db2 : database agent could not be started to service a request

2001-03-26 Thread Elhadi barkat

I'm running Orion with a db2 v7.1 database that only allows 5 simultaneous
connections
Sometimes, I get the an error that says: database agent could not be started
to service the request
When I look at my code, I can see that the exception is generated by a
finder method on an entity bean
(custom finder not a Primary Key finder)
is it because there are no available connections?
Why does the error happen since I'm using conncetion pooling?
is it related to bug #368 () ?
Is it related to data-sources.xml and connection pool configuration?

thanks,
Hadi


Below is my exception's stack trace

45605898 ERROR [ApplicationServerThread] (CoverageAgentBean.java:67) -
Remote Exception
com.evermind.server.rmi.OrionRemoteException: Database error: [IBM][CLI
Driver][DB2/LINUX] SQL1224N  A database agent could not be started to
service a request, or was terminated as a result of a database system
shutdown or a force command.  SQLSTATE=55032

at
BaseStationHome_EntityHomeWrapper107.findByStatus(BaseStationHome_EntityHome
Wrapper107.java:651)
at
com.shockfish.spotme.system.ejbmanager.CoverageAgentBean.getActiveBaseStatio
ns(CoverageAgentBean.java:63)
at
CoverageAgent_StatelessSessionBeanWrapper20.getActiveBaseStations(CoverageAg
ent_StatelessSessionBeanWrapper20.java:133)
at
com.shockfish.spotme.utils.net.NetTools.sendToAllBaseStations(NetTools.java:
38)
at
com.shockfish.spotme.system.ejbmanager.CoverageAgentBean.requestCoverageFrom
BaseStation(CoverageAgentBean.java:102)
at
CoverageAgent_StatelessSessionBeanWrapper20.requestCoverageFromBaseStation(C
overageAgent_StatelessSessionBeanWrapper20.java:211)
at java.lang.reflect.Method.invoke(Native Method)
at com.evermind.server.rmi.bd.dr(JAX)
at com.evermind.util.f.run(JAX)

Nested exception is:
COM.ibm.db2.jdbc.DB2Exception: [IBM][CLI Driver][DB2/LINUX] SQL1224N  A
database agent could not be started to service a request, or was terminated
as a result of a database system shutdown or a force command.
SQLSTATE=55032

at
COM.ibm.db2.jdbc.app.SQLExceptionGenerator.throw_SQLException(SQLExceptionGe
nerator.java:241)
at
COM.ibm.db2.jdbc.app.SQLExceptionGenerator.throw_SQLException(SQLExceptionGe
nerator.java:186)
at
COM.ibm.db2.jdbc.app.SQLExceptionGenerator.check_return_code(SQLExceptionGen
erator.java:419)
at
COM.ibm.db2.jdbc.app.DB2PreparedStatement.execute2(DB2PreparedStatement.java
:1029)
at
COM.ibm.db2.jdbc.app.DB2PreparedStatement.executeQuery(DB2PreparedStatement.
java:655)
at com.evermind.sql.ap.executeQuery(JAX)
at com.evermind.sql.ap.executeQuery(JAX)
at
BaseStationHome_EntityHomeWrapper107.findByStatus(BaseStationHome_EntityHome
Wrapper107.java:535)
at
com.shockfish.spotme.system.ejbmanager.CoverageAgentBean.getActiveBaseStatio
ns(CoverageAgentBean.java:63)
at
CoverageAgent_StatelessSessionBeanWrapper20.getActiveBaseStations(CoverageAg
ent_StatelessSessionBeanWrapper20.java:133)
at
com.shockfish.spotme.utils.net.NetTools.sendToAllBaseStations(NetTools.java:
38)
at
com.shockfish.spotme.system.ejbmanager.CoverageAgentBean.requestCoverageFrom
BaseStation(CoverageAgentBean.java:102)
at
CoverageAgent_StatelessSessionBeanWrapper20.requestCoverageFromBaseStation(C
overageAgent_StatelessSessionBeanWrapper20.java:211)
at java.lang.reflect.Method.invoke(Native Method)
at com.evermind.server.rmi.bd.dr(JAX)
at com.evermind.util.f.run(JAX)





RE: Trouble with the mailing list since Monday

2001-03-26 Thread Elhadi barkat

I didn't notice any problem with the mailing list yesterday
H.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Randahl Fink
Isaksen
Sent: mardi, 27. mars 2001 08:43
To: Orion-Interest
Subject: Trouble with the mailing list since Monday


I just wanted to check if anyone else on the list have had trouble getting
the e-mails from the list. As of monday our mail server has started to can
all e-mails from the list, saying they contain errors. All our other e-mails
are delivered, so it seems our mail server works fine. Up until monday we
have been receiving each and every mail from the list, but then all of a
sudden this happens - has the list servers configuration been changed
recently, maybe?

Anyone?

R.







RE: Trouble with the mailing list since Monday

2001-03-26 Thread Marcel Schutte

No, I'm receiving the postings just fine

Marcel





Re: Orion + IE + HTTPS = Trouble

2001-03-26 Thread Klaus Thiele

Hi,

do you have set the parameter "shared="true" in your "secure-web-site.xml"?
i think that solves the problem (reported many times on this list some time ago).

  
>---^^

hope that helps
  klaus

Am Montag, 26. März 2001 17:44 schrieben Sie:
> IE 5.0/5.5 running on 95/98/NT keeps losing it's HTTPS session with
> Orion, which is big trouble if you store logon info there.  By
> default these versions of IE renegotiate their SSL connections every
> two minutes, but this can be changed by adding a DWORD registry
> entry.
>
> HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Clie
>ntCache Time
>
> Adding this entry, and setting it to 0x7FFF has solved all our
> issues with forcing constant logons when running in secure mode, but
> is a major pain because it has to be done for all clients (except
> Win2K and WinME clients)
>
> Since I have never come across this problem when logging on to other
> HTTPS sites on the web, I can't help but wonder if Orion is not
> handling the situation properly (I've tried it on both 1.38 and
> 1.45).  Does anyone else have any experience with this problem, or
> can comment on whether Orion should be handling this without
> modifying every client machine?
>
> Thanks,
>   Bruce
>
> Microsoft reference:
> http://support.microsoft.com/support/kb/articles/Q265/3/69.ASP

--
Klaus Thiele - Personal & Informatik AG
mailto:[EMAIL PROTECTED]

 "Your mouse has moved.
  Windows must be restarted for the change to take effect."




Trouble with the mailing list since Monday

2001-03-26 Thread Randahl Fink Isaksen

I just wanted to check if anyone else on the list have had trouble getting
the e-mails from the list. As of monday our mail server has started to can
all e-mails from the list, saying they contain errors. All our other e-mails
are delivered, so it seems our mail server works fine. Up until monday we
have been receiving each and every mail from the list, but then all of a
sudden this happens - has the list servers configuration been changed
recently, maybe?

Anyone?

R.





Re: JNDI SecurityException

2001-03-26 Thread Tim Endres

> I tried the ApplicationClientInitialContextFactory (by mistake) when I first set 
>this up. 
> I just gave me other problems (I think there was some sort of complaint about a 
>missing
> application.xml file).  As far as I know, there should be no reason that I cannot 
>use the
> RMIInitialContextFactory for this.  I don't *have* an application on Orion, all I 
>have
> is a single bean.

I believe this complaint is because it is looking for META-INF/application-client.xml
and is not finding it.

> Interesting what you point out about a possible bug.  Why would this affect only 
>servlets
> though?  Wouldn't this affect *any* remote client?  Or is this a bug that affects 
>servlets
> running in the Orion servlet container?  I'm running mine under Tomcat.

I have no idea. I simply know that someone on the list claimed to have reported this
bug, and to this day my servlets simply will not properly authenticate. I do not know
if this is a problem with just servlets, or anything using ApplicationClient{ICF}. Our
servlets are running in Orion. I consider this a very serious bug that has servived
several releases.

tim.





