Re: Preparing Karaf runtime 4.3.4

2021-11-11 Thread Grzegorz Grzybek
Hello

Thanks JBO!

I didn't yet add Pax Web 8 to 4.4.0-SNAPSHOT, but I'm going to do it soon.

regards
Grzegorz Grzybek

pt., 12 lis 2021 o 08:50 Jean-Baptiste Onofré  napisał(a):

> Hi guys,
>
> I finally figured to move forward on release preparation.
>
> I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
> end). I will also work on new Decanter release for next week.
>
> Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
> to give a chance to everyone to test this new series before a GA.
>
> Regards
> JB
>
> On 07/11/2021 07:02, JB Onofré wrote:
> > Hi guys
> >
> > I gonna release pax web 7.3.21 to align version with Karaf.
> > I’m working on other third party projects where a dependency alignement
> is required.
> >
> > Karaf 4.3.4 will be on vote soon.
> >
> > Regards
> > JB
> >
> >> Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a
> écrit :
> >>
> >> Hi guys,
> >>
> >> As said in my previous email I have a fix that I’m testing now.
> >>
> >> I will let you know when done.
> >>
> >> Regards
> >> JB
> >>
> >>> Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a
> écrit :
> >>>
> >>> Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),
> I'm
> >>> getting:
> >>>
> >>> java.util.ServiceConfigurationError:
> >>> org.eclipse.jetty.security.Authenticator$Factory: Provider
> >>> org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a
> subtype
> >>> at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
> >>> at java.util.ServiceLoader.access$300(ServiceLoader.java:185)
> ~[?:1.8.0_312]
> >>> at
> java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
> >>> ~[?:1.8.0_312]
> >>> at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
> >>> ~[?:1.8.0_312]
> >>> at java.util.ServiceLoader$1.next(ServiceLoader.java:480)
> ~[?:1.8.0_312]
> >>> at
> >>>
> org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)
> >>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> >>> ...
> >>> at
> >>>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)
> >>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> >>> at
> >>>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)
> >>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> >>> at
> >>>
> org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)
> >>> ~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]
> >>>
> >>> Checking...
> >>> regards
> >>> Grzegorz Grzybek
> >>>
> >>> pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 
> napisał(a):
> >>>
>  Hi
> 
>  pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
>  jetty-jaspic, which has dependency on javax.security.auth.message...
> 
>  Let me check it.
> 
>  regards
>  Grzegorz Grzybek
> 
>  pt., 29 paź 2021 o 13:12 Paul Stanley <
> paul.stan...@saaconsultants.com>
>  napisał(a):
> 
> > The Jetty issue:
> https://github.com/eclipse/jetty.project/issues/6554
> > resulted in pull request:
> >
> >
> https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
> > This removed the check for the realm being set, thus always creating
> a
> > default identity service, even when one is not defined.
> > As a result the geronimo JASPI spec  (Java Authentication SPI),
> Attempts
> > to construct a default JASPI factory, resulting in a Class Not Found
> > Exception.
> >
> > I've had a quick look at the pax-web-jetty project, but i can't see
> any
> > geronimo dependencies. As such one of the test modules must have the
> api
> > and implementation built in, or it's using a different Jetty Identity
> > Service?
> >
> > Cheers
> > Paul
> >
> >
> >
> >
> >
> > From:   "Grzegorz Grzybek" 
> > To: "Karaf Dev" 
> > Date:   29/10/2021 11:36
> > Subject:Re: Preparing Karaf runtime 4.3.4
> >
> >
> >
> > Hello
> >
> > What's the problem with Jetty 9.4.44? I checked with Pax Web 8
> without any
> > changes and I got:
> >
> > [INFO] Results:
> > [INFO]
> > [WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
> > ...
> > [INFO]
> > [INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
> > pax-web-itest-jetty ---
> > [INFO]
> >
> 
> > [INFO] BUILD SUCCESS
> > [INFO]
> >
> 
> > [INFO] Total time:  05:34 min
> > [INFO] Finished at: 2021-10-29T12:34:12+02:00
> > [INFO]
> >
> 
> >
> > The tests include authentication and TLS tests.
> >
> > regards
> > Grzegorz Grzybek
> >
> > pt., 29 paź 2021 o 11:44 Pau

Re: Preparing Karaf runtime 4.3.4

2021-11-11 Thread Jean-Baptiste Onofré

Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the week 
end). I will also work on new Decanter release for next week.


Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just 
to give a chance to everyone to test this new series before a GA.


Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency alignement is 
required.

Karaf 4.3.4 will be on vote soon.

Regards
JB


Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a écrit :

Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB


Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a écrit :

Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty), I'm
getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a subtype
at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
at java.util.ServiceLoader.access$300(ServiceLoader.java:185) ~[?:1.8.0_312]
at java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
~[?:1.8.0_312]
at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480) ~[?:1.8.0_312]
at
org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)
~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at
org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)
~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at
org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)
~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at
org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)
~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek  napisał(a):


Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
jetty-jaspic, which has dependency on javax.security.auth.message...

Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley 
napisał(a):


The Jetty issue: https://github.com/eclipse/jetty.project/issues/6554
resulted in pull request:

https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
This removed the check for the realm being set, thus always creating a
default identity service, even when one is not defined.
As a result the geronimo JASPI spec  (Java Authentication SPI),  Attempts
to construct a default JASPI factory, resulting in a Class Not Found
Exception.

I've had a quick look at the pax-web-jetty project, but i can't see any
geronimo dependencies. As such one of the test modules must have the api
and implementation built in, or it's using a different Jetty Identity
Service?

Cheers
Paul





From:   "Grzegorz Grzybek" 
To: "Karaf Dev" 
Date:   29/10/2021 11:36
Subject:Re: Preparing Karaf runtime 4.3.4



Hello

What's the problem with Jetty 9.4.44? I checked with Pax Web 8 without any
changes and I got:

[INFO] Results:
[INFO]
[WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
...
[INFO]
[INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
pax-web-itest-jetty ---
[INFO]

[INFO] BUILD SUCCESS
[INFO]

[INFO] Total time:  05:34 min
[INFO] Finished at: 2021-10-29T12:34:12+02:00
[INFO]


The tests include authentication and TLS tests.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 11:44 Paul Stanley 
napisał(a):


Hi JB,

Jetty 9.4.44 now attempts to create the default instance of the jaspi,
even if it is not installed or used.
I've included the geronimo-jaspi implementation alongside the geronimo
-jaspic_1.0_spec to address the issue.
Note that ordering is important as there is static code begin used to
register the jaspic factories, thus the above packages need to loaded

into

the runtime prior to the jetty bundles.

Cheers
Paul




From:   "Jean-Baptiste Onofre" 
To: dev@karaf.apache.org
Date:   29/10/2021 09:58
Subject:Re: Preparing Karaf runtime 4.3.4



Hi guys,

I detected that Jetty 9.4.44 update breaks the authentication layer.
I’m fixing that and I will cut Pax Web 7.3.20 to integrate in Karaf

4.3.4.


I will keep you posted, however, the plan is still to submit Karaf 4.3.4
to vote during the week end.

Regards
JB


Le 12 oct. 2021 à 14:43, JB Onofré  a écrit :

Hi guys

I’m working on Felix FileInstall release fixing the first losing

issue.

I will include couple of other important fixes.


I would like to submit Karaf 4.3.4 to vote du