RE: Secured Page?
I remember someone posted Login-related question recently. I have a newbie question on this. In my web application, I have login1.jsp which calls login2.jsp to handle the actual login process. I use JDBC-ODBC-Oracle to handle the database connection. If successfully logged in, the user will be "forwarded" to a welcome.jsp. I am wondering how could I secure welcome.jsp so that a user can ONLY access welcome.jsp by a successful login? I mean a user could just type in http://localhost:8080/examples/jsp/welcom.jsp, for example, to access it. Someone has metioned the secured page. Could someone explain? Where can I get the information or code example? Thanks a lot, Roland
SSL Attributes
I can't seem to find either javax.net.ssl.cipher_suite or javax.servlet.request.cipher-suite attributes anywhere in Orion. The second of which is required to be compliant with Servlet Spec 2.3, yet it's not even in the latest version (1.4.5) of Orion. I need to get at either the cipher suite name or key size attribute of a SSL connection which is possible in numerous other and older servlet engines. I would prefer to be able to get at this in a Filter now that 1.4.5 truly supports filters. I've searched high and low and written to Orion repeatedly to no avail. If anyone knows anything it would be very helpful. Dave
Any experiences with bytecode to native compilers and orion ?
Hi all, i'd like to ask, if anybody has some experience with bytecode to native compilers in conjunction with orion. Unfortunately, the vendors of this products do not offer evaluation downloads (comprehensable, since often one compiler run would make it to speed up an existing product ;). I'd like to hear if someone has any experiences with TowerJ (though i'm quite sure that my company cannot afford it...), Jove (http://www.instantiations.com, they advertise with "IBM Netfinity proven", so probably it works with orion, too?) or BulletTrain (http://www.naturalbridge.com) and orion. First of all: Does it work at all with any of these products? And then: does it help? Our application in development is using EJBs very heavily, so any improvement either in the jdbc driver or within orion itself would help very much (our own code does not matter much). Regards and thank you, Jens Stutte [EMAIL PROTECTED], http://www.netmedia.de netmedia GmbH Neugrabenweg 5-7 66123 Saarbruecken Germany fon: +49 (0) 681 - 3 79 88 - 0 fax: +49 (0) 681 -3 79 88 - 99
SV: Form Login bouncing me to welcome page!
Then ln the welcome.jsp file in a protected area. Or in windows copy it. Klaus -Opprinnelig melding- Fra: Gerald Gutierrez [mailto:[EMAIL PROTECTED]] Sendt: 3. februar 2001 01:58 Til: Orion-Interest Emne: RE: Form Login bouncing me to welcome page! Well I don't want the welcome.jsp page to be secured; anyone should be able to view that file. But if someone tries to hit Login.jsp, I want him to have to log in before continuing. Do I still need welcome.jsp to be in a security constraint? At 08:30 AM 2/2/2001 -0500, you wrote: there should have been a entry for welcome.jsp under security-contraints for example: security-constraint web-resource-collection web-resource-nameUnnamed/web-resource-name url-pattern/welcome.jsp/url-pattern -Original Message- From: Gerald Gutierrez [SMTP:[EMAIL PROTECTED]] Sent: Thursday, February 01, 2001 4:34 PM To: Orion-Interest Subject: Re: Form Login bouncing me to welcome page! I agree that is the correct sequence, but that is not what I get. Assume I have a welcome file defined called welcome.jsp. The sequence of events is: - User requests secured page /Login.jsp - User is redirected to LoginForm.jsp - User enters correct credentials - User is logged in - User is displayed the contents of welcome.jsp. OR: - User requests secured page /Login.jsp - User is redirected to LoginForm.jsp - User enters INCORRECT credentials - User is NOT logged in - User is STILL displayed the contents of welcome.jsp. I also had the case where I didn't have a welcome file defined, but had directory browsing enabled, and I get the directory contents after doing the above sequences. This doesn't seem right to me, but I can't figure out what is wrong. What can cause this? Gerald. At 09:30 AM 2/1/2001 -0700, you wrote: The sequence of events is: - The user requests a secured page (/Login.jsp, in your case). - The server intercepts the request and redirects to the form-based login page (LoginForm.jsp) - If the user logs in successfully, the server allows the original request to proceed (ie. Login.jsp is displayed). So if by "the welcome page" you mean the Login.jsp page, then that is as expected. If you see something else, then this could possibly be the result of something you do on that page (such as redirection). Nick At 10:19 PM 1/31/01 -0800, you wrote: I've searched the mailing list, but there doesn't seem to be information on this. I'm a little desparate now. I'm using a form-based login for my web application. When a user hits Login.jsp, s/he must log in. I have the LoginForm.jsp and LoginError.jsp files in / of my context root. This redirection to the LoginForm.jsp does occur, but regardless of whether the user logged in successfully or not, he is dumped back to the welcome page. The actual logging in is successful, i.e. if he provided the correct credentials, he's logged in, but still dumped back to the welcome page. Here is the relevant portion of my web.xml: security-constraint web-resource-collection web-resource-nameLoginTrigger/web-resource-name descriptionLoginTrigger/description url-pattern/Login.jsp/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection auth-constraint role-nameportal_gamer/role-name /auth-constraint /security-constraint login-config auth-methodFORM/auth-method realm-namedefault/realm-name form-login-config form-login-pageLoginForm.jsp/form-login-page form-error-pageLoginError.jsp/form-error-page /form-login-config /login-config security-role role-nameportal_gamer/role-name /security-role Which part of the magic am I missing? --- --- CONFIDENTIALITY NOTICE: If you have received this e-mail in error, please immediately notify the sender by e-mail at the address shown. This e-mail transmission may contain confidential information. This information is intended only for the use of the individual(s) or entity to whom it is intended even if addressed incorrectly. Please delete it from your files if you are not the intended recipient. Thank you for your compliance.
RE: Re[2]: R: R: frustrated - jdbc: No suitable driver
I'm fully prepared to believe that my understanding of how this works is wrong, but if so it raises quite a few questions for me. Connection, Statement, ResultSet, etc are just interfaces; something must implement them. Normally they are implemented by the JDBC driver, thus allowing the client to communicate with the database using whatever the database uses asa native wire protocol. We have an application client which we want to communicate with the database using JDBC. If we want to use the database's native wire protocol to communicate from the client box to the database box, the JDBC drivers *must* be loaded into the client's VM and used. Alternatively, the app server could act as an intermediary, providing a proxy JDBC interface to the application client and making JDBC calls into the real JDBC driver within the application server. This would obviate the need for the database's JDBC driver on the client, but it would also require inventing a whole new wire protocol for this middle link... sending partial result sets in chunks, maybe caching query results in the client, etc. So now I'm thinking, that sounds painful, but it's possible. It's not like writing an app server is supposed to be *easy* or anything :-) No, Karl and Magnus are supposed to suffer so that it's easy for *us* to write applications :-) But a casual purusal of the decompiled Orion source code (that can be made out through the obfuscation, which is quite a bit) turns up no evidence of such a proxy. In fact, it looks very much like this is not the case. Getting more curious, I checked the JBoss source tree, and while I can't be sure in such a quick study, it doesn't look like there is any sort of intelligent JDBC proxy in that server either. Am I just missing it, and all app servers implement such a proxy? Or is it just WebLogic - allowing the behavior described in the original post? Or is WebLogic doing http-type classloading to get the JDBC driver into the client (a prospect I am considering less likely the more I think about it)? Ever curious, Jeff -Original Message- From: Allen Fogleson [mailto:[EMAIL PROTECTED]] Sent: Sunday, February 04, 2001 10:46 AM To: Orion-Interest Subject: RE: Re[2]: R: R: frustrated - jdbc: No suitable driver Uhmmm, I agree, I was confused because someone said they still needed the JDBC drivers on the client, and assuming you use the portable method of DataSources, there should be no reason that they would need to have the JDBC drivers, it is all handled container side with the datasource. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rafael Alvarez Sent: Sunday, February 04, 2001 10:24 AM To: Orion-Interest Subject: Re[2]: R: R: frustrated - jdbc: No suitable driver Hello Allen, DataSources gives you one advantage on the client side: Security. If you use a direct JDBC connection to a Database, your username, password and URL have to be placed in your class. A Datasource hides all those details, so if some one decompile your class (even JAXed classes are not totally safe) only the JNDI Datasource name will be found. It's up to you to set a security schema for the connection with the app server, but at least is one problem less to solve. -- Best regards, Rafaelmailto:[EMAIL PROTECTED]
I need reference card for ejb-jar.xml
I need a full reference card for ejb.jar-xml. Thanks.
