Re: Export Matrix Reloaded...
My understanding (probably wrong) of the instructions for products that include actual crypto code http://www.apache.org/dev/crypto.html are that we have to notify the us government before any such software gets onto apache servers. Does our inclusion of most of the bouncy castle jar trigger this requirement? If so, have we sent the required notification? How is this documented? thanks david jencks On Apr 3, 2008, at 9:47 AM, Emmanuel Lecharny wrote: Hi guys, I have updated the Export Matrix, but it may not be visible before a few hours on the a.o web site (http://www.apache.org/licenses/ exports/). However, I got an error while trying to update the site on /www/ www.a.o/, so I guess I will have to wait for infra in order to get it done. I have included the BC reference (version 1.3.6 for jdk 1.5). I wish I didn't forgot anything :) -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
Re: Export Matrix Reloaded...
David Jencks wrote: My understanding (probably wrong) of the instructions for products that include actual crypto code http://www.apache.org/dev/crypto.html are that we have to notify the us government before any such software gets onto apache servers. Yeah... But as they have been uploaded for _years_, this is just too late to remove all the code from subversion and from our download servers. So it's time to inform US gov now, as of step 3. This is what I gonna do unless someone more US citizen than me want to deal with such a burden ;) -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
TSU NOTIFICATION - Encryption
SUBMISSION TYPE: *TSU* SUBMITTED BY: Emmanuel Lécharny SUBMITTED FOR:*Apache Software Foundation* POINT OF CONTACT: Secretary, Apache Software Foundation FAX: +1-919-573-9199 MANUFACTURER(S) Bouncy Castle PRODUCT NAME/MODEL #: Apache Directoory Server, 1.5.x ECCN: *5D002* NOTIFICATION: http://www.apache.org/licenses/exports/ -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
[jira] Created: (DIRSTUDIO-317) Update legal files after moving to Apache Directory Shared LDAP version 0.9.9
Update legal files after moving to Apache Directory Shared LDAP version 0.9.9 - Key: DIRSTUDIO-317 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-317 Project: Directory Studio Issue Type: Task Reporter: Pierre-Arnaud Marcelot Assignee: Pierre-Arnaud Marcelot Priority: Blocker Fix For: 1.2.0 The future 0.9.9 version of the Apache Directory Shared will contain some cryptographic classes from Bouncy Castle. When we'll move to this version of the library, we'll need to update a few legal files, as well as inform the US government and add an entry for Studio in the ASF Export Classifications and Source Links page (http://www.apache.org/licenses/exports/) The full process is described here: http://www.apache.org/dev/crypto.html -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
Re: [VOTE] [Results] Release Apache Directory Studio 1.1.0
Hi, I just deployed the different packages for the standalone application and the jars for the updatesite (plugins and features). Now, we have to wait for the replication. I'll update the download links on the website and the site.xml file for the update site as soon as the replication is done. Regards, Pierre-Arnaud On Thu, Apr 3, 2008 at 11:23 PM, Pierre-Arnaud Marcelot [EMAIL PROTECTED] wrote: Hi Stefan, On Thu, Apr 3, 2008 at 10:04 PM, Stefan Seelmann [EMAIL PROTECTED] wrote: @Pierre-Arnaud: Could you please manage the release, you are much more familiar with the process and I can't find enought time these days. Many thanks. No problem. I'll do this tomorrow morning. Regards, Pierre-Arnaud
[jira] Updated: (DIRSERVER-1124) Reduce log ERROR to WARN to avoid startup and shutdown noise as replicas connect/disconnect
[ https://issues.apache.org/jira/browse/DIRSERVER-1124?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alex Karasulu updated DIRSERVER-1124: - Fix Version/s: (was: 1.5.2) 1.5.3 Reduce log ERROR to WARN to avoid startup and shutdown noise as replicas connect/disconnect --- Key: DIRSERVER-1124 URL: https://issues.apache.org/jira/browse/DIRSERVER-1124 Project: Directory ApacheDS Issue Type: Improvement Components: mitosis Affects Versions: 1.5.3 Environment: JDK 1.5.1_11. Win 2003 Server SP2 Reporter: Simon Temple Fix For: 1.5.3 Attachments: ClientConnectionManager.patch When using mitosis replication for ADS there is a period of time during start-up when one replica cannot connect to another - because separate machines rarely start at the same rate. During this time, ClientConnectionManager logs ERRORs as MINA gets 'Connection refused' socket errors. I'd like to propose that the replication service only logs WARN messages for this condition. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[VOTE] Release ApacheDS 1.5.2