Global transactions support within Orion

2001-03-26 Thread Chris Bartling

I've been working with iPlanet App Server 6.0 at a client site for about 3
months now and we're been trying to get their global transaction support to
work lately, alas to no avail.  I was wondering if Orion has a Transaction
Manager that will handle global transactions?  I've looked at the JTA spec a
bit and it seems that the implementation of the transaction service is a bit
foggy.  They talk about global transactions in quite a bit of detail in the
JTA spec.  I'd like to try to use Orion to solve some of our XA
protocol/resource manager problems with Oracle 8i.  Any thoughts and/or
comments would be greatly welcomed.

-- chris bartling --

BTW, the decision to use iPlanet was my client's, not mine.  Oh how I wish
we could move to some like Orion or jBoss.





RE: JNDI SecurityException

2001-03-26 Thread Eric Anderson

Hi Nimret,

>this is funny - it took me a whole week to get this right +)

That's not funny!  That means that the documentation is seriously inadequate!

>> System.setProperty("java.naming.factory.initial","com.evermind
>.server.rmi.RMIInitialContextFactory");
>
>this should be different .. check the jndi.properties file i am sending
>along with this msg.

You're using the ApplicationClientInitialContextFactory.  I tried that in error when I 
first started porting this code to Orion, and that didn't work either.  I got the 
impression from reading these archives that this factory was used for doing lookups on 
"J2EE applications", which is not really what I have.  I just have a bean, and that 
bean's home interface ought to be locatable using the most primitive RMI approach 
there is.  It works with JBoss.

>try java.naming.provider.url=ormi://10.16.16.104/attribute for the application tag from server.xml here>

Tried it, no luck, just the same SecurityException.

>
>these should be added to config/principals.xml ( if not already there):

I'm using the admin user/password, so these are already configured in 
./config/principals.xml.

>i think u might be able to get by creating a jndi.properties file with these
>values ( it works for client side apps for me).

I shouldn't need an external properties file should I?  Adding these properties to 
System.Properties from within the program ought to work I think.

> lemme know if u make any
>progress with this .. if not, i can send u an example client with all the
>config settings, etc.

You're deploying whole J2EE apps - .ear files, right?  Do you have a working example 
that's *just* a bean and *just* a servlet/JSP client?  I really want to do as little 
deployment configuration as possible with the bean.  
Thanks,
Eric


Get 250 color business cards for FREE! at Lycos Mail
http://mail.lycos.com/freemail/vistaprint_index.html




Re: JNDI SecurityException

2001-03-26 Thread Eric Anderson

I tried the ApplicationClientInitialContextFactory (by mistake) when I first set this 
up.  I just gave me other problems (I think there was some sort of complaint about a 
missing application.xml file).  As far as I know, there should be no reason that I 
cannot use the RMIInitialContextFactory for this.  I don't *have* an application on 
Orion, all I have is a single bean.

Interesting what you point out about a possible bug.  Why would this affect only 
servlets though?  Wouldn't this affect *any* remote client?  Or is this a bug that 
affects servlets running in the Orion servlet container?  I'm running mine under 
Tomcat.

Thanks,
Eric 
--

On Mon, 26 Mar 2001 14:25:36  
 Tim Endres wrote:
>First, have you tried using ApplicationClientInitialContextFactory as opposed
>to RMIInitialContextFactory? Second, I believe it is a known bug in Orion that
>servlet's do not properly send their user/password information to the app server.
>In other words, Servlet InitialContext authentication is broken.
>
>tim.
>


Get 250 color business cards for FREE! at Lycos Mail
http://mail.lycos.com/freemail/vistaprint_index.html




Re: JNDI SecurityException

2001-03-26 Thread Eric Anderson

Hi,

I just tried this.  No change: SecurityException - invalid username/password for 
PersonBean.

Tnx,
Eric 
--

On Mon, 26 Mar 2001 13:22:56  
 KirkYarina wrote:
>System.setProperty("java.naming.provider.url","ormi://192.168.100.3/appname");
>  
>   ^^
>
>Try this; it was just discussed ( 
>http://www.mail-archive.com/orion-interest%40orionserver.com/msg11568.html )
>


Get 250 color business cards for FREE! at Lycos Mail
http://mail.lycos.com/freemail/vistaprint_index.html




Re: JNDI SecurityException

2001-03-26 Thread Eric Anderson

No, the admin user in this case is not deactivated.  There's no deactivated attribute 
on that element anyway, so I'm assuming that the default is 'activated' as you say.

Thanks,
Eric
--

On Mon, 26 Mar 2001 13:29:38  
 Ray Harrison wrote:
>Don't know if this is the case, but look in your %ORION_DIR/config/principals.xml
>and look at the user entry for admin. Check to make sure that deactivated="false" in 
>the admin
>description section as below:
>
>
>   
>   The default administrator
>   
>   
>   
>   
>
>
>If there is no reference to the 'deactivated' keyword, I believe that the default is 
>'false'
>and this isn't your problem...
>
>Good luck!
>Ray
>--- Eric Anderson <[EMAIL PROTECTED]> wrote:
>> I'm trying to re-deploy an existing CMP bean on Orion and am having no 
>> luck at all with the JNDI lookup of the bean's home interface.  No 
>> matter what I change or what I try, I *always* get a SecurityException 
>> saying that the userid/password is invalid.  The principal and 
>> credentials that I am using are that of the admin user. 
>> 
>> This application used to work on JBoss.  It consists of the one bean 
>> ("PersonBean") and a servlet, run separately in Tomcat (this cannot be 
>> changed for now) that uses the bean.  On the servlet client side, I've 
>> tried many different versions of the bean name ("ejb/Personbean", 
>> "java:comp/env/ejb/PersonBean", "PersonBean" ... ) but that makes no 
>> difference - SecurityException, bad userid/password, every single time.
>> I'm setting the following properties explicity from the servlet, prior 
>> to doing any JNDI operations:
>> 
>>
>>
>System.setProperty("java.naming.factory.initial","com.evermind.server.rmi.RMIInitialContextFactory");
>>
>> System.setProperty("java.naming.provider.url","ormi://192.168.100.3");
>>System.setProperty("java.naming.security.principle","admin");
>>System.setProperty("java.naming.security.credentials","foobar");
>> 
>> I've tried specifying an "application" (PersonBean) in the URL, but all 
>> I get is the same old SecurityException again.
>> 
>> On the server side, I've tried copying some of the config data from the 
>> server's principals.xml file into the principals.xml file in the bean 
>> deployment directory.  This also had no effect on the SecurityException.
>> 
>> So what am I missing?
>> 
>> Thanks,
>> Eric
>> 
>> 
>
>
>__
>Do You Yahoo!?
>Get email at your own domain with Yahoo! Mail. 
>http://personal.mail.yahoo.com/
>
>


Get 250 color business cards for FREE! at Lycos Mail
http://mail.lycos.com/freemail/vistaprint_index.html




RE: Deployment xml files in ear file? If so, where?

2001-03-26 Thread Mike Cannon-Brookes

This is true EXCEPT for orion-ejb-jar.xml which goes in /orion not /META-INF
in your EJB.jar (no idea why this one is different ;))

-mike

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Hani Suleiman
> Sent: Tuesday, March 27, 2001 9:36 AM
> To: Orion-Interest
> Subject: Re: Deployment xml files in ear file? If so, where?
>
>
> You can place your orion-*.xml files alongside their *.xml counterparts.
> (eg, principals.xml and orion-application.xml alongside application.xml).
> Note though that if the application has already been deployed, then these
> files won't be copied over the existing ones. They're only used
> in the case
> of a 'fresh install'.
>
>
> >From: "Rian Schmidt" <[EMAIL PROTECTED]>
> >Reply-To: Orion-Interest <[EMAIL PROTECTED]>
> >To: Orion-Interest <[EMAIL PROTECTED]>
> >Subject: Deployment xml files in ear file?  If so, where?
> >Date: Mon, 26 Mar 2001 14:47:50 -0800
> >
> >Hi all,
> >
> >Firstly, we're having great luck with our adventures with Orion.  Most
> >everything works as advertised, and the performance is great--
> particularly
> >the CMP EJB stuff.  Just thought I'd spew a little positivity.
> >
> >Is there some way to include the application-deployments XML
> files with an
> >application?  By that I mean, fer instance, we've made all kinds of
> >modifications to orion-ejb-jar.xml to deal with our OR relationships, the
> >legacy database name mappings, etc.  orion-application.xml has a bunch of
> >custom settings too.  Were either of those to get wiped by an overzealous
> >Orion, we'd be... sad.  So, we're gonna back them up, but...
> >
> >Do we need to manually make those changes after deploying the
> application
> >on
> >another machine?  That seems a little goofy.  I'd hate to have
> to say to a
> >customer "OK, start it up, and then stop it, open this file up and
> >everywhere it says requestId, well, change that to request_id, blah blah,
> >and then restart it."
> >
> >Thanks,
> >Rian
> >
> >--
> >Rian Schmidt
> >[EMAIL PROTECTED]
> >
> >
> >
>
> _
> Get your FREE download of MSN Explorer at http://explorer.msn.com
>
>
>





Re: Deployment xml files in ear file? If so, where?