How can i make use of DBMS in orion
I am planning to use objectivity database (ODBMS) i created one entity bean and its not working . is it possible to work with ODBMS to work with Session Bean pls give some advice if somebody is working on same can i have the code for that Thanx in advance Sanjeev sharma
Anyone know how to def Data-type in cmp-field???
Hi! Hi people aroud the world!!! I've found info about what I need to run Orion EJB 2.0 sample with Interbase inside our Orion-list. But for now, I'm having following trouble: primary keys, in Interbase, allow only 254 bytes in length. If I configure my datasource to use Interbase, and set schema="interbase.xml", and then mapping Strings to VARCHAR(255), I get errors in deployment time (primary key too long, or something like this). To turn things bad, I want to use all Interbase power, and map Strings to VARCHAR(8000)... How can I configure my primary-keys to use a max of varchar(30), or something like this? And, how I define the datasource that shold be used for deployment (not after deployment)? See, I need to configure inside ejb-jar.xml file the datatype of my cmp-field (not in orion-ejb-jar.xml, because when Orion create orion-ejb-jar.xml tables are created too - so my database will be incorrect - of course, I'll get app not deployed, because interbase will refuse the primary key with more than 254 bytes). Anyone know how to do this??? Thanks
RE: I need reference card for ejb-jar.xml
read the spec. It contains the whole dtd. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alberto Yano Sent: Monday, February 05, 2001 7:44 AM To: Orion-Interest Subject: I need reference card for ejb-jar.xml I need a full reference card for ejb.jar-xml. Thanks.
SV: Re[2]: R: R: frustrated - jdbc: No suitable driver
You shouls check out the getConnection implementation on the datasource. It gets a reference it pass on to the client, so the client need to have the jdbc interfaces to do this, but it dont need the database drivers. It works much like the same way as an entitybean works (datasources)... Have fun. Klaus -Opprinnelig melding- Fra: Jeff Schnitzer [mailto:[EMAIL PROTECTED]] Sendt: 5. februar 2001 12:17 Til: Orion-Interest Emne: RE: Re[2]: R: R: frustrated - jdbc: No suitable driver I'm fully prepared to believe that my understanding of how this works is wrong, but if so it raises quite a few questions for me. Connection, Statement, ResultSet, etc are just interfaces; something must implement them. Normally they are implemented by the JDBC driver, thus allowing the client to communicate with the database using whatever the database uses asa native wire protocol. We have an application client which we want to communicate with the database using JDBC. If we want to use the database's native wire protocol to communicate from the client box to the database box, the JDBC drivers *must* be loaded into the client's VM and used. Alternatively, the app server could act as an intermediary, providing a proxy JDBC interface to the application client and making JDBC calls into the real JDBC driver within the application server. This would obviate the need for the database's JDBC driver on the client, but it would also require inventing a whole new wire protocol for this middle link... sending partial result sets in chunks, maybe caching query results in the client, etc. So now I'm thinking, that sounds painful, but it's possible. It's not like writing an app server is supposed to be *easy* or anything :-) No, Karl and Magnus are supposed to suffer so that it's easy for *us* to write applications :-) But a casual purusal of the decompiled Orion source code (that can be made out through the obfuscation, which is quite a bit) turns up no evidence of such a proxy. In fact, it looks very much like this is not the case. Getting more curious, I checked the JBoss source tree, and while I can't be sure in such a quick study, it doesn't look like there is any sort of intelligent JDBC proxy in that server either. Am I just missing it, and all app servers implement such a proxy? Or is it just WebLogic - allowing the behavior described in the original post? Or is WebLogic doing http-type classloading to get the JDBC driver into the client (a prospect I am considering less likely the more I think about it)? Ever curious, Jeff -Original Message- From: Allen Fogleson [mailto:[EMAIL PROTECTED]] Sent: Sunday, February 04, 2001 10:46 AM To: Orion-Interest Subject: RE: Re[2]: R: R: frustrated - jdbc: No suitable driver Uhmmm, I agree, I was confused because someone said they still needed the JDBC drivers on the client, and assuming you use the portable method of DataSources, there should be no reason that they would need to have the JDBC drivers, it is all handled container side with the datasource. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rafael Alvarez Sent: Sunday, February 04, 2001 10:24 AM To: Orion-Interest Subject: Re[2]: R: R: frustrated - jdbc: No suitable driver Hello Allen, DataSources gives you one advantage on the client side: Security. If you use a direct JDBC connection to a Database, your username, password and URL have to be placed in your class. A Datasource hides all those details, so if some one decompile your class (even JAXed classes are not totally safe) only the JNDI Datasource name will be found. It's up to you to set a security schema for the connection with the app server, but at least is one problem less to solve. -- Best regards, Rafaelmailto:[EMAIL PROTECTED]
SV: I need reference card for ejb-jar.xml
Here it is :) http://java.sun.com/j2ee/dtds/ejb-jar_1_1.dtd Here everything is described in detail.. Can be hard to read if you dont know the XML DTD notation... Have fun. Klaus -Opprinnelig melding- Fra: Alberto Yano [mailto:[EMAIL PROTECTED]] Sendt: 5. februar 2001 13:44 Til: Orion-Interest Emne: I need reference card for ejb-jar.xml I need a full reference card for ejb.jar-xml. Thanks.
RE: Error messages from Orion have invalid XML format - bug?
about the error codes... have you defined an error page? that is a page that is executed to show a bug, and the br StackTrace are generated by the default error page JP -Original Message- From: Randahl Fink Isaksen [mailto:[EMAIL PROTECTED]] Sent: Lunes, 05 de Febrero de 2001 4:40 To: Orion-Interest Subject: RE: Error messages from Orion have invalid XML format - bug? Thanks for your reply JP. I am aware of this possibility, and I am certain that using Orion this way speeds up development. I guess my focusing on finding out about the deployment features has gotten me to this point where I prefer to _deploy_ my application during my development. Is this not what the IDE's would do too? Maybe it is a matter of taste, but it seems a little less elegant to me to develop my JSPs directly in the middle of Orions file tree. Actually I thought most people had their files in a development file tree and then debugged by either moving the files to Orion through packaging and deployment or through simple file copying. Randahl -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Juan Lorandi (Chile) Sent: 4. februar 2001 20:02 To: Orion-Interest Subject: RE: Error messages from Orion have invalid XML format - bug? Randahl look in $orion\applications\YOUREAR\YOURWAR\yourpage.jsp if you edit a .jsp in that dir and browse it, orion will recon the change, recompile for you, voila! no need to rebuild anything JP -Original Message- From: Randahl Fink Isaksen [mailto:[EMAIL PROTECTED]] Sent: Sbado, 03 de Febrero de 2001 8:05 To: Orion-Interest Subject: Error messages from Orion have invalid XML format - bug? My JSPs return XML which is transformed using XSL. When Orion locates syntax errors or encounters Exceptions it produces som HTML which contains the error message AND some HTML markup which presents the error message. This Orion markup happens to contain standalone br tags. In case of an exception it looks like this: brat com.evermind.server.http.d3.sw(JAX) brat com.evermind.server.http.d3.su(JAX) brat com.evermind.server.http.ef.s1(JAX) brat com.evermind.server.http.ef.do(JAX) brat com.evermind.util.f.run(JAX) As everybody knows, using standalone br tags compromises XML syntax - XML would expect either br/ or br/br. Unfortunately this forces you to follow this debugging process: 1. Remove the lines in the JSP which links it to the stylesheet: ?xml version = "1.0"? ?xml-stylesheet href = "/tool.xsl"? 2. Rebuild the web application 3. Have Orion deploy the new build 4. Invoke the JSP and read the error 5. Correct the error in the JSP 6. Rebuild and redeploy 7. Check the error was corrected 8. Reinsert the line in the JSP which links it to the stylesheet. A rather long way to go, I think. This raises the question of whether this could be made easier. I have a feeling, I am not the only developer using XML, so maybe it would be a great idea if Orion Server presented Exceptions using tags which are valid in both HTML and XML. If the br tag was replaced with br/br, errors would be visible in both HTML and XML results. Moreover, if the whole error was enclosed in a valid XML tag you can have your XSL deliver the error as output. For instance p id = "OrionError" br/br at com.evermind.server.http.d3.sw(JAX) br/br at com.evermind.server.http.d3.su(JAX) br/br at com.evermind.server.http.ef.s1(JAX) br/br at com.evermind.server.http.ef.do(JAX) br/br at com.evermind.util.f.run(JAX) /p This is valid HTML and one can easily write XSL which checks for the occurance of this error and produces a result which can be seen in the output to the browser. This is just one quick idea of how to accomplish both valid HTML and valid XML - there are probably many other ways to accomplish this aswell. Of course, there might be a good reason why things are the way they are, but any comments to these thoughts would be welcomed. And should anyone at Ironflare have the time to comment on this too, I would be very grateful. Thanks Randahl -Original Message- From: Randahl Fink Isaksen [mailto:[EMAIL PROTECTED]] Sent: 2. februar 2001 11:32 To: Orion-Interest Subject: Source XML Error: Expected "/br" to terminate element starting on line 51. Occasionally I get a strange result when there are syntax errors in my JSPs. If I have a JSP that works fine I can make Orion return a weird result by introducing a line like the following into the JSP: % rubishrubishrubish % I would expect Orion to compile the JSP and give me back a syntax error somewhere. Instead I get the following in my browser when I invoke the JSP: Source XML Error:
