[Geoserver-devel] [Hudson] Build failed in Hudson: cite-wcs-1.1 #975

[Hudson]

See 

--
[...truncated 1148 lines...]
jar.components:

jar.component:

compile:
[javac] 
:15:
 warning: 'includeantruntime' was not set, defaulting to 
build.sysclasspath=last; set to false for repeatable builds

jar:

webapp.components:

webapp.component:
 [copy] Copying 10 files to 

 [copy] Copying 8 files to 


build.scripts:

build.script:

build.script:

build.script:

build.script:

xinclude:

zip:

all:

build.script:

build.script:

data:

webapp.scripts:
[mkdir] Created dir: 


webapp.script:
[mkdir] Created dir: 

[mkdir] Created dir: 

 [copy] Copying 17 files to 

 [copy] Copying 5 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

[mkdir] Created dir: 

 [copy] Copying 60 files to 

 [copy] Copying 2 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

 [copy] Copying 38 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

[mkdir] Created dir: 

 [copy] Copying 69 files to 

 [copy] Copying 3 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

 [copy] Copying 18 files to 

[mkdir] Created dir: 

 [copy] Copying 2 files to 


webapp.script:
[mkdir] Created dir: 

 [copy] Copying 8 files to 

[Geoserver-devel] [Hudson] Build failed in Hudson: cite-wcs-1.0 #985

[Hudson]

See 

--
[...truncated 1215 lines...]
build.script:

build.script:

xinclude:

zip:

all:

build.script:

build.script:

data:

webapp.scripts:
[mkdir] Created dir: 


webapp.script:
[mkdir] Created dir: 

[mkdir] Created dir: 

 [copy] Copying 17 files to 

 [copy] Copying 5 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

[mkdir] Created dir: 

 [copy] Copying 60 files to 

 [copy] Copying 2 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

 [copy] Copying 38 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

[mkdir] Created dir: 

 [copy] Copying 69 files to 

 [copy] Copying 3 files to 

[mkdir] Created dir: 

 [copy] Copying 1 file to 


webapp.script:
[mkdir] Created dir: 

 [copy] Copying 18 files to 

[mkdir] Created dir: 

 [copy] Copying 2 files to 


webapp.script:
[mkdir] Created dir: 

 [copy] Copying 8 files to 

[mkdir] Created dir: 

 [copy] Copying 9 files to 


webapps:

war:
  [zip] Building zip: 


jar.realm:

compile:
[mkdir] Created dir: 

Re: [Geoserver-devel] Call for vote GSIP-91

[Phil Scadden]

+0

On the face of it, I am all for improvements and better control on 
security but I dont think I have engaged enough with the recent 
enhancements to judge this one.

Notice: This email and any attachments are confidential. If received in error 
please destroy and immediately notify us. Do not copy or disclose the contents.


--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] GSIP 89 Creative Commons with Attribution

[Phil Scadden]

+1
  Phil

Notice: This email and any attachments are confidential. If received in error 
please destroy and immediately notify us. Do not copy or disclose the contents.


--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] Specific documentation about GeoServer architecture

[Justin Deoliveira]

Just to point it out there is some stuff in the programming guide.

  http://docs.geoserver.org/latest/en/developer/programming-guide/index.html

ALthough as Andrea says generally those docs are out of date a few weeks
after being written.


On Tue, Jan 22, 2013 at 8:34 AM, Andrea Aime
wrote:

> On Tue, Jan 22, 2013 at 2:49 PM, Federico Cacco 
> wrote:
>
>> Hi
>>
>> I'm doing a Master Thesis about GeoServer and how it can be optimized
>> for a cloud computing environment.
>>
>> I have seen that in the page
>> http://geoserver.org/display/GEOS/Reference there is a schema that
>> represents the internal architecture of GeoServer, but I wanted to
>> know if it was available more specific documentation
>> that explains the task being performed by each module and how it
>> interfaces with the other.
>>
>
> This question gets asked every few months, the answer is always the same:
> we don't have such documentation.
> The reason is simple, there is not enough people to maintain it, and
> GeoServer
> API changes relatively frequently too
>
> My last attempt a few years ago was to try and generate some class diagrams
> automatically from the sources using UMLGraph (
> http://www.umlgraph.org/doc.html)
> but that was not maintainable as well.
>
> Every time someone ask I invite the person to build up and share such
> documentation,
> if it's high level enough it should hold up for a few years (detailed one
> will get out
> of date very quickly, on the other hand), but... so far nobody ever did so
>
>
>>
>> For example, it would be useful to know where in the architecture of
>> GeoServer you place the module control-flow.
>>
>
> The control-flow module uses the DispatcherCallback extension point to
> follow
> and control the evolution of OGC requests, it gets a callback for every
> significant
> state in which the OGC dispatch process steps into:
>
> https://github.com/geoserver/geoserver/blob/master/src/ows/src/main/java/org/geoserver/ows/DispatcherCallback.java
>
> Cheers
> Andrea
>
> --
> ==
> Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
> information.
> ==
>
> Ing. Andrea Aime
> @geowolf
> Technical Lead
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054  Massarosa (LU)
> Italy
> phone: +39 0584 962313
> fax: +39 0584 1660272
> mob: +39  339 8844549
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
> ---
>
>
> --
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnnow-d2d
> ___
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
>


-- 
Justin Deoliveira
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] Request to merge pull request #111

[Mike Pumphrey]

This pull request updates /corrects the REST API documentation.  I know that we 
are in the middle of a release process, so I just wanted to ask (specifically 
Andrea) if it's okay if I go ahead and merge it in, or whether I should wait.

https://github.com/geoserver/geoserver/pull/111

  
Thanks,
Mike Pumphrey
OpenGeo - http://opengeo.org


--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] [jira] (GEOS-5595) Update and improve REST API documentation

[Mike Pumphrey (JIRA)]

Mike Pumphrey
 created  GEOS-5595


Update and improve REST API documentation















Issue Type:


Improvement



Affects Versions:


2.2.4



Assignee:


Mike Pumphrey



Components:


REST



Created:


22/Jan/13 12:36 PM



Description:


The REST section of the documentation is outdated.

Need to:


	Remove all reference to REST being an extension (it's now in core)
	Split out API content into separate pages (it's very long right now)
	Update API pages (make sure all syntax is correct)
	Update curl examples
	Remove outdated representations






Fix Versions:


2.2.5



Project:


GeoServer



Priority:


Minor



Reporter:


Mike Pumphrey




























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira





--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] Ranting about non Java language usage in core

[Chris Holmes]

Cool, makes good sense, and was about what I suspected, was just curious
for the full articulation. Thanks Andrea.

Might be good at some point to lay out this policy explicitly. But to not
over complicate things we can just refer to this thread if it comes up.


On Mon, Jan 21, 2013 at 10:41 AM, Justin Deoliveira wrote:

> Nothing to add here except that i agree that it should be only pure java
> in the core of GeoTools and GeoServer. Plugins and community modules I
> could perhaps see an argument for if the module has a stable maintainer.
>
>
> On Thu, Jan 17, 2013 at 9:55 AM, Andrea Aime  > wrote:
>
>> Chris holmes wrote:
>> >Out of curiosity, why is this so bad? I mean it complies to pure java
>> bytecode, could just be thought of an
>> > additional library, like the xml stuff we do. It'll interoperate on any
>> platform, which to me was the big
>> > downside in bringing in other languages.
>>
>> There is a variety of issues why I believe we should be firm about never
>> including another JVM language in core (unless.. read towards the end).
>>
>> The nice thing about having scripting languages as an extension is that
>> everybody can pick their preferred scripting language and go down writing
>> their cool extension. Someone goes with Jython, another one has a
>> preference for Scale, someone else is a Groovy type, the other guy over
>> there is a JRuby kind of person, and yet everybody is happily writing their
>> own thing. Tomorrow someone comes and wants to use Ceylon, or Kotlin, or
>> Clojure, and by using the JSR for scripting languages we can slot in those
>> as well.
>> This is splendid... as long as we think in terms of custom extensions
>> that are not shared with a larger community.
>>
>> Now let's ramp up a bit, and let's say people start writing official
>> extensions in non Java languages.
>> You just download them and add them to your GeoServer, everything is
>> working, it's all fine, right?
>> Nope, whilst it's not too bad, it's not fine either:
>> - each scripting language comes with its own runtime library, which is
>> often rather heavy (several megabytes)  pushing on our already quite
>> poor permgen situation. And then... what if I need two or three of these
>> extensions, all needing their own different runtime? That just multiplies
>> the problem
>> - "polyglot" programmers are not the norm today, and even those that are
>> polyglots have made choices,
>>   creating a partitioning of the potential programmer base in tiny
>> pieces, just see GeoScript, how many
>>   people are there developing for a single language? GeoScript might have
>> five developers, but
>>   GeoScript Python or GeoScript Scala really have one, they are one man
>> projects at the moment (scary).
>>   Add to that the GIS nature of the project, and the set of developers
>> that can do GIS in a certain non
>>   Java language becomes a niche within a niche
>>   It means that a module written in a language other than java has a much
>> higher likeliness to just die
>>   if the developer working on it leaves
>>
>> Now, let's ramp up another bit and consider a core in which non Java
>> languages are allowed.
>> The permgen issue would just happen all the time, and some parts of the
>> code would be limited
>> to a single person, when that one leaves you'll have two high leaning
>> curves to go after,
>> first learning a new language, and then learning about whatever the code
>> there is doing.
>> Moreover, code in "core" is officially maintained "by the PSC", which is
>> good, it means a group
>> of people care about that code. But in a multi-language scenario, that's
>> not possible anymores
>> unless the PSC members also become "language geeks".
>>
>> That's why I believe that while extensions written in a non Java language
>> are sort of ok
>> (but they will be troublesome the day we have many), core in non Java
>> language is simply
>> not an option.
>>
>> Unless... well, unless the non Java language war starting during these
>> years ends with a clear
>> winner, a new languages that really takes the place of Java obliterating
>> all of the other
>> competitors.
>> If in a future Scala becomes the de facto non Java choice, and Jython,
>> JRuby, Groovy, Clojure, Kotlin, Ceylon
>> (and all the others that I won't list) get relegated to a very small
>> percentange, well, in that case I'll be very happy
>> to switch the entire project to Scala
>>
>> Cheers
>> Andrea
>>
>>
>>
>> --
>> ==
>> Our support, Your Success! Visit http://opensdi.geo-solutions.it for
>> more information.
>> ==
>>
>> Ing. Andrea Aime
>> @geowolf
>> Technical Lead
>>
>> GeoSolutions S.A.S.
>> Via Poggio alle Viti 1187
>> 55054  Massarosa (LU)
>> Italy
>> phone: +39 0584 962313
>> fax: +39 0584 1660272
>> mob: +39  339 8844549
>>
>> http://www.geo-solutions.it
>> http://twitter.com/geosolutions_it
>>
>> ---
>>
>>
>> -

Re: [Geoserver-devel] Branching off, and setting up new builds for the new stable series

[Chris Holmes]

+1 here, sounds great. Glad to see the timed release model rolling out.


On Mon, Jan 21, 2013 at 10:35 AM, Christian Mueller wrote:

> +1 for branching, makes sense.
>
> 2013/1/21 Andrea Aime 
>
>> Hi all,
>> during today's PSC/PMC meeting there was some agreement to branch off
>> master
>> today and create a new stable series.
>>
>> Two things missing:
>> - opinions from the missing PSC/PMC members
>> - if we go for it, someone has to setup the build jobs for the new stable
>> series
>>
>> We noticed Hudson still has build jobs for gt 2.7.x/gs 2.1.x, maybe those
>> can be converted
>> to build gt 9.x/gs 2.3.x, or otherwise be dropped while the ones to build
>> the new
>> stable branch are setup?
>>
>> Cheers
>> Andrea
>>
>> --
>> ==
>> Our support, Your Success! Visit http://opensdi.geo-solutions.it for
>> more information.
>> ==
>>
>> Ing. Andrea Aime
>> @geowolf
>> Technical Lead
>>
>> GeoSolutions S.A.S.
>> Via Poggio alle Viti 1187
>> 55054  Massarosa (LU)
>> Italy
>> phone: +39 0584 962313
>> fax: +39 0584 1660272
>> mob: +39  339 8844549
>>
>> http://www.geo-solutions.it
>> http://twitter.com/geosolutions_it
>>
>> ---
>>
>>
>> --
>> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
>> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
>> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
>> MVPs and experts. SALE $99.99 this month only -- learn more at:
>> http://p.sf.net/sfu/learnmore_122412
>> ___
>> Geoserver-devel mailing list
>> Geoserver-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>
>>
>
>
> --
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. SALE $99.99 this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_122412
> ___
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
>
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] [jira] (GEOS-5594) JAVA_OPTS variable not functioning

