OFFTOPIC: Homepage ===beware of virus......
Hi, This virus do not damage anything, on first time execution it spread itselft to all the adress book and remove the sent email with subject homepage from the outlook's sent email folder, then it randomize a number from 1 to 4 and redirect to the selected porn site... You can safe run it again and again to see the different porn site :-) It afraid me that a so stupid .VBS file can do such job!!! PHiL. -Message d'origine- De : waheed rahuman [mailto:[EMAIL PROTECTED]] Envoyé : dimanche 13 mai 2001 12:51 À : Orion-Interest Objet : Re: Homepage ===beware of virus.. Hello all in this mail there is an VBscript virus beware of that regards waheed From: Erich Eichinger [EMAIL PROTECTED] Reply-To: Orion-Interest [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Subject: Homepage Date: Sun, 13 May 2001 11:59:02 +0200 Hi! You've got to see this page! It's really cool ;O) homepage.HTML.vbs __ ___ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Re: JMS or just function ??
It is also the only correct way to write asynch functions in a j2ee applications since threads are not allowed. Right? Johan - Original Message - From: John Hogan [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Sent: Friday, May 11, 2001 7:19 PM Subject: Re: JMS or just function ?? A benefit is that your app can send messages and can forget about them. It doesn't need to wait for anything to complete. This means you don't have to keep your user waiting, who may be on the other end of something like an http request. Users don't like to wait. It's not appropriate for everything, but in certain circumstances it is the only way to go. _ Get your free E-mail at http://www.ireland.com
Re: DeadLock with 25 users
Or decreasing the inactivity-timeout=10 so the resource is more quickly released back to the container ? Johan - Original Message - From: KirkYarina [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Cc: PHiL [EMAIL PROTECTED] Sent: Friday, May 11, 2001 9:10 PM Subject: Re: DeadLock with 25 users I believe this is discussed in past; see the archives ( http://www.mail-archive.com/orion-interest%40orionserver.com/ ). Try increasing max-connections in data-sources.xml Kirk Yarina At 09:13 AM 5/11/01 +0200, you wrote: Hello, we just start some benchs with 25 fake users, here is the exeption: Those 25 users try to access the same EJB. Any idears, or points to check in our code to fix this kind of errors ??? Thanks. Philippe. ERROR | 09/05/2001 15:59:01:46 | NodeBmEJB : findNode(NodePK pk) | pk = (id = 0, space = WA17, componentName = news35) | Exception message: Transaction was rolled back: timed out, while waiting for (id = 0, space = WA17, componentName = news35) (started at Wed May 09 15:58:25 GMT+01:00 2001, terminated at Wed May 09 15:59:01 GMT+01:00 2001) com.evermind.server.DeadlockException: Transaction was rolled back: timed out, while waiting for (id = 0, space = WA17, componentName = news35) (started at Wed May 09 15:58:25 GMT+01:00 2001, terminated at Wed May 09 15:59:01 GMT+01:00 2001) at com.evermind.server.ejb.AbstractEJBObject.startCall(JAX) at NodeHome_EntityHomeWrapper3.findByPrimaryKey(NodeHome_EntityHomeWrapper3.ja v a:195) at com.stratelia.webactiv.util.node.control.NodeBmEJB.findNode(NodeBmEJB.java: 5 0) at com.stratelia.webactiv.util.node.control.NodeBmEJB.getFrequentlyAskedChildr e nDetails(NodeBmEJB.java:252) at NodeBm_StatelessSessionBeanWrapper1.getFrequentlyAskedChildrenDetails(NodeB m _StatelessSessionBeanWrapper1.java:1677) at com.stratelia.webactiv.news.control.NewsSessionControl.getArchiveList(NewsS e ssionControl.java:315) at __jspPage1_news_jsp_news_jsp._jspService(__jspPage1_news_jsp_news_jsp.java: 4 73) at com.orionserver.http.OrionHttpJspPage.service(JAX) at com.evermind.server.http.HttpApplication.xu(JAX) at com.evermind.server.http.JSPServlet.service(JAX) at com.evermind.server.http.d4.s3(JAX) at com.evermind.server.http.d4.s1(JAX) at com.evermind.server.http.d4.forward(JAX) at com.evermind.server.http.ew.forward(JAX) at com.stratelia.webactiv.servlets.ComponentRequestRooter.doPost(ComponentRequ e stRooter.java:153) at com.stratelia.webactiv.servlets.ComponentRequestRooter.doGet(ComponentReque s tRooter.java:172) at javax.servlet.http.HttpServlet.service(HttpServlet.java:190) at javax.servlet.http.HttpServlet.service(HttpServlet.java:302) at javax.servlet.http.HttpServlet.service(HttpServlet.java:329) at com.evermind.server.http.d4.s3(JAX) at com.evermind.server.http.d4.s1(JAX) at com.evermind.server.http.eg.s9(JAX) at com.evermind.server.http.eg.dr(JAX) at com.evermind.util.f.run(JAX)
Problems with SAPDB