2001-03-26 Thread Tim Endres

Except for orion-ejb-jar.xml, which alone has its own place in /orion/.
tim

> You can place your orion-*.xml files alongside their *.xml counterparts. 
> (eg, principals.xml and orion-application.xml alongside application.xml). 
> Note though that if the application has already been deployed, then these 
> files won't be copied over the existing ones. They're only used in the case 
> of a 'fresh install'.
> 
> 
> >From: "Rian Schmidt" <[EMAIL PROTECTED]>
> >Reply-To: Orion-Interest <[EMAIL PROTECTED]>
> >To: Orion-Interest <[EMAIL PROTECTED]>
> >Subject: Deployment xml files in ear file?  If so, where?
> >Date: Mon, 26 Mar 2001 14:47:50 -0800
> >
> >Hi all,
> >
> >Firstly, we're having great luck with our adventures with Orion.  Most
> >everything works as advertised, and the performance is great-- particularly
> >the CMP EJB stuff.  Just thought I'd spew a little positivity.
> >
> >Is there some way to include the application-deployments XML files with an
> >application?  By that I mean, fer instance, we've made all kinds of
> >modifications to orion-ejb-jar.xml to deal with our OR relationships, the
> >legacy database name mappings, etc.  orion-application.xml has a bunch of
> >custom settings too.  Were either of those to get wiped by an overzealous
> >Orion, we'd be... sad.  So, we're gonna back them up, but...
> >
> >Do we need to manually make those changes after deploying the application 
> >on
> >another machine?  That seems a little goofy.  I'd hate to have to say to a
> >customer "OK, start it up, and then stop it, open this file up and
> >everywhere it says requestId, well, change that to request_id, blah blah,
> >and then restart it."
> >
> >Thanks,
> >Rian
> >
> >--
> >Rian Schmidt
> >[EMAIL PROTECTED]





Re: Deployment xml files in ear file? If so, where?

2001-03-26 Thread Hani Suleiman

You can place your orion-*.xml files alongside their *.xml counterparts. 
(eg, principals.xml and orion-application.xml alongside application.xml). 
Note though that if the application has already been deployed, then these 
files won't be copied over the existing ones. They're only used in the case 
of a 'fresh install'.


>From: "Rian Schmidt" <[EMAIL PROTECTED]>
>Reply-To: Orion-Interest <[EMAIL PROTECTED]>
>To: Orion-Interest <[EMAIL PROTECTED]>
>Subject: Deployment xml files in ear file?  If so, where?
>Date: Mon, 26 Mar 2001 14:47:50 -0800
>
>Hi all,
>
>Firstly, we're having great luck with our adventures with Orion.  Most
>everything works as advertised, and the performance is great-- particularly
>the CMP EJB stuff.  Just thought I'd spew a little positivity.
>
>Is there some way to include the application-deployments XML files with an
>application?  By that I mean, fer instance, we've made all kinds of
>modifications to orion-ejb-jar.xml to deal with our OR relationships, the
>legacy database name mappings, etc.  orion-application.xml has a bunch of
>custom settings too.  Were either of those to get wiped by an overzealous
>Orion, we'd be... sad.  So, we're gonna back them up, but...
>
>Do we need to manually make those changes after deploying the application 
>on
>another machine?  That seems a little goofy.  I'd hate to have to say to a
>customer "OK, start it up, and then stop it, open this file up and
>everywhere it says requestId, well, change that to request_id, blah blah,
>and then restart it."
>
>Thanks,
>Rian
>
>--
>Rian Schmidt
>[EMAIL PROTECTED]
>
>
>

_
Get your FREE download of MSN Explorer at http://explorer.msn.com





Deployment xml files in ear file? If so, where?

2001-03-26 Thread Rian Schmidt

Hi all,

Firstly, we're having great luck with our adventures with Orion.  Most
everything works as advertised, and the performance is great-- particularly
the CMP EJB stuff.  Just thought I'd spew a little positivity.

Is there some way to include the application-deployments XML files with an
application?  By that I mean, fer instance, we've made all kinds of
modifications to orion-ejb-jar.xml to deal with our OR relationships, the
legacy database name mappings, etc.  orion-application.xml has a bunch of
custom settings too.  Were either of those to get wiped by an overzealous
Orion, we'd be... sad.  So, we're gonna back them up, but...

Do we need to manually make those changes after deploying the application on
another machine?  That seems a little goofy.  I'd hate to have to say to a
customer "OK, start it up, and then stop it, open this file up and
everywhere it says requestId, well, change that to request_id, blah blah,
and then restart it."

Thanks,
Rian

--
Rian Schmidt
[EMAIL PROTECTED]






Re: Hardware load balancer

2001-03-26 Thread Klaus Thiele

Hi,

a 'hardware loadbalancer' was  too expensive for us, but we
are using a 'linux virtual server' which do the same thing without
any cost - very good.
look at http://www.linuxvirtualserver.org

klaus

> -Original Message-
> From: calvin matthews [mailto:[EMAIL PROTECTED]]
> Sent: Monday, March 26, 2001 3:42 PM
> To: Orion-Interest
> Subject: Hardware load balancer
>
>
> Hi,
>
> How can you replace the loadbalancer application with a hardware load
> balancer, such that all servers are accessing the same application
> and the session integrity is maintained?
>
> Has any one done it?
>
> Thanks,
>
> Calvin

-- 
--
Klaus Thiele - Personal & Informatik AG
mailto:[EMAIL PROTECTED]

 "Your mouse has moved.
  Windows must be restarted for the change to take effect."




RE: Orion + IE + HTTPS = Trouble

2001-03-26 Thread Tim Endres

If your code demonstrates that Orion loses the session (or creates a new one),
each time that the SSL session is re-established, then that would indicate to
me that it is an Orion bug. I assumed that your problem was tied to the Basic
Auth, but you are apparently using a FORM instead, and your processing it just
like ours in that case.

Bugzilla :(

tim.

> This is my first HTTPS application, so maybe I'm doing something wrong.  Our
> logon uses a JSP page, and places a UserInfo object in the HttpSession
> (along with other objects we use for workflow tracking).  All subsequent
> access checks for this object before processing, forwarding to the logon
> page if it is not found.  Our problem was that every two minutes the session
> changes (a println() in the servlet now displays a different session id),
> the UserInfo object is not found, so the logon page is displayed again.
> Adding this registry entry solved the problem on all client machines.  How
> should I change this to get around the problem?
> 
> My only reason for suggesting that it may be an Orion problem is just that
> I've never had problems using IE on other company's secure sites, so
> something is being handled differently.  If the problem lies with me, thats
> OK, I just need someone to point me in the right direction so I can fix it.
> 
> Thanks,
>   Bruce
> 
> -Original Message-
> From: Tim Endres [mailto:[EMAIL PROTECTED]]
> Sent: Monday, March 26, 2001 2:24 PM
> To: Orion-Interest
> Subject: Re: Orion + IE + HTTPS = Trouble
> 
> 
> The artical you reference on Microsoft's site explicitly states that the
> problem
> is in MS's products, which implies it is not an Orion problem. Further, the
> problem
> is related to BASIC AUTH dialogs. Thus, the reason I believe you are not
> seeing this
> problem in general with other servers is that nobody uses basic auth. Most
> sites put
> their login pages up as HTML FORM's, not as basic authentication.
> 
> tim.
> 
> > IE 5.0/5.5 running on 95/98/NT keeps losing it's HTTPS session with Orion,
> > which is big trouble if you store logon info there.  By default these
> > versions of IE renegotiate their SSL connections every two minutes, but
> this
> > can be changed by adding a DWORD registry entry.
> > 
> >
> HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\ClientCache
> > Time
> > 
> > Adding this entry, and setting it to 0x7FFF has solved all our issues
> > with forcing constant logons when running in secure mode, but is a major
> > pain because it has to be done for all clients (except Win2K and WinME
> > clients)
> > 
> > Since I have never come across this problem when logging on to other HTTPS
> > sites on the web, I can't help but wonder if Orion is not handling the
> > situation properly (I've tried it on both 1.38 and 1.45).  Does anyone
> else
> > have any experience with this problem, or can comment on whether Orion
> > should be handling this without modifying every client machine?
> > 
> > Thanks,
> >   Bruce
> > 
> > Microsoft reference:
> > http://support.microsoft.com/support/kb/articles/Q265/3/69.ASP
> > 
> 
> 





