Re: build hangs at mdb tests

2014-05-12 Thread Romain Manni-Bucau
Mea culpa, here is a patch fixing it: https://gist.github.com/rmannibucau/dcbb36349364f45ede42 (can't commit it now but feel free to do it for me) Romain Manni-Bucau Twitter: @rmannibucau Blog: http://rmannibucau.wordpress.com/ LinkedIn: http://fr.linkedin.com/in/rmannibucau Github: https://gith

Re: Apache TomEE 1.6.0.2

2014-05-12 Thread Jean-Louis Monteiro
Thanks so much Andy -- Jean-Louis Monteiro http://twitter.com/jlouismonteiro http://www.tomitribe.com On Mon, May 12, 2014 at 9:22 AM, Andy Gumbrecht wrote: > > Apache TomEE 1.6.0.2 Released! > > Apache TomEE is happy to announce the security related release of Apache > TomEE 1.6.0.2

Re: default tomee credentials (WAS: [VOTE] TomEE 1.6.0.2...)

2014-05-12 Thread Romain Manni-Bucau
In TomcatWebAppBuilder (pointer in my first answer) See http://mail-archives.apache.org/mod_mbox/openejb-commits/201210.mbox/%3c20121008162359.ddb492388...@eris.apache.org%3Eand all is detailed here https://issues.apache.org/jira/plugins/servlet/mobile#issue/TOMEE-450 Le 13 mai 2014 02:14, "David

Re: 1.6.0.2-plus

2014-05-12 Thread Jean-Louis Monteiro
It should not be synchronized again. Apache mirror and all stuff takes a bit of time to get synchronized. Apologize for that. JLouis -- Jean-Louis Monteiro http://twitter.com/jlouismonteiro http://www.tomitribe.com On Mon, May 12, 2014 at 4:30 PM, Chuck Davis wrote: > Click on the link and g

build hangs at mdb tests

2014-05-12 Thread Thiago Veronezi
Hi Romain, It looks like the build is hanging at CustomMdbContainerTest after the changes listed here... http://ci.apache.org/builders/tomee-trunk-ubuntu/builds/61 Any idea? []s, Thiago

Re: default tomee credentials (WAS: [VOTE] TomEE 1.6.0.2...)

2014-05-12 Thread Romain Manni-Bucau
yep since default profile is development. You can find details back on the list but basically default are dev and tools friendly. Security is only on when you are no more in profile dev. Actually having tomee/tomee user in memory db is less dangerous than having openejb internal app deployed. Both

Re: default tomee credentials (WAS: [VOTE] TomEE 1.6.0.2...)

2014-05-12 Thread David Blevins
I don't recall discussing adding users outside of those configured in the tomee-users.xml. Where in code do we do this? -David On May 12, 2014, at 1:15 PM, Romain Manni-Bucau wrote: > yep since default profile is development. You can find details back on > the list but basically default are

Re: 1.6.0.2-plus

2014-05-12 Thread Chuck Davis
Click on the link and get a "Not Found" reply.

Re: default tomee credentials (WAS: [VOTE] TomEE 1.6.0.2...)

2014-05-12 Thread David Blevins
So if an administrator wanted to disable all users and did so by commenting them out from the tomcat-users.xml file, would we then add users and open access back up? (speaking of course of our default actions) -David On May 12, 2014, at 9:58 AM, Romain Manni-Bucau wrote: > the point was if w

Re: [VOTE] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread Jean-Louis Monteiro
Thanks Andy. Build and tck all green. All other legal stuff as well. So here is my +1 -- Jean-Louis Monteiro http://twitter.com/jlouismonteiro http://www.tomitribe.com On Wed, May 7, 2014 at 1:08 AM, helio frota <00h...@gmail.com> wrote: > +1 > > --- > h

Apache TomEE 1.6.0.2

2014-05-12 Thread Andy Gumbrecht
Apache TomEE 1.6.0.2 Released! Apache TomEE is happy to announce the security related release of Apache TomEE 1.6.0.2 which is still based on Apache Tomcat 7.0.53 - The principal focus of this rele

Re: default tomee credentials (WAS: [VOTE] TomEE 1.6.0.2...)

