I will start the voting for RC2 addressing the concerns. -Kalyan
On Thu, Nov 30, 2017 at 10:36 AM, Alexander Kolbasov <ak...@cloudera.com> wrote: > Given that the licensing exercise isn't complete, I suggest revoking the > vote on the release until it is complete. > > - Alex > > On Thu, Nov 30, 2017 at 7:11 AM, Kalyan Kumar Kalvagadda < > kkal...@cloudera.com> wrote: > > > here are my next steps towards being compliant to apache licensing > > > > 1. Stop distributing jar which are licensed under GPL and LGPL only as > they > > are not allowed to be distributed. (Please refer > > http://www.apache.org/legal/resolved.html#category-a) > > 2. See if we can stop distributing jars which are not licensed by Apache. > > 2. Document the rest of them in the LICENSE.txt following the guidelines > > mentioned in (https://www.apache.org/dev/licensing-howto.html) > > > > -Kalyan > > > > On Thu, Nov 30, 2017 at 4:40 AM, Colm O hEigeartaigh < > cohei...@apache.org> > > wrote: > > > > > Hi Kalyan, > > > > > > You need to read the following page, which lays it all out: > > > > > > https://www.apache.org/dev/licensing-howto.html > > > > > > In particular, there are two things you need to do: > > > > > > a) Go through the list of dependencies and isolate the non-Apache > > licensed > > > jars. Include that license in a "licenses" directory and point to it in > > our > > > LICENSE.txt (note - it must be a permissive license, for example we > can't > > > bundle LGPL jars that are not dual licensed): > > > > > > From the howto: > > > > > > "In LICENSE, add a pointer <http://s.apache.org/Hqj> to the > dependency's > > > license within the distribution and a short note summarizing its > > licensing: > > > > > > This product bundles SuperWidget 1.2.3, which is available under a > > > "3-clause BSD" license. For details, see deps/superwidget/. > > > " > > > > > > b) For all dependencies INCLUDING Apache licensed dependencies, you > need > > > to go to the source for each dependency and see if it has a NOTICE file > > > with copyright notices that are non-Apache. If so they need to be > > included > > > in our NOTICE file. > > > > > > From the howto: > > > > > > "If the dependency supplies a NOTICE file, its contents must be > analyzed > > > and the relevant portions bubbled up into the top-level NOTICE file." > > > > > > Colm. > > > > > > > > > On Wed, Nov 29, 2017 at 8:59 PM, Kalyan Kumar Kalvagadda < > > > kkal...@cloudera.com> wrote: > > > > > >> I have gathered all license information for all the dependencies using > > >> license-maven-plugin. > > >> Here is the file attached. > > >> > > >> Is there a particular format I should be using to update the license > > file > > >> in the repo? > > >> > > >> -Kalyan > > >> > > >> On Wed, Nov 29, 2017 at 1:52 PM, Colm O hEigeartaigh < > > cohei...@apache.org > > >> > wrote: > > >> > > >>> Hi Kalyan, > > >>> > > >>> Anything Apache related you can immediately discount - so Hadoop, > Hive, > > >>> HBase, Solr, Zookeeper, etc. I would suggest just deleting those jars > > >>> from > > >>> the list and googling the remaining jars to see what the license is. > > >>> > > >>> Colm. > > >>> > > >>> On Wed, Nov 29, 2017 at 6:55 PM, Kalyan Kumar Kalvagadda < > > >>> kkal...@cloudera.com> wrote: > > >>> > > >>> > I'm trying to gather the license information for the dependencies. > > I'm > > >>> > trying to use Apache Maven Project Info Reports Plugin > > >>> > <https://maven.apache.org/plugins/maven-project-info- > reports-plugin/ > > > > > >>> . > > >>> > > > >>> > Does anyone has a better suggestion? > > >>> > > > >>> > -Kalyan > > >>> > > > >>> > On Wed, Nov 29, 2017 at 12:32 PM, Sergio Pena < > > >>> sergio.p...@cloudera.com> > > >>> > wrote: > > >>> > > > >>> > > I don't have that issue. > > >>> > > > > >>> > > I downloaded the 2.0 tar.gz that is already signed and install it > > on > > >>> an > > >>> > > Ubuntu 16.04 machine with Hive 2.3.2. It has been running in a > > single > > >>> > node > > >>> > > mode. I could check HMS notifications being pulled and updated, > and > > >>> > > checking the permissions. > > >>> > > > > >>> > > On Wed, Nov 29, 2017 at 12:20 PM, Kalyan Kumar Kalvagadda < > > >>> > > kkal...@cloudera.com> wrote: > > >>> > > > > >>> > > > Sergio, > > >>> > > > > > >>> > > > I know that you tried to start sentry standalone, Did you see > > this > > >>> > issue? > > >>> > > > > > >>> > > > > > >>> > > > -Kalyan > > >>> > > > > > >>> > > > On Wed, Nov 29, 2017 at 12:16 PM, Alexander Kolbasov < > > >>> > ak...