RE: Orion + IE + HTTPS = Trouble

2001-03-26 Thread BCowan


This is my first HTTPS application, so maybe I'm doing something wrong.  Our
logon uses a JSP page, and places a UserInfo object in the HttpSession
(along with other objects we use for workflow tracking).  All subsequent
access checks for this object before processing, forwarding to the logon
page if it is not found.  Our problem was that every two minutes the session
changes (a println() in the servlet now displays a different session id),
the UserInfo object is not found, so the logon page is displayed again.
Adding this registry entry solved the problem on all client machines.  How
should I change this to get around the problem?

My only reason for suggesting that it may be an Orion problem is just that
I've never had problems using IE on other company's secure sites, so
something is being handled differently.  If the problem lies with me, thats
OK, I just need someone to point me in the right direction so I can fix it.

Thanks,
  Bruce

-Original Message-
From: Tim Endres [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 26, 2001 2:24 PM
To: Orion-Interest
Subject: Re: Orion + IE + HTTPS = Trouble


The artical you reference on Microsoft's site explicitly states that the
problem
is in MS's products, which implies it is not an Orion problem. Further, the
problem
is related to BASIC AUTH dialogs. Thus, the reason I believe you are not
seeing this
problem in general with other servers is that nobody uses basic auth. Most
sites put
their login pages up as HTML FORM's, not as basic authentication.

tim.

> IE 5.0/5.5 running on 95/98/NT keeps losing it's HTTPS session with Orion,
> which is big trouble if you store logon info there.  By default these
> versions of IE renegotiate their SSL connections every two minutes, but
this
> can be changed by adding a DWORD registry entry.
> 
>
HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\ClientCache
> Time
> 
> Adding this entry, and setting it to 0x7FFF has solved all our issues
> with forcing constant logons when running in secure mode, but is a major
> pain because it has to be done for all clients (except Win2K and WinME
> clients)
> 
> Since I have never come across this problem when logging on to other HTTPS
> sites on the web, I can't help but wonder if Orion is not handling the
> situation properly (I've tried it on both 1.38 and 1.45).  Does anyone
else
> have any experience with this problem, or can comment on whether Orion
> should be handling this without modifying every client machine?
> 
> Thanks,
>   Bruce
> 
> Microsoft reference:
> http://support.microsoft.com/support/kb/articles/Q265/3/69.ASP
> 





RE: Performance problems (More Info).

2001-03-26 Thread Gary Shea

Aaron Tavistock ([EMAIL PROTECTED]) wrote:
> JVM Settings -- My normal settings are "-server -Xincgc -Xms128m -Xmx384m".
> I've tried playing around with different JVM options including turning off
> server, using normal gc, running in interpreted mode, running in classic
> mode, et al.  I even tried running under JDK1.2.2.  While these definately
> effect performance in dramatic ways, none seems to fix this problem.
>
> Garbage Collection -- I tried watching the heap by turning on verbosegc, and
> the pauses do not appear to be timed with a full gc.  So thats not it
> either, definately a good thought though...
>
> DB Server -- The DB server itself is performing fine, CPU and memory
> utilization is low.  The database is completely accessable via sqlplus or an
> alternative app while these pauses occur.
>
> Connection Pooling vs Orions DataSource Manager --  Interestingly the
> problem seems to go away when I turn off Orions datasources, and run with a
> third party ConnectionPool manager (such as BitMechanic).While this
> fixes my immediate problem it will prevent me from using Orion as an EJB
> container, which is not good.

Have you tried using the com.evermind.sql.ConnectionDataSource?  Frankly
I have no idea what it is, since it's completely undocumented, but it
was recommended to me by Orion support folk a year or so ago.   I've
been using it ever since.  For what it's worth...

Gary

p.s. Here's my data-sources.xml.  We've been using Orion exclusively
as a web server so far (in production three months or so?), so the
only connection we've used from the set below is 'pooled-location'.






> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Aaron
> > Tavistock
> > Sent: Monday, March 26, 2001 1:09 PM
> > To: Orion-Interest
> > Subject: Performance problems...
> >
> >
> > I've been working on getting Orion running in a production
> > environment for a
> > little while now and just when I thought everything was working
> > fine I go to
> > push to production and something load/volume related is creating massive
> > slowdowns.
> >
> > Basically every 250 database accesses or so there is a long pause
> > (20 to 60
> > second), where nothing occurs.  During this pause the CPU load *drops* to
> > practically nothing and our entire site is frozen.  I'm not sure exactly
> > where the problem exists; it could be our code, our
> > configuration, or even a
> > bug in Orion.
> >
> > The environment is Redhat 6.2, JDK1.3, Oracle 8i.  Its a pure
> > J2EE app, but
> > we're not using EJB.  I initially thought it might be a memory issue, but
> > I've played with the JDK heap size and carefully watched memory
> > utilization
> > and thats also not the issue.  I even considered that maybe
> > Evermind/IronFlare might have a throttle (to push you to get a
> > license) so I
> > put one of our production licenses on the QA box.
> >
> > I've since gotten a load tester and can reproduce the problem.  Oddly, it
> > only happens on pages which require database access.  Even more
> > interesting
> > is that it occurs more frequently on pages which utilize more than one
> > connection.  But thats about as far as I can narrow it.   I've tried the
> > 8.15 and 8.17 type4 jdbc drivers from oracle and we've tried Oracles
> > ConnectionCacheImpl and Orions XADataSource implimentation, both show the
> > same behavior (though both are using the Oracle Driver).   I've also tried
> > Orions jdbc debug and it shows nothing of interest.
> >
> > So far I've put about a week straight into finding it, and I've just about
> > run out of ideas. I'd really be appreciative if anyone has any good
> > suggestions on where to look.  ANyone seen behavior like this before?
> >
> >
>
>
>





Re: JNDI SecurityException

2001-03-26 Thread Ray Harrison

Don't know if this is the case, but look in your %ORION_DIR/config/principals.xml
and look at the user entry for admin. Check to make sure that deactivated="false" in 
the admin
description section as below:



The default administrator






If there is no reference to the 'deactivated' keyword, I believe that the default is 
'false'
and this isn't your problem...

Good luck!
Ray
--- Eric Anderson <[EMAIL PROTECTED]> wrote:
> I'm trying to re-deploy an existing CMP bean on Orion and am having no 
> luck at all with the JNDI lookup of the bean's home interface.  No 
> matter what I change or what I try, I *always* get a SecurityException 
> saying that the userid/password is invalid.  The principal and 
> credentials that I am using are that of the admin user. 
> 
> This application used to work on JBoss.  It consists of the one bean 
> ("PersonBean") and a servlet, run separately in Tomcat (this cannot be 
> changed for now) that uses the bean.  On the servlet client side, I've 
> tried many different versions of the bean name ("ejb/Personbean", 
> "java:comp/env/ejb/PersonBean", "PersonBean" ... ) but that makes no 
> difference - SecurityException, bad userid/password, every single time.
> I'm setting the following properties explicity from the servlet, prior 
> to doing any JNDI operations:
> 
>
>
System.setProperty("java.naming.factory.initial","com.evermind.server.rmi.RMIInitialContextFactory");
>
> System.setProperty("java.naming.provider.url","ormi://192.168.100.3");
>System.setProperty("java.naming.security.principle","admin");
>System.setProperty("java.naming.security.credentials","foobar");
> 
> I've tried specifying an "application" (PersonBean) in the URL, but all 
> I get is the same old SecurityException again.
> 
> On the server side, I've tried copying some of the config data from the 
> server's principals.xml file into the principals.xml file in the bean 
> deployment directory.  This also had no effect on the SecurityException.
> 
> So what am I missing?
> 
> Thanks,
> Eric
> 
> 


__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/




how to use needs-client-auth="true"

2001-03-26 Thread denis despinoy

Hi all,

How do we use the needs-client-auth="true".

