[Geotools-devel] GEOS-5958 and root login

2013-08-08 Thread Christian Mueller
The issue is about disabling the login page if no form based login is
possible.

https://jira.codehaus.org/browse/GEOS-5958

All these security configuration issues may be dangerous if a configuration
error happens. At the end of the day, the admin can lock out itself.

IMHO, a dedicated login for the root user with the master password should
always be possible. (The "root" user has administrative privileges).

My idea:

- Add a special filter chain /web/rootlogin (checked before /web/**)
- Force digest authentication, no GUI needed, the browser pops up a login
box
- Upon success, redirect the the request to /web/

This is quite a simple solution and helps  fixing GEOS-5958. Additionally,
I can remove a lot of code concerning the root login in the individual
authentication filters and test cases.

Opinions ?



-- 
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH
--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk___
GeoTools-Devel mailing list
GeoTools-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geotools-devel


Re: [Geotools-devel] Upgrade to Java 7 for GeoTools 11?

2013-08-08 Thread Justin Deoliveira
My thought is that it would be premature regardless of java 6 eol. As long
as there are deployments out there using java 6, and i know for certain
that there are many, java 6 is still relevant. To me the new APIs in java 7
aren't worth forcing users to upgrade. Then again perhaps it is time for
another poll.

As Andrea says upping the java runtime requirement is different than
officially supporting it. Ideally rather than just jump right to making
jdk7 the minimum requirement we would have a full branch lifecycle it as
supported. And then potentially talk about upping the minimum requirement.
Next step in that regard would be getting stable jdk7 build infrastructure
in place. Andrea proposed we set up something with travisci and I second
that. I'll see if i can put some cycles into helping out with that.





On Thu, Aug 8, 2013 at 7:03 AM, Andrea Aime wrote:

> On Thu, Aug 8, 2013 at 3:01 PM, Brett Walker 
> wrote:
>
>>  Hi Andrea & Jody,
>>
>>  I was reading GEOT-4400. Again Java 7 was mentioned. GEOT-4532 also
>> mentions Java 7.
>>
>>  Can I add that Java 8 will be released around March 2014.
>>
>>  Java 6 is sounding a little ancient.
>>
>
> That said, major java frameworks are still supporting java 6 (Spring,
> Hibernate and so on).
> Or not?
>
>
>>
>>  +1 for moving to Java 7 in GeoTools 11
>>
>
> There is a difference between having java 7 as the minimum, and officially
> support it.
> I'd like to go for the second if possible, but also hear the GeoTools and
> GeoServer communities
> before taking any decision.
> How many users are we going to lose because of the switch?
>
> Cheers
> Andrea
>
> --
> ==
> Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
> information.
> ==
>
> Ing. Andrea Aime
> @geowolf
> Technical Lead
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054  Massarosa (LU)
> Italy
> phone: +39 0584 962313
> fax: +39 0584 1660272
> mob: +39  339 8844549
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
> ---
>
>
> --
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead.
> Download for free and get started troubleshooting in minutes.
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
> ___
> GeoTools-Devel mailing list
> GeoTools-Devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geotools-devel
>
>


-- 
Justin Deoliveira
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.
--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk___
GeoTools-Devel mailing list
GeoTools-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geotools-devel


Re: [Geotools-devel] Upgrade to Java 7 for GeoTools 11?

2013-08-08 Thread Andrea Aime
On Thu, Aug 8, 2013 at 3:01 PM, Brett Walker wrote:

>  Hi Andrea & Jody,
>
>  I was reading GEOT-4400. Again Java 7 was mentioned. GEOT-4532 also
> mentions Java 7.
>
>  Can I add that Java 8 will be released around March 2014.
>
>  Java 6 is sounding a little ancient.
>

That said, major java frameworks are still supporting java 6 (Spring,
Hibernate and so on).
Or not?


>
>  +1 for moving to Java 7 in GeoTools 11
>

There is a difference between having java 7 as the minimum, and officially
support it.
I'd like to go for the second if possible, but also hear the GeoTools and
GeoServer communities
before taking any decision.
How many users are we going to lose because of the switch?

Cheers
Andrea

-- 
==
Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39  339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

---
--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk___
GeoTools-Devel mailing list
GeoTools-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geotools-devel


[Geotools-devel] Upgrade to Java 7 for GeoTools 11?

2013-08-08 Thread Brett Walker
Hi Andrea & Jody,

I was reading GEOT-4400. Again Java 7 was mentioned. GEOT-4532 also mentions 
Java 7.

Can I add that Java 8 will be released around March 2014.

Java 6 is sounding a little ancient.

+1 for moving to Java 7 in GeoTools 11

Brett


--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk___
GeoTools-Devel mailing list
GeoTools-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geotools-devel


[Geotools-devel] [jira] (GEOT-4533) Have H2 store create auto mixed mode connections for embedded usage

2013-08-08 Thread Andrea Aime (JIRA)














































Andrea Aime
 created  GEOT-4533


Have H2 store create auto mixed mode connections for embedded usage















Issue Type:


Bug



Assignee:


Unassigned


Components:


jdbc-h2 plugin



Created:


08/Aug/13 7:35 AM



Description:


This allows external connections, so the db can be inspected while the main application is running




Project:


GeoTools



Priority:


Major




Reporter:


Andrea Aime




























This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira





--
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk___
GeoTools-Devel mailing list
GeoTools-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geotools-devel