Spanish Documentation Send
Hi everybody, Geir Magnusson, I have sent my spanish documentation to your personal apache email. thank you very much!!! KatiaAcepta el reto MSN Premium: incluye Antivirus y Firewall de McAffee. Descárgalo y pruébalo 2 meses gratis.
[jira] Resolved: (GERONIMO-667) New website get-involved.html page lacks information about IRC channel
[ http://issues.apache.org/jira/browse/GERONIMO-667?page=all ] Geir Magnusson Jr resolved GERONIMO-667: Resolution: Fixed Assign To: Geir Magnusson Jr Done. Thanks Tom > New website get-involved.html page lacks information about IRC channel > -- > > Key: GERONIMO-667 > URL: http://issues.apache.org/jira/browse/GERONIMO-667 > Project: Geronimo > Type: Improvement > Environment: not applicable > Reporter: Tom McQueeney > Assignee: Geir Magnusson Jr > Priority: Minor > Attachments: doco-patch.txt > > The get-involved.html page could use a mention of the IRC channel to avoid > folks asking on the mailing list if there's an IRC channel. Details of the > IRC channel are mentioned on the wiki, but not on the main Geronimo website. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Created: (GERONIMO-668) Unable to determine username from EJB method
Unable to determine username from EJB method Key: GERONIMO-668 URL: http://issues.apache.org/jira/browse/GERONIMO-668 Project: Geronimo Type: Bug Versions: 1.0-M4 Reporter: Ivan Dubrov When calling EJB method from the Web module some important security context information (username) is lost. It is impossible to determine caller user name from the EJB method. EJBContext.getCallerPrincipal().getName() returns something like this: [org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal: manager] -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [jira] Updated: (GERONIMO-667) New website get-involved.html page lacks information about IRC channel
Thanks. Applied and published to public site. (Keep 'em coming...) geir On Jun 10, 2005, at 12:50 AM, Tom McQueeney (JIRA) wrote: [ http://issues.apache.org/jira/browse/GERONIMO-667?page=all ] Tom McQueeney updated GERONIMO-667: --- Attachment: doco-patch.txt Patch adds information about the Geronimo IRC channel to the get- involved.xml xdoc. The patch also (1) provides a link to the get- involved page from the mailing.html page that mentions the IRC channel but provides no information about it, (2) Fixes the href to the mailing list page on the get-involved page (3) Fixes the href to the mailng list page on the roadmap page. New website get-involved.html page lacks information about IRC channel - - Key: GERONIMO-667 URL: http://issues.apache.org/jira/browse/GERONIMO-667 Project: Geronimo Type: Improvement Environment: not applicable Reporter: Tom McQueeney Priority: Minor Attachments: doco-patch.txt The get-involved.html page could use a mention of the IRC channel to avoid folks asking on the mailing list if there's an IRC channel. Details of the IRC channel are mentioned on the wiki, but not on the main Geronimo website. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira -- Geir Magnusson Jr +1-203-665-6437 [EMAIL PROTECTED]
[jira] Resolved: (GERONIMO-669) test of Agila JIRA config
[ http://issues.apache.org/jira/browse/GERONIMO-669?page=all ] Geir Magnusson Jr resolved GERONIMO-669: Resolution: Fixed > test of Agila JIRA config > - > > Key: GERONIMO-669 > URL: http://issues.apache.org/jira/browse/GERONIMO-669 > Project: Geronimo > Type: Improvement > Reporter: Geir Magnusson Jr > Assignee: Geir Magnusson Jr > > test -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Created: (GERONIMO-669) test of Agila JIRA config
test of Agila JIRA config - Key: GERONIMO-669 URL: http://issues.apache.org/jira/browse/GERONIMO-669 Project: Geronimo Type: Improvement Reporter: Geir Magnusson Jr Assigned to: Geir Magnusson Jr test -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (GERONIMO-669) test of Agila JIRA config
[ http://issues.apache.org/jira/browse/GERONIMO-669?page=all ] Geir Magnusson Jr closed GERONIMO-669: -- > test of Agila JIRA config > - > > Key: GERONIMO-669 > URL: http://issues.apache.org/jira/browse/GERONIMO-669 > Project: Geronimo > Type: Improvement > Reporter: Geir Magnusson Jr > Assignee: Geir Magnusson Jr > > test -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
For those interested in Gluecode & IBM
There's a call/webcast on June 14 (11 AM Eastern) by the IBM Websphere group, including: Scott Cosby, Gluecode Transition Executive, will kick off the call and cover Gluecode and how WebSphere plans on covering it in our portfolio. This is a great opportunity to show the Business Partners and Developers on how to leverage Gluecode. ... We will also provide an update on the recent Gluecode acquisition and it's contribution to the IBM SOA strategy. Let me (or I suppose the Gluecode guys) know if you're interested in the info to attend. Aaron
website issues