I placed this in my secure-web-ssl.xml and fired up my
app.

I then made a attempt to authenticate myself on our
resource using usr/pwd and i was expecting something
like no valid certificate though I supplied a valid
usr/pwd pair...

Adding this tag didn't change anything ? What is it
suppossed to do ? How do we use it ?

I'm looking for a way of doing client authentication.
The client supplies a usr/pwd pair and I would like to
read the certificate and check it against my keystore
-then I would authenticate !

I hope this makes sense !

denis 

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/




RE: Removing SBs when expiring HttpSessions ... the challenge continues.

2001-03-26 Thread Gerald Gutierrez


If you read the specifications, you will understand why session beans "stay
active" after an HttpSession expires. The basic premise is that expiring
HttpSessions do not imply anything about the lifetimes of SBs.

As for "trusting" the garbage collector to do proper cleanup, I think I've
already explained my views on why the clean up cannot be automatic for
non-trivial cases. It was the whole point of my previous email, and the
reason why I posted the original question.

Petr, try this little test: Create a session bean that allocates 1MB of
memory. Then have every new HttpSession instantiate this bean. Set the
HttpSession timeout to 1 minute. Create a bunch of new sessions and see
whether the SBs disappear after the HttpSession disappears. See whether the
garbage collector reclaims the memory allocated by those beans.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Petr Podsednik
Sent: Monday, March 26, 2001 12:00 AM
To: Orion-Interest
Subject: Re: Removing SBs when expiring HttpSessions ... the challenge
continues.


Gerald,
Thank you for your explanation.
But my question was a little bit different. I was wondering why to take care
of removing SBs when there is remote garbage collector which is responsible
for it. But maybe you want to make some special cleanning up or you are
facing another type of problems I am not aware of.

You wrote (snipped):
> ... to remove session beans that would
> > otherwise stay active and eventually consume all resources and cause the
> > server to crash.
>

My original question was: Why do you think that session beans would stay
active after expiring HttpSession? Don't you trust remote garbage collector
which I hope is responsible for cleanning invalid session beans instances?

Regards
Petr

- Original Message -
From: Gerald Gutierrez <[EMAIL PROTECTED]>
To: Orion-Interest <[EMAIL PROTECTED]>
Sent: Friday, March 23, 2001 8:07 PM
Subject: RE: Removing SBs when expiring HttpSessions ... the challenge
continues.


>
> As with anything, the devil is in the details.
>
> SBs expire in one of a number of ways. The two main ways are: you call
> remove() or they time out. This is well known. So if you have your SB
bound
> to an HttpSession, everything works and you get get your SB from the
session
> at any time.
>
> The REAL ISSUE is, however, the security issues with how you clean up that
> SB when the HttpSession expires. This is something it seems no one really
> understands, and it seems to me to be a fairly critical to the proper
> working of J2EE.
>
> The servlet spec does not say anything about WHO calls
> HttpSessionBindingListener.valueUnbound() when an HttpSession expires.
> Assume (arbitrarly) that it is an "unauthenticated user" (Orion calls this
a
> "guest"), then if you call ejb.remove() within valueUnbound(), the EJB
will
> be called with the guest user. Well, what if the remove() method is
> protected by security constraints and guest is not allowed? What if you
had
> to call other methods to clean up that session?
>
> Well, someone said "log in with a special user before calling remove()".
It
> doesn't work because one tries to JNDI-lookup a RoleManager to log in,
Orion
> throws an exception saying "javax.naming.NamingException: Not in an
> application scope". Okay, so just call remove() and do the login in there.
> That DID work, but WHY? I have my remove() method secured so only
> authenticated users can hit it. And what if you had to call OTHER methods
in
> addition to remove()?
>
>
> >From the responses, it seems either that no one has previously recognized
> this as a problem, or that they're ignoring it, or I'm just all wrong.
>
> So please, am I wrong, or is there an issue here?
>
>
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Petr Podsednik
> Sent: Friday, March 23, 2001 12:37 AM
> To: Orion-Interest
> Subject: Re: Removing SBs when expiring HttpSessions ... the challenge
> continues.
>
>
> Hi,
> If It is possible I have a question regarding this problem.
> Until now I was thinking there is no problem regarding HttpSession
expiring
> because of garbage collector which knows what remote references became
> invalid. Please tell me, if I am wrong and why. If it is must be handled
in
> code what about for example Swing clients machine's crashing?
> Regards
> Petr
>
> > When an HttpSession expires, it calls valueUnbound() on all
session-bound
> > variables that implement the HttpSessionBindingListener interface. So
this
> > provides a way for expiring HTTP sessions to remove session beans that
> would
> > otherwise stay active and eventually consume all resources and cause the
> > server to crash.
>
>
>






RE: Performance problems (More Info).

2001-03-26 Thread Aaron Tavistock

JVM Settings -- My normal settings are "-server -Xincgc -Xms128m -Xmx384m".
I've tried playing around with different JVM options including turning off
server, using normal gc, running in interpreted mode, running in classic
mode, et al.  I even tried running under JDK1.2.2.  While these definately
effect performance in dramatic ways, none seems to fix this problem.

Garbage Collection -- I tried watching the heap by turning on verbosegc, and
the pauses do not appear to be timed with a full gc.  So thats not it
either, definately a good thought though...

DB Server -- The DB server itself is performing fine, CPU and memory
utilization is low.  The database is completely accessable via sqlplus or an
alternative app while these pauses occur. 

Connection Pooling vs Orions DataSource Manager --  Interestingly the
problem seems to go away when I turn off Orions datasources, and run with a
third party ConnectionPool manager (such as BitMechanic).While this
fixes my immediate problem it will prevent me from using Orion as an EJB
container, which is not good.

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Aaron
> Tavistock
> Sent: Monday, March 26, 2001 1:09 PM
> To: Orion-Interest
> Subject: Performance problems...
>
>
> I've been working on getting Orion running in a production
> environment for a
> little while now and just when I thought everything was working
> fine I go to
> push to production and something load/volume related is creating massive
> slowdowns.
>
> Basically every 250 database accesses or so there is a long pause
> (20 to 60
> second), where nothing occurs.  During this pause the CPU load *drops* to
> practically nothing and our entire site is frozen.  I'm not sure exactly
> where the problem exists; it could be our code, our
> configuration, or even a
> bug in Orion.
>
> The environment is Redhat 6.2, JDK1.3, Oracle 8i.  Its a pure
> J2EE app, but
> we're not using EJB.  I initially thought it might be a memory issue, but
> I've played with the JDK heap size and carefully watched memory
> utilization
> and thats also not the issue.  I even considered that maybe
> Evermind/IronFlare might have a throttle (to push you to get a
> license) so I
> put one of our production licenses on the QA box.
>
> I've since gotten a load tester and can reproduce the problem.  Oddly, it
> only happens on pages which require database access.  Even more
> interesting
> is that it occurs more frequently on pages which utilize more than one
> connection.  But thats about as far as I can narrow it.   I've tried the
> 8.15 and 8.17 type4 jdbc drivers from oracle and we've tried Oracles
> ConnectionCacheImpl and Orions XADataSource implimentation, both show the
> same behavior (though both are using the Oracle Driver).   I've also tried
> Orions jdbc debug and it shows nothing of interest.
>
> So far I've put about a week straight into finding it, and I've just about
> run out of ideas. I'd really be appreciative if anyone has any good
> suggestions on where to look.  ANyone seen behavior like this before?
>
>





Re: Deployment of principals.xml

2001-03-26 Thread Hani Suleiman

This is deliberate. J2EE makes a point of separating out the 'deployer' 
role. In theory, a vendor could deliver a .ear file, and the deployer is 
then free to configure it for that particular deployment, which is done 
through changing the files in application-deployments. Now, the application 
provider can help this process by providing 'default' deployment 
descriptors, but Orion will honour 'pre-deployed apps' and not clobber any 
deployment specific files if they already exist under 
application-deployments (eg, all the orion-* files and principals.xml). If 
the file does not exist, then the default one will be copied over.