Any tutorials on form based authentication
Title says it all, obviously in the context of Orion, but generally otherwise. Thanks
Re: Re[2]: R: R: frustrated - jdbc: No suitable driver
Doesn't JNDI handle this for you? A serialized version of the class is stored in the LDAP tree and when you look it up it is deserialized and made available? Isn't this kind of how Jini/RMI/etc...work? Even if you've never seen the class before, it doesn't matter since it implements the JDBC interfaces. The actual implemented classes are serialized and returned to the client automagically by the JVM? - Original Message - From: "Jeff Schnitzer" [EMAIL PROTECTED] To: "Orion-Interest" [EMAIL PROTECTED] Sent: Monday, February 05, 2001 6:16 AM Subject: RE: Re[2]: R: R: frustrated - jdbc: No suitable driver I'm fully prepared to believe that my understanding of how this works is wrong, but if so it raises quite a few questions for me. Connection, Statement, ResultSet, etc are just interfaces; something must implement them. Normally they are implemented by the JDBC driver, thus allowing the client to communicate with the database using whatever the database uses asa native wire protocol. We have an application client which we want to communicate with the database using JDBC. If we want to use the database's native wire protocol to communicate from the client box to the database box, the JDBC drivers *must* be loaded into the client's VM and used. Alternatively, the app server could act as an intermediary, providing a proxy JDBC interface to the application client and making JDBC calls into the real JDBC driver within the application server. This would obviate the need for the database's JDBC driver on the client, but it would also require inventing a whole new wire protocol for this middle link... sending partial result sets in chunks, maybe caching query results in the client, etc. So now I'm thinking, that sounds painful, but it's possible. It's not like writing an app server is supposed to be *easy* or anything :-) No, Karl and Magnus are supposed to suffer so that it's easy for *us* to write applications :-) But a casual purusal of the decompiled Orion source code (that can be made out through the obfuscation, which is quite a bit) turns up no evidence of such a proxy. In fact, it looks very much like this is not the case. Getting more curious, I checked the JBoss source tree, and while I can't be sure in such a quick study, it doesn't look like there is any sort of intelligent JDBC proxy in that server either. Am I just missing it, and all app servers implement such a proxy? Or is it just WebLogic - allowing the behavior described in the original post? Or is WebLogic doing http-type classloading to get the JDBC driver into the client (a prospect I am considering less likely the more I think about it)? Ever curious, Jeff -Original Message- From: Allen Fogleson [mailto:[EMAIL PROTECTED]] Sent: Sunday, February 04, 2001 10:46 AM To: Orion-Interest Subject: RE: Re[2]: R: R: frustrated - jdbc: No suitable driver Uhmmm, I agree, I was confused because someone said they still needed the JDBC drivers on the client, and assuming you use the portable method of DataSources, there should be no reason that they would need to have the JDBC drivers, it is all handled container side with the datasource. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rafael Alvarez Sent: Sunday, February 04, 2001 10:24 AM To: Orion-Interest Subject: Re[2]: R: R: frustrated - jdbc: No suitable driver Hello Allen, DataSources gives you one advantage on the client side: Security. If you use a direct JDBC connection to a Database, your username, password and URL have to be placed in your class. A Datasource hides all those details, so if some one decompile your class (even JAXed classes are not totally safe) only the JNDI Datasource name will be found. It's up to you to set a security schema for the connection with the app server, but at least is one problem less to solve. -- Best regards, Rafaelmailto:[EMAIL PROTECTED]
RE: Anyone know how to def Data-type in cmp-field???
Quick and dirty...
create your own class String (say ar.com.rifleman.String)
package ar.com.rifleman
public class String extends java.lang.String {}
then map it to a varchar(30)...
type-mapping type="ar.com.rifleman.String" name="varchar(30)" /
that should do it (but again, it's quick and dirty)
JP
PS: Saludos de Claudio Paul Cannigia ;)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Lunes, 05 de Febrero de 2001 9:58
To: Orion-Interest
Subject: Anyone know how to def Data-type in cmp-field???
Hi!
Hi people aroud the world!!!
I've found info about what I need to run Orion EJB 2.0 sample
with Interbase inside our Orion-list.
But for now, I'm having following trouble: primary keys, in
Interbase, allow only 254 bytes in length. If I configure my
datasource to use Interbase, and set schema="interbase.xml",
and then mapping Strings to VARCHAR(255), I get errors in
deployment time (primary key too long, or something like
this). To turn things bad, I want to use all Interbase power,
and map Strings to VARCHAR(8000)... How can I configure my
primary-keys to use a max of varchar(30), or something like
this? And, how I define the datasource that shold be used for
deployment (not after deployment)?
See, I need to configure inside ejb-jar.xml file the datatype
of my cmp-field (not in orion-ejb-jar.xml, because when Orion
create orion-ejb-jar.xml tables are created too - so my
database will be incorrect - of course, I'll get app not
deployed, because interbase will refuse the primary key with
more than 254 bytes).
Anyone know how to do this???
Thanks
1.4.6 breaks the EJB 2.0 CMP Do OM example
Hi All... I just ran my EJB 2.0 CMP Do OM example through Orion 1.4.6. It breaks with the error pasted below. I just thought I would let everyone know... Jim EmailDo_ORCollection5.java:294: String not terminated at end of line. "n ^ EmailDo_ORCollection5.java:294: Invalid expression statement. "n ^ EmailDo_ORCollection5.java:295: ';' expected. } ^ EmailDo_ORCollection5.java:295: '}' expected. } ^ 4 errors Error compiling file:/D:/Orion-test-apps/Test20CmpDoOM/rel/Sample20EbDoOM-ver001 a/Sample20EbDoOM-ver001a-ejb.jar: Syntax error in source Orion/1.4.6 initialized
Yet another oddity in 1.4.6
In 1.4.6, build 10008, related to the "lookup X and get reference Y"... As per Magnus (and the orion-ejb-jar.xml's docs), I have the followingorion-ejb-jar.xml: ?xml version="1.0"?!DOCTYPE orion-ejb-jar PUBLIC "-//Evermind//DTD Enterprise JavaBeans 1.1 runtime//EN" "http://www.orionserver.com/dtds/orion-ejb-jar.dtd" orion-ejb-jar deployment-version="1.4.6" deployment-time="e47f23326b"enterprise-beanssession-deployment name="ejb/GPN1" location="ejb/GPN1" wrapper="CommunicatorHome_StatelessSessionHomeWrapper7" timeout="1800" persistence-filename="ejb/GPN1" /session-deployment name="ejb/CUPID1" location="ejb/CUPID1" wrapper="CommunicatorHome_StatelessSessionHomeWrapper9" timeout="1800" persistence-filename="ejb/CUPID1" /message-driven-deployment name="ejb/router" destination-location="jms/routingQueue"resource-ref-mapping name="jms/QueueConnectionFactory" /resource-ref-mapping name="jms/xaQueue" //message-driven-deploymentmessage-driven-deployment name="ejb/switch" destination-location="jms/xaQueue"resource-ref-mapping name="jms/QueueConnectionFactory" /resource-ref-mapping name="jms/actionQueue" //message-driven-deploymentmessage-driven-deployment name="ejb/action" destination-location="jms/actionQueue"ejb-ref-mapping name="ejb/GPN1" location="ejb/GPN1" /ejb-ref-mapping name="ejb/CUPID1" location="ejb/CUPID1" / resource-ref-mapping name="jms/QueueConnectionFactory" /resource-ref-mapping name="jms/responseQueue" //message-driven-deploymentmessage-driven-deployment name="ejb/response" destination-location="jms/responseQueue" //enterprise-beansassembly-descriptordefault-method-accesssecurity-role-mapping name="lt;default-ejb-caller-rolegt;" impliesAll="true" //default-method-access/assembly-descriptor/orion-ejb-jar This was generated by deploying, then modifying the ejb-ref-mapping / nodes. However, this is in the application deployment dir for this EJB set: ?xml version="1.0"?!DOCTYPE orion-ejb-jar PUBLIC "-//Evermind//DTD Enterprise JavaBeans 1.1 runtime//EN" "http://www.orionserver.com/dtds/orion-ejb-jar.dtd" orion-ejb-jar deployment-version="1.4.6" deployment-time="e47f6028b0"enterprise-beanssession-deployment name="ejb/GPN1" location="ejb/GPN1" wrapper="CommunicatorHome_StatelessSessionHomeWrapper1" timeout="1800" persistence-filename="ejb/GPN1" /session-deployment name="ejb/CUPID1" location="ejb/CUPID1" wrapper="CommunicatorHome_StatelessSessionHomeWrapper3" timeout="1800" persistence-filename="ejb/CUPID1" /message-driven-deployment name="ejb/router" destination-location="jms/routingQueue"resource-ref-mapping name="jms/QueueConnectionFactory" /resource-ref-mapping name="jms/xaQueue" //message-driven-deploymentmessage-driven-deployment name="ejb/switch" destination-location="jms/xaQueue"resource-ref-mapping name="jms/QueueConnectionFactory" /resource-ref-mapping name="jms/actionQueue" //message-driven-deploymentmessage-driven-deployment name="ejb/action" destination-location="jms/actionQueue"ejb-ref-mapping name="ejb/GPN1" /ejb-ref-mapping name="ejb/CUPID1" /resource-ref-mapping name="jms/QueueConnectionFactory" /resource-ref-mapping name="jms/responseQueue" //message-driven-deploymentmessage-driven-deployment name="ejb/response" destination-location="jms/responseQueue" //enterprise-beansassembly-descriptordefault-method-accesssecurity-role-mapping name="lt;default-ejb-caller-rolegt;" impliesAll="true" //default-method-access/assembly-descriptor/orion-ejb-jar I've modified this file DIRECTLY (not relying on deployment) and the original file's ejb-ref-mapping STILL loses the location attribute. Am I doing something wrong?