[Jonathan Moules (JIRA)]

Jonathan Moules
 created  GEOS-5594


JAVA_OPTS variable not functioning















Issue Type:


Bug



Affects Versions:


2.2.3



Assignee:


Justin Deoliveira



Components:


Configuration



Created:


22/Jan/13 11:34 AM



Description:


If I set a JAVA_OPTS environmental variable to something like:

-Xmx1G -Xms128m -XX:MaxPermSize=256m -XX:SoftRefLRUPolicyMSPerMB=36000 -XX:+UseParallelGC

GeoServer won't start, citing an invalid heap size. What its actually doing is only getting the "-Xmx1G" from the variable because of the poor way windows handles spaces in them.

If I change JAVA_OPTS to:

"-Xmx1G -Xms128m -XX:MaxPermSize=256m -XX:SoftRefLRUPolicyMSPerMB=36000 -XX:+UseParallelGC"

(note the quotes around it). It still doesn't start, but this time instantly closes the batch file.

The only way to get it to run using options is to edit the batch file and declare it there. I.e. line 116 becomes:

  if "%JAVA_OPTS%" == "" (set JAVA_OPTS="-Xmx1G -Xms128m -XX:MaxPermSize=256m -XX:SoftRefLRUPolicyMSPerMB=36000 -XX:+UseParallelGC")

or I guess just stick it directly into line 121.




Environment:


Windows 2008 R2




Project:


GeoServer



Priority:


Minor



Reporter:


Jonathan Moules




























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira





--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] [jira] (GEOS-5593) JAVA_OPTS in documentation

[Jonathan Moules (JIRA)]

Jonathan Moules
 created  GEOS-5593


JAVA_OPTS in documentation















Issue Type:


Improvement



Assignee:


Andrea Aime



Components:


Documentation



Created:


22/Jan/13 10:27 AM



Description:


Looking in startup.bat, it looks like all the java options and stuff have been removed and now its a matter of using the "JAVA_OPTS" environmental variable.

However the JAVA_OPTS doesn't seem to appear anywhere in the docs (there is a reference in the linux docs, but as a Windows user I wouldn't naturally look there).

I'd expect it somewhere here: http://docs.geoserver.org/latest/en/user/production/index.html
Especially as this section ( http://docs.geoserver.org/latest/en/user/production/container.html ) refers to parameters that can only be set via JAVA_OPTS




Project:


GeoServer



Priority:


Major



Reporter:


Jonathan Moules




























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira





--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] xml security issues

[Christian Mueller]

Hi Davide

A big +1 for pointing out this problem. I have similar issues in the
security subsystem (protecting specific files). I also thought
about using the Java security manager but this configuration has to be done
by the local admin. I would prefer hardening GeoServer by the developers.
(Package sealing, examining the stack trace,... in my case).  Of course, we
cannot cover all vulnerabilities, so we have to enhance the documentation.

2013/1/22 Davide 

> Hi,
>
> I'd like to discuss a couple of security issues related to parsing XML
> files coming from outside, both involve external entities evaluation:
>
> 1) XML Bombs (http://en.wikipedia.org/wiki/Billion_laughs)
>
> The environment variable entityExpansionLimit can be set on the
> GeoServer JVM to prevent this kind of attacks but it would be nice to
> have it enabled by default.
>
> Further security measures against DoS attacks can enabled turning on
> FEATURE_SECURE_PROCESSING on the standard XML parsers.
> This mode prevents parsing of abnormal files, so the parser will stop
> processing xml bombs and other xml files 'too big' (but we can't
> configure how much is 'too big').
>
> 2) Entities loaded from the local server
> (http://jira.codehaus.org/browse/GEOS-5273)
>
> To prevent GeoServer from reading sensitive files on the server, the
> Java SecurityManager of the server should be configured.
> But even with a restrictive SecurityManager, GeoServer must still be
> able to read in its data directory where we have sensitive
> information.
>
>
> In GeoTools and GeoServer I've seen 4 different parsers, instantiated
> in many different classes so there's no unique point where we can add
> a security control.
> I thought we could create a factory for every parser implementation,
> containing methods like createParser(Map settings).
> Factory settings could be used to enable customizations like an entity
> expansion limit, a custom EntityResolver that read entities only from
> a limited set of directories and so on.
>
> We're in a feature freeze state now but I need to fix those issues in
> at least 2 points: SLD and WFS POST parsing.
> So at the moment I'd like to just add a GeoServer setting to disable
> external entities loading: it be evaluated when creating parsers for
> SLD and WFS POST requests.
>
> Opinions?
>
> Regards,
> --
> ==
> Our support, Your Success! Visit http://opensdi.geo-solutions.it for
> more information.
> ==
>
> Davide Savazzi
> @svzdvd
> Senior Software Engineer
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054  Massarosa (LU)
> Italy
> phone: +39 0584 962313
> fax:  +39 0584 1660272
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
>
> --
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnnow-d2d
> ___
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] unsubscribe