We should rename the "Dependencies" 'menu item' in the left nav to something else. My original intention was to note "Sister Projects" - peer projects that we collaborate with - rather than some sort of hierarchy. I thought about "Sister Projects" (conventional, but bothers me for sexism), rejected "Partner Projects". Maybe "Related Projects"? Also, I don't want to just put a stream of dependencies, but the major projects that make up Geronimo, like OpenEJB What should we add, remove, etc? -- Geir Magnusson Jr +1-203-665-6437 [EMAIL PROTECTED]
Re: IRC for geronimo developer
Perfect. Patch applied and published. It will be out in < 4 hours, depending on publish cycle Thanks geir On Jun 10, 2005, at 1:03 AM, Tom McQueeney wrote: There doesn't seem to be information about the IRC channel on the new website (just the wiki). I submitted a JIRA issue (667) as well as a patch to correct this. I hope it helps add to the improved website. -Tom Yoseph Widjaya wrote: Dear All Is there any IRC channel for geronimo developer since you guys are very active developing this project. I thinks it's better using IRC to have a chat rather than than mailing list that takes time Just a small suggestion :) Yosep __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- Geir Magnusson Jr +1-203-665-6437 [EMAIL PROTECTED]
Security Config File questions
Got a couple of security related questions:
1. In the following snippet from
thej2ee-secure-plan.xml file one of possibly many login modules (which
are connected by a reference tag) are associated with the realm and the
other block that appear above the realm
REQUIRED
demo-properties-login
Each login module has a Flag, which
I see in this case is "REQUIRED"
But shouldn't each login module have
the ability to take "options", which I don't see
Is there an "options"attribute?
I know there is an "options" attribute in the "LoginModuleGBean"
that this block is associate with, but what do you do in the case when
there are multiple login modules, i.e. multiple JaasLoginModuleUse gbeans
and they each can have options?
2. In a standard JAAS config file,
there are "Application blocks" that contain groups of login modules.
it looks something like
App1{
Class Flag Options;
Class Flag Options: etc}.
where each "Class" ,
"Flag" and "Options" is for each login module
"What" tag/artifact/THING
in the j2ee-secure-plan.xml file corresponds to "App1" in the
preceeding block ?
Michael Malgeri
Mgr Gluecode Client Technical Services
PHONE: 310-536-8355 x 14
FAX: 310-536-9062
CELLULAR: 310-704-6403
Re: Security Config File questions
On Jun 10, 2005, at 10:26 AM, Michael Malgeri wrote:
Got a couple of security related questions:
1. In the following snippet from thej2ee-secure-plan.xml file one of
possibly many login modules (which are connected by a reference tag)
are associated with the realm and the other block that appear above
the realm
class="org.apache.geronimo.security.jaas.JaasLoginModuleUse">
REQUIRED
demo-properties-login
Each login module has a Flag, which I see in this case is "REQUIRED"
But shouldn't each login module have the ability to take "options",
which I don't see
Is there an "options"attribute? I know there is an "options" attribute
in the "LoginModuleGBean" that this block is associate with, but what
do you do in the case when there are multiple login modules, i.e.
multiple JaasLoginModuleUse gbeans and they each can have options?
2. In a standard JAAS config file, there are "Application blocks"
that contain groups of login modules. it looks something like
App1{
Class Flag Options;
Class Flag Options: etc}.
where each "Class" , "Flag" and "Options" is for each login module
"What" tag/artifact/THING in the j2ee-secure-plan.xml file corresponds
to "App1" in the preceeding block ?
lets see if I can answer both questions at once, or if I just confuse
things further.
Each line Class Flag Options from (2) corresponds to a LoginModuleGbean
in geronimo, except we take out the flag.
Each App1 corresponds to a GenericSecurityRealm gbean.
We let you reuse a configured login module for several security realms.
Each GenericSecurityRealm gets a reference to a linked list of
LoginModuleUse gbeans, which supplies the order of login modules and
the Flag for each login module as used in the GenericSecurityRealm. It
may not be obvious from the j2ee-secure-plan but LoginModuleUse has a
reference to a next LoginModuleUse.
The examples in openejb have an alternate xml syntax that is much
clearer but I'm not sure it is completely approved by everyone.
thanks
david jencks
Michael Malgeri
Mgr Gluecode Client Technical Services
PHONE: 310-536-8355 x 14
FAX: 310-536-9062
CELLULAR: 310-704-6403
Re: For those interested in Gluecode & IBM
On 6/10/05, Aaron Mulder <[EMAIL PROTECTED]> wrote:
> There's a call/webcast on June 14 (11 AM Eastern) by the IBM Websphere
> group, including:
>
> Scott Cosby, Gluecode Transition Executive, will kick off the call and
> cover Gluecode and how WebSphere plans on covering it in our portfolio.