@cloudera.com > > >>> > > > > > >>> > > > wrote: > > >>> > > > > > >>> > > > > I tried to start Sentry server on Mac and got a weird error > . I > > >>> am > > >>> > > > running > > >>> > > > > from the dist directory that I just built with mvn clean > > install > > >>> on > > >>> > the > > >>> > > > > 2.0.0 branch. > > >>> > > > > > > >>> > > > > 17/11/29 10:13:25 ERROR thrift.SentryService: Error starting > > >>> server > > >>> > > > > java.lang.SecurityException: class > > "javax.servlet.DispatcherType" > > >>> 's > > >>> > > > signer > > >>> > > > > information does not match signer information of other > classes > > >>> in the > > >>> > > > same > > >>> > > > > package > > >>> > > > > at java.lang.ClassLoader.checkCer > > >>> ts(ClassLoader.java:898) > > >>> > > > > at java.lang.ClassLoader.preDefineClass(ClassLoader. > > >>> > java:668) > > >>> > > > > at java.lang.ClassLoader.defineCl > > >>> ass(ClassLoader.java:761) > > >>> > > > > at > > >>> > > > > java.security.SecureClassLoader.defineClass( > > >>> > > SecureClassLoader.java:142) > > >>> > > > > at java.net.URLClassLoader. > defineClass(URLClassLoader. > > >>> > > java:467) > > >>> > > > > at java.net.URLClassLoader. > access$100(URLClassLoader. > > >>> > java:73) > > >>> > > > > at java.net.URLClassLoader$1.run( > > >>> URLClassLoader.java:368) > > >>> > > > > at java.net.URLClassLoader$1.run( > > >>> URLClassLoader.java:362) > > >>> > > > > at java.security.AccessController.doPrivileged( > Native > > >>> > Method) > > >>> > > > > at java.net.URLClassLoader.findCl > > >>> ass(URLClassLoader.java: > > >>> > 361) > > >>> > > > > at java.lang.ClassLoader.loadClass(ClassLoader.java: > > 424) > > >>> > > > > at sun.misc.Launcher$AppClassLoader.loadClass( > > >>> > > Launcher.java:331) > > >>> > > > > at java.lang.ClassLoader.loadClass(ClassLoader.java: > > 357) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService.startSentryWe > > >>> bServer( > > >>> > > > > SentryService.java:422) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService. > > >>> > > > > runServer(SentryService.java:268) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService.call( > > >>> > > > > SentryService.java:198) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService.call( > > >>> > > > SentryService.java:76) > > >>> > > > > at java.util.concurrent.FutureTas > > >>> k.run(FutureTask.java:266) > > >>> > > > > at > > >>> > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > > >>> > > > > ThreadPoolExecutor.java:1142) > > >>> > > > > at > > >>> > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > > >>> > > > > ThreadPoolExecutor.java:617) > > >>> > > > > at java.lang.Thread.run(Thread.java:745) > > >>> > > > > Exception in thread "main" java.util.concurrent.Execution > > >>> Exception: > > >>> > > > > java.lang.Exception: Error starting server > > >>> > > > > at java.util.concurrent. > FutureTask.report(FutureTask. > > >>> > java:122) > > >>> > > > > at java.util.concurrent.FutureTas > > >>> k.get(FutureTask.java:192) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService$ > > >>> > > > > CommandImpl.run(SentryService.java:591) > > >>> > > > > at org.apache.sentry.SentryMain.m > > >>> ain(SentryMain.java:122) > > >>> > > > > at sun.reflect.NativeMethodAccessorImpl. > invoke0(Native > > >>> > Method) > > >>> > > > > at > > >>> > > > > sun.reflect.NativeMethodAccessorImpl.invoke( > > >>> > > > NativeMethodAccessorImpl.java: > > >>> > > > > 62) > > >>> > > > > at > > >>> > > > > sun.reflect.DelegatingMethodAccessorImpl.invoke( > > >>> > > > > DelegatingMethodAccessorImpl.java:43) > > >>> > > > > at java.lang.reflect.Method.invoke(Method.java:498) > > >>> > > > > at org.apache.hadoop.util.RunJar. > run(RunJar.java:234) > > >>> > > > > at org.apache.hadoop.util.RunJar. > main(RunJar.java:148) > > >>> > > > > Caused by: java.lang.Exception: Error starting server > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService.call( > > >>> > > > > SentryService.java:202) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService.call( > > >>> > > > SentryService.java:76) > > >>> > > > > at java.util.concurrent.FutureTas > > >>> k.run(FutureTask.java:266) > > >>> > > > > at > > >>> > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > > >>> > > > > ThreadPoolExecutor.java:1142) > > >>> > > > > at > > >>> > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > > >>> > > > > ThreadPoolExecutor.java:617) > > >>> > > > > at java.lang.Thread.run(Thread.java:745) > > >>> > > > > Caused by: java.lang.SecurityException: class > > >>> > > > > "javax.servlet.DispatcherType"'s signer information does not > > >>> match > > >>> > > > signer > > >>> > > > > information of other classes in the same package > > >>> > > > > at java.lang.ClassLoader.checkCer > > >>> ts(ClassLoader.java:898) > > >>> > > > > at java.lang.ClassLoader.preDefineClass(ClassLoader. > > >>> > java:668) > > >>> > > > > at java.lang.ClassLoader.defineCl > > >>> ass(ClassLoader.java:761) > > >>> > > > > at > > >>> > > > > java.security.SecureClassLoader.defineClass( > > >>> > > SecureClassLoader.java:142) > > >>> > > > > at java.net.URLClassLoader. > defineClass(URLClassLoader. > > >>> > > java:467) > > >>> > > > > at java.net.URLClassLoader. > access$100(URLClassLoader. > > >>> > java:73) > > >>> > > > > at java.net.URLClassLoader$1.run( > > >>> URLClassLoader.java:368) > > >>> > > > > at java.net.URLClassLoader$1.run( > > >>> URLClassLoader.java:362) > > >>> > > > > at java.security.AccessController.doPrivileged( > Native > > >>> > Method) > > >>> > > > > at java.net.URLClassLoader.findCl > > >>> ass(URLClassLoader.java: > > >>> > 361) > > >>> > > > > at java.lang.ClassLoader.loadClass(ClassLoader.java: > > 424) > > >>> > > > > at sun.misc.Launcher$AppClassLoader.loadClass( > > >>> > > Launcher.java:331) > > >>> > > > > at java.lang.ClassLoader.loadClass(ClassLoader.java: > > 357) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService.startSentryWe > > >>> bServer( > > >>> > > > > SentryService.java:422) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService. > > >>> > > > > runServer(SentryService.java:268) > > >>> > > > > at > > >>> > > > > org.apache.sentry.service.thrift.SentryService.call( > > >>> > > > > SentryService.java:198) > > >>> > > > > ... 5 more > > >>> > > > > > > >>> > > > > On Tue, Nov 28, 2017 at 4:38 PM, Kalyan Kumar Kalvagadda < > > >>> > > > > kkal...@cloudera.com> wrote: > > >>> > > > > > > >>> > > > > > This is the release of Apache Sentry, version 2.0.0. > > >>> > > > > > > > >>> > > > > > It fixes the following issues: > > >>> > > > > > *https://issues.apache.org/jira/projects/SENTRY/versions/ > 123 > > >>> 41081 > > >>> > > > > > <https://issues.apache.org/jira/projects/SENTRY/versions/ > 123 > > >>> 41081 > > >>> > >* > > >>> > > > > > > > >>> > > > > > Source and bin files : > > >>> > > > > > *http://home.apache.org/~kalyan/apache-sentry-2.0.0- > > src-rc-1/ > > >>> > > > > > <http://home.apache.org/~kalyan/apache-sentry-2.0.0- > > src-rc-1/ > > >>> >* > > >>> > > > > > > > >>> > > > > > Maven artifacts are available > > >>> > > > > > here:https://repository.apache.org/content/ > > >>> > > > repositories/orgapachesentry- > > >>> > > > > > 1005/ > > >>> > > > > > > > >>> > > > > > > > >>> > > > > > Tag to be voted on > > >>> > > > > > *https://git-wip-us.apache.org/repos/asf/sentry/?p= > > >>> > > > > > sentry.git;a=tag;h=refs/tags/release-2.0.0 > > >>> > > > > > <https://git-wip-us.apache.org/repos/asf/sentry/?p= > > >>> > > > > > sentry.git;a=tag;h=refs/tags/release-2.0.0>* > > >>> > > > > > > > >>> > > > > > Sentry's KEYS containing the PGP key we used to sign the > > >>> release: > > >>> > > > > > http://www.apache.org/dist/sentry/KEYS > > >>> > > > > > > > >>> > > > > > we are voting on the source:tag=release-2.0.0, SHA= > > >>> > > > > > 18fe7c596fa1ffad3e656a42d534ac190876b642 > > >>> > > > > > (You can get the hash of the tag by doing "git rev-list > > >>> > > release-1.8.0 > > >>> > > > | > > >>> > > > > > head -n 1" ) > > >>> > > > > > > > >>> > > > > > Vote will be open for 72 hours. > > >>> > > > > > > > >>> > > > > > [ ] +1 approve > > >>> > > > > > [ ] +0 no opinion > > >>> > > > > > [ ] -1 disapprove (and reason why) > > >>> > > > > > > > >>> > > > > > -Kalyan > > >>> > > > > > > > >>> > > > > > > >>> > > > > > >>> > > > > >>> > > > >>> > > >>> > > >>> > > >>> -- > > >>> Colm O hEigeartaigh > > >>> > > >>> Talend Community Coder > > >>> http://coders.talend.com > > >>> > > >> > > >> > > > > > > > > > -- > > > Colm O hEigeartaigh > > > > > > Talend Community Coder > > > http://coders.talend.com > > > > > >