Hi! I am in a middle of changing our database from HypersonicSQL to SAPDB. In theory it should be easy ;) This is how I have proceeded: 1. I created a database-schema for SAPDB (actually I found a one from this mailing list and copied it). I put that file to $ORION_DIR/config/database-schemas/. The schema file being used: ?xml version=1.0? !DOCTYPE database-schema PUBLIC -//Evermind//- Database schema http://www.orionserver.com/dtds/database-schemas.dtd; database-schema name=SapDB not-null=not null null= primary-key=primary key max-table-name-length=32 type-mapping type=boolean name=boolean / type-mapping type=java.lang.Booleanname=boolean / type-mapping type=byte name=byte / type-mapping type=java.lang.Byte name=byte / type-mapping type=char name=char / type-mapping type=java.lang.Character name=char / type-mapping type=double name=double precision / type-mapping type=java.lang.Double name=double precision / type-mapping type=floatname=float / type-mapping type=java.lang.Float name=float / type-mapping type=int name=integer / type-mapping type=java.lang.Integername=integer / type-mapping type=long name=integer / type-mapping type=java.lang.Long name=integer / type-mapping type=shortname=smallint / type-mapping type=java.lang.Short name=smallint / type-mapping type=java.lang.String name=varchar(255) / type-mapping type=java.math.BigDecimal name=fixed(15,15) / type-mapping type=byte[] name=long byte / type-mapping type=java.sql.Datename=date / type-mapping type=java.sql.Timename=time / type-mapping type=java.sql.Timestamp name=timestamp / type-mapping type=java.util.Date name=timestamp / type-mapping type=java.io.Serializable name=long byte / disallowed-field name=key / disallowed-field name=date / disallowed-field name=timestamp / disallowed-field name=time / disallowed-field name=username / disallowed-field name=password / disallowed-field name=order / disallowed-field name=table / disallowed-field name=value / disallowed-field name=name / disallowed-field name=count / /database-schema 2. I created a data-source description for SAPDB and pointed my application to use it. The data-source description being used: data-sources data-source class=com.evermind.sql.ConnectionDataSource inactivity-timeout=120 location=jdbc/DefaultCoreDS pooled-location=jdbc/DefaultPooledDS name=SAPTest data-source schema=./database-schemas/sapdb.xml xa-location=jdbc/xa/DefaultXADS ejb-location=jdbc/DefaultDS url=jdbc:sapdb://localhost/testdb connection-driver=com.sap.dbtech.jdbc.DriverSapDB username=TEST password=TEST / /data-sources 3. I added the SAPDB JDBC driver to $ORION_DIR/lib 4. I restarted Orion I believe that in an ideal case these would be the required steps when database is changed. However, I encountered two problems: 1. Table auto-creation was not fully successful. All the other tables were correctly created but one. SAPDB has a limit for maximum lenght for table row names but I didn't find any way to specify this in schema definition. Maximum legth for table names are supported by the attribute max-table-name-length=32 and it works fine. Do you know if there's a similar way to restrict the length of a row? (I tried max-row-name-length but wasn't lucky :) 2. The following exception is thrown: com.evermind.server.rmi.OrionRemoteException: javax.ejb.EJBException: Error saving state: Connection was closed at com.evermind.server.ejb.EJBUtils.getUserException(JAX) at UserManager_StatelessSessionBeanWrapper14.getGroupNamesForUser(UserManager_StatelessSessionBeanWrapper14.java:1348) at org.shiftctrl.framework.security.authentication.DefaultLoginModule.commit(DefaultLoginModule.java:243) ... Nested exception is: javax.ejb.EJBException: Error saving state: Connection was closed at SCUser_EntityBeanWrapper5.saveState(SCUser_EntityBeanWrapper5.java:1057) at SCUser_EntityBeanWrapper5.getGroupNames(SCUser_EntityBeanWrapper5.java:712) at org.shiftctrl.user_management.service.UserManagerEJB.getGroupNamesForUser(UserManagerEJB.java:328) ... The control goes so that the user is first authenticated using a session bean + CMP entity bean. Then the user's login metadata (last login, num of logins et.) is correctly updated using a session bean + CMP entity bean. After that the intention is to initialize user's session by calling getGroupNamesForUser() on a session
Re: Cocoon in Harmony with Orion?
Hi Holden, I'm afraid I can't help you much, as I also tried unsuccesfully to get Cocoon 1.8.2 to work with Orion. In ended up using 1.8.0 which at least works. I think the problem lies in the different XML parsers that both products use. With the previous version of Cocoon you had some ways of avoiding the incompatibility but I couldn't get it to work with 1.8.2. Anybody has been able to? regards, Dan Holden Glova wrote: Hello again folks of the list, I'm sure this must have been asked before although my searches on Deja and looking on both orionsupport.com and orionserver.com have come up pretty much empty. orionsupport.com has some documentation on the subject but I can't get the cocoon examples to run without getting an exception right at the start. I am very new to this subject matter and would appreciate any direction that can be given in this area. I'm using Orion 1.4.8 along with cocoon 1.8.2 Thanks very much in advance for any help that can be provided. -- Holden Glova, [EMAIL PROTECTED] Software Engineer Alchemy Group Limited Level 6 Royal Sun Alliance Bldg PO Box 2386 Christchurch New Zealand Phone: +64 3 962-0396 Fax: +64 3 962-0388
Re: How to tell when a user first log's in?