> This is a great opportunity to show the Business Partners and Developers
> on how to leverage Gluecode.
> ...
> We will also provide an update on the recent Gluecode acquisition and it's
> contribution to the IBM SOA strategy.
>
> Let me (or I suppose the Gluecode guys) know if you're interested
> in the info to attend.
I'm definitely interested in this. Who can provide more information on it?
Bruce
--
perl -e 'print unpack("u30","D0G)[EMAIL
PROTECTED]&5R\"F)R=6-E+G-N>61Ehttp://www.castor.org/
Apache Geronimo
http://geronimo.apache.org/
Re: Security Config File questions
OK, so App1, in the standard jaas.config
block, would correspond to a LoginModuleGbean
as you stated. Thanks for clearing that up.
In a business application, would it be correct to
say that "App1" might/should be named something like "Human_Resources_App"
as opposed to "demo-properties-login"? I realize it has to be
named "something" in the plan shipped with the distribution so
"demo-properties-login" is OK. I'm just trying to clarify the
concepts in my mind.
If I'm correct then the "Human_Resource_App",
as a basic composite application, may require multiple authentications
to say a properties file for one part of it's functionality, a sql database
for another part and an ldap server for yet another part. Each of these
logins would be handled by a separate login module, correct?
So the one thing that is still unclear is the fact
that each login module, which are JaasLoginModuleUse bean linked together,
can have their own separate set of options. The standard jaas.confi file
has a 1 to many relationship between "App1" and login modules
but I think you're suggesting below there's a one to one relationship,
unless I'm reading it wrong.
m
Michael Malgeri
Mgr Gluecode Client Technical Services
PHONE: 310-536-8355 x 14
FAX: 310-536-9062
CELLULAR: 310-704-6403
David Jencks <[EMAIL PROTECTED]>
06/10/2005 10:45 AM
Please respond to
dev
To
dev@geronimo.apache.org
cc
Subject
Re: Security Config File
questions
On Jun 10, 2005, at 10:26 AM, Michael Malgeri wrote:
>
> Got a couple of security related questions:
>
> 1. In the following snippet from thej2ee-secure-plan.xml file
one of
> possibly many login modules (which are connected by a reference tag)
> are associated with the realm and the other block that appear above
> the realm
>
>
> class="org.apache.geronimo.security.jaas.JaasLoginModuleUse">
> REQUIRED
>
> demo-properties-login
>
>
>
> Each login module has a Flag, which I see in this case is "REQUIRED"
> But shouldn't each login module have the ability to take "options",
> which I don't see
> Is there an "options"attribute? I know there is an "options"
attribute
> in the "LoginModuleGBean" that this block is associate with,
but what
> do you do in the case when there are multiple login modules, i.e.
> multiple JaasLoginModuleUse gbeans and they each can have options?
>
> 2. In a standard JAAS config file, there are "Application
blocks"
> that contain groups of login modules. it looks something like
>
> App1{
> Class Flag Options;
> Class Flag Options: etc}.
>
> where each "Class" , "Flag" and "Options"
is for each login module
>
> "What" tag/artifact/THING in the j2ee-secure-plan.xml file
corresponds
> to "App1" in the preceeding block ?
lets see if I can answer both questions at once, or if I just confuse
things further.
Each line Class Flag Options from (2) corresponds to a LoginModuleGbean
in geronimo, except we take out the flag.
Each App1 corresponds to a GenericSecurityRealm gbean.
We let you reuse a configured login module for several security realms.
Each GenericSecurityRealm gets a reference to a linked list of
LoginModuleUse gbeans, which supplies the order of login modules and
the Flag for each login module as used in the GenericSecurityRealm. It
may not be obvious from the j2ee-secure-plan but LoginModuleUse has a
reference to a next LoginModuleUse.
The examples in openejb have an alternate xml syntax that is much
clearer but I'm not sure it is completely approved by everyone.
thanks
david jencks
>
> Michael Malgeri
> Mgr Gluecode Client Technical Services
> PHONE: 310-536-8355 x 14
> FAX: 310-536-9062
> CELLULAR: 310-704-6403
[jira] Closed: (GERONIMO-667) New website get-involved.html page lacks information about IRC channel
[ http://issues.apache.org/jira/browse/GERONIMO-667?page=all ] Geir Magnusson Jr closed GERONIMO-667: -- > New website get-involved.html page lacks information about IRC channel > -- > > Key: GERONIMO-667 > URL: http://issues.apache.org/jira/browse/GERONIMO-667 > Project: Geronimo > Type: Improvement > Environment: not applicable > Reporter: Tom McQueeney > Assignee: Geir Magnusson Jr > Priority: Minor > Attachments: doco-patch.txt > > The get-involved.html page could use a mention of the IRC channel to avoid > folks asking on the mailing list if there's an IRC channel. Details of the > IRC channel are mentioned on the wiki, but not on the main Geronimo website. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: Security Config File questions
On Jun 10, 2005, at 11:26 AM, Michael Malgeri wrote:
OK, so App1, in the standard jaas.config block, would correspond to a
LoginModuleGbean as you stated. Thanks for clearing that up.