>From: "cybermaster" <[EMAIL PROTECTED]>
>Reply-To: Orion-Interest <[EMAIL PROTECTED]>
>To: Orion-Interest <[EMAIL PROTECTED]>
>Subject: Deployment of principals.xml
>Date: Mon, 26 Mar 2001 10:06:23 -0700
>
>Not a big deal, but I can't find a place from where principals.xml would be
>deployed - I put it into applications/app, app/META-INF (where e.g.
>application.xml resides, which *is* copied on deployment), app/app-web,
>app/app-web/WEB-INF, but no go. Always need to replace the principals file
>automatically created by Orions deployer in application-deployments/app
>
>Maybe this is so on purpose - if not, I'd like to find out ...
>
>
>
>
>

_
Get your FREE download of MSN Explorer at http://explorer.msn.com





Re: JNDI SecurityException

2001-03-26 Thread Tim Endres

First, have you tried using ApplicationClientInitialContextFactory as opposed
to RMIInitialContextFactory? Second, I believe it is a known bug in Orion that
servlet's do not properly send their user/password information to the app server.
In other words, Servlet InitialContext authentication is broken.

tim.

> I'm trying to re-deploy an existing CMP bean on Orion and am having no 
> luck at all with the JNDI lookup of the bean's home interface.  No 
> matter what I change or what I try, I *always* get a SecurityException 
> saying that the userid/password is invalid.  The principal and 
> credentials that I am using are that of the admin user. 
> 
> This application used to work on JBoss.  It consists of the one bean 
> ("PersonBean") and a servlet, run separately in Tomcat (this cannot be 
> changed for now) that uses the bean.  On the servlet client side, I've 
> tried many different versions of the bean name ("ejb/Personbean", 
> "java:comp/env/ejb/PersonBean", "PersonBean" ... ) but that makes no 
> difference - SecurityException, bad userid/password, every single time.
> I'm setting the following properties explicity from the servlet, prior 
> to doing any JNDI operations:
> 
>
> 
>System.setProperty("java.naming.factory.initial","com.evermind.server.rmi.RMIInitialContextFactory");
>
> System.setProperty("java.naming.provider.url","ormi://192.168.100.3");
>System.setProperty("java.naming.security.principle","admin");
>System.setProperty("java.naming.security.credentials","foobar");
> 
> I've tried specifying an "application" (PersonBean) in the URL, but all 
> I get is the same old SecurityException again.
> 
> On the server side, I've tried copying some of the config data from the 
> server's principals.xml file into the principals.xml file in the bean 
> deployment directory.  This also had no effect on the SecurityException.
> 
> So what am I missing?
> 
> Thanks,
> Eric
> 
> 





RE: JNDI SecurityException

2001-03-26 Thread Nimret Sandhu

hi eric ~

this is funny - it took me a whole week to get this right +)

> System.setProperty("java.naming.factory.initial","com.evermind
.server.rmi.RMIInitialContextFactory");

this should be different .. check the jndi.properties file i am sending
along with this msg.

> System.setProperty("java.naming.provider.url","ormi://192.168.100.3");

try java.naming.provider.url=ormi://10.16.16.104/

for eg:
java.naming.provider.url=ormi://10.16.16.104/presence_server
and my server.xml contains:


>System.setProperty("java.naming.security.principle","admin");
>
> System.setProperty("java.naming.security.credentials","foobar");

these should be added to config/principals.xml ( if not already there):


The default administrator




.

i think u might be able to get by creating a jndi.properties file with these
values ( it works for client side apps for me). lemme know if u make any
progress with this .. if not, i can send u an example client with all the
config settings, etc.

regs ~
nimret

> I've tried specifying an "application" (PersonBean) in the 
> URL, but all 
> I get is the same old SecurityException again.
> 
> On the server side, I've tried copying some of the config 
> data from the 
> server's principals.xml file into the principals.xml file in the bean 
> deployment directory.  This also had no effect on the 
> SecurityException.
> 
> So what am I missing?
> 
> Thanks,
> Eric
> 
> 
> 


 jndi.properties


Re: Orion + IE + HTTPS = Trouble

2001-03-26 Thread Tim Endres

The artical you reference on Microsoft's site explicitly states that the problem
is in MS's products, which implies it is not an Orion problem. Further, the problem
is related to BASIC AUTH dialogs. Thus, the reason I believe you are not seeing this
problem in general with other servers is that nobody uses basic auth. Most sites put
their login pages up as HTML FORM's, not as basic authentication.

tim.

> IE 5.0/5.5 running on 95/98/NT keeps losing it's HTTPS session with Orion,
> which is big trouble if you store logon info there.  By default these
> versions of IE renegotiate their SSL connections every two minutes, but this
> can be changed by adding a DWORD registry entry.
> 
> HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\ClientCache
> Time
> 
> Adding this entry, and setting it to 0x7FFF has solved all our issues
> with forcing constant logons when running in secure mode, but is a major
> pain because it has to be done for all clients (except Win2K and WinME
> clients)
> 
> Since I have never come across this problem when logging on to other HTTPS
> sites on the web, I can't help but wonder if Orion is not handling the
> situation properly (I've tried it on both 1.38 and 1.45).  Does anyone else
> have any experience with this problem, or can comment on whether Orion
> should be handling this without modifying every client machine?
> 
> Thanks,
>   Bruce
> 
> Microsoft reference:
> http://support.microsoft.com/support/kb/articles/Q265/3/69.ASP
> 





Re: JNDI SecurityException

2001-03-26 Thread KirkYarina

System.setProperty("java.naming.provider.url","ormi://192.168.100.3/appname");
   
  ^^

Try this; it was just discussed ( 
http://www.mail-archive.com/orion-interest%40orionserver.com/msg11568.html )


At 08:00 AM 3/26/01 -0800, you wrote:
>I'm trying to re-deploy an existing CMP bean on Orion and am having no 
>luck at all with the JNDI lookup of the bean's home interface.  No matter 
>what I change or what I try, I *always* get a SecurityException saying 
>that the userid/password is invalid.  The principal and credentials that I 
>am using are that of the admin user.
>This application used to work on JBoss.  It consists of the one bean 
>("PersonBean") and a servlet, run separately in Tomcat (this cannot be 
>changed for now) that uses the bean.  On the servlet client side, I've 
>tried many different versions of the bean name ("ejb/Personbean", 
>"java:comp/env/ejb/PersonBean", "PersonBean" ... ) but that makes no 
>difference - SecurityException, bad userid/password, every single time.
>I'm setting the following properties explicity from the servlet, prior to 
>doing any JNDI operations:
>
>
>System.setProperty("java.naming.factory.initial","com.evermind.server.rmi.RMIInitialContextFactory");
>
>System.setProperty("java.naming.provider.url","ormi://192.168.100.3");
>   System.setProperty("java.naming.security.principle","admin");
>   System.setProperty("java.naming.security.credentials","foobar");
>
>I've tried specifying an "application" (PersonBean) in the URL, but all I 
>get is the same old SecurityException again.
>
>On the server side, I've tried copying some of the config data from the 
>server's principals.xml file into the principals.xml file in the bean 
>deployment directory.  This also had no effect on the SecurityException.
>
>So what am I missing?
>
>Thanks,
>Eric
>





RMI & security policy while using Jsp / Orion 1.4.7

2001-03-26 Thread Christian Meunier



Hi,
im trying to connect from a jsp to a rmi 
server.
 
i done it succesfully with a stand alone client 
passing new security policy file in as an 
argument:
(java -Djava.security.policy=test.policy myRMIClient)
 
Now when i try to connect to my rmi server from a 
jsp, i keep having the following error:
 
Exception occured: java.security.AccessControlException: access denied 
(java.net.SocketPermission 127.0.0.1:1099 connect,resolve)
 
i started orion passing the same security policy 
:
java -Djava.security.policy=test.policy -jar orion.jar and i though it should 
work, obsiouly it's not enough.
 