with javascript... ( on the first page the user receives after login... ) try something like if (parent.frame[framename].location=notyetloggedin.html) parent.frame[framename].location=nowtheuserisloggedin.jsp); Johan - Original Message - From: Jeremy C [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Sent: Sunday, May 13, 2001 11:47 PM Subject: RE: How to tell when a user first log's in? Peter, Thanks, however I do have 1 more question for you. I do have the top frame saying request.getRemoteUser, but how do I automatically cause that frame to get refreshed when a user first log's in? On logout, I can do that because it accesses logout.jsp (just issue a JavaScript Refresh command.) Thanks! Jeremy - [EMAIL PROTECTED] At 10:23 AM 5/12/2001 -0600, you wrote: Ad 1) %=request.getRemoteUser()% (obviously you'll have to reload the top frame) Ad 2) You will need to subclass DataSourceUerManager and add that functionality It would be possible to add that functionality on a page that the logged-in User is guaranteeed to go to, bad that would be bad design --peter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jeremy C Sent: Saturday, May 12, 2001 7:44 PM To: Orion-Interest Subject: How to tell when a user first log's in? Is it possible to attach a hook, or some means of detemining when a user first log's in? I use DataSourceUserManager... What I would like to do is two things, 1. In my top frame, indicate who you are logged in as 2. Check the last time you have changed your password, and prompt for a password change if it's past 3 months. Thanks! Jeremy - [EMAIL PROTECTED]
Re: OFFTOPIC: Homepage ===beware of virus......
Wonder if you could disable the email function and just get a random pornsite function... - Original Message - From: PHiL [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Sent: Monday, May 14, 2001 9:48 AM Subject: OFFTOPIC: Homepage ===beware of virus.. Hi, This virus do not damage anything, on first time execution it spread itselft to all the adress book and remove the sent email with subject homepage from the outlook's sent email folder, then it randomize a number from 1 to 4 and redirect to the selected porn site... You can safe run it again and again to see the different porn site :-) It afraid me that a so stupid .VBS file can do such job!!! PHiL. -Message d'origine- De : waheed rahuman [mailto:[EMAIL PROTECTED]] Envoyé : dimanche 13 mai 2001 12:51 À : Orion-Interest Objet : Re: Homepage ===beware of virus.. Hello all in this mail there is an VBscript virus beware of that regards waheed From: Erich Eichinger [EMAIL PROTECTED] Reply-To: Orion-Interest [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Subject: Homepage Date: Sun, 13 May 2001 11:59:02 +0200 Hi! You've got to see this page! It's really cool ;O) homepage.HTML.vbs __ ___ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Taglib bug?
I TRIED looking in Bugzilla first, but couldn't find anything... I have a JSP page referring to several taglibs. However, Orion seems to 'lock' the taglib reference to the first encountered JAR and therefore refuses to find subsequent tags in other taglib jars. I'm using 1.4.0 -- has this been fixed later? This 'lock' works even across pages, i.e. if I first view a page referring to taglib A and then another page referring to taglib B, Orion complains that tag B:b isn't found in A.jar! //Mikko
Re: Taglib bug?
As one who's done quite a bit with taglibs on Orion, I've never seen this kind of behavior at all. Ever. Any version. (Bugs with it, sure - but that was related to tag instantiation and not location.) More information? Samples? --- Joseph B. Ottinger [EMAIL PROTECTED] http://winter.ajacency.com/ IT Consultant
Re: WARNING. You sent a potential virus or unauthorised code
I'm not sure what this message means but I haven't sent anything to this address in about two months. Please recheck your records. [EMAIL PROTECTED] Sent by: To: Orion-Interest [EMAIL PROTECTED] owner-orion-interest@orioncc: server.comSubject: WARNING. You sent a potential virus or unauthorised code 05/13/2001 08:00 AM Please respond to Orion-Interest The MessageLabs Virus Control Centre discovered a possible virus or unauthorised code (such as a joke program or trojan) in an email sent by you. Please read this whole email carefully. It explains what has happened to your email, which suspected virus has been caught, and what to do if you need help. Some details about the infected message To help identify the email: The message sender was [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] (if this is not your email address, the message sender possibly belongs to a mailing list to which you both subscribe.) The message was titled 'Homepage' The message date was Sun, 13 May 2001 11:59:02 +0200 The message identifier was [EMAIL PROTECTED] The message recipients were [EMAIL PROTECTED] To help identify the virus: Scanner 1 (F-Secure) reported the following: F-Secure Anti-Virus for i386-linux Release 4.08 build 2260 sign.def version 2001-05-09 fsmacro.def version 2001-05-03 sign2.def version 2001-05-09 588722_2MA-OCTET-STREAM_homepage.HTML.vbs infection: VBS/VBSWG.X@mm 1 files scanned 1 infections found The message was diverted into the virus holding pen on mail server server-37.tower-1.london-2.starlabs.net (id 588722_989755233) and will be held for 30 days before being destroyed. What should you do now? If you sent the email from a corporate network, you should first contact your local Helpdesk or System Administrator for advice. They will be able to help you disinfect your workstation. If you sent the email from a personal or home account, you will need to disinfect your computer yourself. To do this you will need an anti-virus program. We suggest using one of the leading industry anti-virus packages such as McAfee, F-Secure or Cybersoft, which cost £15-£30 per copy. Getting more help We strongly recommend that you read the Support FAQs at http://www.messagelabs.com/support/FAQs.htm These will answer many of the most common queries. If you subscribe to the MessageLabs SkyScan AV Service, please contact your IT Helpdesk/Support department for further assistance. If you do not subscribe to the MessageLabs SkyScan AV Service MessageLabs will only provide recommendations and information regarding viruses. You may contact one of our Messaging Technicians at MessageLabs Helpdesk 7 days a week , 6am - 12pm on:- +44 (0)9067 579 001 All calls will be charged at £0.75p per minute. If you believe this message to be a false alarm, you can email MessageLabs Support at:- [EMAIL PROTECTED] Please quote the following Virus Pen ID when contacting Support. mail server server-37.tower-1.london-2.starlabs.net (id 588722_989755233) If replying by email, please forward this entire email. _ This message has been checked for all known viruses by the MessageLabs Virus Scanning Service. For further information
Generating primary keys
Hi mailing list, I have the following problem: the primary key for my EJB is generated at the database level ( a trigger ), so I don't want togenerate it in the ejbCreate() method. However, EJB specification says, that the use of the primary key isa MUST. Does anyone have the solution for this problem? Any help is greatly appreciated. Sergei.