No!!
App1 corresponds to a GenericSecurityRealm which has a list of login
modules (via the LoginModuleUse gbeans)
In a business application, would it be correct to say that "App1"
might/should be named something like "Human_Resources_App" as opposed
to "demo-properties-login"? I realize it has to be named "something"
in the plan shipped with the distribution so "demo-properties-login"
is OK. I'm just trying to clarify the concepts in my mind.
yes/
If I'm correct then the "Human_Resource_App", as a basic composite
application, may require multiple authentications to say a properties
file for one part of it's functionality, a sql database for another
part and an ldap server for yet another part. Each of these logins
would be handled by a separate login module, correct?
yes.
So the one thing that is still unclear is the fact that each login
module, which are JaasLoginModuleUse bean linked together, can have
their own separate set of options. The standard jaas.confi file has a
1 to many relationship between "App1" and login modules but I think
you're suggesting below there's a one to one relationship, unless I'm
reading it wrong.
LoginModuleGBeans have the login module class and the options
GenericSecurityRealm has an (ordered) list of (login module gbean +
option). Right now these take the slightly awkward form of a linked
list of LoginModuleUse gbeans.
Hope this is a little clearer.
thanks
david jencks
m
Michael Malgeri
Mgr Gluecode Client Technical Services
PHONE: 310-536-8355 x 14
FAX: 310-536-9062
CELLULAR: 310-704-6403
David Jencks <[EMAIL PROTECTED]>
06/10/2005 10:45 AM
Please respond to
dev
To
dev@geronimo.apache.org
cc
Subject
Re: Security Config File questions
On Jun 10, 2005, at 10:26 AM, Michael Malgeri wrote:
>
> Got a couple of security related questions:
>
> 1. In the following snippet from thej2ee-secure-plan.xml file one
of
> possibly many login modules (which are connected by a reference tag)
> are associated with the realm and the other block that appear above
> the realm
>
> class="org.apache.geronimo.security.jaas.JaasLoginModuleUse">
> REQUIRED
>
> demo-properties-login
>
>
>
> Each login module has a Flag, which I see in this case is "REQUIRED"
> But shouldn't each login module have the ability to take "options",
> which I don't see
> Is there an "options"attribute? I know there is an "options"
attribute
> in the "LoginModuleGBean" that this block is associate with, but
what
> do you do in the case when there are multiple login modules, i.e.
> multiple JaasLoginModuleUse gbeans and they each can have options?
>
> 2. In a standard JAAS config file, there are "Application blocks"
> that contain groups of login modules. it looks something like
>
> App1{
> Class Flag Options;
> Class Flag Options: etc}.
>
> where each "Class" , "Flag" and "Options" is for each login module
>
> "What" tag/artifact/THING in the j2ee-secure-plan.xml file
corresponds
> to "App1" in the preceeding block ?
lets see if I can answer both questions at once, or if I just confuse
things further.
Each line Class Flag Options from (2) corresponds to a
LoginModuleGbean
in geronimo, except we take out the flag.
Each App1 corresponds to a GenericSecurityRealm gbean.
We let you reuse a configured login module for several security
realms.
Each GenericSecurityRealm gets a reference to a linked list of
LoginModuleUse gbeans, which supplies the order of login modules and
the Flag for each login module as used in the GenericSecurityRealm.
It
may not be obvious from the j2ee-secure-plan but LoginModuleUse has a
reference to a next LoginModuleUse.
The examples in openejb have an alternate xml syntax that is much
clearer but I'm not sure it is completely approved by everyone.
thanks
david jencks
>
> Michael Malgeri
> Mgr Gluecode Client Technical Services
> PHONE: 310-536-8355 x 14
> FAX: 310-536-9062
> CELLULAR: 310-704-6403
[jira] Updated: (GERONIMO-668) Unable to determine username from EJB method
[ http://issues.apache.org/jira/browse/GERONIMO-668?page=all ] Ivan Dubrov updated GERONIMO-668: - Description: When calling EJB method from the Web module some important security context information (username) is lost. It is impossible to determine caller user name from the EJB method. EJBContext.getCallerPrincipal().getName() returns something like this: [org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal: manager] Note that only group name can be determined from this string or from the EJBMethod.getCallerPrincipal(). was: When calling EJB method from the Web module some important security context information (username) is lost. It is impossible to determine caller user name from the EJB method. EJBContext.getCallerPrincipal().getName() returns something like this: [org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal: manager] > Unable to determine username from EJB method > > > Key: GERONIMO-668 > URL: http://issues.apache.org/jira/browse/GERONIMO-668 > Project: Geronimo > Type: Bug > Versions: 1.0-M4 > Reporter: Ivan Dubrov > > When calling EJB method from the Web module some important security context > information (username) is lost. It is impossible to determine caller user > name from the EJB method. EJBContext.getCallerPrincipal().getName() returns > something like this: > [org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal: manager] > Note that only group name can be determined from this string or from the > EJBMethod.getCallerPrincipal(). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: Security Config File questions
OK, now I think I got it.