[Eva Nessenius]

Hallo, I have unsubscribed from the geoserver-devel

but  I still receive your messages.  Please delete my

email-ID   evan...@arcor.de 

Regards - eva
 --
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] Configuring a service in a workspace specific manner: bug of pebkac?

[Andrea Aime]

On Tue, Jan 22, 2013 at 4:15 PM, Justin Deoliveira wrote:

> Yeah, the workflow here isn't very intuitive but the way add a workspace
> specific service config is from the workspace. There is a checkbox to add a
> custom service, and configure it.
>

Ah, I see.



> So the drop down on the service page doesn't really make sense. It should
> be a read only text box but i believe it was used because it already
> existed.
>

Or, it could be modified so that it does not filter, and choosing a
worskpace that does not have a custom service would result in creating such
configuration
(by copying the global one).


>
> Anyways, we talked about a better workflow for workspace specific
> services/etc... to be a global drop down somewhere that would change the
> context. I didn't look into it too much but at first look looks non
> trivial.
>

Right right, I remember now

Cheers
Andrea

-- 
==
Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39  339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

---
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] Specific documentation about GeoServer architecture

[Andrea Aime]

On Tue, Jan 22, 2013 at 2:49 PM, Federico Cacco wrote:

> Hi
>
> I'm doing a Master Thesis about GeoServer and how it can be optimized
> for a cloud computing environment.
>
> I have seen that in the page
> http://geoserver.org/display/GEOS/Reference there is a schema that
> represents the internal architecture of GeoServer, but I wanted to
> know if it was available more specific documentation
> that explains the task being performed by each module and how it
> interfaces with the other.
>

This question gets asked every few months, the answer is always the same:
we don't have such documentation.
The reason is simple, there is not enough people to maintain it, and
GeoServer
API changes relatively frequently too

My last attempt a few years ago was to try and generate some class diagrams
automatically from the sources using UMLGraph (
http://www.umlgraph.org/doc.html)
but that was not maintainable as well.

Every time someone ask I invite the person to build up and share such
documentation,
if it's high level enough it should hold up for a few years (detailed one
will get out
of date very quickly, on the other hand), but... so far nobody ever did so


>
> For example, it would be useful to know where in the architecture of
> GeoServer you place the module control-flow.
>

The control-flow module uses the DispatcherCallback extension point to
follow
and control the evolution of OGC requests, it gets a callback for every
significant
state in which the OGC dispatch process steps into:
https://github.com/geoserver/geoserver/blob/master/src/ows/src/main/java/org/geoserver/ows/DispatcherCallback.java

Cheers
Andrea

-- 
==
Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39  339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

---
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] Cannot reproduce WCS CITE test failures on stable branch

[Justin Deoliveira]

Ahh, sorry meant to update this thread. I am actually not 100% sure it was
an issue with the configuration. Both stable and master cite runs from the
same data directories (the ones from master). And for some reason the wcs
configuration from master got saved which caused the wcs on stable to fail
to load, so any code accessing wcs failed.

Anyways, i think i will separate out the repos on the cite server to avoid
such conflicts in the future.