RE: DeadLock with 25 users SOLVED
Philippe, It's Monday morning. Could you please help my fuzzy brain by explaining WHY it is so stupid to set all transactions to required. I'm afraid it sounds reasonable to me... perhaps I don't understand what you mean by even when reading in the database. Thanks, Nick At 12:43 PM 5/14/01 +0200, you wrote: Hi, Thanks Johan and Kirk, you are both right. Those 2 parametres are usefull for tuning the app server. But pay attention, I've used the timeout (not inactivity-timeout) under 1.3.8, it doesn't work, need to upgrade to 1.4.7 for get this working. I've discover another one: In the file orion-ejb-jar.xml you could add this option ligne: call-timeout = n n = number of millisec for waiting on the EJB's interface reply, 0 for infinite. My principal error with this deadlock was to set ALL transactions to required, even when reading in the database... So stupid ;-) My bench show that 100 users could access to our app wihtout crashing! I'll try to bench the same .EAR under BEA... Regards, Philippe PAGET. -Message d'origine- De : Johan Fredriksson [mailto:[EMAIL PROTECTED]] Envoyé : lundi 14 mai 2001 10:23 À : Orion-Interest Objet : Re: DeadLock with 25 users Or decreasing the inactivity-timeout=10 so the resource is more quickly released back to the container ? Johan - Original Message - From: KirkYarina [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Cc: PHiL [EMAIL PROTECTED] Sent: Friday, May 11, 2001 9:10 PM Subject: Re: DeadLock with 25 users I believe this is discussed in past; see the archives ( http://www.mail-archive.com/orion-interest%40orionserver.com/ ). Try increasing max-connections in data-sources.xml Kirk Yarina At 09:13 AM 5/11/01 +0200, you wrote: Hello, we just start some benchs with 25 fake users, here is the exeption: Those 25 users try to access the same EJB. Any idears, or points to check in our code to fix this kind of errors ??? Thanks. Philippe. ERROR | 09/05/2001 15:59:01:46 | NodeBmEJB : findNode(NodePK pk) | pk = (id = 0, space = WA17, componentName = news35) | Exception message: Transaction was rolled back: timed out, while waiting for (id = 0, space = WA17, componentName = news35) (started at Wed May 09 15:58:25 GMT+01:00 2001, terminated at Wed May 09 15:59:01 GMT+01:00 2001) com.evermind.server.DeadlockException: Transaction was rolled back: timed out, while waiting for (id = 0, space = WA17, componentName = news35) (started at Wed May 09 15:58:25 GMT+01:00 2001, terminated at Wed May 09 15:59:01 GMT+01:00 2001) at com.evermind.server.ejb.AbstractEJBObject.startCall(JAX) at NodeHome_EntityHomeWrapper3.findByPrimaryKey(NodeHome_EntityH omeWrapper3.ja v a:195) at com.stratelia.webactiv.util.node.control.NodeBmEJB.findNode(N odeBmEJB.java: 5 0) at com.stratelia.webactiv.util.node.control.NodeBmEJB.getFrequen tlyAskedChildr e nDetails(NodeBmEJB.java:252) at NodeBm_StatelessSessionBeanWrapper1.getFrequentlyAskedChildre nDetails(NodeB m _StatelessSessionBeanWrapper1.java:1677) at com.stratelia.webactiv.news.control.NewsSessionControl.getArc hiveList(NewsS e ssionControl.java:315) at __jspPage1_news_jsp_news_jsp._jspService(__jspPage1_news_jsp_ news_jsp.java: 4 73) at com.orionserver.http.OrionHttpJspPage.service(JAX) at com.evermind.server.http.HttpApplication.xu(JAX) at com.evermind.server.http.JSPServlet.service(JAX) at com.evermind.server.http.d4.s3(JAX) at com.evermind.server.http.d4.s1(JAX) at com.evermind.server.http.d4.forward(JAX) at com.evermind.server.http.ew.forward(JAX) at com.stratelia.webactiv.servlets.ComponentRequestRooter.doPost (ComponentRequ e stRooter.java:153) at com.stratelia.webactiv.servlets.ComponentRequestRooter.doGet( ComponentReque s tRooter.java:172) at javax.servlet.http.HttpServlet.service(HttpServlet.java:190) at javax.servlet.http.HttpServlet.service(HttpServlet.java:302) at javax.servlet.http.HttpServlet.service(HttpServlet.java:329) at com.evermind.server.http.d4.s3(JAX) at com.evermind.server.http.d4.s1(JAX) at com.evermind.server.http.eg.s9(JAX) at com.evermind.server.http.eg.dr(JAX) at com.evermind.util.f.run(JAX)
RE: Generating primary keys
two
ways of doing this...
