This state is transactional, I take it?
On Wed, 18 Jan 2006 [EMAIL PROTECTED] wrote:
>
> On 18 Jan 2006, at 18:10, lichtner wrote:
> > It looks like a map-like interface. When you say this could manage
> > state
> > for OpenEJB, what kind of state do you have in mind?
>
> For a given client in E
Some questions, pls see below.On 1/19/06, David Jencks <[EMAIL PROTECTED]> wrote:
First of all, someone pointed me recently to https://openjacc.projects.dev2dev.bea.com/ which looks like it shares somegoals with us. I can't tell how its license affects our ability to
use it, and would appreciate s
On 18 Jan 2006, at 18:10, lichtner wrote:
It looks like a map-like interface. When you say this could manage
state
for OpenEJB, what kind of state do you have in mind?
For a given client in EJB / JBI / Lingo / SCA there tends to be
chunks of state for each client. e.g. in EJB a single EJB
That would be great.
Regards,
Alan
Matt Hogstrom wrote, On 1/18/2006 6:29 PM:
Are there any people on the Harmony project that might (are) interested
in an ORB? Seems like prime territory for them.
Otherwise it looks good.
Alan D. Cabrera wrote:
Here is the incubation proposal
http://wi
That would be great.
Regards,
Alan
Matt Hogstrom wrote, On 1/18/2006 6:29 PM:
Are there any people on the Harmony project that might (are) interested
in an ORB? Seems like prime territory for them.
Otherwise it looks good.
Alan D. Cabrera wrote:
Here is the incubation proposal
http://wi
On 1/16/06, Hiram Chirino <[EMAIL PROTECTED]> wrote:
> Hi Guys,
>
> I've done a release candidate build of ActiveMQ 4.0 M4 and have
> posted it here:
> http://people.apache.org/~chirino/incubator-activemq-4.0-M4/
> I've tagged the source for that build as:
> https://svn.apache.org/repos/asf/incubat
[
http://issues.apache.org/jira/browse/GERONIMO-1495?page=comments#action_12363201
]
erik daughtrey commented on GERONIMO-1495:
--
The patch has been tested against trunk and branches/1.0.
It should be applied to both.
> Installer build failure wh
[
http://issues.apache.org/jira/browse/GERONIMO-1495?page=comments#action_12363200
]
erik daughtrey commented on GERONIMO-1495:
--
This patch should be applied to both trunk and branches/1.0.
it's been tested on both.
> Installer build failure when
Are there any people on the Harmony project that might (are) interested in an
ORB? Seems like prime territory for them.
Otherwise it looks good.
Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote
It looks like a map-like interface. When you say this could manage state
for OpenEJB, what kind of state do you have in mind?
On Wed, 18 Jan 2006, James Strachan wrote:
> I got chance to have a mini-hackathon with some geronimo committers
> over the weekend to hack up a real simple client API to
Ok...besides my "great stuff"...I really mean that.
I took a look at the API and its a pretty good start to make a generic
pluggable layer for state clustering management.
I like this.
Jeff
James Strachan wrote:
> I got chance to have a mini-hackathon with some geronimo committers over
> the we
Really cool stuff!
James Strachan wrote:
> I got chance to have a mini-hackathon with some geronimo committers over
> the weekend to hack up a real simple client API to some kind of state
> store, which could be clustered, that the OpenEJB, ServiceMix, Lingo and
> Tuscany guys could use.
>
> Rath
I got chance to have a mini-hackathon with some geronimo committers
over the weekend to hack up a real simple client API to some kind of
state store, which could be clustered, that the OpenEJB, ServiceMix,
Lingo and Tuscany guys could use.
Rather than focussing on the possible technical imp
[ http://issues.apache.org/jira/browse/GERONIMO-1482?page=all ]
Alan Cabrera resolved GERONIMO-1482:
Fix Version: 1.x
Resolution: Fixed
Thanks!
> Add CORBA spec version 3.0
> --
>
> Key: GERONIMO-1482
>
[ http://issues.apache.org/jira/browse/GERONIMO-1495?page=all ]
erik daughtrey updated GERONIMO-1495:
-
Attachment: installer-trunk-maven102-fix.patch
This patch fixes the build and works with both Maven 1.0.2 and 1.1 beta 2.
> Installer build failu
Installer build failure when using Maven 1.0.2
--
Key: GERONIMO-1495
URL: http://issues.apache.org/jira/browse/GERONIMO-1495
Project: Geronimo
Type: Bug
Components: installer
Versions: 1.0
Environment: any
My sense is that we'll be looking at EJB3 for Geronimo 2.0, to be
delivered in the 6+ month time frame. I think OpenEJB would be a
logical place to raise this issue -- I know David Blevins has a lot of
thoughts on what should go into OpenEJB 3.
Aaron
On 1/18/06, Bobby Abraham <[EMAIL PROTECTED]>
I have been scanning the geronimo lists and haven't seen any discussion
of moves toward ejb3 or jsr220 support.
Has any of this development stated yet ?
Should I be looking on openejb lists for this discussion ?
I am interested to know if the plan is to extend openejb or to add
another a persiste
Ok, I am not fixed on multiple-active-sessions.
But my concern is high availability with single-active-session model under high load conditions.
As u pointed out,
>In the web world, clients commonly throw multiple concurrent requests at>clusters, however, if we could assure total affinity, the
Hi Rajith,
the following link is the *Notation Guide* for confluence that provides
available formats.
http://opensource2.atlassian.com/confluence/oss/renderer/notationhelp.action?section=all
Here are just a few tips for writing documentation that I have found useful.
- read other articles publi
[ http://issues.apache.org/jira/browse/GERONIMO-1494?page=all ]
John Sisson updated GERONIMO-1494:
--
Summary: Potential infinite loop in ActiveMQ shutdown processing (was:
Potential)
> Potential infinite loop in ActiveMQ shutdown processing
> -
Dain Sundstrom wrote:
On Jan 18, 2006, at 2:39 PM, Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Looks fine to me.
Should this also get sent to the incubator list or do we wait until
On Jan 18, 2006, at 3:48 PM, Dain Sundstrom wrote:
On Jan 18, 2006, at 2:39 PM, Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Looks fine to me.
agreed.
Should this also get sent
On Jan 18, 2006, at 2:39 PM, Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Looks fine to me.
Should this also get sent to the incubator list or do we wait until
after the vote?
Al
Potential
--
Key: GERONIMO-1494
URL: http://issues.apache.org/jira/browse/GERONIMO-1494
Project: Geronimo
Type: Bug
Components: ActiveMQ
Versions: 1.0
Reporter: Kevan Miller
Priority: Minor
Fix For: 1.1
The geronimo.log posted to h
Jules has the documentation for clustering and I am suggesting him to get that documentation
published in confluence.
Currently, there is just an empty entry in the Table of Contents pointing to *Clustering* in the
*Performance and high availability* section.
You can see the TOC here
http://o
Deadlock in ActiveMQ close processing
-
Key: GERONIMO-1493
URL: http://issues.apache.org/jira/browse/GERONIMO-1493
Project: Geronimo
Type: Bug
Components: ActiveMQ
Versions: 1.0
Environment: Geronimo 1.0
Reporter:
[ http://issues.apache.org/jira/browse/GERONIMO-1458?page=all ]
Alan Cabrera resolved GERONIMO-1458:
Resolution: Fixed
> Use JacORB IDL Compiler instead of Sun's idlj
> -
>
> Key: GERONIMO-145
[ http://issues.apache.org/jira/browse/GERONIMO-1458?page=all ]
Alan Cabrera reassigned GERONIMO-1458:
--
Assign To: Alan Cabrera (was: Anders Hessellund Jensen)
> Use JacORB IDL Compiler instead of Sun's idlj
> --
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Should this also get sent to the incubator list or do we wait until
after the vote?
Alex Karasulu and I were talking about it and we both think that it
might be
I have also noticed that using struts tag to write out a string will take care of the problem.
Cheers
PrasadOn 1/18/06, Prasad Kashyap <[EMAIL PROTECTED]> wrote:
Jeff, to answer your question about containers on other servers
handling XSS, I can say that WebSphere too leaves it to the apps to
pro
Hey Hernan,
If u can publish a few tips on basic formatting with confluence that will help.
Maybe an email or a doc itself within confluence will do.
Regards,
Rajith.
On 1/18/06, lichtner <[EMAIL PROTECTED]> wrote:
So where is this document now? I am not very familiar with the web sitethere
Jeff, to answer your question about containers on other servers
handling XSS, I can say that WebSphere too leaves it to the apps to
protect themselves. Would it be too paranoid for a container to handle
this ?
Joe, the scripts can be entered on the request just like any other parameter using the i
So where is this document now? I am not very familiar with the web site
there seems to be more than one place.
On Wed, 18 Jan 2006, Hernan Cunico wrote:
> Hi Jules,
> many of the articles (if not all) started the same way and many of them are
> still a work in progress.
>
> It would be great if
[
http://issues.apache.org/jira/browse/GERONIMO-1448?page=comments#action_12363171
]
Kevan Miller commented on GERONIMO-1448:
Hmmm. I was a bit curious as to why this fix would work. I just tested on trunk
and it's not working for me. After startin
Hi Jules,
many of the articles (if not all) started the same way and many of them are
still a work in progress.
It would be great if you can publish your doc there, I can give you a hand with the confluence
formatting if you want to.
Cheers!
Hernan
Jules Gosnell wrote:
Hernan Cunico wrote:
[ http://issues.apache.org/jira/browse/GERONIMODEVTOOLS-49?page=all ]
Sachin Patel resolved GERONIMODEVTOOLS-49:
--
Resolution: Fixed
Assign To: Sachin Patel
> Add resource reference GUI created unnecessary target-name elements
> ---
[ http://issues.apache.org/jira/browse/GERONIMO-1336?page=all ]
Donald Woods updated GERONIMO-1336:
---
Fix Version: 1.1
Priority: Minor (was: Major)
Validated patch against latest 1.0 branch.
> Setting the Max PoolSize on a DataBase pool with in
resource reference specified in geronimo-web.xml is not shown up in the naming
tab of the geronimo web deployment plan editor
-
Key: GERONIMODEVTOOLS-50
UR
Add resource reference GUI created unnecessary target-name elements
---
Key: GERONIMODEVTOOLS-49
URL: http://issues.apache.org/jira/browse/GERONIMODEVTOOLS-49
Project: Geronimo-Devtools
Type: Bug
Compo
[ http://issues.apache.org/jira/browse/GERONIMODEVTOOLS-34?page=all ]
Lin Sun closed GERONIMODEVTOOLS-34:
---
This issue can be closed now. The only thing is that if you don't specify a
target-name, the target-name element will still appear in the sour
[ http://issues.apache.org/jira/browse/GERONIMO-1449?page=all ]
Donald Woods reassigned GERONIMO-1449:
--
Assign To: Matt Hogstrom (was: Donald Woods)
Matt, can you apply this patch to the 1.0 branch and trunk?
> Cannot build from Geronimo 1.0 src z
[ http://issues.apache.org/jira/browse/GERONIMO-1449?page=all ]
Donald Woods updated GERONIMO-1449:
---
Attachment: Geronimo-1449.patch
Attaching patch for Part 2 of the reported problem.
> Cannot build from Geronimo 1.0 src zip - issues with missing dep
[ http://issues.apache.org/jira/browse/GERONIMO-1449?page=all ]
Donald Woods updated GERONIMO-1449:
---
Geronimo Info: [Patch Available]
Fix Version: 1.1
Assign To: Donald Woods
Looks like part 1 was fixed yesterday.
Part 2 - Turns out that
Snippets from another offline conversation with the Tomact folks..
>> Has Tomcat (the container) considered checking input URIs for scripting
>> tags and rendering them innocuous by substitution (e.g.
Ok...so would there be any interest in a Geronimo valve that we can
include with the container, and developers can choose to add it in at
the Engine (full container), Host, or context levels? This way if they
want such filtering...just add in the valve.
Comments?
Joe Bohn wrote:
>
> I agree tha
I agree that the application should code defensively for these types of
attacks. However, I'm still wondering if this type of attack isn't
something that the containers could assist with as well.
IIUC the attack is basically accomplished by appending some script to a
valid URL. If this URL
Jeff, I believe it is the responsibility of the application to secure
itself against XSS attacks, and not the web container's. As you know,
the web container really has no way to differentiate between
legitimate and "tainted" content in the output stream.
The container could do paranoid things suc
I am actually looking for another job/contract right now (in the San Diego
area, or I can telecommute), so I thought I would mention it in case
anybody knows of any openings.
Guglielmo
[
http://issues.apache.org/jira/browse/GERONIMO-1474?page=comments#action_12363140
]
Paul McMahan commented on GERONIMO-1474:
Please note that the patch for the admin portlets does *not* address any XSS
vulnerabilities in the sample applications.
[ http://issues.apache.org/jira/browse/GERONIMO-1474?page=all ]
Paul McMahan updated GERONIMO-1474:
---
Geronimo Info: [Patch Available]
> Cross site scripting vulnerabilites
> ---
>
> Key: GERONIMO-1474
>
[ http://issues.apache.org/jira/browse/GERONIMO-1474?page=all ]
Paul McMahan updated GERONIMO-1474:
---
Attachment: GERONIMO-1474.patch
Attaching a patch that will escape any special html chars read from the web,
derby, and system logs before displaying
[
http://issues.apache.org/jira/browse/GERONIMO-1422?page=comments#action_12363134
]
Kevan Miller commented on GERONIMO-1422:
Oops, I forgot...
branches/1.0:
Sendingconfigs/activemq-broker/src/plan/plan.xml
Transmitting file data .
Committe
[ http://issues.apache.org/jira/browse/GERONIMO-1422?page=all ]
Kevan Miller closed GERONIMO-1422:
--
Resolution: Fixed
As Jules suggested, ActiveMQ's shutdown handler was being invoked. This meant
that the broker was stopping before Geronimo could
Where I am going at with this...is this a vulnerability caused by coding
the apps, or the containers themselves?
i.e., Will I have this problem with a perl app running on httpd? or
ASP/C# on IIS? Is this type of vulnerability a facet of responsibility
that lies on the container, or the developer?
First of all, someone pointed me recently to https://
openjacc.projects.dev2dev.bea.com/ which looks like it shares some
goals with us. I can't tell how its license affects our ability to
use it, and would appreciate some informed opinions.
I would like our JACC implementation to be plugabl
On Wed, 18 Jan 2006, Jules Gosnell wrote:
> I haven't been able to convince myself to take the quorum approach
> because...
>
> shared-something approach:
> - the shared something is a Single Point of Failure (SPoF) - although
> you could use an HA something.
It's not really a spof. You just fai
On Jan 18, 2006, at 6:29 AM, Alan D. Cabrera wrote:
[EMAIL PROTECTED] wrote, On 1/17/2006 7:50 AM:
I started refactoring login service along the lines discussed with
Alan, David, and others at the apachecon. This includes
simplifying login service, and authentication by assertion,
delegat
On Jan 18, 2006, at 6:42 AM, Vamsavardhana Reddy wrote:
Hi,
I see that there is a ServerInfo interface in
org.apache.geronimo.system.serverinfo package. This has getVersion
(), getBuildDate(), getBuildTime(), getBaseDirectory(), getCopyright
() methods. Is there any other information (lik
On Jan 18, 2006, at 11:24 AM, Jeff Genender wrote:
So assuming this appears to be somewhat "examples" related, is this
truly a container problem, or just the jsp examples implementation?
IANASE, but it seems that any vulnerabilities must be fixed in the
apps themselves -- certainly seems li
does not take text content. You can look for
referenceType in
http://geronimo.apache.org/schemas-1.0/geronimo-config-1.0.xsd
Basically, referenceType extends patternType which holds a
gbean-nameGroup, which can be either a (which holds a
full GBean name) or a bunch of separate elements.
If the
Can we resolve the Confluence vs. MoinMoin issue? Everything is
currently in MoinMoin except the documentation that Hernan has been
working on, is that right? If we're not committed to moving to
confluence, please put any Wiki content in MoinMoin. If we are
committed to moving to confluence, let
Hernan Cunico wrote:
Hi Jules,
can you put your docs in confluence!?
There is already a section for performance in the TOC, it would be
great if you put the clustering documentation there.
OK - can do, if everyone is happy with this...
It is a pretty rough doc though... the rest of the stu
Hi all,
I am developing a configuration plan involving
multiple GBeans. One of them, MainGBean, will make use
of the other GBeans. I am specifying the dependencies
as follows:
http://geronimo.apache.org/xml/ns/deployment";
configId="task/SampleGBean"
>
So assuming this appears to be somewhat "examples" related, is this
truly a container problem, or just the jsp examples implementation?
Jeff
Kevan Miller wrote:
> Presumably in response to Dave's email to Tomcat, the following changes
> were made to Tomcat samples, yesterday afternoon:
>
> F
Hi Jules,
can you put your docs in confluence!?
There is already a section for performance in the TOC, it would be great if you put the clustering
documentation there.
Here is the link to the TOC, to edit confluence you will have to register first.
http://opensource2.atlassian.com/confluence/
Hossam,
I've been thinking and we can probably switch it so that in the event of us
not finding the components.xml we can switch it back to the jbi.xml and see
if there are any assets in place there, in this way we can support multiple
components and the more natural single component approach, I
Wiki might be a better idea for now so most people can contribute.
However if it's under svn then non-comiiters can only contribute via patches.
Another possiblity is to have it under the confluence thing that Hernan is working on.
Also with wiki there want be issue about the format (wether i
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jacek Laskowski wrote:
>
> Am I reading it correctly that in CTR when a committer vetoed a
> commit, it *ought to* be backed out *as soon as it's happened* and
> discussed afterwards before being committed again?
No, the rules for handling a veto don
Many "org/apache/geronimo" configIds still live in source tree
--
Key: GERONIMO-1492
URL: http://issues.apache.org/jira/browse/GERONIMO-1492
Project: Geronimo
Type: Bug
Versions: 1.0
Reporter: Aa
I'd say the Wiki if it's pretty open to being changed as we move
forward (which would be my guess) or the geronimo/site SVN if it's
permanent (as in, completely documents 1.0 and is not attempting to
cover newer stuff).
Aaron
On 1/18/06, Jules Gosnell <[EMAIL PROTECTED]> wrote:
> Guys,
>
> I have
[ http://issues.apache.org/jira/browse/GERONIMO-1450?page=all ]
Aaron Mulder updated GERONIMO-1450:
---
Summary: Console usage plans use old namspace & parentId (was: Console
usage plans use old namspace)
Description:
The usage pages in the cons
Guys,
I have the beginnings of this doc...
Where would be the best place to keep it ? Ideally it should be r/w by
everyone, with history - SVN, WIKI or where ? What is best practice ?
Also, if in SVN, what format - text, html, ... etc...
Jules
--
"Open Source is a self-assembling organism.
ActiveMQ plan uses hardcoded obsolete org/apache/geronimo/ActiveMQ module name
--
Key: GERONIMO-1491
URL: http://issues.apache.org/jira/browse/GERONIMO-1491
Project: Geronimo
Type: Bug
Comp
Presumably in response to Dave's email to Tomcat, the following changes were made to Tomcat samples, yesterday afternoon: From: [EMAIL PROTECTED] Subject: svn commit: r369933 - in /tomcat/servletapi/servlet2.4-jsp2.0-tc5.x/jsr152/examples: cal/cal2.jsp security/protected/index.jsp Date: Januar
On Jan 18, 2006, at 4:46 AM, Ryan Thomas wrote:
Hi David,
I gave that a go and I had the dependencies in my project.xml file.
Manually updated cvs and ran maven, only to get the same error.
Where about's would this file be in my repo (and what file is it?)?
I'm new to maven - hence the q
I had an off-line discussion with Paul McMahan on this topic.
Our thoughts were that it is probably best to fix this problem in both
places if possible. The container fix seems best for not only the
console but also other uses ... but it is outside of our control and may
not be accepted by al
Hi,
I see that there is a ServerInfo interface in
org.apache.geronimo.system.serverinfo package. This has
getVersion(), getBuildDate(), getBuildTime(), getBaseDirectory(),
getCopyright() methods. Is there any other information (like the
svn revision for the server build, etc.) about the server t
[EMAIL PROTECTED] wrote, On 1/17/2006 7:50 AM:
I started refactoring login service along the lines discussed with Alan, David,
and others at the apachecon. This includes simplifying login service, and
authentication by assertion, delegation principals. David J, I know that you
want pluggable a
Concerning the CSS vulnerability, attached is my correspondence with the
Tomcat team..
My original email**
Original Message
Subject: Possible Security exposure with Tomcat 5.5.15-beta
Date: Tue, 17 Jan 2006 14:46:06 -0500
From: Dave Colasurdo <[EMAIL PROTECTED]>
To: [E
[
http://issues.apache.org/jira/browse/GERONIMO-1482?page=comments#action_12363097
]
Anders Hessellund Jensen commented on GERONIMO-1482:
Alan,
Some JAVA files cannot be generated from IDL. Those files usually come with the
runtime env
Jules Gosnell wrote:
Oh Rajith - you've got me thinking :-(
I'm not happy with the last answer - lets try again
lets agree some points :
1) since changes made to sessions are made in app-space, apps are not
written with the expectation that a change collision may occur and the
container
Oh Rajith - you've got me thinking :-(
I'm not happy with the last answer - lets try again
lets agree some points :
1) since changes made to sessions are made in app-space, apps are not
written with the expectation that a change collision may occur and the
container would not be able to a
Rajith Attapattu wrote:
More question if you don't mind.
> 2.) Assuming sombody wants to do session replication (All
> Active) instead of (one Active and "n" backups) is there provision
> within the WADI api to plug in this stratergy?
>I'm giving this some thought in terms of SFSB support, I
Jeff Genender wrote:
> I don't really see the disconnect between what you are saying,
there isn't - we are in strenuous agreement :-)
Rajith Attapattu wrote:
More question if you don't mind.
> 2.) Assuming sombody wants to do session replication (All
> Active) instead of (one Active and "n" backups) is there provision
> within the WADI api to plug in this stratergy?
>I'm giving this some thought in terms of SFSB support, I
[ http://issues.apache.org/jira/browse/GERONIMO-1463?page=all ]
John Sisson closed GERONIMO-1463:
-
Resolution: Fixed
> Tomcat doesn't always get the right servlet name when evaluating isUserInRole
> --
Hi David,
I gave that a go and I had the dependencies in my project.xml file.
Manually updated cvs and ran maven, only to get the same error.
Where about's would this file be in my repo (and what file is it?)?
I'm new to maven - hence the q's!
Cheers,
-Ryan
On 18/01/2006, at 7:45 PM, Da
setjavaenv.bat is not called by deploy.bat
--
Key: GERONIMO-1490
URL: http://issues.apache.org/jira/browse/GERONIMO-1490
Project: Geronimo
Type: Bug
Components: startup/shutdown
Versions: 1.0
Reporter: John Siss
lichtner wrote:
On Tue, 17 Jan 2006, Jules Gosnell wrote:
just when you thought that this thread would die :-)
I think Jeff Genender wanted a discussion to be sparked, and it worked.
So, I am wondering how might I use e.g. a shared disc or majority voting
in this situation ? In
Hmm, it worked on my laptop :-)
I find the m:xxx goals aren't always reliable. Can you try
cd openejb
cvs -q up -dP
grep geronimo-spec-corba modules/core/project.xml
#you should see: geronimo-spec-corbaartifactId>
#or look on line 145 and you should see:
gero
[ http://issues.apache.org/jira/browse/GERONIMO-1344?page=all ]
John Sisson closed GERONIMO-1344:
-
> Get java usage help when a trailing slash '/' is in GERONIMO_HOME environment
> variable when running geronimo.bat
> --
[ http://issues.apache.org/jira/browse/GERONIMO-1344?page=all ]
John Sisson resolved GERONIMO-1344:
---
Fix Version: 1.1
Resolution: Fixed
> Get java usage help when a trailing slash '/' is in GERONIMO_HOME environment
> variable when running g
93 matches
Mail list logo