Orion process dies -- Error in servlet 'classpath'
Recently my orion process (running on Linux) is dying a couple times a day. This is just a development server, and as far as I know, nobody is hitting it. The only pointer I have at the moment is the following error: 2/5/01 1:14 AM forums: Error in servlet 'classpath' destroy() java.lang.NullPointerException at javax.servlet.GenericServlet.getServletContext(GenericServlet.java) at javax.servlet.GenericServlet.log(GenericServlet.java) at javax.servlet.GenericServlet.destroy(GenericServlet.java) at com.evermind.server.http.ServletInstanceInfo.b9(JAX) at com.evermind.server.http.HttpApplication.wq(JAX) at com.evermind.server.http.HttpApplication.b9(JAX) at com.evermind.server.http.em.b9(JAX) at com.evermind.server.http.en.b9(JAX) at com.evermind.server.ApplicationServer.b9(JAX) at com.evermind.server.hg.run(JAX) at java.lang.Thread.run(Thread.java:484) 2/5/01 1:14 AM forums: 1.4.4 Stopped I assume that is coming from when Orion is trying to nicely shut down, but does anyone know why I'm getting the null pointer, and why it would be shutting itself down? Thanks.
1.4.6 also breaks the Test20CmpDo example
Hi All... The Test20CmoDO.zip example, which shows how to have a dependent object in EJB 2.0, is also broken under Orion 1.4.6. I have filed bugzilla reports for both this one and the Test20CmpDoOM.zip example I mentioned earlier. Test20Cmp.zip seems to still work. Jim
Re: Any experiences with bytecode to native compilers and orion ?
my company cannot afford it...), Jove (http://www.instantiations.com, they advertise with "IBM Netfinity proven", so probably it works with orion, Netfinity is IBMs Intel server hardware platform. To me that proves nothing in regard to orion (and I wonder in what other regard!?)
RE: Anyone know how to def Data-type in cmp-field???
Title: RE: Anyone know how to def Data-type in cmp-field??? The simplest solution (and the one I choose, usually) is to deploy the beans and let the errors go by (if any; I've not used Interbase, and I've not seen this kind of error). This should generate an orion-ejb-jar.xml for you in $ORION/application-deployments/[yourApp]/[yourEJBModule]/orion-ejb-jar.xml, complete with the current persistence types. Modify this file (I usually copy it to EJBdirectory/orion/orion-ejb-jar.xml) with the correct persistence types. Then, remove ant tables from your DB that have been created from the flawed deployment; remove the deployment directory; bingo. Hi people aroud the world!!! I've found info about what I need to run Orion EJB 2.0 sample with Interbase inside our Orion-list. But for now, I'm having following trouble: primary keys, in Interbase, allow only 254 bytes in length. If I configure my datasource to use Interbase, and set schema=interbase.xml, and then mapping Strings to VARCHAR(255), I get errors in deployment time (primary key too long, or something like this). To turn things bad, I want to use all Interbase power, and map Strings to VARCHAR(8000)... How can I configure my primary-keys to use a max of varchar(30), or something like this? And, how I define the datasource that shold be used for deployment (not after deployment)? See, I need to configure inside ejb-jar.xml file the datatype of my cmp-field (not in orion-ejb-jar.xml, because when Orion create orion-ejb-jar.xml tables are created too - so my database will be incorrect - of course, I'll get app not deployed, because interbase will refuse the primary key with more than 254 bytes). Anyone know how to do this???
RE: Secured Page?
There are two ways to handle this login solution: programatic and declarative security. With programatic security you could have your welcome.jsp check to see if a user variable (such as a username) has been set on the session object for a client, if it hasn't (i.e is null) then forward them to the login page. (you could also stick the string welcome.jsp into the session as the referer so you can redirect the login page back it after a successful login). With declarative security you can specify which pages are secure in your deployment descriptor for the application, and access to the pages, in relation to security, will be handled at container rather than application (as above) level. check the orion reference docs for how to do this. Hope this moves you in the right direction :) Steve -Original Message- From: Roland Dong [mailto:[EMAIL PROTECTED]] Sent: 05 February 2001 10:36 To: Orion-Interest Subject: RE: Secured Page? I remember someone posted Login-related question recently. I have a newbie question on this. In my web application, I have login1.jsp which calls login2.jsp to handle the actual login process. I use JDBC-ODBC-Oracle to handle the database connection. If successfully logged in, the user will be "forwarded" to a welcome.jsp. I am wondering how could I secure welcome.jsp so that a user can ONLY access welcome.jsp by a successful login? I mean a user could just type in http://localhost:8080/examples/jsp/welcom.jsp, for example, to access it. Someone has metioned the secured page. Could someone explain? Where can I get the information or code example? Thanks a lot, Roland ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **
Getting Started.....Some Questions
I am coming to Orion from WebLogic, with its nonstandard deployment. I'm having a difficult time getting any sort of test app deployed and I would greatly appreciate any help. First, where do the orion-specific xml files go? Are they put inside the .ear file, and if so, how? Second, what archive assembler does everyone use? Sun's deploytool? Orion's earassembler? Command line? Any tips on assembling the archive would be appreciated, because I have not had much luck. Third, is it really necessary to specify all the ejb-ref's a particular bean will need? In WebLogic's convoluted setup, you could just get a reference to any deployed bean by its directory location (ex. "com.domain.package.beanHome"). Fourth, is there any way of specifying how many instances of a particular bean to have in a bean pool? _ Get your FREE download of MSN Explorer at http://explorer.msn.com
RE: Error messages from Orion have invalid XML format - bug?