2014-05-12 Thread Romain Manni-Bucau
the point was if we don't do it by default some tools would have been broken by default like the webapp. BTW if you remove the memorydatabase of server.xml or if you define any user we don't do it (see public void start(final StandardServer server) in TomcatWebAppBuilder) Romain Manni-Bucau Twit

default tomee credentials (WAS: [VOTE] TomEE 1.6.0.2...)

2014-05-12 Thread Thiago Veronezi
Oh... I didn't know about that. I probably missed that discussion. imo, it looks dangerous. It means that commenting out all the credentials from "tomee-users.xml" changes the default tomcat behavior one expects to see. []s, Thiago. On Mon, May 12, 2014 at 11:16 AM, Romain Manni-Bucau wrote

PMC and voting

2014-05-12 Thread David Blevins
Some basic information on PMCs and voting: - http://tomee.apache.org/management-and-voting.html Short answer, being on the PMC brings more work and no additional authority. That work is primarily scanning the legal files every single release before you vote. Scanning them means you need to f

Re: default tomee credentials (WAS: [VOTE] TomEE 1.6.0.2...)

2014-05-12 Thread Thiago Veronezi
Please read "tomcat-users.xml" where I write "tomee-users.xml". On Mon, May 12, 2014 at 12:25 PM, Thiago Veronezi wrote: > > Oh... I didn't know about that. I probably missed that discussion. > > imo, it looks dangerous. It means that commenting out all the credentials > from "tomee-users.xml" c

Re: [VOTE] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread Romain Manni-Bucau
Hi since some times (think it is 1.6.0 but not sure) tomee:tomee user is added automatically by default. -Dopenejb.profile=prod to get rid of it Romain Manni-Bucau Twitter: @rmannibucau Blog: http://rmannibucau.wordpress.com/ LinkedIn: http://fr.linkedin.com/in/rmannibucau Github: https://github

Re: [RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread David Blevins
Release voting is the only "abnormal" voting. It requires a minimum vote: 3 +1s from PMC members to ensure legal oversight. -David On May 12, 2014, at 5:21 AM, agumbrecht wrote: > Thanks Daniel, > > Was kind of leaning on the 'Commit-Then-Review, Consensus Gauging through > Silence' to get t

Re: [VOTE] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread Thiago Veronezi
Guys, Sorry for the late notice, but can you verify this? It looks like the server completely ignores the fact that the default "tomee" credentials are commented out in "tomcat-users.xml". How to test? https://dist.apache.org/repos/dist/dev/tomee/staging-1016/tomee-1.6.0.2/apache-tomee-1.6.0.2-pl

Re: [RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread Andy Gumbrecht
David just cam on and gave a +1, so rolling now for sure ;-) Thank you everyone! On 12/05/2014 15:33, dsh wrote: Not sure I am on the PMC maybe one day in the future ;) Cheers Daniel On Mon, May 12, 2014 at 2:21 PM, agumbrecht wrote: Thanks Daniel, Was kind of leaning on the 'Commit-Then-

Re: [RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread dsh
Not sure I am on the PMC maybe one day in the future ;) Cheers Daniel On Mon, May 12, 2014 at 2:21 PM, agumbrecht wrote: > Thanks Daniel, > > Was kind of leaning on the 'Commit-Then-Review, Consensus Gauging through > Silence' to get this out, but now we're happy! > > That brings us to: > > +1'

Re: [VOTE] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread David Blevins
My +1. -- David Blevins http://twitter.com/dblevins http://www.tomitribe.com On May 6, 2014, at 2:29 PM, Andy Gumbrecht wrote: > Hi Everyone, > > I have rolled out the 1.6.0.2 security release for a vote. > > The *only *difference to 1.6.0.1 is an upgrade to CXF 2.6.14 to fix the 2014 > (t