1. map
your ejb pk to another ejb. The counter.jar does this. It creates a long for
every "beantype". See the faq at www.orionserver.com. I think there is
something under http://www.orionsupport.com/articles/ejbuniquecounter.html, also. In your ejbCreate(), get a
reference to the counter.jar, and then ask for the new pk :
long id =
com.evermind.ejb.CounterUtils.getNextID("java:comp/env/ejb/Counter",
"mybeanname");
2. See
the chain of articles by Brett McGlaughlin at http://www.flashline.com/content/community.jsp?sid=989854104625-1090580543-153#brett. Instead of using an ejb to generate your
pk references, use jdbc and a stateless session bean. In the end you do the same
thing in your ejbCreate():
long id = slsbRemote.getNextID("mybeanname");
And
whatever you do, stay away from triggers.
Regards,
the
elephantwalker
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sergei
BatiukSent: Monday, May 14, 2001 10:08 AMTo:
Orion-InterestSubject: Generating primary keys
Hi mailing list,
I have the following problem: the primary key for
my EJB is generated at the database level ( a trigger ), so I don't want
togenerate it in the ejbCreate() method. However, EJB specification
says, that the use of the primary key isa MUST. Does anyone have the
solution for this problem?
Any help is greatly
appreciated.
Sergei.
Database column creation order when using compound keys
Hello everybody, I am having some problems regarding the order in which Orion creates the database columns for compound keys for an entity bean when using CMP. I have an entity bean that models a many-to-many relationship, which has a compound key (subscriptionID userID). Now when creating the database tables Orion seems to be inconsistent on the order in which these two are mapped on the database table. On one machine subscriptionID is mapped on the first column and on another machine (or at another time) userID is mapped on the first column (and subscriptionID on the second). Now when I fill my database with a very simple SQL script sometimes my data gets mixed up because it fills the wrong column with the wrong data. Offcourse I can fixs this in the script, but is there a way to tell Orion which field should mapp to which column in the columns to be created in the database?? Thanks! Regards, Erwin Teseling
Re: Taglib bug?
Hello Mikko, I'm using 1.4.5 and everything is working fine. Perhaps is a problem in deployment files? -- Best regards, Rafaelmailto:[EMAIL PROTECTED]
Auto-deployment
Can someone give me details on the auto-deployment feature in Orion? How do you go about getting an app deployed automatically? Is there a way to turn this feature off using a tag in the orion config files? If this feature is on by default, is it possible to have an app installed on the server, but not deployed? Thanks for your help.. --CR. _ Get your FREE download of MSN Explorer at http://explorer.msn.com
unable to configure form-based authentication correctly
Hi I am unable to achieve a basic goal with orion: to force form-based authentication using the simplest form of authentication (userids and passwords stored in principals.xml). I have read all the posts on this subject on the mailing list, but to no avail. I also tried the security primer on jollem.com, but the author of this primer told me that this tutorial is not yet working. I also saw the posts by Bill Winspure on Fri, 11 May 2001, but the mail archive hasn't got the zip file attached to the mail. My application works fine without authentication, so there are no other non-security related things affecting this. My procedure to add form-based auth. 1. I add three new attributes to my web.xml: !-- attribute 1. declare the role I want to access my pages -- security-role role-namer_user/role-name /security-role !-- attribute 2. now tell the container what and how I want protected -- !-- note that the role-name attribute matches my security-role attribute above -- security-constraint web-resource-collection web-resource-nameProtected Area/web-resource-name !-- Define the context-relative URL(s) to be protected -- url-pattern/*/url-pattern !-- If you list http methods, only those methods are protected -- http-methodDELETE/http-method http-methodGET/http-method http-methodPOST/http-method http-methodPUT/http-method /web-resource-collection auth-constraint !-- Anyone with one of the listed roles may access this area -- role-namer_user/role-name /auth-constraint /security-constraint !-- attribute 3. let the container know that I want to use form-based auth., and redirect to login.jsp -- !-- the form in login.jsp conforms to the servlet 2.2 spec. naming conventions -- login-config auth-methodFORM/auth-method realm-nameExample Form-Based Authentication Area/realm-name form-login-config form-login-pagelogin.jsp/form-login-page form-error-pageerror.jsp/form-error-page /form-login-config /login-config 2. I edited the principals.xml contained in $ORION_HOME/config to contain my user and group: group name=g_user/ user username=testuser password=xxx group-membership group=g_user / /user 3. I built and deployed the application at this point, and started orion server (with a fresh application-deployment directory). Next, I went to my application sub-directory under $ORION_HOME/application-deployments. Here I edited orion-application.xml and added two security-role-mapping attributes, one each in the read-access and write-access sections as follows: namespace-access read-access namespace-resource root= security-role-mapping name=lt;jndi-user-rolegt; group name=administrators / /security-role-mapping security-role-mapping name=lt;r_usergt; group name=g_user / /security-role-mapping /namespace-resource /read-access write-access namespace-resource root= security-role-mapping name=lt;jndi-user-rolegt; group name=administrators / /security-role-mapping security-role-mapping name=lt;r_usergt; group name=g_user / /security-role-mapping /namespace-resource /write-access (notes: I tried this with and without the lt; gt;. I also tried adding just one security-role-mapping). The form-based auth. still does not work. I am presented with the login form correctly when I try to access a protected resource, but my username and password is always rejected. Is this functionality working in orion server 1.4.5? What have I missed in my steps above? Has anybody gotten this to work? Thanks in advance Humphrey _ Get your FREE download of MSN Explorer at http://explorer.msn.com