That was exactly the hint I needed, JP! It had crossed my mind, but I had not yet realised that defining an error page would enable me to give the errors the XML layout I want. - I have done this now, and it works the way I hoped it would. You have been a great help, JP - many thanks for your time. Randahl -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Juan Lorandi (Chile) Sent: 5. februar 2001 14:21 To: Orion-Interest Subject: RE: Error messages from Orion have invalid XML format - bug? about the error codes... have you defined an error page? that is a page that is executed to show a bug, and the br StackTrace are generated by the default error page JP -Original Message- From: Randahl Fink Isaksen [mailto:[EMAIL PROTECTED]] Sent: Lunes, 05 de Febrero de 2001 4:40 To: Orion-Interest Subject: RE: Error messages from Orion have invalid XML format - bug? Thanks for your reply JP. I am aware of this possibility, and I am certain that using Orion this way speeds up development. I guess my focusing on finding out about the deployment features has gotten me to this point where I prefer to _deploy_ my application during my development. Is this not what the IDE's would do too? Maybe it is a matter of taste, but it seems a little less elegant to me to develop my JSPs directly in the middle of Orions file tree. Actually I thought most people had their files in a development file tree and then debugged by either moving the files to Orion through packaging and deployment or through simple file copying. Randahl -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Juan Lorandi (Chile) Sent: 4. februar 2001 20:02 To: Orion-Interest Subject: RE: Error messages from Orion have invalid XML format - bug? Randahl look in $orion\applications\YOUREAR\YOURWAR\yourpage.jsp if you edit a .jsp in that dir and browse it, orion will recon the change, recompile for you, voila! no need to rebuild anything JP -Original Message- From: Randahl Fink Isaksen [mailto:[EMAIL PROTECTED]] Sent: Sbado, 03 de Febrero de 2001 8:05 To: Orion-Interest Subject: Error messages from Orion have invalid XML format - bug? My JSPs return XML which is transformed using XSL. When Orion locates syntax errors or encounters Exceptions it produces som HTML which contains the error message AND some HTML markup which presents the error message. This Orion markup happens to contain standalone br tags. In case of an exception it looks like this: brat com.evermind.server.http.d3.sw(JAX) brat com.evermind.server.http.d3.su(JAX) brat com.evermind.server.http.ef.s1(JAX) brat com.evermind.server.http.ef.do(JAX) brat com.evermind.util.f.run(JAX) As everybody knows, using standalone br tags compromises XML syntax - XML would expect either br/ or br/br. Unfortunately this forces you to follow this debugging process: 1. Remove the lines in the JSP which links it to the stylesheet: ?xml version = "1.0"? ?xml-stylesheet href = "/tool.xsl"? 2. Rebuild the web application 3. Have Orion deploy the new build 4. Invoke the JSP and read the error 5. Correct the error in the JSP 6. Rebuild and redeploy 7. Check the error was corrected 8. Reinsert the line in the JSP which links it to the stylesheet. A rather long way to go, I think. This raises the question of whether this could be made easier. I have a feeling, I am not the only developer using XML, so maybe it would be a great idea if Orion Server presented Exceptions using tags which are valid in both HTML and XML. If the br tag was replaced with br/br, errors would be visible in both HTML and XML results. Moreover, if the whole error was enclosed in a valid XML tag you can have your XSL deliver the error as output. For instance p id = "OrionError" br/br at com.evermind.server.http.d3.sw(JAX) br/br at com.evermind.server.http.d3.su(JAX) br/br at com.evermind.server.http.ef.s1(JAX) br/br at com.evermind.server.http.ef.do(JAX) br/br at com.evermind.util.f.run(JAX) /p This is valid HTML and one can easily write XSL which checks for the occurance of this error and produces a result which can be seen in the output to the browser. This is just one quick idea of how to accomplish both valid HTML and valid XML - there are probably many other ways to accomplish this aswell. Of course, there might be a good reason why things are the way they are, but any comments to these thoughts would be welcomed. And should anyone at Ironflare have the time to comment on this too, I would be very grateful. Thanks Randahl -Original Message- From: Randahl Fink Isaksen [mailto:[EMAIL PROTECTED]] Sent: 2. februar 2001 11:32 To: Orion-Interest
RE: Re[2]: R: R: frustrated - jdbc: No suitable driver
Have anyone else seen the problem where the getConnection() returns a com.evermind.sql.ak type, but ANY operation on that connection such as getMetaData etc. raises a NullPointerException ? I am desperate to connect to a JDBC datasource _cleanly_ from the client side. Is it possible ? Thanks! Daniel -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Envoy : 5 fvrier, 2001 08:06 : Orion-Interest Objet : SV: Re[2]: R: R: frustrated - jdbc: No suitable driver You shouls check out the getConnection implementation on the datasource. It gets a reference it pass on to the client, so the client need to have the jdbc interfaces to do this, but it dont need the database drivers. It works much like the same way as an entitybean works (datasources)... Have fun. Klaus -Opprinnelig melding- Fra: Jeff Schnitzer [mailto:[EMAIL PROTECTED]] Sendt: 5. februar 2001 12:17 Til: Orion-Interest Emne: RE: Re[2]: R: R: frustrated - jdbc: No suitable driver I'm fully prepared to believe that my understanding of how this works is wrong, but if so it raises quite a few questions for me. Connection, Statement, ResultSet, etc are just interfaces; something must implement them. Normally they are implemented by the JDBC driver, thus allowing the client to communicate with the database using whatever the database uses asa native wire protocol. We have an application client which we want to communicate with the database using JDBC. If we want to use the database's native wire protocol to communicate from the client box to the database box, the JDBC drivers *must* be loaded into the client's VM and used. Alternatively, the app server could act as an intermediary, providing a proxy JDBC interface to the application client and making JDBC calls into the real JDBC driver within the application server. This would obviate the need for the database's JDBC driver on the client, but it would also require inventing a whole new wire protocol for this middle link... sending partial result sets in chunks, maybe caching query results in the client, etc. So now I'm thinking, that sounds painful, but it's possible. It's not like writing an app server is supposed to be *easy* or anything :-) No, Karl and Magnus are supposed to suffer so that it's easy for *us* to write applications :-) But a casual purusal of the decompiled Orion source code (that can be made out through the obfuscation, which is quite a bit) turns up no evidence of such a proxy. In fact, it looks very much like this is not the case. Getting more curious, I checked the JBoss source tree, and while I can't be sure in such a quick study, it doesn't look like there is any sort of intelligent JDBC proxy in that server either. Am I just missing it, and all app servers implement such a proxy? Or is it just WebLogic - allowing the behavior described in the original post? Or is WebLogic doing http-type classloading to get the JDBC driver into the client (a prospect I am considering less likely the more I think about it)? Ever curious, Jeff -Original Message- From: Allen Fogleson [mailto:[EMAIL PROTECTED]] Sent: Sunday, February 04, 2001 10:46 AM To: Orion-Interest Subject: RE: Re[2]: R: R: frustrated - jdbc: No suitable driver Uhmmm, I agree, I was confused because someone said they still needed the JDBC drivers on the client, and assuming you use the portable method of DataSources, there should be no reason that they would need to have the JDBC drivers, it is all handled container side with the datasource. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rafael Alvarez Sent: Sunday, February 04, 2001 10:24 AM To: Orion-Interest Subject: Re[2]: R: R: frustrated - jdbc: No suitable driver Hello Allen, DataSources gives you one advantage on the client side: Security. If you use a direct JDBC connection to a Database, your username, password and URL have to be placed in your class. A Datasource hides all those details, so if some one decompile your class (even JAXed classes are not totally safe) only the JNDI Datasource name will be found. It's up to you to set a security schema for the connection with the app server, but at least is one problem less to solve. -- Best regards, Rafaelmailto:[EMAIL PROTECTED]
Line feed in access log
Hi, I'm having problem with the web access logs. I'm not getting proper carriage return + line feed in default-web-access.log. Is there any way to specify how new-lines should be handled? My program for analysing log files can't handle the current new-line character. I think I need something that works in Notepad, not just Wordpad (Yes, I'm stuck in Windows). Regards, Mikael Eriksson
NamingException using custom UserManager with stand alone applications
We have successfully implemented a custom UserManager which acts as a wrapper around an entity bean that contains user information such as userid and password. The UserManager works great for authentication with our web application. However, when we try to authenticate a user via a stand alone application, a NamingException is thrown in the UserManager at the point we try to lookup the "wrapped" entity bean. The NamingException indicates "Not in an application scope - start Orion with the -userThreads switch if using user-created threads". I have tried the -userThreads flag without any success. The issue appears very similar to the post titled "Custom UserManager JNDI problem" by James Birchfield on 01/23/01, but I have not see any follow up. Has anyone had success in similar configurations? Any pointers would be greatly appreciated. Thanks for your time, Kent
RE: When using autonumber for the primarykey...
I've been using CMP. I don't use the counter.jar, instead, I've got a
stored procedure in SQL Server that I call in the ejbCreate method like this
(note that there is no code here that actually creates the record in the
database, I let the container do that):
public Long ejbCreate(String firstName, String lastName,
String loginName, String loginPassword)
throws CreateException, RemoteException,
DataIntegrityException {
// Assign values to the entity's fields.
// These setter methods will throw a DataIntegrityException if the
// values do not meet our data integrity constraints.
setFirstName(firstName);
setLastName(lastName);
setLoginName(loginName);
setLoginPassword(loginPassword);
setLoginBlocked("N");
// Now, get the StaffMemberID from the database stored procedure.