Re: [RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread dsh
I just voted on the vote thread in case you need another +1. Cheers Daniel On Mon, May 12, 2014 at 1:39 PM, Romain Manni-Bucau wrote: > seems one binding vote is missing no? > > > Romain Manni-Bucau > Twitter: @rmannibucau > Blog: http://rmannibucau.wordpress.com/ > LinkedIn: http://fr.linkedin

Re: [RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread Jean-Louis Monteiro
Thanks Le 12 mai 2014 05:29, "agumbrecht" a écrit : > Thanks Daniel, > > Was kind of leaning on the 'Commit-Then-Review, Consensus Gauging through > Silence' to get this out, but now we're happy! > > That brings us to: > > +1's > Jean-Louis Monteiro (PMC) > Romain Manni-Bucau > Andy Gumbrecht > J

Re: [RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread agumbrecht
Thanks Daniel, Was kind of leaning on the 'Commit-Then-Review, Consensus Gauging through Silence' to get this out, but now we're happy! That brings us to: +1's Jean-Louis Monteiro (PMC) Romain Manni-Bucau Andy Gumbrecht Jeff Genender Helio Frota Karan Malhi Jonathan Gallimore (PMC) Daniel Stefa

Re: [VOTE] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread dsh
+1 Cheers Daniel On Tue, May 6, 2014 at 10:10 PM, Andy Gumbrecht wrote: > Hi Everyone, > > I have rolled out the 1.6.0.2 security release for a vote. > > The *only *difference to 1.6.0.1 is an upgrade to CXF 2.6.14 to fix the > 2014 (that's the year not the count) security issues found here: >

Re: [RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread Romain Manni-Bucau
seems one binding vote is missing no? Romain Manni-Bucau Twitter: @rmannibucau Blog: http://rmannibucau.wordpress.com/ LinkedIn: http://fr.linkedin.com/in/rmannibucau Github: https://github.com/rmannibucau 2014-05-12 13:27 GMT+02:00 Andy Gumbrecht : > Unless anyone has serious issues with this

[RESULT] TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016)

2014-05-12 Thread Andy Gumbrecht
Unless anyone has serious issues with this vote I will release the binaries for TomEE 1.6.0.2/OpenEJB 4.6.0.2 (staging-1016) based on the following result: +1's Jean-Louis Monteiro Romain Manni-Bucau Andy Gumbrecht Jeff Genender Helio Frota Karan Malhi Jonathan Gallimore No other recorded vote

Re: Maven / tomEE

2014-05-12 Thread agumbrecht
When faced with this challenge in the past I used the following to regularly create a directory listing of all jars. http://maven.apache.org/plugins/maven-dependency-plugin/examples/copying-project-dependencies.html I could usually see at a glance if duplicate libraries were sneaking in, but also

Re: [VOTE] org.apache.openejb.patch:openjpa-parent:2.4.0-nonfinal-1591689

2014-05-12 Thread Romain Manni-Bucau
Hi just do the two releases at the same time and push a single vote on them. No link between poms. If one of both fails both fails then. Romain Manni-Bucau Twitter: @rmannibucau Blog: http://rmannibucau.wordpress.com/ LinkedIn: http://fr.linkedin.com/in/rmannibucau Github: https://github.com/rma

Re: [VOTE] org.apache.openejb.patch:openjpa-parent:2.4.0-nonfinal-1591689

2014-05-12 Thread Andy Gumbrecht
OK, so I guess I just add the repo to the parent pom for now, but how do we release it then? If we vote on TomEE, and then release the library and change the TomEE pom to point to the release then this would mean we have to vote again because technically it is a change to TomEE post vote - See

Re: Too Many Open Files

2014-05-12 Thread Thiago Veronezi
Hi guys, I did some changes in the debian manipulation. It's faster now... [INFO] Installing /home/tveronezi/dev/ws/tomee/trunk/tomee/tomee-deb/target/work-dir/apache-libtomee-plus-java.deb to /home/tveronezi/.m2/repository/org/apache/openejb/tomee-deb/1.6.1-SNAPSHOT/tomee-deb-1.6.1-SNAPSHOT-lib-p