Re: Problems with SAPDB (correction)
I meant column names when I wrote row names. As far as I know the row's usually don't have any names ;) Stupid me... Anyway, the problems remain... Joni [EMAIL PROTECTED]
RE: unable to configure form-based authentication correctly
AFIK the role name and the group name have to be the same. You use r_users and g_users. This could be the problem. ATM app uses role=users and group=users. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Humphrey Sheil Sent: Monday, May 14, 2001 10:20 AM To: Orion-Interest Subject: unable to configure form-based authentication correctly Hi I am unable to achieve a basic goal with orion: to force form-based authentication using the simplest form of authentication (userids and passwords stored in principals.xml). I have read all the posts on this subject on the mailing list, but to no avail. I also tried the security primer on jollem.com, but the author of this primer told me that this tutorial is not yet working. I also saw the posts by Bill Winspure on Fri, 11 May 2001, but the mail archive hasn't got the zip file attached to the mail. My application works fine without authentication, so there are no other non-security related things affecting this. My procedure to add form-based auth. 1. I add three new attributes to my web.xml: !-- attribute 1. declare the role I want to access my pages -- security-role role-namer_user/role-name /security-role !-- attribute 2. now tell the container what and how I want protected -- !-- note that the role-name attribute matches my security-role attribute above -- security-constraint web-resource-collection web-resource-nameProtected Area/web-resource-name !-- Define the context-relative URL(s) to be protected -- url-pattern/*/url-pattern !-- If you list http methods, only those methods are protected -- http-methodDELETE/http-method http-methodGET/http-method http-methodPOST/http-method http-methodPUT/http-method /web-resource-collection auth-constraint !-- Anyone with one of the listed roles may access this area -- role-namer_user/role-name /auth-constraint /security-constraint !-- attribute 3. let the container know that I want to use form-based auth., and redirect to login.jsp -- !-- the form in login.jsp conforms to the servlet 2.2 spec. naming conventions -- login-config auth-methodFORM/auth-method realm-nameExample Form-Based Authentication Area/realm-name form-login-config form-login-pagelogin.jsp/form-login-page form-error-pageerror.jsp/form-error-page /form-login-config /login-config 2. I edited the principals.xml contained in $ORION_HOME/config to contain my user and group: group name=g_user/ user username=testuser password=xxx group-membership group=g_user / /user 3. I built and deployed the application at this point, and started orion server (with a fresh application-deployment directory). Next, I went to my application sub-directory under $ORION_HOME/application-deployments. Here I edited orion-application.xml and added two security-role-mapping attributes, one each in the read-access and write-access sections as follows: namespace-access read-access namespace-resource root= security-role-mapping name=lt;jndi-user-rolegt; group name=administrators / /security-role-mapping security-role-mapping name=lt;r_usergt; group name=g_user / /security-role-mapping /namespace-resource /read-access write-access namespace-resource root= security-role-mapping name=lt;jndi-user-rolegt; group name=administrators / /security-role-mapping security-role-mapping name=lt;r_usergt; group name=g_user / /security-role-mapping /namespace-resource /write-access (notes: I tried this with and without the lt; gt;. I also tried adding just one security-role-mapping). The form-based auth. still does not work. I am presented with the login form correctly when I try to access a protected resource, but my username and password is always rejected. Is this functionality working in orion server 1.4.5? What have I missed in my steps above? Has anybody gotten this to work? Thanks in advance Humphrey _ Get your FREE download of MSN Explorer at http://explorer.msn.com
Demo JMSChat doesn´t work with Orion 1.4.8
Hi, last week I´ve updated from version 1.47 to 1.4.8. Now I´ve problems with jms. When I start the jms demo JMSChat with java -Djava.naming.security.credentials=admin password -jar jmschat.jar I get the following error Exception in thread main java.lang.SecurityException: Invalid username/password for localhost/127.0.0.1:9127 (Login failed) at java.lang.Throwable.init(Throwable.java:96) at java.lang.Exception.init(Exception.java:44) at java.lang.RuntimeException.init(RuntimeException.java:49) at java.lang.SecurityException.init(SecurityException.java:41) at com.evermind._kfb.init(Unknown Source) at com.evermind._mkb._me(Unknown Source) at com.evermind._mkb.start(Unknown Source) at JMSChat.run(JMSChat.java:61) at JMSChat.main(JMSChat.java:29) But password and username are correct and the demo worked fine with Orion 1.4.7 and the same configuration. Is this a bug in version 1.4.8? Whats going wrong? Dieter