On Tue, Jan 22, 2013 at 12:59 AM, Andrea Aime
wrote:

> On Mon, Jan 21, 2013 at 4:22 PM, Justin Deoliveira 
> wrote:
>
>> Hey Andrea,
>>
>> Sorry, wanted to look at this last week but never had a chance. Will look
>> at things today, good to know its not reproducible locally though. Thanks
>> for looking into it. More soon.
>>
>
> Hey, I see the tests stopped failing, thanks a lot for that :-)
> Out of curiosity, what was the issue?
>
> Cheers
> Andrea
>
> --
> ==
> Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
> information.
> ==
>
> Ing. Andrea Aime
> @geowolf
> Technical Lead
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054  Massarosa (LU)
> Italy
> phone: +39 0584 962313
> fax: +39 0584 1660272
> mob: +39  339 8844549
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
> ---
>



-- 
Justin Deoliveira
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] Configuring a service in a workspace specific manner: bug of pebkac?

[Justin Deoliveira]

Yeah, the workflow here isn't very intuitive but the way add a workspace
specific service config is from the workspace. There is a checkbox to add a
custom service, and configure it.

So the drop down on the service page doesn't really make sense. It should
be a read only text box but i believe it was used because it already
existed.

Anyways, we talked about a better workflow for workspace specific
services/etc... to be a global drop down somewhere that would change the
context. I didn't look into it too much but at first look looks non
trivial.

On Tue, Jan 22, 2013 at 12:57 AM, Andrea Aime
wrote:

> Hi,
> I was making some interactive tests against GeoServer 2.2.x before making
> the
> release and found something that is either a bug in the code, or in my
> understanding.
>
> When I get to a service page, say WMS, the workspace dropdown is always
> empty,
> it seems I cannot configure the WMS service for a particular layer.
> The culprit seems to be ServiceFilteredWorkspacesModel, which shaves off
> all
> workspaces that do not already have a specific service configuration
> attached.
>
> However... how am I going to add the configuration for the first time?
>
> If it's a bug, it's not new, the relevant code has not been changed since
> GSIP 66
> landed, so I'm not going to stop the release for it
> (the rationale for a release on the stable series is "no known regressions
> since
> the last release, plug some improvements", as far as I remember, "no known
> bugs"
> is of course un-achievable with the amount of developers we have).
>
> Cheers
> Andrea
>
> (in case anyone is wondering,  http://it.wikipedia.org/wiki/PEBKAC)
>
> --
> ==
> Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
> information.
> ==
>
> Ing. Andrea Aime
> @geowolf
> Technical Lead
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054  Massarosa (LU)
> Italy
> phone: +39 0584 962313
> fax: +39 0584 1660272
> mob: +39  339 8844549
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
> ---
>
>
> --
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnnow-d2d
> ___
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
>


-- 
Justin Deoliveira
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] Specific documentation about GeoServer architecture

[Jonathan Moules]

This would be of interest to me too. If we go with GeoServer at some point
we'll have to have it vetted by security and this is the sort of thing they
like.
Jonathan



On 22 January 2013 13:49, Federico Cacco  wrote:

> Hi
>
> I'm doing a Master Thesis about GeoServer and how it can be optimized
> for a cloud computing environment.
>
> I have seen that in the page
> http://geoserver.org/display/GEOS/Reference there is a schema that
> represents the internal architecture of GeoServer, but I wanted to
> know if it was available more specific documentation
> that explains the task being performed by each module and how it
> interfaces with the other.
>
> For example, it would be useful to know where in the architecture of
> GeoServer you place the module control-flow.
>
> Sincerely
> Thank you for your attention
>
> --
> Federico Cacco
>
>
> --
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnnow-d2d
> 
___
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>


This transmission is intended for the named addressee(s) only and may contain 
sensitive or protectively marked material up to RESTRICTED and should be 
handled accordingly. Unless you are the named addressee (or authorised to 
receive it for the addressee) you may not copy or use it, or disclose it to 
anyone else. If you have received this transmission in error please notify the 
sender immediately. All email traffic sent to or from us,  including without 
limitation all GCSX traffic, may be subject to recording and/or monitoring in 
accordance with relevant legislation.
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] xml security issues

[Davide]

Hi,

I'd like to discuss a couple of security issues related to parsing XML
files coming from outside, both involve external entities evaluation:

1) XML Bombs (http://en.wikipedia.org/wiki/Billion_laughs)

The environment variable entityExpansionLimit can be set on the
GeoServer JVM to prevent this kind of attacks but it would be nice to
have it enabled by default.