One final two-part question...hopefully.
There is a one-to-one association between
a LoginModuleGBean gbean and a JaasLoginModuleUse gbean, correct?
Which property reference ties
the two together?
Is the following
tied to the "name" property
of this
or to the following reference of the
same JaasLoginModuleUse gbean
demo-properties-login
or something else?
Much appreciated
Michael Malgeri
Mgr Gluecode Client Technical Services
PHONE: 310-536-8355 x 14
FAX: 310-536-9062
CELLULAR: 310-704-6403
David Jencks <[EMAIL PROTECTED]>
06/10/2005 04:35 PM
Please respond to
dev
To
dev@geronimo.apache.org
cc
Subject
Re: Security Config File
questions
On Jun 10, 2005, at 11:26 AM, Michael Malgeri wrote:
>
> OK, so App1, in the standard jaas.config block, would correspond
to a
> LoginModuleGbean as you stated. Thanks for clearing that up.
No!!
App1 corresponds to a GenericSecurityRealm which has a list of login
modules (via the LoginModuleUse gbeans)
>
> In a business application, would it be correct to say that "App1"
> might/should be named something like "Human_Resources_App"
as opposed
> to "demo-properties-login"? I realize it has to be named
"something"
> in the plan shipped with the distribution so "demo-properties-login"
> is OK. I'm just trying to clarify the concepts in my mind.
yes/
>
> If I'm correct then the "Human_Resource_App", as a basic
composite
> application, may require multiple authentications to say a properties
> file for one part of it's functionality, a sql database for another
> part and an ldap server for yet another part. Each of these logins
> would be handled by a separate login module, correct?
yes.
>
> So the one thing that is still unclear is the fact that each login
> module, which are JaasLoginModuleUse bean linked together, can have
> their own separate set of options. The standard jaas.confi file has
a
> 1 to many relationship between "App1" and login modules
but I think
> you're suggesting below there's a one to one relationship, unless
I'm
> reading it wrong.
LoginModuleGBeans have the login module class and the options
GenericSecurityRealm has an (ordered) list of (login module gbean +
option). Right now these take the slightly awkward form of a linked
list of LoginModuleUse gbeans.
Hope this is a little clearer.
thanks
david jencks
>
> m
>
> Michael Malgeri
> Mgr Gluecode Client Technical Services
> PHONE: 310-536-8355 x 14
> FAX: 310-536-9062
> CELLULAR: 310-704-6403
>
>
> David Jencks <[EMAIL PROTECTED]>
>
> 06/10/2005 10:45 AM
> Please respond to
> dev
>
> To
> dev@geronimo.apache.org
> cc
> Subject
> Re: Security Config File questions
>
>
>
>
>
>
> On Jun 10, 2005, at 10:26 AM, Michael Malgeri wrote:
>
> >
> > Got a couple of security related questions:
> >
> > 1. In the following snippet from thej2ee-secure-plan.xml
file one
> of
> > possibly many login modules (which are connected by a reference
tag)
> > are associated with the realm and the other block that
appear above
> > the realm
> >
> >
> > class="org.apache.geronimo.security.jaas.JaasLoginModuleUse">
> > REQUIRED
> >
> > demo-properties-login
> >
> >
> >
> > Each login module has a Flag, which I see in this case
is "REQUIRED"
> > But shouldn't each login module have the ability to take
"options",
> > which I don't see
> > Is there an "options"attribute? I know there
is an "options"
> attribute
> > in the "LoginModuleGBean" that this block is
associate with, but
> what
> > do you do in the case when there are multiple login modules,
i.e.
> > multiple JaasLoginModuleUse gbeans and they each can have
options?
> >
> > 2. In a standard JAAS config file, there are "Application
blocks"
> > that contain groups of login modules. it looks something
like
> >
> > App1{
> > Class Flag Options;
> > Class Flag Options: etc}.
> >
> > where each "Class" , "Flag" and
"Options" is for each login module
> >
> > "What" tag/artifact/THING in the j2ee-secure-plan.xml
file
> corresponds
> > to "App1" in the preceeding block ?
>
> lets see if I can answer both questions at once, or if I just
confuse
> things further.
>
> Each line Class Flag Options from (2) corresponds to a
> LoginModuleGbean
> in geronimo, except we take out the flag.
>
> Each App1 corresponds to a GenericSecurityRealm gbean.
>
> We let you reuse a configured login module for several security
> realms.
> Each GenericSecurityRealm gets a reference to a linked
list of
> LoginModuleUse gbeans, which supplies the order of login modules
and
> the Flag for each login module as used in the GenericSecurityRealm.
> It
> may not be obvious from the j2ee-secure-plan but LoginModuleUse
has a
> reference to a next LoginModuleUse.
>
> The examples in openejb have an alternate xml syntax that is
much
> clearer but I'm not sure it is completely approved by everyone.
>
>
[jira] Created: (GERONIMO-670) Use of undocumented fields with setAccessible
Use of undocumented fields with setAccessible - Key: GERONIMO-670 URL: http://issues.apache.org/jira/browse/GERONIMO-670 Project: Geronimo Type: Bug Reporter: Jeremy Boynes The classes below use setAccessible to access internal state of VM classes. This is likely to lead to non-portable behaviour between JVMs and requires dangerous permissions be granted to the server. Other ways of handling this should be found. ./modules/interop/src/java/org/apache/geronimo/interop/rmi/iiop/FinalFieldSetterJdk14.java ./modules/interop/src/java/org/apache/geronimo/interop/rmi/iiop/GetField.java ./modules/interop/src/java/org/apache/geronimo/interop/rmi/iiop/PutField.java ./modules/interop/src/java/org/apache/geronimo/interop/rmi/iiop/ValueType.java ./modules/kernel/src/java/org/apache/geronimo/kernel/config/ConfigurationClassLoader.java ./modules/system/src/java/org/apache/geronimo/system/main/ToolsJarHack.java ./modules/system/src/java/org/apache/geronimo/system/url/GeronimoURLFactory.java -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: build still failed for
Dear Matt It seems that building is stopped under the webservice module here is the stack trace + | Executing default Geronimo :: Web Services | Memory: 47M/56M + Attempting to download geronimo-common-1.0-SNAPSHOT.jar. Attempting to download geronimo-core-1.0-SNAPSHOT.jar. Attempting to download geronimo-kernel-1.0-SNAPSHOT.jar. Attempting to download geronimo-j2ee-1.0-SNAPSHOT.jar. Attempting to download scout-1.0-SNAPSHOT.jar. jar:install: build:end: build:start: default: java:prepare-filesystem: [mkdir] Created dir: /home/yosep/geronimo/modules/webservices/target/classes java:compile: [depend] Deleted 0 out of date files in 0 seconds [echo] Compiling to /home/yosep/geronimo/modules/webservices/target/classes [javac] Compiling 15 source files to /home/yosep/geronimo/modules/webservices/target/classes /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:23: package org.exolab.castor.mapping does not exist import org.exolab.castor.mapping.Mapping; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:24: package org.exolab.castor.xml does not exist import org.exolab.castor.xml.Unmarshaller; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:25: package org.exolab.castor.xml does not exist import org.exolab.castor.xml.Marshaller; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:32: cannot resolve symbol symbol : class Mapping location: class org.apache.geronimo.webservices.WebServicesFactory private final Mapping mapping; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:33: cannot resolve symbol symbol : class Unmarshaller location: class org.apache.geronimo.webservices.WebServicesFactory private final Unmarshaller unmarshaller; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:40: cannot resolve symbol symbol : class Mapping location: class org.apache.geronimo.webservices.WebServicesFactory mapping = new Mapping(classLoader); ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:42: cannot resolve symbol symbol : class Unmarshaller location: class org.apache.geronimo.webservices.WebServicesFactory unmarshaller = new Unmarshaller(mapping); ^ Note: /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServiceContainerInvoker.java uses or overrides a deprecated API. Note: Recompile with -deprecation for details. 7 errors BUILD FAILED File.. /home/yosep/.maven/cache/maven-multiproject-plugin-1.3.1/plugin.jellyElement... maven:reactor Line.. 217 Column 9 Unable to obtain goal [default] -- /home/yosep/.maven/cache/maven-java-plugin-1.5/plugin.jelly:63:48: Compile failed; see the compiler error output for details. Total time: 15 minutes 1 seconds Finished at: Sat Jun 11 14:38:21 EST 2005 any idea what's the problem Many thanks Yosep PS: already download cglib-HEAD and still keep having this error --- Matt Hogstrom <[EMAIL PROTECTED]> wrote: > Yoseph, > > Can you capture all the output from the build? > There are most likely other messages earlier in the > build process that would give a hint. > > - Matt > > - Original Message - > From: "Yoseph Widjaya" <[EMAIL PROTECTED]> > To: > Sent: Thursday, June 09, 2005 10:56 PM > Subject: build still failed for > > > > Hi all > > > > I still got build failed > > > > here are stack trace > > > > > > java:compile: > >[depend] Deleted 0 out of date files in 0 > seconds > >[echo] Compiling to > > > /home/yosep/geronimo/modules/webservices/target/classes > >[javac] Compiling 15 source files to > > /home/yosep/geronimo/modules/webservice > > s/target/classes > > > /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservice > > s/WebServicesFactory.java:23: package > > org.exolab.castor.mapping does not exist > > import org.exolab.castor.mapping.Mapping; > > ^ > > > /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservice > > s/WebServicesFactory.java:24: package > > org.exolab.castor.xml does not exist > > import org.exolab.castor.xml.Unmarshaller; > > ^ > > > /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservice > > s/WebServicesFactory.java:25: package > > org.exolab.castor.xml does not exist > > import org.exolab.castor.xml.Marshaller; > >
Re: Security Config File questions
On Jun 10, 2005, at 5:44 PM, Michael Malgeri wrote:
OK, now I think I got it.