// Start by getting the DataSource object for the database connection.
Context initCtx = null;
try { // to get the initial context.
initCtx = new InitialContext();
} catch (Exception e) {
throw new RemoteException("Caught \"" + e.getClass().getName() +
"\" while attempting to create the initial JNDI context.",
e);
}
String dsName = "jdbc/MSSQLTimecardDS";
DataSource ds = null;
try { // to lookup the data source.
ds = (DataSource) initCtx.lookup(dsName);
} catch (Exception e) {
throw new RemoteException("Caught \"" + e.getClass().getName() +
"\" while attempting to lookup the DataSource \"" +
dsName + "\".", e);
}
// Call the sp_GetNextSequenceNumber stored procedure to get the
// StaffMemberID.
Connection conn = null;
CallableStatement cstmt = null;
String command = null;
try { // to make the connection and call the stored procedure.
conn = ds.getConnection();
command = "{call sp_GetNextSequenceNumber(?, ?)}";
cstmt = conn.prepareCall(command);
cstmt.setString(1, "Staff_Member");
cstmt.registerOutParameter(2, Types.NUMERIC);
cstmt.execute();
// !! Here is the primary key assignment !!
this.staffMemberID = new Long(cstmt.getLong(2));
} catch (Exception e) {
throw new RemoteException("Caught \"" + e.getClass().getName() +
"\" while attempting to get the new StaffMemberID with \"" +
command + "\".", e);
} finally {
try { // to close the callable statement.
if (cstmt != null) cstmt.close();
} catch (Exception e) {}
try { // to close the connection.
if (conn != null) conn.close();
} catch (Exception e) {}
}
// Return the primary key object.
return this.staffMemberID;
}
The stored procedure pulls the next sequence number from the Sequence_Number
table that looks like this:
TABLE_NAME SEQUENCE_NUMBER
---
Staff_Member456
Security_Role 178
.
.
.
Here's the stored procedure:
CREATE PROCEDURE [sp_GetNextSequenceNumber]
(@table varchar(50),
@seq_numberint OUTPUT)
AS
BEGIN
DECLARE @incr_number [int]
BEGIN TRANSACTION
SELECT @seq_number = [sequence_number], @incr_number = [increment]
FROM [Timecard].[dbo].[Sequence_Numbers] WITH (UPDLOCK)
WHERE [table_name] = @table
SET @seq_number = @seq_number + @incr_number
UPDATE [Timecard].[dbo].[Sequence_Numbers]
SET [sequence_number] = @seq_number
WHERE [table_name] = @table
COMMIT TRANSACTION
END
The key to this is to serialize access and update of the current sequence
number (which I'm guessing the counter.jar solution gets around by not
guaranteeing that the records will be numbered sequentially). In the stored
procedure this is accomplished with the "WITH (UPDLOCK)" clause in the first
select query. This locks the selected record until the transaction is
completed, that is, until the sequence_number field has been updated with
it's next value. The "WITH (UPDLOCK)" is a SQL "hint" that is specific to
SQL Server, but other databases have other ways to accomplish an update lock
on selected records. In Oracle you do a "SELECT FOR UPDATE" (of course, in
Oracle you would just use a sequence object to provide this functionality,
unless you wanted the records numbered sequentially).
This is an old, well established, database-centric solution that has worked
very nicely in my environment, however, it may be that the counter.jar
solution would give better performance because it doesn't require a database
round-trip. Of course, the significance of this improvement would be
dependent on the application's usage and architecture (are we talking about
clustered EJB containers? if so, does each container run its own counters?
how is uniqueness of numbers guaranteed?). We can conjecture about the
relative
Client site HttpSession simulating
I have a site which stores user profile in HttpSession after user gets in supplying user id and password. I need to provide some client site batch operation on the site using standalone java client. I remember old servlet spec which allowed you to embed session ID into URL if there is no way to use cookies to handle HttpSession. The scenario is: 1. My client java program creates HttpURLConnection for the site login response URL with valid user ID and password. 2. Then client gets HTML response proving successful login. According to the application logic a new session has been created and client receives "Set-Cookie" response header with some value like "JSESSIONID=BGDBPNFMPDGO; Path=/". 3. Assuming JSESSIONID is a name Orion wants to identify session id I include JSESSIONID=BGDBPNFMPDGO into query string for my next client request. 4. Client gets HTML response such as in case session was not established yet - new session has been created. So, Orion does not recognize "JSESSIONID=BGDBPNFMPDGO" in request pointing to existing HttpSession. Am I missing something obvious ? Or it might be some time/racing issues ? I need thins functionality very much. Any help would be greatly appreciated Thanks ~boris
RE: Any experiences with bytecode to native compilers and orion ?
For speed issues w/ regard (strictly) the compilers, check the volano report at http://www.volano.com TowerJ isn't THAT expensive if the make or break for your app is speed/scalability (i.e.. the app doesn't crash the inadequate hardware you're stuck with and TowerJ is available for the hardware/OS environment). Depending on platform, you might also check Jikes, we got about 60 - 120% speed-up after we found the bottlenecks in the code and eliminated them (of course, depends on platform/OS, as you can see in Volano). My experience with EJB and scale/speed is that the following is true, as to what is _REALLY_ the problem, more often than not: 1. Bad design and failure to correctly spec and use _all_ of the tools J2EE gives you. 2. Bad infrastructure (inadequate Db connection pools available, inadequately planned bandwidth needs, insufficient attention to the realities of the entire universe the app is running in). 3. Bad Java code (inconsistent use of threading, bad choices of data acquisition model, insufficient attention to the run-time load of the code you're writing). 4. EJB model itself. Just my $0.02, FWIW. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jens Stutte Sent: Monday, February 05, 2001 3:02 AM To: Orion-Interest Subject: Any experiences with bytecode to native compilers and orion ? Hi all, i'd like to ask, if anybody has some experience with bytecode to native compilers in conjunction with orion. Unfortunately, the vendors of this products do not offer evaluation downloads (comprehensable, since often one compiler run would make it to speed up an existing product ;). I'd like to hear if someone has any experiences with TowerJ (though i'm quite sure that my company cannot afford it...), Jove (http://www.instantiations.com, they advertise with "IBM Netfinity proven", so probably it works with orion, too?) or BulletTrain (http://www.naturalbridge.com) and orion. First of all: Does it work at all with any of these products? And then: does it help? Our application in development is using EJBs very heavily, so any improvement either in the jdbc driver or within orion itself would help very much (our own code does not matter much). Regards and thank you, Jens Stutte [EMAIL PROTECTED], http://www.netmedia.de netmedia GmbH Neugrabenweg 5-7 66123 Saarbruecken Germany fon: +49 (0) 681 - 3 79 88 - 0 fax: +49 (0) 681 -3 79 88 - 99
RE: Benchmarks should be better
Re: Security (run as root). In Unix/Linux, you don't have to. A guide to how to change this is posted at: http://www.orionsupport.com/articles/unixprocess.html -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michael Quinn Sent: Sunday, February 04, 2001 2:52 AM To: Orion-Interest Subject: RE: Benchmarks should be better Just a little update.. I have completed benchmarks for the initial apache default index.html.en with 4 different http servers on Redhat 6.2 with AMD Thunderbird 650 and 128MB Ram. Apache 1.3.14 Tomcat 3.2 Weblogic 5.1 Orion 1.4.5 I couldn't believe my eyes when Orion served the static html faster than all of them (Beating apache by about a 30% margin using 20 threads with 5 sockets per thread. Another amazing thing was resource usage.. The highest CPU Usage I saw from Orion during the test was a mere 30 percent. If that is not a convincing factor, then I don't know what is. I still have some concerns about the security of orion (running on port 80 as root), and Apache is by nature a more memory intensive application. It uses a multi-process -vs- orion's multithreaded technique. Each process uses a few megs of memory, so for a large request base, apache will need more memory so it isn't getting page faults all over the place. ( I am also running oracle on this box which uses tonnes of memory as many know ) I'll slap in another 128M and see what happens. Any comments would be appreciated. Michael Quinn Software Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michael Quinn Sent: Friday, February 02, 2001 11:19 AM To: Orion-Interest Subject: Benchmarks should be better Hey all, I was checking out the benchmarks on www.orionserver.com and they are quite interesting. There are a couple of things I am wondering, however. How does Orion serving dynamic content pit itself -vs- apache serving static content or mod_perl stuff. It would be nice to take the other "sucky" java servers out of the picture and see a baseline comparison of Orion -vs- Apache on a lot of different scenarios. On a side note, can somebody forward me some performance comparisons from weblogic? I know they can't be posted on the website, but I would like to see them. The reason I ask is of the following importance: I see a lot of job postings for knowledge of Weblogic. And about 50% of telephone interviews ask about it, or bring it up. I want to know how it performs. I'm thinking about setting up Weblogic with Apache and Orion, and doing some performance comparisons which I will be glad to share with everyone. Thanks for your interest, Michael _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
RE: Getting Started.....Some Questions
Some of the getting started information can be found in the Orion documentation and FAQ, the user supported site at www.orionsupport.com, and the examples at www.jollem.com. -Original Message- From: James Halloran [mailto:[EMAIL PROTECTED]] Sent: Monday, February 05, 2001 11:34 AM To: Orion-Interest Subject: Getting Started.Some Questions I am coming to Orion from WebLogic, with its nonstandard deployment. I'm having a difficult time getting any sort of test app deployed and I would greatly appreciate any help. First, where do the orion-specific xml files go? Are they put inside the .ear file, and if so, how? Second, what archive assembler does everyone use? Sun's deploytool? Orion's earassembler? Command line? Any tips on assembling the archive would be appreciated, because I have not had much luck. Third, is it really necessary to specify all the ejb-ref's a particular bean will need? In WebLogic's convoluted setup, you could just get a reference to any deployed bean by its directory location (ex. "com.domain.package.beanHome"). Fourth, is there any way of specifying how many instances of a particular bean to have in a bean pool? _ Get your FREE download of MSN Explorer at http://explorer.msn.com
Re: NamingException using custom UserManager with stand alone applications
The problem lies in getting a connection to the database. You can only get a connection to the database using JNDI in the constructor of the UserManager. Nowhere else. This is supposed to be fixed in 1.4.6, but I haven't had a chance to test it. The limitation to this is that the connection will eventually expire with no way to reclaim it. But it will at least let you test applications til the fix is in. James Birchfield Ironmax a better way to buy, sell and rent construction equipment 5 Corporate Center 9960 Corporate Campus Drive, Suite 2000 Louisville, KY 40223 [EMAIL PROTECTED] Sent by: To: Orion-Interest [EMAIL PROTECTED] owner-orion-interest@orioncc: server.comSubject: NamingException using custom UserManager with stand alone applications 02/05/01 01:08 PM Please respond to Orion-Interest We have successfully implemented a custom UserManager which acts as a wrapper around an entity bean that contains user information such as userid and password. The UserManager works great for authentication with our web application. However, when we try to authenticate a user via a stand alone application, a NamingException is thrown in the UserManager at the point we try to lookup the "wrapped" entity bean. The NamingException indicates "Not in an application scope - start Orion with the -userThreads switch if using user-created threads". I have tried the -userThreads flag without any success. The issue appears very similar to the post titled "Custom UserManager JNDI problem" by James Birchfield on 01/23/01, but I have not see any follow up. Has anyone had success in similar configurations? Any pointers would be greatly appreciated. Thanks for your time, Kent
Download Orion version 1.4.7
Where download Orion 1.4.7? Thanks
RE: Secured Page?
which one would be a viable option for a client base of 3000-4000 users? can declaritive security be used in this fashion? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Steve Loftis Sent: Monday, February 05, 2001 12:07 PM To: Orion-Interest Subject: RE: Secured Page? There are two ways to handle this login solution: programatic and declarative security. With programatic security you could have your welcome.jsp check to see if a user variable (such as a username) has been set on the session object for a client, if it hasn't (i.e is null) then forward them to the login page. (you could also stick the string welcome.jsp into the session as the referer so you can redirect the login page back it after a successful login). With declarative security you can specify which pages are secure in your deployment descriptor for the application, and access to the pages, in relation to security, will be handled at container rather than application (as above) level. check the orion reference docs for how to do this. Hope this moves you in the right direction :) Steve -Original Message- From: Roland Dong [mailto:[EMAIL PROTECTED]] Sent: 05 February 2001 10:36 To: Orion-Interest Subject: RE: Secured Page? I remember someone posted Login-related question recently. I have a newbie question on this. In my web application, I have login1.jsp which calls login2.jsp to handle the actual login process. I use JDBC-ODBC-Oracle to handle the database connection. If successfully logged in, the user will be "forwarded" to a welcome.jsp. I am wondering how could I secure welcome.jsp so that a user can ONLY access welcome.jsp by a successful login? I mean a user could just type in http://localhost:8080/examples/jsp/welcom.jsp, for example, to access it. Someone has metioned the secured page. Could someone explain? Where can I get the information or code example? Thanks a lot, Roland ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **
orion/jetspeed
Hi i am trying to get jetspeed to work with orion on win2000 prof. using sun jdk 1.2.2, orion version 1.3.8 i am getting the following exception when going to localhost:8080/jetspeed/ for the first time: anyone else get this/know how to fix? java.lang.IllegalStateException: OutputStream already retrieved at com.evermind.server.http.EvermindHttpServletResponse.getWriter(JAX) at org.apache.turbine.util.RunData.getOut(RunData.java:280) at org.apache.jetspeed.services.jsp.tags.JetspeedNavigationTag.doStartTag(Jetsp eedNavigationTag.java:142) at /WEB-INF/templates/jsp/layouts/html/default.jsp._jspService(/WEB-INF/templat es/jsp/layouts/html/default.jsp.java:54) (JSP page line 19) at com.orionserver.http.OrionHttpJspPage.service(JAX) at com.evermind.server.http.HttpApplication.w5(JAX) at com.evermind.server.http.JSPServlet.service(JAX) at com.evermind.server.http.d1.si(JAX, Compiled Code) at com.evermind.server.http.d1.forward(JAX) at org.apache.jetspeed.services.jsp.JetspeedJspService.handleRequest(JetspeedJs pService.java:163) at org.apache.jetspeed.modules.layouts.JetspeedJspLayout.doBuild(JetspeedJspLay out.java:117) at org.apache.turbine.modules.Layout.build(Layout.java:93) at org.apache.turbine.modules.LayoutLoader.exec(LayoutLoader.java:122) at org.apache.turbine.modules.pages.DefaultPage.doBuild(DefaultPage.java:170) at org.apache.turbine.modules.Page.build(Page.java:92) at org.apache.turbine.modules.PageLoader.exec(PageLoader.java:122) at org.apache.turbine.Turbine.doGet(Turbine.java, Compiled Code) at javax.servlet.http.HttpServlet.service(HttpServlet.java) at javax.servlet.http.HttpServlet.service(HttpServlet.java) at javax.servlet.http.HttpServlet.service(HttpServlet.java) at com.evermind.server.http.d1.si(JAX, Compiled Code) at com.evermind.server.http.d1.forward(JAX) at com.evermind.server.http.ed.sp(JAX, Compiled Code) at com.evermind.server.http.ed.so(JAX, Compiled Code) at com.evermind.util.f.run(JAX, Compiled Code) any help much appreciated rob
Too much caching? - the database has changed
I am having a problem. I am creating some records using some BMP and CMP EJBs. While Orion is still running I am deleting the records using a simple JDBC client. When I try to ccreate the same records again I get an exception that says javax.ejb.DuplicateKeyException: Entity already exists at com.evermind.server.rmi.ba.invokeMethod(JAX) at com.evermind.server.rmi.a1.invoke(JAX) at com.evermind.server.rmi.a2.invoke(JAX) at __Proxy1.create(Unknown Source) at SelectTestClient.CreateRecords(SelectTestClient.java:102) at SelectTestClient.TestOrion(SelectTestClient.java:264) at SelectTestClient.main(SelectTestClient.java:319) How can I make Orion aware that the database has changed? Thank you, Danut _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
Re: Anyone know how to def Data-type in cmp-field???
Hu... Is not the java.lang.String a final class???
Edson Richter
- Original Message -
From: Juan Lorandi (Chile) [EMAIL PROTECTED]
To: Orion-Interest [EMAIL PROTECTED]
Sent: Monday, February 05, 2001 2:06 PM
Subject: RE: Anyone know how to def Data-type in cmp-field???
Quick and dirty...
create your own class String (say ar.com.rifleman.String)
package ar.com.rifleman
public class String extends java.lang.String {}
then map it to a varchar(30)...
type-mapping type="ar.com.rifleman.String" name="varchar(30)" /
that should do it (but again, it's quick and dirty)
JP
PS: Saludos de Claudio Paul Cannigia ;)
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Lunes, 05 de Febrero de 2001 9:58
To: Orion-Interest
Subject: Anyone know how to def Data-type in cmp-field???