Further security measures against DoS attacks can enabled turning on
FEATURE_SECURE_PROCESSING on the standard XML parsers.
This mode prevents parsing of abnormal files, so the parser will stop
processing xml bombs and other xml files 'too big' (but we can't
configure how much is 'too big').

2) Entities loaded from the local server
(http://jira.codehaus.org/browse/GEOS-5273)

To prevent GeoServer from reading sensitive files on the server, the
Java SecurityManager of the server should be configured.
But even with a restrictive SecurityManager, GeoServer must still be
able to read in its data directory where we have sensitive
information.


In GeoTools and GeoServer I've seen 4 different parsers, instantiated
in many different classes so there's no unique point where we can add
a security control.
I thought we could create a factory for every parser implementation,
containing methods like createParser(Map settings).
Factory settings could be used to enable customizations like an entity
expansion limit, a custom EntityResolver that read entities only from
a limited set of directories and so on.

We're in a feature freeze state now but I need to fix those issues in
at least 2 points: SLD and WFS POST parsing.
So at the moment I'd like to just add a GeoServer setting to disable
external entities loading: it be evaluated when creating parsers for
SLD and WFS POST requests.

Opinions?

Regards,
-- 
==
Our support, Your Success! Visit http://opensdi.geo-solutions.it for
more information.
==

Davide Savazzi
@svzdvd
Senior Software Engineer

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax:  +39 0584 1660272

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] Specific documentation about GeoServer architecture

[Federico Cacco]

Hi

I'm doing a Master Thesis about GeoServer and how it can be optimized
for a cloud computing environment.

I have seen that in the page
http://geoserver.org/display/GEOS/Reference there is a schema that
represents the internal architecture of GeoServer, but I wanted to
know if it was available more specific documentation
that explains the task being performed by each module and how it
interfaces with the other.

For example, it would be useful to know where in the architecture of
GeoServer you place the module control-flow.

Sincerely
Thank you for your attention

-- 
Federico Cacco

--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] GSIP 89 Creative Commons with Attribution

[Rahkonen Jukka]

+1

-Jukka Rahkonen-

Lähettäjä: Jody Garnett [mailto:jody.garn...@gmail.com]
Lähetetty: 22. tammikuuta 2013 9:57
Vastaanottaja: Ben Caradoc-Davies
Kopio: Geoserver-devel
Aihe: Re: [Geoserver-devel] GSIP 89 Creative Commons with Attribution

On Tuesday, 22 January 2013 at 12:17 PM, Ben Caradoc-Davies wrote:
+1. Good thinking, Jody. Some parts of the documentation, including
production Tomcat and database configuration and remarks on standards,
are quite general, and it would benefit the community if these could be
reused. In my view, CC-BY is a good choice.

Thanks Ben.  More importantly CC-BY is widely understood leading to less 
questions (although I am tempted for an example "attribution" for the 
developers guide).

As an aside, I note that on the GSIP page, I was pencilled-in as a +0 in
my absence, which is not the same thing as having not voted. Perhaps we
should leave a blank to make it clearer when someone has not voted, as
+0 is a valid vote?
Yeah trouble no matter what way we go, it is useful to mark down "assume 
consent" when the GSIP goes ahead without input. In my review of the GSIPs I 
found many of the completed pages had gone ahead with no recorded votes. I did 
not clean things up (by checking email?) and simply moved them over to the 
"done" pile.

Jody
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] [jira] (GEOS-5592) GetLegendGraphic doesn't correcly render symbols bigger than icon requested size

[Mauro Bartolomeoli (JIRA)]

Mauro Bartolomeoli
 created  GEOS-5592


GetLegendGraphic doesn't correcly render symbols bigger than icon requested size















Issue Type:


Bug



Affects Versions:


2.3-beta1, 2.2.4



Assignee:


Andrea Aime



Components:


WMS



Created:


22/Jan/13 5:30 AM



Description:


Symbols used in PointSymbolizer (marks or external graphics) bigger than the requested icon size are not constrained to be drawn inside the requested box.




Fix Versions:


2.3-RC1



Project:


GeoServer



Priority:


Minor



Reporter:


Mauro Bartolomeoli




























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira





--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel