Re: Undeliverable:
List-managers could you please drop all messages from MAILER-DAEMON@* ? This spam is unacceptable! On Sat, 16 Jun 2001, Mail Delivery Subsystem wrote: Important information! This e-mail has not been delivered to [EMAIL PROTECTED] The receiver's mailbox is full. When the mailbox has been emptied you will be able to resend this e-mail. Best regards Telia Internet
Re: Force Logon after X minutes
Returning a 401 HTTP response to the user should be sufficient to force
current IE and Netscape browsers to re-request user credentials. However I
have noticed that many versions (including IE5.5) will cache the password
thus allowing the user to simply hit enter to re-authenticate.
It is impossible to be certain, on the server-side, that a password is
coming from the fingers of a user and not from the cache of a browser.
Unless you use one-time-passwords, S/KEY etc
As a result, a common solution has become to temporarily redirect to a
login servlet which remembers the requested page (or just shoves it in a
hidden input tag, but storing in the session seems cleaner) and forwards
the user upon correct authentication. At least then you're forcing them
through a form. This behaviour preserves bookmarking, but may break a POST
submission if the user spends ages filling in the original post (this
could be finessed).
Unfortunately I see a general trend towards browsers remembering form
passwords. Complain to your browser vendor (ha!). If you're really still
concerned, implement S/KEY and issue hardware to your users. Or use certs.
I'm curious - has anyone done this already? A usermanager with S/KEY
support?
J
On Wed, 13 Jun 2001, Nick Newman wrote:
The problem is that with BASIC authentication the *browser* remembers the
logon information and resends it whenever needed. Hence things like
invalidating the session will not work, since the browser will simply log
the user in again without their intervention.
So far as I know, there is no solution to this problem. If you use BASIC
authentication, the user has to shut down the browser to log off.
If someone knows differently, I too would certainly love to hear the answer.
Nick
At 03:18 PM 6/13/01 -0400, you wrote:
is it too obvious to say:
send out the pages w/ an expire time
set the http session expiration to a desired interval to prevent use after x
minutes...create a logoff function that invalidates their session...
is that too simplistic?
regards,
Mike Conway
cybermaster wrote:
%
if (session != null) {
session.invalidate();
}
%
--peter
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Smith Jason
Sent: Wednesday, June 13, 2001 6:38 AM
To: Orion-Interest
Subject: Force Logon after X minutes
I am custom user-authentication.
The user and groups are in a database and I am using BASIC authentication.
How can I allow users to logoff w/o them closing their browser?
How can I force them to logon again after x minutes?
Thxs,
Jason
Re: JDom and Orion
On Fri, 15 Dec 2000 [EMAIL PROTECTED] wrote: So my question is, is it ok to swap out Orion's old xerces.jar for the new one? Will I run into unforseen trouble down the road? Is there another way of solving this problem that i am unaware of or too ignorant to figure out? Xerces has had a consistent interface for many versions back, and installing the latest release (Xerces-J v1.2.3) hasn't given me any problems. I wouldn't recommend installing the development-track "Xerces 2" which is alpha quality and may not implement the same interface. - J -[ Joshua Goodall ]--- -[ Chief Systems Architect, IP RD ]- Cook, Geek, Lover -- -[ [EMAIL PROTECTED] ]--- [EMAIL PROTECTED] --
Re: Deployment problems (web-app not found in application)
Hi Malcolm Three things: 1. in application.xml, change the web-uri to a relative path. i.e. ... web-urimvcapp-web.war/web-uri ... Orion will correctly find the .war file relative to the content of the .ear file. 2. it may not be a problem on a Windows box, but if you deploy this to a unix platform, your .war file includes *both* directories web-inf/ and WEB-INF/ - and orion finds one but not the other. The uppercase one is correct (you have web.xml in the lowercase one). 3. If you need to repost ... please send a URL to download the .ear, rather than attaching the .ear itself. It's a bit more mailing-list friendly. :) Regards Joshua -[ Joshua Goodall ]--- -[ Chief Systems Architect, IP RD ]- Cook, Geek, Lover -- -[ [EMAIL PROTECTED] ]--- [EMAIL PROTECTED] -- On Fri, 15 Dec 2000, Malcolm Ferguson wrote: I am having problems deploying an application on orion. I have deployed the attached .ear file (which contains a web-app with a couple of .jsps and a servlet) to e:\applications and made the following config file changes, in server.xml: application name="mvcapp" path="e:\applications\mvcapp.ear" / and in default-web-site.xml: web-app application="mvcapp" name="mvcapp-web" root="/mvcapp" / when I request one of the pages (i.e. http://development/mvcapp/register.jsp) I get the following error message: Error instantiating web-application No web-app named 'mvcapp-web' found in application 'mvcapp' I have attached the .ear file, any help would much appreciated. mvcapp.ear *** Mac Ferguson, Senior Developer, NKaos Interactive Media (http://www.nkaos.com), 579 Richmond Street West, Suite 400 Toronto, ON M5V 1Y6 (Phone) (416)504.8931 x316 (Fax) (416)504.8472 ***
Multiple implementations of the same class with Orion.
I have a serializable class that I want to pass between the JSP container and a session EJB container. Within the EJB container it uses a specialized storage library, and within the JSP it should use a stub library with NOPs in place of the storage library. Both the real and stub libraries are .jar files. Unfortunately I don't see how to persuade Orion to invoke the real library when the class is used within the EJB container, and then to invoke the stub library when the class is used within the JSP container. Effectively I want to rig the classloaders and method dispatch so that com.blah.Storage.method is invoked from real.jar when called from an EJB, and from stub.jar when called within a JSP. So there are two implementations of the same class. Can anyone suggest how to configure this? At the moment I have two unappetizing alternatives: 1. Two parallel inheritance diagrams with an abstract factory doing conversion between classes for passing to/from JSP. 2. Two instances of Orion in two VMs. J -- Joshua GoodallA friend of mine works for a medium-sized telco. He has no phone, because (and I quote) "the lady who provisions phones is on holiday"
RE: xerces limitation?
Runar, It explains my problem but doesn't solve it :). JBuilder under Win32 inserts this encoding for deployment descriptors whenever the DD is modified. Fortunately, JB also allows me to remove it in the source view - so the irritation is very minor. Thanks for the explanation and pointer. Regards Joshua On Fri, 10 Nov 2000, Runar Svendsen wrote: The problem lies not within xerces, but in the fact that any XML parser will fail with a fatal error when encountering an encoding name it doesn't recognize. The encoding you are using (cp-1252) is the default windows encoding, but it is also known as "ISO-8859-1" and it is by this name XML will recognize it. Your XML header should then read: ?xml version="1.0" encoding="ISO-8859-1" For further info, see http://msdn.microsoft.com/library/psdk/sql/2_006_15.htm http://msdn.microsoft.com/library/psdk/sql/2_006_15.htm Hope this solves your problem! kind regards, for Exense ASA Runar Svendsen [EMAIL PROTECTED]Karenslyst alle 9a phone. +47 23 13 65 00P.O.Box 303 Skoyen fax. +47 23 13 65 01N-0213 Oslo mobil. +47 93 42 56 19 http://www.exense.com/ http://www.exense.com/ - makes sense of the e in your business -Original Message- From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] ]On Behalf Of Joshua Goodall Sent: 9. november 2000 21:48 To: Orion-Interest Subject: xerces limitation? if I begin my ejb-jar.xml with: ?xml version="1.0" encoding="Cp1252"? rather than ?xml version="1.0"? (sans encoding) then Orion cannot parse it. Is this a known limitation of Xerces? - Joshua
xerces limitation?
if I begin my ejb-jar.xml with: ?xml version="1.0" encoding="Cp1252"? rather than ?xml version="1.0"? (sans encoding) then Orion cannot parse it. Is this a known limitation of Xerces? - Joshua
Re: There has GOTTA be a BETTER way !!!!
On Fri, 7 Nov 2003, Keith Kwiatek wrote: How is everyone building their web apps with hand coded programs, or using automagic tools? I use JBuilder Enterprise 4 which does do skeletal work, including matching up home remote interfaces to the businessmethods of beans, and it produces orion-friendly jar files. It sure seems like there should be some sort of tool that you can just point at database tables, and have it build the jsp or ejb entity bean. AND shouldn't there be a tool that you can just drop the bean on an html template thus allowing visual access to the bean fields? Hmm... jbuilder allows you to treat an EJB the same way other beans can be modified wrt set/get methods and properties. You can't access ejb's directly from a jsp page (like a normal bean) can you? Yes, you can, if you prepare the ground first. Any tools that will automagically wrap an ejb in a bean for presentation in a JSP? Create a class that does the gruntwork for you, and put it in a useBean declaration at the top of the page (jbuilder does this for you, and can create skeletal client code too). If it sounds like I have shares in Borland... heh. no. alternatively, if deploying to Orion, use the ejb taglib supplied with the demos (search for ejbtags.jar) Am I off base here, or are ejb's a lot more work? How can people talk about how EJB's "speed development time"?!? For distributed apps, it's much easier than raw RMI or CORBA. EJB also has a better defined instantiation lifecycle. If you need those things (plus all the other bits that EJB containers provide) then you can cut development time, especially if you're using tools... but I won't do any more evangelism here :) -[ Joshua Goodall ]--- -[ Chief Systems Architect, IP RD ]- Cook, Geek, Lover -- -[ [EMAIL PROTECTED] ]--- [EMAIL PROTECTED] --
Re: Stateful Session timeout, JSPs
This is an old thread, but I was browsing archives and had a contribution to make. Thomas Munro wrote: I have a (1) JSP session which stores a reference to (2) a stateful session EJB. If either times out, I want the user to be bounced to a page where they have to log in (again). The problem is that the JSP session and the session EJB time out under different conditions -- that is to say, merely surfing around the web application will keep the JSP session alive, but the EJB is only kept alive by accessing it, which doesn't necessarily happen on every page. Otherwise, I could simply set the EJB to timeout after a longer time than the JSP session. This was discussed and the best suggestion (from Kevin Duffey) was to use stateless beans and keep all state in the HttpSession. However, if you are architecturally obliged to use stateful beans, part of the solution might be to make the bean timeout very long, and set a HttpSessionBindingListener (HSBL) attribute in the HttpSession (you could accomplish this with useBean in session scope). Your HSBL is then signalled by the servlet container to cleanly handle the case (e.g. calling homeinterface.remove(mysession) ) where the JSP session times out before the long-lived stateful session bean. This doesn't make things any prettier if you restart the EJB container, or if you have to have a short timeout for the session bean, but it might fit your model. J -[ Joshua Goodall ]--- -[ Chief Systems Architect, IP RD ]- Cook, Geek, Lover -- -[ [EMAIL PROTECTED] ]--- [EMAIL PROTECTED] --
Orion JBuilder 4 Enterprise
I've just started testing JBuilder 4 Enterprise Edition. One of the nice things about it is the integration with the (included) Inprise Application Server. The OpenTools IDE includes hooks for integration with pretty much any application server, especially for EJB deployment. So, before I start coding the glue to join JB4E up with Orion, is anyone else already working on this (even Evermind?). Joshua -[ Joshua Goodall ]--- -[ Chief IP Systems Architect ]-- Cook, Geek, Lover -- -[ [EMAIL PROTECTED] ]--- [EMAIL PROTECTED] --
RE: EJB vs Servlets
A very effective technique can be to use an OODMS (e.g. ObjectStore, Objectivity) rather than entity beans, and then code session EJBs to encapsulate logic. I've never liked O/R mappings. It's a constant disappoint to me that EJB doesn't generically support the transparent mapping of entity EJBs to an OODB, although BMP could emulate it with careful use of the ODMG API's. I know that this is basically what ODI's Javlin module does, but that's a platform-limited product. - Joshua Goodall -Original Message- From: Kyle Cordes [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 10, 2000 8:51 PM To: Orion-Interest Subject: Re: EJB vs Servlets This strikes me as a straw-man argument. There is no reason that servlet code must use JDBC directly. There are many object-wrapper products available that work similarly to CMP beans; such products predate EJB by a long, long time. -Kyle Cordes - Original Message - From: Mike mailto:[EMAIL PROTECTED] Cannon-Brookes To: Orion-Interest mailto:[EMAIL PROTECTED] Sent: Monday, October 09, 2000 6:08 PM Subject: RE: EJB vs Servlets I use EJBs in a high volume environment and have had no problems with scalability or speed yet. I have to say once you know EJBs well enough, dev't is definitely faster than with servlets. The sheer volume of JDBC code and debugging required in a servlet outweighs the quick speed you can do the same thing in EJBs. (See ejb-maker for an example). Mike
RE: apache as web server + orion as app server
Assuming that you can't convince your management otherwise, you can use apache's mod_proxy (in ProxyPass aka reverse proxy mode). e.g. in httpd.conf (this can also go in your VirtualHost directive sections) ProxyPass /myapp http://appserver.mydomain.com:8080/ http://appserver.mydomain.com:8080/ ProxyPassReverse /myapp http://appserver.mydomain.com:8080/ http://appserver.mydomain.com:8080/ ProxyVia On This will *not* cause Apache to perform caching -only reverse proxying. You might get finer URL-matching granularity with the ProxyRemote directive or even Apache's mod_rewrite, but I haven't tried those. J -[ Joshua Goodall ]- -[ Chief IP Systems Architect ] at home: --- -[ [EMAIL PROTECTED] ]- [EMAIL PROTECTED] -- -Original Message- From: thomas [ mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 04, 2000 1:03 PM To: Orion-Interest Subject: apache as web server + orion as app server dear all, my company plans to use apache as our web server (port:80) and orion as the app server (port:8080) (for jsp, servlet, mainly ejb), the main problem we facing now is configuation. i.e. how to config apache so that all jsp, servlet, ejb request will forward to orion??? many many thanks ! thomas ([EMAIL PROTECTED])
Using OODB with Orion
Has anyone attempted using an OODB - e.g. ObjectStore or Objectivity/DB with Orion? I am about to attempt this and wondered if anyone can share pitfalls/tips about the interaction of CMP, BMP and OODB native persistence. Online references to using OODBs with EJB would also be welcome. - Joshua -[ Joshua Goodall ]--- -[ IP Systems Architect ] at home: --- -[ [EMAIL PROTECTED] ]--- [EMAIL PROTECTED] --