Any idea how i can grant permission to my jsp to 
connect to a rmi server ?
Thx in advance.


Deployment of principals.xml

2001-03-26 Thread cybermaster

Not a big deal, but I can't find a place from where principals.xml would be
deployed - I put it into applications/app, app/META-INF (where e.g.
application.xml resides, which *is* copied on deployment), app/app-web,
app/app-web/WEB-INF, but no go. Always need to replace the principals file
automatically created by Orions deployer in application-deployments/app

Maybe this is so on purpose - if not, I'd like to find out ...








admin.jar deploy failed after autoupdate

2001-03-26 Thread Bill Winspur



I've been using admin.jar to deploy my 
apps for several months, but it failed after I did an autoupdate on my 
server (about Mar 13th).  The failure messages are endless 
repetition of:
 
at 
com.evermind.server.ApplicationServerSystemProperties.getProperty(JAX)at 
java.lang.System.getProperty(System.java:562)at 
com.evermind.server.Application.w8(JAX)at 
com.evermind.server.ApplicationServerSystemProperties.getProperty(JAX)at 
java.lang.System.getProperty(System.java:562)at 
com.evermind.server.Application.w8(JAX)at 
com.evermind.server.ApplicationServerSystemProperties.getProperty(JAX)at 
java.lang.System.getProperty(System.java:562)at 
com.evermind.server.Application.w8(JAX)
 
In the interim, I've been shutting down the server, 
replacing the ear file in orion/applications and restarting, which works fine, 
except that I have to shutdown and restart. Incidentally, an advantage of the 
approach is that it avoids admin.jar's habit of 
renaming previous deployment (by prepending '_' to the app name ) instead 
of replacing it.
 
The NT command to invoke admin jar 
was:
 
F:\swd\jEapps\orion-primer-eap>java -jar 
c:\orion\admin.jar ormi://localhost/ admin pwd -deploy -file 
F:\swd\jEapps\orion-primer-eap\rel\primer-ep.ear -deploymentName 
primer-eap
 
Is this hangup in the admin.jar command a known 
bug ?
 
Thanks for your attention
 
Bill.


RE: Hardware load balancer

2001-03-26 Thread Smith Jason

Not sure if this helps but

With web servers like IIS, people generally store the session info in a
database when using a 3rd party hardware load balancer. 

/Jason

-Original Message-
From: calvin matthews [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 26, 2001 3:42 PM
To: Orion-Interest
Subject: Hardware load balancer


Hi,

How can you replace the loadbalancer application with a hardware load
balancer, such that all servers are accessing the same application and the
session integrity is maintained?

Has any one done it?

Thanks,

Calvin





RE: How to start Orion from an application?

2001-03-26 Thread Elhadi barkat

I've written the following code to start Orion from another application

import com.evermind.server.*;
public class MemoryMonitor {
...
public static void main(String args[]) {
try {
ApplicationServer.main(new String[] {});

  }catch (Exception e) {
cat.error("error in memory monitoring Program", e);
}
}

The server is started but I think that it is not done the clean way because
When I run my J2EE Applications, I get Naming Error:
Orion/1.4.7 initialized
[NetTools] JNDI Error :java:comp/env namespace is only available from within
a J2EE component
2001-03-26 09:56:29,978 ERROR [ApplicationServerThread]
(DBAgentBean.java:148) -  JNDI naming errorjava:comp/env namespace is only
available from within a J2EE component
javax.naming.NamingException: java:comp/env namespace is only available from
within a J2EE component
at
com.sun.enterprise.naming.java.javaURLContext.getComponentContext(javaURLCon
text.java:392)
at
com.sun.enterprise.naming.java.javaURLContext.lookup(javaURLContext.java:51)
at javax.naming.InitialContext.lookup(InitialContext.java:350)
at
com.shockfish.spotme.utils.ejbmanager.DBAgentBean.transmitDatabase(DBAgentBe
an.java:73)
at
DBAgent_StatelessSessionBeanWrapper24.transmitDatabase(DBAgent_StatelessSess
ionBeanWrapper24.java:52)
at java.lang.reflect.Method.invoke(Native Method)
at com.evermind.server.rmi.bd.dr(JAX)
at com.evermind.util.f.run(JAX)

I think I need to pass arguments to the main method? or maybe there is
smthng I'm missing?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Robert Krueger
Sent: lundi, 26. mars 2001 12:58
To: Orion-Interest
Subject: Re: How to start Orion from an application?


just check the manifest of orion.jar

Main-Class: com.evermind.server.ApplicationServer

hth,

robert


At 10:18 26.03.2001 , you wrote:
>Instead of launching the application server with java -jar orion.jar
>I would like to do it from an application
>I guess I need to know which classes I need to start and how to do it
>Does anyone know the way to achieve this?
>Hadi
>

(-) Robert Krüger
(-) SIGNAL 7 Gesellschaft für Informationstechnologie mbH
(-) Brüder-Knauß-Str. 79 - 64285 Darmstadt,
(-) Tel: 06151 665401, Fax: 06151 665373
(-) [EMAIL PROTECTED], www.signal7.de







JNDI SecurityException

2001-03-26 Thread Eric Anderson

I'm trying to re-deploy an existing CMP bean on Orion and am having no 
luck at all with the JNDI lookup of the bean's home interface.  No 
matter what I change or what I try, I *always* get a SecurityException 
saying that the userid/password is invalid.  The principal and 
credentials that I am using are that of the admin user. 

This application used to work on JBoss.  It consists of the one bean 
("PersonBean") and a servlet, run separately in Tomcat (this cannot be 
changed for now) that uses the bean.  On the servlet client side, I've 
tried many different versions of the bean name ("ejb/Personbean", 
"java:comp/env/ejb/PersonBean", "PersonBean" ... ) but that makes no 
difference - SecurityException, bad userid/password, every single time.
I'm setting the following properties explicity from the servlet, prior 
to doing any JNDI operations:

   
System.setProperty("java.naming.factory.initial","com.evermind.server.rmi.RMIInitialContextFactory");
   
System.setProperty("java.naming.provider.url","ormi://192.168.100.3");
   System.setProperty("java.naming.security.principle","admin");
   System.setProperty("java.naming.security.credentials","foobar");

I've tried specifying an "application" (PersonBean) in the URL, but all 
I get is the same old SecurityException again.

On the server side, I've tried copying some of the config data from the 
server's principals.xml file into the principals.xml file in the bean 
deployment directory.  This also had no effect on the SecurityException.

So what am I missing?

Thanks,
Eric





Orion + IE + HTTPS = Trouble

2001-03-26 Thread BCowan


IE 5.0/5.5 running on 95/98/NT keeps losing it's HTTPS session with Orion,
which is big trouble if you store logon info there.  By default these
versions of IE renegotiate their SSL connections every two minutes, but this
can be changed by adding a DWORD registry entry.

HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\ClientCache
Time

Adding this entry, and setting it to 0x7FFF has solved all our issues
with forcing constant logons when running in secure mode, but is a major
pain because it has to be done for all clients (except Win2K and WinME
clients)

Since I have never come across this problem when logging on to other HTTPS
sites on the web, I can't help but wonder if Orion is not handling the
situation properly (I've tried it on both 1.38 and 1.45).  Does anyone else
have any experience with this problem, or can comment on whether Orion
should be handling this without modifying every client machine?

Thanks,
  Bruce

Microsoft reference:
http://support.microsoft.com/support/kb/articles/Q265/3/69.ASP




RE: Using EJBs with Delphi

2001-03-26 Thread Rabi Satter

Use SOAP. It makes it very easy to call the EJBs using the ApacheSOAP
implementation.

-Original Message-
From: Sergei Batiuk [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 24, 2001 10:27 AM
To: Orion-Interest
Subject: Using EJBs with Delphi


Hi EJB gurus,

Does anynone know how to connect to an EJB from a dephi client app?

Thanks in advance,
Sergei Batiuk.





remove

2001-03-26 Thread Pradeep Prasad


remove

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/




RE: persistance

2001-03-26 Thread Johan Lundberg

A comment to the Blueprint

> Sun's latest and greatest Blueprint must use
> something like this, because
> they map their responses with xml, and  they
> couldn't be parsing the xml
> everytime the app got a request (that would be
> horribly slow).
> 
As far as I understand it. They parse the XML-files
each time a user logs into the pet store and then
stores it in the ScreenFlowManager object (guess),
witch is attached to the user's weblayer 'session'.
Each time the users makes a request, thier system gets
the xml defined settings from that object which is
attached to the user session.

