Re: Container managed security and app provided Real implementation

2012-08-23 Thread Romain Manni-Bucau
Why is there a dep? That's just xml Le 23 août 2012 07:55, Enrico Olivelli eolive...@gmail.com a écrit : Thank you Your impl is great! But with this LazyRealm the app needs to depend compile-time from tomcat-catalina realm interface (even if it can be created with CDI, so I think that in

Re: Validation work

2012-08-23 Thread Romain Manni-Bucau
Managed bean != cdi right? Le 23 août 2012 02:35, David Blevins david.blev...@gmail.com a écrit : If there is anyone looking for something to do, there is a ton of validation work to be done. Nearly all the validation code we have now is run on EJBs only, but much of it applies universally.

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Enrico Olivelli
Because realmClass needs to be a implementation of org.apache.catalina.Realm and so in my app I will always need to add a compile time dep on tomcat in my app I would like not to have any compile time dep neither on Tomcat nor on OpenEJB/TomEE if possibile Il 23/08/2012 08:48, Romain

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Romain Manni-Bucau
hmm that's another need. Here how i see things: 1) the LazyRealm manage the classloader stuff 2) another realm (DelegatorRealm?) does the same using bean matching (almost) signatures of realm using java types (java == not tomcat) and uses reflection to invoke the delegate wdyt? *Romain

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Enrico Olivelli
I love it remember that Tomcat wants a GenericPrincipal not a simple Principal so application code have to be proxyed according to this need My goal is that the app only needs to provide an EJB or CDI Bean with a authenticate method which takes username/password and answers with the list of

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Enrico Olivelli
Yes, the problem in Tomcat JAAS Realm is that you have to bundle your LoginModule with the container It would be very nice to let the app provide a LoginModule do not drop LazyRealm, it fills a gap in Tomcat Realm standard implementations (what about giving it, without CDI, to Tomcat

Re: Handle undeployed app with clustered Quartz scheduler

2012-08-23 Thread Enrico Olivelli
you added org.quartz.scheduler.jmx.export=true then Quartz published a MBean for each Scheduler (instanceName) I this is enough to cleanup orphan triggers thanks Il 22/08/2012 19:19, Romain Manni-Bucau ha scritto: getting the HEAD you should get some info through JMX *Romain Manni-Bucau*

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Romain Manni-Bucau
i don't get it, you can define your LoginModule in the webapp i think, you even have the useContextClassLoader parameter *Romain Manni-Bucau* *Twitter: @rmannibucau* *Blog: http://rmannibucau.wordpress.com* 2012/8/23 Enrico Olivelli eolive...@gmail.com Yes, the problem in Tomcat JAAS Realm

Re: Handle undeployed app with clustered Quartz scheduler

2012-08-23 Thread Romain Manni-Bucau
i think so too *Romain Manni-Bucau* *Twitter: @rmannibucau* *Blog: http://rmannibucau.wordpress.com* 2012/8/23 Enrico Olivelli eolive...@gmail.com you added org.quartz.scheduler.jmx.**export=true then Quartz published a MBean for each Scheduler (instanceName) I this is enough to cleanup

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Enrico Olivelli
I'm sorry in http://tomcat.apache.org/tomcat-7.0-doc/realm-howto.html#JAASRealm there is no documentation of useContextClassloader I will give it a try Il 23/08/2012 11:40, Romain Manni-Bucau ha scritto: i don't get it, you can define your LoginModule in the webapp i think, you even have the

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Enrico Olivelli
I made same tests Tomcat JAASReam creates a LoginContext in this way //JAASRealm.java at line 372 on Tomcat trunk loginContext = new LoginContext(appName, callbackHandler); this constructor uses the JVM system wide JAAS configuration (default JAAS Configuration) so if you want to use your own

Re: Container managed security and app provided Real implementation

2012-08-23 Thread Romain Manni-Bucau
right, if you have a single application in the tomcat that's not an issue otherwise it can be *Romain Manni-Bucau* *Twitter: @rmannibucau* *Blog: http://rmannibucau.wordpress.com* 2012/8/23 Enrico Olivelli eolive...@gmail.com I made same tests Tomcat JAASReam creates a LoginContext in this

Re: feedback on cxf config

2012-08-23 Thread Romain Manni-Bucau
reworked it after a small talk with D. Blevins. here the current config (a bit more general): https://gist.github.com/8ca9f734f781946f2b8a *Romain Manni-Bucau* *Twitter: @rmannibucau* *Blog: http://rmannibucau.wordpress.com* 2012/8/21 Romain Manni-Bucau rmannibu...@gmail.com Hi, we

Re: [DISCUSS] New descriptor format

2012-08-23 Thread David Blevins
On Aug 23, 2012, at 2:37 PM, Romain Manni-Bucau wrote: probably the ejbname usage is the issue, if the deployment is global the id should be ;) So your vote would be for using the deployment id? AppContext BeanContext id=fooApp/greenModule/CalculatorBean /BeanContext

Re: [DISCUSS] New descriptor format

2012-08-23 Thread David Blevins
On Aug 23, 2012, at 3:22 PM, David Blevins wrote: On Aug 23, 2012, at 2:37 PM, Romain Manni-Bucau wrote: probably the ejbname usage is the issue, if the deployment is global the id should be ;) So your vote would be for using the deployment id? AppContext BeanContext

Re: [DISCUSS] New descriptor format

2012-08-23 Thread exabrial
A couple of things... What about a typesafe Java Configuration descriptor? Would it be possible to use both a compiled class and a .java file? I don't think either of these have been tried on a ApplicationServer (yet!) If OpenEJB/TomEE stays XML, I would greatly prefer to have an XSD that has

Re: [DISCUSS] New descriptor format

2012-08-23 Thread David Blevins
On Aug 23, 2012, at 3:37 PM, exabrial wrote: A couple of things... What about a typesafe Java Configuration descriptor? Would it be possible to use both a compiled class and a .java file? I don't think either of these have been tried on a ApplicationServer (yet!) We actually have (close