RE: Database column creation order when using compound keys
The order should be determined by the elements in the orion-ejb-jar.xml deployment descriptor. Unfortunately there is a bug in 1.4.5 which causes the order of compound PK fields to switch on every deployment. It was fixed in 1.4.6. See bug #242. There is another similar problem in 1.4.8 which my test project discovered, but my normal application works fine, so I haven't spent a lot of time worrying about it :-) Take a look at bug #413. Jeff -Original Message- From: Erwin Teseling [mailto:[EMAIL PROTECTED]] Sent: Monday, May 14, 2001 8:41 AM To: Orion-Interest Subject: Database column creation order when using compound keys Hello everybody, I am having some problems regarding the order in which Orion creates the database columns for compound keys for an entity bean when using CMP. I have an entity bean that models a many-to-many relationship, which has a compound key (subscriptionID userID). Now when creating the database tables Orion seems to be inconsistent on the order in which these two are mapped on the database table. On one machine subscriptionID is mapped on the first column and on another machine (or at another time) userID is mapped on the first column (and subscriptionID on the second). Now when I fill my database with a very simple SQL script sometimes my data gets mixed up because it fills the wrong column with the wrong data. Offcourse I can fixs this in the script, but is there a way to tell Orion which field should mapp to which column in the columns to be created in the database?? Thanks! Regards, Erwin Teseling
Cluster in 148:not in multicast
Has anything in clustering changed in Orion148 from Orion145. The instructions at http://www.orionserver.com/docs/http-clustering.html dont work for 148 (works for 145) It seems that the multicasting using MulticastTopicConnection is having issues. The server comes back with not in multicast. OrionServer is trying to join at localhost:9128 (JMS port) when it needs a multicast port. How do I make sure it goes to the right port? I have explicitly coded in the host,port in cluster-config. Now the exceptions are gone but it still doesnt work. Is there something else to configure? Cheers, Ash _ Get your FREE download of MSN Explorer at http://explorer.msn.com
RE: Generating primary keys
If you're required to use triggers (or some other database-specific mechanism) to generate primary keys, someone posted a clever solution to this list a long time back: use a finder method. Since you control the SQL issued for a finder method, just add a Thingie findNew(Type param, Type param); method and have it create the appropriate row in the SQL before selecting it out. BTW, the counter.jar is *not* portable. It relies on pessimistic concurrency behavior, and as far as I know the only other appserver which supports this model is WebLogic when not clustered. Even in WL 6, the default behavior is now optimistic concurrency. Here's a direct link to Brett's article about sequences (the original link has moved on to other topics): http://www.flashline.com/content/mclaughlin/bm050701.jsp?sid=98987171807 8-1066877012-153 http://www.flashline.com/content/mclaughlin/bm050701.jsp?sid=9898717180 78-1066877012-153 This is, I believe, the *only* portable way of generating sequence-type keys in EJBland. It astounds me that this is the case given that a) nearly every database offers some sort of facility for generating keys and b) the EJB container could fake it for the ones that don't. Considering how common the need to generate primary keys is, I consider this an grossly unacceptable deficiency in the spec. I'm not normally prone to believing conspiracy theories, but I have to wonder if the big RDBMS vendors sitting on the EJB committee (read: Oracle and IBM) are deliberately trying to keep CMP from becoming too popular. This is just too wierd. Jeff Schnitzer [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] http://www.similarity.com -Original Message- From: elephantwalker [mailto:[EMAIL PROTECTED]] Sent: Monday, May 14, 2001 8:38 AM To: Orion-Interest Subject: RE: Generating primary keys two ways of doing this... 1. map your ejb pk to another ejb. The counter.jar does this. It creates a long for every beantype. See the faq at www.orionserver.com http://www.orionserver.com . I think there is something under http://www.orionsupport.com/articles/ejbuniquecounter.html http://www.orionsupport.com/articles/ejbuniquecounter.html http://www.orionsupport.com , also. In your ejbCreate(), get a reference to the counter.jar, and then ask for the new pk : long id = com.evermind.ejb.CounterUtils.getNextID(java:comp/env/ejb/Counter, mybeanname); 2. See the chain of articles by Brett McGlaughlin at http://www.flashline.com/content/community.jsp?sid=989854104625-10905805 43-153#brett http://www.flashline.com/content/community.jsp?sid=989854104625-1090580 543-153#brett http://www.flashline.com . Instead of using an ejb to generate your pk references, use jdbc and a stateless session bean. In the end you do the same thing in your ejbCreate(): long id = slsbRemote.getNextID(mybeanname); And whatever you do, stay away from triggers. Regards, the elephantwalker -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sergei Batiuk Sent: Monday, May 14, 2001 10:08 AM To: Orion-Interest Subject: Generating primary keys Hi mailing list, I have the following problem: the primary key for my EJB is generated at the database level ( a trigger ), so I don't want to generate it in the ejbCreate() method. However, EJB specification says, that the use of the primary key is a MUST. Does anyone have the solution for this problem? Any help is greatly appreciated. Sergei.
