Oracle thin jdbc throws java.lang.SecurityException (tomcat 6.0.2.0, jdk 1.6.0 v5.4.0) ...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

...and I'm clueless. I've got all the latest jdbc stuff from Oracle. I'm
trying to connect to an oracle database from the i. I've got the code
working from my workstation just fine, both in Eclipse, and in
stand-alone tomcat, but when I run it on the i, it goes south right
about here:

oracle.security.o5logon.O5LoginClientHelper.generateOAuthResponse(Unknown
Source)
at
oracle.jdbc.driver.T4CTTIoauthenticate.doOAUTH(T4CTTIoauthenticate.java:655)

at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:359)

at
oracle.jdbc.driver.PhysicalConnection.<init>(PhysicalConnection.java:531)

at oracle.jdbc.driver.T4CConnection.<init>(T4CConnection.java:221)

It ends up spewing this:
Apr 17, 2010 1:38:19 PM org.apache.catalina.core.StandardWrapperValve
invoke SEVERE: Servlet.service() for servlet HcpcInquiry threw exception

java.lang.SecurityException: Jurisdiction policy files are not signed by
trusted signers!

That looks like a local issue on the i, but I've been googling for quite
a while. I've already downloaded local_policy.jar and US_export_policy
from the sun website. Both are for java6. They're installed in
/QIBM/ProdData/Java400/jdk6/lib/security.

No difference.

No messages anywhere I can find (QSYSOPR, QSYSMSG, process user, job,
subsystem), nothing in the server logs other than what's above.

The tomcat server on my laptop is the same tomcat that's on the i, (I
copied it there from my laptop.) Everything else works on the i,
including BIRT, XML Dom, security adoption and regular old out.print.
The i is current on ptfs as of a month or so back. Both laptop and i are
running java6, so if it works one place and not the other ????

No sign of class not found errors.

More googling. A recommendation to install the oracle server's
certificate in DCM was the only thing that even sounded reasonable.
Reasonable? Ok. Now I need to seek advice. I know nothing about DCM, and
crypto is not my forte. I brought DCM up in iNav, and didn't even
understand the option categories. I think I could hurt something in here.

Anybody game for assisting a moron? Have any idea where to go from here
that doesn't involve flames, explosions, stuff like that?

- --
Pete Hall
pete@xxxxxxxxxxxxxx
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkvKI5oACgkQXczQcKdXKg5krACfZTpvv2mzHIwdouLLyq5VWiSy
SmoAoLc/mPh1GFs+ePypyO/YF2dxE6DN
=doVS
-----END PGP SIGNATURE-----