Re: Ease of use, development & deployment

2011-08-09 Thread Greg Trasuk
On Tue, 2011-08-09 at 02:53, Peter wrote: > Following up on recent discussions about security. > > Java, River / Jini Security features are advanced programming concepts. > > You need security policies, need to know what permissions each codebase > requires to function. A key server is essenti

NPE in Jeri NIO SelectionManager

2011-08-09 Thread Christopher Dolan
Has anyone else ever seen this exception? select loop throws java.lang.NullPointerException     at com.sun.jini.jeri.internal.runtime.SelectionManager.waitForReadyKey(419)     at com.sun.jini.jeri.internal.runtime.SelectionManager.access$600(80)     at com.su

Re: NPE in Jeri NIO SelectionManager

2011-08-09 Thread Gregg Wonderly
On 8/9/2011 10:29 AM, Christopher Dolan wrote: Has anyone else ever seen this exception? select loop throws java.lang.NullPointerException at com.sun.jini.jeri.internal.runtime.SelectionManager.waitForReadyKey(419) at com.sun.jini.jeri.internal.runtime.Selecti

Re: Ease of use, development & deployment

2011-08-09 Thread Gregg Wonderly
I too believe that Authorization is not served well by Subject, at all. The reason being that it is not "Role" oriented, but rather "permission" oriented and the "permission set" is not always the right "mask" to set in front of a decision process, without a lot of permissions that soon become

RE: NPE in Jeri NIO SelectionManager

2011-08-09 Thread Christopher Dolan
On Tuesday, August 09, 2011 Gregg Wonderly wrote: > On 8/9/2011 10:29 AM, Christopher Dolan wrote: >> Has anyone else ever seen this exception? >> >> select loop throws >> java.lang.NullPointerException >> at com.sun.jini.jeri.internal.runtime.SelectionManager.waitForReadyKey(419)

[DRAFT][REPORT] River Board Report August 2011

2011-08-09 Thread Tom Hobbs
Comments always welcome, due date is 15th August. Sent to private@ because I thought there might be a couple of things that should remain so.  I'm happy to move it onto dev@ if people think that's unnecessary. Below is the August board report for River Apache River is a distributed computing arc

RE: [DRAFT][REPORT] River Board Report August 2011

2011-08-09 Thread Christopher Dolan
Sure, go ahead and move the discussion to dev@. :-) Chris -Original Message- From: Tom Hobbs [mailto:tvho...@googlemail.com] Sent: Tuesday, August 09, 2011 2:20 PM To: dev@river.apache.org Subject: [DRAFT][REPORT] River Board Report August 2011 Comments always welcome, due date is 15th

Smoothed PooledThreadExecutor

2011-08-09 Thread Patricia Shanahan
I'm investigating extended ThreadPoolExecutor to get an Executor that bases the number of threads on the mean number of tasks over an interval. If successful, that would flatten out sudden peaks in the task load, using the queue as a buffer, but would make the number of threads match a sustaine

Re: Smoothed PooledThreadExecutor

2011-08-09 Thread Greg Trasuk
On Tue, 2011-08-09 at 15:36, Patricia Shanahan wrote: > > 3. Use a dedicated thread that sleeps until it is time to reconsider the > number of tasks, processes the queue of log messages, does any > adjustment, and then goes back to sleep. This is the most reliable in > terms of getting adjust

Re: Ease of use, development & deployment

2011-08-09 Thread Greg Trasuk
Comments below... On Tue, 2011-08-09 at 12:39, Gregg Wonderly wrote: > I too believe that Authorization is not served well by Subject, at all. The > reason being that it is not "Role" oriented, but rather "permission" oriented > and the "permission set" is not always the right "mask" to set in

Re: Smoothed PooledThreadExecutor

2011-08-09 Thread Patricia Shanahan
On 8/9/2011 1:44 PM, Greg Trasuk wrote: On Tue, 2011-08-09 at 15:36, Patricia Shanahan wrote: 3. Use a dedicated thread that sleeps until it is time to reconsider the number of tasks, processes the queue of log messages, does any adjustment, and then goes back to sleep. This is the most relia

Re: RE: [DRAFT][REPORT] River Board Report August 2011

2011-08-09 Thread Tom Hobbs
That'll teach me. This was me moving from private@ to @dev but not editing the email well enough. I did make the rest of the suggested edits though. Grammar and spelling have been sacrificed on the altar of messaging via mobile device. On 9 Aug 2011 20:30, "Christopher Dolan" wrote: > Sure,

Re: Ease of use, development & deployment

2011-08-09 Thread Gregg Wonderly
On 8/9/2011 3:56 PM, Greg Trasuk wrote: Comments below... On Tue, 2011-08-09 at 12:39, Gregg Wonderly wrote: I too believe that Authorization is not served well by Subject, at all. The reason being that it is not "Role" oriented, but rather "permission" oriented and the "permission set" is no

Re: Ease of use, development & deployment

2011-08-09 Thread Peter Firmstone
Gregg Wonderly wrote: On 8/9/2011 3:56 PM, Greg Trasuk wrote: Comments below... On Tue, 2011-08-09 at 12:39, Gregg Wonderly wrote: I too believe that Authorization is not served well by Subject, at all. The reason being that it is not "Role" oriented, but rather "permission" oriented and th

Re: Ease of use, development & deployment

2011-08-09 Thread Peter Firmstone
Since JAAS only provides a framework, ( policy files etc are only designed for small deployments, they don't scale) I've often wondered if we should be providing a "default framework". Apache Shiro is an interesting project, it's probably worth investigating too. Cheers, Peter. Peter Firm

Re: Ease of use, development & deployment

2011-08-09 Thread Gregg Wonderly
On 8/9/2011 7:57 PM, Peter Firmstone wrote: Gregg Wonderly wrote: On 8/9/2011 3:56 PM, Greg Trasuk wrote: Comments below... On Tue, 2011-08-09 at 12:39, Gregg Wonderly wrote: I too believe that Authorization is not served well by Subject, at all. The reason being that it is not "Role" orient

[Fwd: Re: Ease of use, development & deployment]

2011-08-09 Thread Peter Firmstone
--- Begin Message --- Gregg Wonderly wrote: On 8/9/2011 7:57 PM, Peter Firmstone wrote: I'm interested, I've been thinking about this too, what's your current service interface? The service interface is "the service interface". The mechanism just uses a proxy, delegating object. Thus, i

Re: [Fwd: Re: Ease of use, development & deployment]

2011-08-09 Thread Greg Trasuk
On Tue, 2011-08-09 at 22:57, Peter Firmstone wrote: > ...> deployed with an arbitrarily complex authorization implementation > > making it quite flexible. You can even use Configuration to specify > > the security implementation class. > > > > Gregg Wonderly > > > > So it implements the same i