Hi all, We're ready for the next feature introduction release, ApacheDS 1.5.2. The 1.5.x branch is intended for new feature additions which may potentially destabilize the server. However this is by far still one of the most stable releases we've had. There are several bug fixes and new features that have been incorporated: Notable Features o New schema aware ServerEntry API o New improved installers for more platforms o Zero configuration StartTLS and LDAPS o DIT backed server certificate management o ChangeLog service, snapshotting and state rollback o Faster integration tests o Support password hashing for Administrator o Restart no longer needed for Administrator password changes o Support for different Kerberos encryption types with GSSAPI Closed JIRA Issues -- Bug DIRSERVER-1149 Removing a non existing value of an attribute removes one of this attribute's values Bug DIRSERVER-1083 Search on an custom attribute added to the dynamic schema fails when no result is found Bug DIRSERVER-1064 Admin password cannot be hashed Bug DIRSERVER-1062 MaxValueCount protectedItem is not working properly for access control Bug DIRSERVER-1055 Reading cn=schema doesn't return all requested attributes Bug DIRSERVER-1047 Concurrency issuses in the nexus partition lead to race conditions with unbind requests on shutdown. Bug DIRSERVER-1026 Metaschema ObjectClass description is incorrect Bug DIRSERVER-990 2 objects of the Apache DS Schema share the same OID Bug DIRSERVER-957 OOM when adding a lot of entries Bug DIRSERVER-915 Hot Partitions Throw Exceptions for Normal JNDI Operations Bug DIRSERVER-871 NPE when running ADS in eclipse from time to time Bug DIRSERVER-782 Restart required after changing password Bug DIRSERVER-646 Replacing an unknown attribute with no values (deletion) causes an error New Feature DIRSERVER-1066 Add change log interceptor as optional interceptor New Feature DIRSERVER-869 Add Start TLS support Test DIRSERVER-1123 Test cases for JdbmNoDupsCursor Task DIRSERVER-1054 Project sar-plugin should be sandboxed Task DIRSERVER-1052 Clean ^M into many files Kick the Tires: Installers --- Various native installers for the build are available here: http://people.apache.org/~akarasulu/apacheds/candidates/1.5.2/ Therein you'll find installers for windows, macosx, and various flavors of Linux. Where applicable there are 64-bit and 32-bit versions of the installers. Note a suite installer is included for ApacheDS and Studio combined. This will install both and configure a connection in Studio to connect to ApacheDS. Hazards to Consider - Show stoppers to consider while evaluating and voting: o Legal Notices o License File Contents o Export Restriction Classification (due to bouncycastle) - [NOTE] We're using a reduced version of the bouncycastle jar which avoids patent infringement issues by removing the IDEA algorithm support. - [NOTE] The US government notice has been sent for this release. - ASF Crypto Policy: http://www.apache.org/dev/crypto.html - ASF Export Classification Matrix: http://www.apache.org/licenses/exports 1.5.2 Release Vote - [ ] +1 Release ApacheDS 1.5.2 [ ] +/-0 Abstain [ ] -1 Do not release ApacheDS 1.5.2 Thanks, Alex
Re: [VOTE] Release ApacheDS 1.5.2
[X] +1 Release ApacheDS 1.5.2 Thanks, Alex Thanks a lot Alex ! Thanks also to all the team for making this possible ! -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
ApacheDS for ASF
Hi all, In time for Apachecon, I'd like to give another stab at getting a version of ApacheDS running on the ldap.zones.apache.org zone. The idea would be that this would become a testbed that would eventually graduate off the zone and onto its own machine, but baby steps... The problem I have had to date is that I have a zone, but not the experience to get the server up and running and properly configured on that zone, and time has always been an issue. Is there anyone on the ADS list that is willing to set up an ApacheDS server on the ldap.zones.apache.org zone, securely configure it, and make it ready for populating it with data? Once it is there, the work can start with populating the directory with something useful, but none of that can happen till the server works :) Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature
Apache Conference BoF
Hi guys, for those of you who will be at Amsterdam next week, I have proposed a BoF (Birds of a Feather) session about using ADS to manage Apache. Just register by bumping up the counter if you are interested : http://wiki.apache.org/apachecon/BirdsOfaFeatherEu08#preview Thanks ! PS : For the lazzy ones who don't want to create a user on tis wiki, I may increase the counter for you... But this will be the last time ! ;) -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
Re: ApacheDS for ASF
Emmanuel Lecharny wrote: This is interesting ! We just discussed yesturday with Alex about having a BoF related to using ADS for Apache. May be we can submit this BoF and have this convo there ? At the moment I won't be in AMS next week, but I can be on IRC. What we have right now is a zone that is ready to go, all we need is some people willing to set the server up, and getting the right access to the people who need it. Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature
Re: ApacheDS for ASF
Graham Leggett wrote: Emmanuel Lecharny wrote: This is interesting ! We just discussed yesturday with Alex about having a BoF related to using ADS for Apache. May be we can submit this BoF and have this convo there ? At the moment I won't be in AMS next week, but I can be on IRC. What we have right now is a zone that is ready to go, all we need is some people willing to set the server up, and getting the right access to the people who need it. This can be done easily. I suggest we discuss that during AMS, and have a chat session then. Alex is just totally dead (he finished the release last night), and will be flying tomorrow morning. I may also create a place on the directory wiki where we can discuss the project. Thanks Graham ! PS : I saw that you were moving from Africa to London ? A new job there ? Regards, Graham -- -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
Re: ApacheDS for ASF
Graham Leggett wrote: Hi all, Hi Graham, In time for Apachecon, I'd like to give another stab at getting a version of ApacheDS running on the ldap.zones.apache.org zone. The idea would be that this would become a testbed that would eventually graduate off the zone and onto its own machine, but baby steps... The problem I have had to date is that I have a zone, but not the experience to get the server up and running and properly configured on that zone, and time has always been an issue. Is there anyone on the ADS list that is willing to set up an ApacheDS server on the ldap.zones.apache.org zone, securely configure it, and make it ready for populating it with data? This is interesting ! We just discussed yesturday with Alex about having a BoF related to using ADS for Apache. May be we can submit this BoF and have this convo there ? Once it is there, the work can start with populating the directory with something useful, but none of that can happen till the server works :) yes, that's true :) FYI, we will all arrive around sunday (Alex) and monday (Pierre-Arnaud, me), I don't exactly know for the other peeps (Stefan Zörner, Stefan Seelmann and Christine Koppelt). See you there ! Put the beers on ice ! -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
Re: ApacheDS for ASF
Emmanuel Lecharny wrote: I suggest we discuss that during AMS, and have a chat session then. Alex is just totally dead (he finished the release last night), and will be flying tomorrow morning. I emphathise, was flying over Easter and was wiped out afterwards... I may also create a place on the directory wiki where we can discuss the project. That may be an idea. Part of the driver for getting a proper LDAP server going is that I have just landed some more user friendly login module options with httpd, meaning that it is easier to create a per user website (backed by LDAP) for the ASF. PS : I saw that you were moving from Africa to London ? A new job there ? Been in London for the last year or so, finally got round to updating my details :) Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature
Where do babies come from?
http://www.zoitz.com/page/16
Re: Where do babies come from?
Thanks for a great laugh jmconnell. 2008/4/4 Alex Karasulu [EMAIL PROTECTED]: http://www.zoitz.com/page/16
Re: ApacheDS for ASF
Count me in. Alex On Fri, Apr 4, 2008 at 11:47 AM, Graham Leggett [EMAIL PROTECTED] wrote: Hi all, In time for Apachecon, I'd like to give another stab at getting a version of ApacheDS running on the ldap.zones.apache.org zone. The idea would be that this would become a testbed that would eventually graduate off the zone and onto its own machine, but baby steps... The problem I have had to date is that I have a zone, but not the experience to get the server up and running and properly configured on that zone, and time has always been an issue. Is there anyone on the ADS list that is willing to set up an ApacheDS server on the ldap.zones.apache.org zone, securely configure it, and make it ready for populating it with data? Once it is there, the work can start with populating the directory with something useful, but none of that can happen till the server works :) Regards, Graham --
Re: Apache Conference BoF
Done. It took me like 10 tries to realize that this is not the same wiki as the one we used for google summer of code. Then again I'm pretty groggy. That's annoying tho. On Fri, Apr 4, 2008 at 12:06 PM, Emmanuel Lecharny [EMAIL PROTECTED] wrote: Hi guys, for those of you who will be at Amsterdam next week, I have proposed a BoF (Birds of a Feather) session about using ADS to manage Apache. Just register by bumping up the counter if you are interested : http://wiki.apache.org/apachecon/BirdsOfaFeatherEu08#preview Thanks ! PS : For the lazzy ones who don't want to create a user on tis wiki, I may increase the counter for you... But this will be the last time ! ;) -- -- cordialement, regards, Emmanuel Lécharny www.iktek.com directory.apache.org
Re: [ApacheDS] 1.5.2 release VSLDAP run
Hi Alex! Alex Karasulu wrote: Can you do a VSLDAP run for us to make sure the current bigbang version is going to pass? Thanks we're about to kick off the vote here in 24hrs so this would be good to have now. BTW you might run into a problem or two with the new handling of certificates - I can help you get setup with that. We're storing the cert now in the DIT. Sorry for the delayed answer. Currently I am totally overloaded (holds true for the last two month, unfortunately). But I was able to install one of the installers from here http://people.apache.org/~akarasulu/apacheds/candidates/1.5.2/ and will conduct an VSLDAP run tomorrow morning. In case of problems with the certificate I'll let you know. Greetings from Hamburg, Stefan
Re: [ApacheDS] 1.5.2 release VSLDAP run
No worries Stefan. I'm not doing so well either myself. Thanks for trying. Regards, Alex On Fri, Apr 4, 2008 at 5:05 PM, Stefan Zoerner [EMAIL PROTECTED] wrote: Hi Alex! Alex Karasulu wrote: Can you do a VSLDAP run for us to make sure the current bigbang version is going to pass? Thanks we're about to kick off the vote here in 24hrs so this would be good to have now. BTW you might run into a problem or two with the new handling of certificates - I can help you get setup with that. We're storing the cert now in the DIT. Sorry for the delayed answer. Currently I am totally overloaded (holds true for the last two month, unfortunately). But I was able to install one of the installers from here http://people.apache.org/~akarasulu/apacheds/candidates/1.5.2/http://people.apache.org/%7Eakarasulu/apacheds/candidates/1.5.2/ and will conduct an VSLDAP run tomorrow morning. In case of problems with the certificate I'll let you know. Greetings from Hamburg, Stefan
Re: Where do babies come from?
grin You guys don't have serious occupation, like answering user's questions ? grin/ PS: This should be posted to Sally Khudairi ! Thanks Jesse, you made me laugh ! On Fri, Apr 4, 2008 at 9:41 PM, Alex Karasulu [EMAIL PROTECTED] wrote: Thanks for a great laugh jmconnell. 2008/4/4 Alex Karasulu [EMAIL PROTECTED]: http://www.zoitz.com/page/16 -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com
Re: Nagios
Finally fixed and stop spamming. Nagios should work fine ATM with some basic checks. Regards Felix