This solution parses the xml-files only during login.

/johan

> I am still investigating this issue.
> 
> Regards,
> 
> Elephantwalker
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On
> Behalf Of Allen Fogleson
> Sent: Saturday, March 24, 2001 9:58 PM
> To: Orion-Interest
> Subject: RE: persistance
> 
> 
> why dont you create a class that parses them and
> another class that keeps
> the results in member variables...
> 
> you could then serialize the class with the results.
> check the file dates
> whenever you need to get the results and reparse if
> necessary, otherwise
> just reload the serialized class.
> 
> Al
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On
> Behalf Of elephantwalker
> Sent: Saturday, March 24, 2001 10:40 PM
> To: Orion-Interest
> Subject: persistance
> 
> 
> I have this problem with session beans. I have
> certain objects which I want
> to be persistant across all session beans. One
> approach is to use an entity
> bean. But that's a little overkill. These are
> several xml files which I use
> to setup some of the session beans properties, but
> they are not expected to
> change.
> 
> Parsing the xml files each time a session is created
> is another approach.
> But that gives me the *lag time* during the parsing,
> and slows down my
> application.
> 
> Is there another alternative? Can I load a bean each
> time the server is
> restarted, or when an event occurs (say, the
> *datetime* changes on the
> file)?
> 
> Has anybody else faced this problem and solved it?
> 
> regards,
> 
> Elephantwalker
> 
> 
> 
> 


_
Do You Yahoo!?
[EMAIL PROTECTED] - skaffa en gratis mailadress på http://mail.yahoo.se




Avoiding single point of failure.

2001-03-26 Thread calvin matthews

Thanks for the replies to my earlier questions. I don't think my questions
were very clear so I'll elaborate.

Does Orion support the use of multiple orion load balancer application
instances to avoid single point of failure? i.e. not just multiple
loadbalancers, each handling a single island, but a separate load balancer
on each of a number of boxes, but each controlling the same application.

The scenario: We have a number of apache servers front ending the site using
a hardware load balancer. Behind apache we would like at least one orion lb
app per apache server and a number of orion servers, all accessing the same
application. The problem is that we can only have one orion lb app serving
an island and so it would become a single point of failure and I would like
to avoid that.

thanks in advance,

Calvin





Hardware load balancer

2001-03-26 Thread calvin matthews

Hi,

How can you replace the loadbalancer application with a hardware load
balancer, such that all servers are accessing the same application and the
session integrity is maintained?

Has any one done it?

Thanks,

Calvin





RE: Using EJBs with Delphi

2001-03-26 Thread Arved Sandstrom

I suspect that the free download of Visibroker for Delphi, from Inprise,
will have plenty of docs and examples, if it's anything like the other
Visibroker ORBs.

Regards,
Arved Sandstrom

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sergei Batiuk
Sent: Monday, March 26, 2001 8:27 AM
To: Orion-Interest
Subject: Re: Using EJBs with Delphi


That's what I was thinking about. However, I don't understand what an IDL
object should look like.
Please give me a hand with that. A code example with Delphi would be very
much appreciated.

- Original Message -
From: "Kevin Duffey" <[EMAIL PROTECTED]>
To: "Orion-Interest" <[EMAIL PROTECTED]>
Sent: Sunday, March 25, 2001 8:40 PM
Subject: RE: Using EJBs with Delphi


> Your going to have to use CORBA from what I understand.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Sergei Batiuk
> Sent: Saturday, March 24, 2001 8:27 AM
> To: Orion-Interest
> Subject: Using EJBs with Delphi
>
>
> Hi EJB gurus,
>
> Does anynone know how to connect to an EJB from a dephi client app?
>
> Thanks in advance,
> Sergei Batiuk.
>







RE: Servlet Parameters

2001-03-26 Thread Arved Sandstrom

I think section 10.2 in the 2.2 spec would indicate otherwise:

'A string containing only the ’/’ character indicates that servlet specified
by the mapping
becomes the "default" servlet of the application.'

Regards,
Arved Sandstrom

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Hani Suleiman
Sent: Friday, March 23, 2001 11:16 AM
To: Orion-Interest
Subject: RE: Servlet Parameters


No i isn't a bug, the servlet spec explicitly disallows servlets from
being mapped to /

On Fri, 23 Mar 2001, Chuck Butkus wrote:

> I just wanted to post that I found the problem.  I was using a servlet
> mapping with a url pattern of "/".  For some reason the servlet parameters
> don't come through with this servlet mapping.
>
> When I changed the servlet mapping from "/" to "/servlet", everything
> worked fine.
>
> This would seem to me to be a bug in Orion.  I haven't checked Bugzilla
> yet, but I will when a get a chance.
>
>
> -Original Message-
> From: Chuck Butkus [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, March 15, 2001 3:59 PM
> To: Orion-Interest
> Subject: Servlet Parameters
>
>
> I am having a problem with servlet parameters.  My servlets
> gets parameters when I put Orion in debug mode and put it
> directly under the "/orion/default-web-app/WEB-INF/classes/"
> directory,  but the parameters don't come through when I put it in a
> web application.
>
> Has anyone else seen this problem?  Is there anything special that needs
> to go into the "web.xml" file so a servlet can accept parameters. I would
> greatly appreciate any help.
>
> Chuck Butkus
>
>
>
>







Re: Using EJBs with Delphi

2001-03-26 Thread Sergei Batiuk

That's what I was thinking about. However, I don't understand what an IDL
object should look like.
Please give me a hand with that. A code example with Delphi would be very
much appreciated.

- Original Message -
From: "Kevin Duffey" <[EMAIL PROTECTED]>
To: "Orion-Interest" <[EMAIL PROTECTED]>
Sent: Sunday, March 25, 2001 8:40 PM
Subject: RE: Using EJBs with Delphi


> Your going to have to use CORBA from what I understand.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Sergei Batiuk
> Sent: Saturday, March 24, 2001 8:27 AM
> To: Orion-Interest
> Subject: Using EJBs with Delphi
>
>
> Hi EJB gurus,
>
> Does anynone know how to connect to an EJB from a dephi client app?
>
> Thanks in advance,
> Sergei Batiuk.
>





Re: How to start Orion from an application?

2001-03-26 Thread Robert Krueger

just check the manifest of orion.jar

Main-Class: com.evermind.server.ApplicationServer

hth,

robert


At 10:18 26.03.2001 , you wrote:
>Instead of launching the application server with java -jar orion.jar
>I would like to do it from an application
>I guess I need to know which classes I need to start and how to do it
>Does anyone know the way to achieve this?
>Hadi
>

(-) Robert Krüger
(-) SIGNAL 7 Gesellschaft für Informationstechnologie mbH
(-) Brüder-Knauß-Str. 79 - 64285 Darmstadt,
(-) Tel: 06151 665401, Fax: 06151 665373
(-) [EMAIL PROTECTED], www.signal7.de





How to start Orion from an application?

2001-03-26 Thread Elhadi barkat

Instead of launching the application server with java -jar orion.jar
I would like to do it from an application
I guess I need to know which classes I need to start and how to do it
Does anyone know the way to achieve this?
Hadi



BEGIN:VCARD
VERSION:2.1
N:Barkat;Elhadi;;M.
FN:Elhadi Barkat
NICKNAME:hadi
ORG:shockfish
TEL;HOME;VOICE:+41(0)213117289
TEL;CELL;VOICE:+41(0)763810511
ADR;WORK:;;PSE - EPFL;Lausanne;VD;1015;Switzerland
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:PSE - EPFL=0D=0ALausanne, VD 1015=0D=0ASwitzerland
ADR;HOME:;;Rue de la Tour 35;Lausanne;VD;1004;Switzerland
LABEL;HOME;ENCODING=QUOTED-PRINTABLE:Rue de la Tour 35=0D=0ALausanne, VD 1004=0D=0ASwitzerland
URL:http://diwww.epfl.ch/~ebarkat
URL:http://www.shockfish.com
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:20001026T133703Z
END:VCARD