RE: Caching XLS style sheets
i am VERY interested.. artie Quoting Jeff Schnitzer [EMAIL PROTECTED]: Excel stylesheets? Perhaps you mean XSL :-) If you use the JAXP 1.1 transforms api, creating a Templates object should produce a precompiled version of an XSLT. Although this will be completely dependent on implementation, I don't believe any implementations actually compile to bytecode - really precompiled means preparsed and maybe stored in a format for efficient processing. On a related note: A friend and I are nearly finished constructing a simple MVC framework with sophisticated XSLT support. We will be publishing it with an Apache-style license in about a week. Cool things this framework does: . Output from a view can be run through a config-defined sequence of iterative XSLT transformations. . The JavaBeans model returned from a command can be automagically adapted to a DOM for XSLT transformation without JSP, XSP, or any other templating language. Efficiently go directly from java beans to XSLT. . The transformation process can be halted at any step, allowing the XSLT creators/designers to work from static XML generated from the previous step(s). . Other templating systems can be used to feed input to the transformation process, including JSP and Velocity. Plain XML inputs can be used as well. . XSLT transformations are not required. It's still an elegant MVC framework for simple JSP/Velocity/? - HTML processing. I've attached an example configuration file so you can see the kinds of things you can do with the framework. Is anyone interested? Jeff Schnitzer [EMAIL PROTECTED] http://www.similarity.com http://www.infohazard.org/junitee -Original Message- From: Vic Cekvenich [mailto:[EMAIL PROTECTED]] Sent: Sunday, May 06, 2001 5:55 PM To: Orion-Interest Subject: Caching XLS style sheets I asked a question on an MVC application architecture using XLS, and got advice to cache XLS / XSLT style sheets, and pre compile them. Can someone give me some more background on this. How? What if the content is dynamic? (2 million items and 100,000 of styles + with any combination) Thanks in advance, Vic
Resending:Orion148 Clustering fails
Is anyone able to get Orion148 clustering to work. With Orion145 it was a piece of cake. However for 148 the loadbalancer doesnt seem to detect the new servers at all. If I turn on jms.debug I can see that the individual nodes do get JMS messages but the loadbalancer gets no message at all. If anyone has gotten it to work please let me know how? Cheers, Ashok _ Get your FREE download of MSN Explorer at http://explorer.msn.com
CMP Primary Key and ejbCreate
When I generate a CMP bean with a Primary Key Class, it compiles and packages fine as far as the java side is concerned, however, when it is deployed, it has an issue. According to page 69 of the J2EE developers guide (I checked to be sure I wasn't just talking about anything), it says that if the bean has Container Managed Persistence, then the ejbCreate method should return null... the container handles that along with ejbFindByPrimaryKey... So, I have left it as null, but am using a custom Primary Key class. When I try to deploy it, it says: Error compiling ... filename ... method public void ... ejbCreate() throws javax.ejb.CreateException, java.rmi.RemoteException doesn't return a ... PrimaryKey (the path to the primary key class) Then the deploy fails. In JBoss, just to see what it had to say, it at least will deploy it but still gives a warning saying: The return type of an ejbCreate(...) method must be the entity bean primary key type. From what I can tell in the documentation, these errors are wrong On a BMP bean, then yes I should have to return the Primary Key class type from the ejbCreate method, this is stated in the developers guide, but not for a CMP bean. In the 1.3 preview release of the developers guide, it states the same thing for BMP beans, however, it doesn't say anything about CMP -- it says TBD ... maybe To Be Discussed... like TBA, I don't know... but considering we're still using 1.2.1 standards, I'd like to know if I'm just completely wrong, or this issue has been overlooked in the orionserver (and jboss to some degree) deployment. If it has changed since earlier versions of EJB specs and I'm just not seeing it, I'd appreciate someone explaining it to me. I've run this through VisualAge Enterprise Edition 3.5 as well... it works fine with ejbCreate returning null on a CMP with a primary key class, and if I try to tell it to return the key type, then it flags warnings about it. I can fool it into thinking everything is alright by setting the ejbCreate to return the primary key, but is this the correct way of doing this considering what the specs say? Thanks in advance. -- Ben Christensen Novisum Development Inc. www.novisum.com [EMAIL PROTECTED] 780-909-4707
RE: Struts and Orion - the example app [EXPIRED TRIAL LICENCE]
Upgrade to Orion 1.4.8. Version 1.4.7 and prior are missing some classloader features that Struts uses (for no good reason, as far as I can tell). Jeff -Original Message- From: Sam [mailto:[EMAIL PROTECTED]] Sent: Monday, May 14, 2001 7:16 PM To: Orion-Interest Subject: Struts and Orion - the example app [EXPIRED TRIAL LICENCE] I installed struts and tried to run the example app and received the following error: 500 Internal Server Error javax.servlet.jsp.JspException: Cannot find message resources under key org.apache.struts.action.MESSAGE at org.apache.struts.util.RequestUtils.message(RequestUtils.java:285) at org.apache.struts.taglib.bean.MessageTag.doStartTag(MessageTag .java:239) at /index.jsp._jspService(/index.jsp.java:55) (JSP page line 8) at com.orionserver.http.OrionHttpJspPage.service(JAX) at com.evermind.server.http.HttpApplication.xj(JAX) at com.evermind.server.http.JSPServlet.service(JAX) at com.evermind.server.http.d3.sw(JAX) at com.evermind.server.http.d3.su(JAX) at com.evermind.server.http.ef.s1(JAX) at com.evermind.server.http.ef.do(JAX) at com.evermind.util.f.run(JAX) I followed the instruction to correct this and the error still appeared. Has anyone crossed this bridge successfully???