Hi!
Hi people aroud the world!!!
I've found info about what I need to run Orion EJB 2.0 sample
with Interbase inside our Orion-list.
But for now, I'm having following trouble: primary keys, in
Interbase, allow only 254 bytes in length. If I configure my
datasource to use Interbase, and set schema="interbase.xml",
and then mapping Strings to VARCHAR(255), I get errors in
deployment time (primary key too long, or something like
this). To turn things bad, I want to use all Interbase power,
and map Strings to VARCHAR(8000)... How can I configure my
primary-keys to use a max of varchar(30), or something like
this? And, how I define the datasource that shold be used for
deployment (not after deployment)?
See, I need to configure inside ejb-jar.xml file the datatype
of my cmp-field (not in orion-ejb-jar.xml, because when Orion
create orion-ejb-jar.xml tables are created too - so my
database will be incorrect - of course, I'll get app not
deployed, because interbase will refuse the primary key with
more than 254 bytes).
Anyone know how to do this???
Thanks
HTTPS from Orion Java Bean
Hello all! I've written a bean that calls a credit card processing gateway from a Java bean. It is very simple and executes an https://... request. Then it reads the entire contents of the web page. And it works if I run my AuthBean class from the command line. But when I attempt to use AuthBean, calling it from an Orion JSP, I get a runtime error: SSL not implemented. So I looked at all I did to enable the j2sdkee1.2.1 to work with SSL and tried to somehow apply that to Orion, but I came up blank. I read through the SSL help page and it doesn't seem to address the problem I'm having. Any help would be appreciated! -- -Geoff Marshall, Director of Development ... t e r r a s c o p e (415) 951-4944 54 Mint Street, Suite 110 direct (415) 625-0349 San Francisco, CA 94103 fax (415) 625-0306 ...
Form-based authentication not working right
Recently I asked about form-based authentication. I appreciate the help several people gave, but from the responses I got it seems that I might have miscommunicated somehow. I'm going to try again, this time explaining myself better. I'm using Orion 1.4.5 on Windows 2000. The same thing happens on Orion 1.3.8. I have a number of JSP pages in the directory /app: MainMenu.jsp-- the main menu SecuredPage.jsp -- a secured page, see only when authenticated LoginForm.jsp -- form for logging in LoginError.jsp -- form displayed when there's an error The user goes to MainMenu.jsp, where there is a link to SecuredPage.jsp. To view this page, the user must be authenticated. The authenticated is form-based. This is what should (CORRECTLY) happen: 1) User goes to MainMenu.jsp. 2) User clicks on link to SecuredPage.jsp. 3) User is presented with LoginForm.jsp. 4) User types in username and password. 5a) Login succeeds and SecuredPage.jsp is shown to user. 5b) Login fails and LoginError.jsp is shown to user. HOWEVER, this is the (INCORRECT) sequence of events that I actually get: 1) -- as before -- 2) -- as before -- 3) -- as before -- 4) -- as before -- 5a) Login succeeds and directory contents is shown to user. 5b) Login fails and directory contents is shown to user. Note the same (WRONG) thing happens whether or not the user authenticates properly. The directory contents is the list of JSP files that I have in /app. So ... what's wrong here? It redirects to my login form correctly. It just doesn't behave properly when I actually do the login (hit "j_security_check" with "j_username" and "j_password"). This is the relevant section of my web.xml file: security-constraint web-resource-collection web-resource-nameLoginTrigger/web-resource-name descriptionLoginTrigger/description url-pattern/SecuredPage.jsp/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource-collection auth-constraint role-namemyuser/role-name /auth-constraint /security-constraint login-config auth-methodFORM/auth-method form-login-config form-login-pageLoginForm.jsp/form-login-page form-error-pageLoginError.jsp/form-error-page /form-login-config /login-config security-role role-namemyuser/role-name /security-role
RE: Download Orion version 1.4.7
run command: "java -jar autoupdate.jar" from your Orion folder. -Original Message- From: Alberto Yano [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 06, 2001 4:35 AM To: Orion-Interest Subject: Download Orion version 1.4.7 Where download Orion 1.4.7? Thanks
Re: HTTPS from Orion Java Bean
Since I have no code, I can only guess... Sounds to me like you are getting a different URLConnection subclass in the two cases. I would try to print out the connection that you are getting to see what it is. Then you will need to see if you can correct the problem from there. tim. Hello all! I've written a bean that calls a credit card processing gateway from a Java bean. It is very simple and executes an https://... request. Then it reads the entire contents of the web page. And it works if I run my AuthBean class from the command line. But when I attempt to use AuthBean, calling it from an Orion JSP, I get a runtime error: SSL not implemented. So I looked at all I did to enable the j2sdkee1.2.1 to work with SSL and tried to somehow apply that to Orion, but I came up blank. I read through the SSL help page and it doesn't seem to address the problem I'm having. Any help would be appreciated! -- -Geoff Marshall, Director of Development ... t e r r a s c o p e (415) 951-4944 54 Mint Street, Suite 110 direct (415) 625-0349 San Francisco, CA 94103 fax (415) 625-0306 ...
Re: Too much caching? - the database has changed
Check the docs. There is a flag that you need to set to tell Orion that is does not have "exclusive" access to the database, and that it needs to recognize when a record is updated by a program other than Orion. I believe you need to look at the "exclusive-write-access" attribute of the entity-deployment element in orion-ejb-jar.xml. tim. Two more things. 1. On the server side I get the following CMPSelectTestEJB() setEntityContext ejbCreate( 10, Name 10, Address 10 ) Entity 10 passivated java.lang.Throwable at com.evermind.server.ejb.EntityEJBHome.ail(JAX) at com.evermind.server.ejb.EntityEJBObject.releaseContext(JAX) at CMPSelectTestHome_EntityHomeWrapper19.create(CMPSelectTestHome_Entity HomeWrapper19.java:377) at java.lang.reflect.Method.invoke(Native Method) at com.evermind.server.rmi.bc.do(JAX) at com.evermind.util.f.run(JAX) ejbPassivate( 10, Name 10, Address 10 ) There is no record with ID = 10, name = "Name 10" and address = "Address 10". 2. The exactly same code for EJB, client and the same database work fine on WebLogic. I am using Orion 1.4.5. Danut I am having a problem. I am creating some records using some BMP and CMP EJBs. While Orion is still running I am deleting the records using a simple JDBC client. When I try to ccreate the same records again I get an exception that says javax.ejb.DuplicateKeyException: Entity already exists at com.evermind.server.rmi.ba.invokeMethod(JAX) at com.evermind.server.rmi.a1.invoke(JAX) at com.evermind.server.rmi.a2.invoke(JAX) at __Proxy1.create(Unknown Source) at SelectTestClient.CreateRecords(SelectTestClient.java:102) at SelectTestClient.TestOrion(SelectTestClient.java:264) at SelectTestClient.main(SelectTestClient.java:319) How can I make Orion aware that the database has changed? Thank you, Danut _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
Orion 1.4.7 and the EJB 2.0 examples - They all work!
FYI, all three of the EJB 2.0 CMP examples work with Orion 1.4.7. Thanks guys for fixing that so quickly! Jim I shall be telling this with a sigh Somewhere ages and ages hence: Two roads diverged in a wood, and I - I took the one less traveled by, And that has made all the difference. - Robert Frost, 1916
Re: Clusters!!!!/load balancer
Hi! there, I can't find load-balancer.xml file as described in the Orion documentation.!! Please help mohit * The information contained in this message (including any attachments) is confidential and may be legally privileged. If you are not the intended recipient, please delete it from your system immediately - any disclosure, copying or distribution thereof or any action taken or omitted to be taken in reliance thereon is prohibited and may be unlawful.AITPL makes no warranty as to the accuracy or completeness of any information contained in this message and hereby excludes any liability of any kind for the information contained herein or for the transmission, reception, storage or use of such information in any way whatsoever. Any opinions expressed in this message are those of the author and do not necessarily reflect the opinions of AITPL. * -- * The information contained in this message (including any attachments) is confidential and may be legally privileged. If you are not the intended recipient, please delete it from your system immediately - any disclosure, copying or distribution thereof or any action taken or omitted to be taken in reliance thereon is prohibited and may be unlawful.AITPL makes no warranty as to the accuracy or completeness of any information contained in this message and hereby excludes any liability of any kind for the information contained herein or for the transmission, reception, storage or use of such information in any way whatsoever. Any opinions expressed in this message are those of the author and do not necessarily reflect the opinions of AITPL. *