One final two-part question...hopefully.
There is a one-to-one association between a LoginModuleGBean gbean
and a JaasLoginModuleUse gbean, correct?
actually one to many: you can have lots of JaasLoginModuleUse gbeans
that all refer to the same LoginModuleGBean instance.
We did this in case there is some kind of login module framework that
is expensive or complicated to configure in some way and that you
wanted to use in several realms.
Which property reference ties the two together?
Is the following
class="org.apache.geronimo.security.jaas.LoginModuleGBean">
tied to the "name" property of this
class="org.apache.geronimo.security.jaas.JaasLoginModuleUse">
or to the following reference of the same JaasLoginModuleUse gbean
demo-properties-login
the reference
or something else?
Much appreciated
np
david jencks
Michael Malgeri
Mgr Gluecode Client Technical Services
PHONE: 310-536-8355 x 14
FAX: 310-536-9062
CELLULAR: 310-704-6403
David Jencks <[EMAIL PROTECTED]>
06/10/2005 04:35 PM
Please respond to
dev
To
dev@geronimo.apache.org
cc
Subject
Re: Security Config File questions
On Jun 10, 2005, at 11:26 AM, Michael Malgeri wrote:
>
> OK, so App1, in the standard jaas.config block, would correspond
to a
> LoginModuleGbean as you stated. Thanks for clearing that up.
No!!
App1 corresponds to a GenericSecurityRealm which has a list of login
modules (via the LoginModuleUse gbeans)
>
> In a business application, would it be correct to say that "App1"
> might/should be named something like "Human_Resources_App" as
opposed
> to "demo-properties-login"? I realize it has to be named "something"
> in the plan shipped with the distribution so "demo-properties-login"
> is OK. I'm just trying to clarify the concepts in my mind.
yes/
>
> If I'm correct then the "Human_Resource_App", as a basic composite
> application, may require multiple authentications to say a
properties
> file for one part of it's functionality, a sql database for another
> part and an ldap server for yet another part. Each of these logins
> would be handled by a separate login module, correct?
yes.
>
> So the one thing that is still unclear is the fact that each login
> module, which are JaasLoginModuleUse bean linked together, can have
> their own separate set of options. The standard jaas.confi file has
a
> 1 to many relationship between "App1" and login modules but I think
> you're suggesting below there's a one to one relationship, unless
I'm
> reading it wrong.
LoginModuleGBeans have the login module class and the options
GenericSecurityRealm has an (ordered) list of (login module gbean +
option). Right now these take the slightly awkward form of a linked
list of LoginModuleUse gbeans.
Hope this is a little clearer.
thanks
david jencks
>
> m
>
> Michael Malgeri
> Mgr Gluecode Client Technical Services
> PHONE: 310-536-8355 x 14
> FAX: 310-536-9062
> CELLULAR: 310-704-6403
>
>
> David Jencks <[EMAIL PROTECTED]>
>
> 06/10/2005 10:45 AM
> Please respond to
> dev
>
> To
> dev@geronimo.apache.org
> cc
> Subject
> Re: Security Config File questions
>
>
>
>
>
>
> On Jun 10, 2005, at 10:26 AM, Michael Malgeri wrote:
>
> >
> > Got a couple of security related questions:
> >
> > 1. In the following snippet from thej2ee-secure-plan.xml file
one
> of
> > possibly many login modules (which are connected by a reference
tag)
> > are associated with the realm and the other block that appear
above
> > the realm
> >
> > > class="org.apache.geronimo.security.jaas.JaasLoginModuleUse">
> > REQUIRED
> >
> > demo-properties-login
> >
> >
> >
> > Each login module has a Flag, which I see in this case is
"REQUIRED"
> > But shouldn't each login module have the ability to take
"options",
> > which I don't see
> > Is there an "options"attribute? I know there is an "options"
> attribute
> > in the "LoginModuleGBean" that this block is associate with, but
> what
> > do you do in the case when there are multiple login modules, i.e.
