is added as a trusted site. Please note that such configuration is specific to the
role profile of the user logged on to the PC, therefore the change needs to be implemented on behalf of
all users of the PC.
VERSION 1
Page 6 of 6