> > multiple JaasLoginModuleUse gbeans and they each can have
options?
> >
> > 2. In a standard JAAS config file, there are "Application
blocks"
> > that contain groups of login modules. it looks something like
> >
> > App1{
> > Class Flag Options;
> > Class Flag Options: etc}.
> >
> > where each "Class" , "Flag" and "Options" is for each login
module
> >
> > "What" tag/artifact/THING in the j2ee-secure-plan.xml file
> corresponds
> > to "App1" in the preceeding block ?
>
> lets see if I can answer both questions at once, or if I just
confuse
> things further.
>
> Each line Class Flag Options from (2) corresponds to a
> LoginModuleGbean
> in geronimo, except we take out the fla
Re: build still failed for
I cross-referenced our nightly build and it looked fine http://www.spikesource.com/spikewatch.logs/fedora-3-i386/663/geronimo/logs/geronimo.build.maven.log That build system was using jdk1.4.2_08 on fedora 3. The castor file should have been correctly downloaded to $HOME/.maven/repository/castor/jars Try cleaning that jar file out, if your jdk is fine regards calvin Yoseph Widjaya wrote: Dear Matt It seems that building is stopped under the webservice module here is the stack trace + | Executing default Geronimo :: Web Services | Memory: 47M/56M + Attempting to download geronimo-common-1.0-SNAPSHOT.jar. Attempting to download geronimo-core-1.0-SNAPSHOT.jar. Attempting to download geronimo-kernel-1.0-SNAPSHOT.jar. Attempting to download geronimo-j2ee-1.0-SNAPSHOT.jar. Attempting to download scout-1.0-SNAPSHOT.jar. jar:install: build:end: build:start: default: java:prepare-filesystem: [mkdir] Created dir: /home/yosep/geronimo/modules/webservices/target/classes java:compile: [depend] Deleted 0 out of date files in 0 seconds [echo] Compiling to /home/yosep/geronimo/modules/webservices/target/classes [javac] Compiling 15 source files to /home/yosep/geronimo/modules/webservices/target/classes /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:23: package org.exolab.castor.mapping does not exist import org.exolab.castor.mapping.Mapping; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:24: package org.exolab.castor.xml does not exist import org.exolab.castor.xml.Unmarshaller; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:25: package org.exolab.castor.xml does not exist import org.exolab.castor.xml.Marshaller; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:32: cannot resolve symbol symbol : class Mapping location: class org.apache.geronimo.webservices.WebServicesFactory private final Mapping mapping; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:33: cannot resolve symbol symbol : class Unmarshaller location: class org.apache.geronimo.webservices.WebServicesFactory private final Unmarshaller unmarshaller; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:40: cannot resolve symbol symbol : class Mapping location: class org.apache.geronimo.webservices.WebServicesFactory mapping = new Mapping(classLoader); ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServicesFactory.java:42: cannot resolve symbol symbol : class Unmarshaller location: class org.apache.geronimo.webservices.WebServicesFactory unmarshaller = new Unmarshaller(mapping); ^ Note: /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservices/WebServiceContainerInvoker.java uses or overrides a deprecated API. Note: Recompile with -deprecation for details. 7 errors BUILD FAILED File.. /home/yosep/.maven/cache/maven-multiproject-plugin-1.3.1/plugin.jellyElement... maven:reactor Line.. 217 Column 9 Unable to obtain goal [default] -- /home/yosep/.maven/cache/maven-java-plugin-1.5/plugin.jelly:63:48: Compile failed; see the compiler error output for details. Total time: 15 minutes 1 seconds Finished at: Sat Jun 11 14:38:21 EST 2005 any idea what's the problem Many thanks Yosep PS: already download cglib-HEAD and still keep having this error --- Matt Hogstrom <[EMAIL PROTECTED]> wrote: Yoseph, Can you capture all the output from the build? There are most likely other messages earlier in the build process that would give a hint. - Matt - Original Message - From: "Yoseph Widjaya" <[EMAIL PROTECTED]> To: Sent: Thursday, June 09, 2005 10:56 PM Subject: build still failed for Hi all I still got build failed here are stack trace java:compile: [depend] Deleted 0 out of date files in 0 seconds [echo] Compiling to /home/yosep/geronimo/modules/webservices/target/classes [javac] Compiling 15 source files to /home/yosep/geronimo/modules/webservice s/target/classes /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservice s/WebServicesFactory.java:23: package org.exolab.castor.mapping does not exist import org.exolab.castor.mapping.Mapping; ^ /home/yosep/geronimo/modules/webservices/src/java/org/apache/geronimo/webservice s/WebServicesFactory.java:24: package org.exolab.castor.xml does
