Patricia Shanahan wrote:
Sim IJskes - QCG wrote:
On 11-02-11 13:34, Benson Margulies wrote:
Holding a formal vote as a way of discovering (e.g. spelunking,
humorously) whether a consensus exists is fine. My point, such as it
was, is that once you have a supply of -1 votes, you're really done.
I
Sim IJskes - QCG wrote:
Sim IJskes +1
Jeff Ramsdale +1 (non-binding)
Patricia Shanahan +1
jgr...@simulexinc.com +1 (non-binding)
Dan Creswell +1 (non-binding)
Tom Hobbs +1
Peter Firmstone +1
Dennis Reedy +1 (non-binding)
Greg Trasuk +1
Gr. Sim
We need to update our future roadmap on the
Niclas Hedhman wrote:
On Sat, Feb 12, 2011 at 8:57 AM, Peter Firmstone wrote:
Note that I too develop using Java 5 language features, so I'm not placing
any constraints on where River's headed, I accept recent developments,
people have their goals and dropping 1.4 compatibility
Greg Trasuk wrote:
On Sat, 2011-02-12 at 04:51, Niclas Hedhman wrote:
On Sat, Feb 12, 2011 at 8:57 AM, Peter Firmstone wrote:
Note that I too develop using Java 5 language features, so I'm not placing
any constraints on where River's headed, I accept recent developments,
p
Well spotted Calum,
Can you raise a Jira and link it to River-292?
Cheers,
Peter.
Calum Shaw-Mackay wrote:
All -
I believe this may be tied to RIVER-292, but I'll just outline the issue
The UIDescriptor is being asked to load the UIFactory via the current
thread's Context Class Loader rathe
I've been considering adding a method to MarshalledInstance to only
resolve code locally, for Entry's and the StreamServiceRegistrar,
however it could be used for reflective proxy's too, since they don't
require downloaded code.
Peter.
Dan Creswell wrote:
"and performing basic operations in
Yes the QA suite actually requires Java 1.6 to compile, then you can
test it on Java 1.5, from memory this used to work on Java 1.4 too.
This was known to work with jsr14, this might not work with a 1.5 target.
The problem is that some tests in the QA suite utilise sun proprietary
classes, no
Preferred classes are used for the proxy's currently, the jsk-dl.jar in
our current build is included in proxy codebase annotations, this is to
ensure that com.sun.* namespace implementation classes are loaded by the
proxy ClassLoader.
In the modular build, we have a dependency relationship wh
The code in ObjectOutputStream and ObjectStreamClass is a little flaky
too, both have non volatile, non final references which my not be
consistent between threads. ObjectStreamClass is first constructed then
initialized, perhaps it's reference is escaping before initialization.
Have you trie
Patricia Shanahan wrote:
Thanks for your comments.
I realized I made a mistake when I had to reboot the VirtualBox, and
the second failure was also with the OpenJDK Client VM. I'm rerunning
the test now, but it is one failure every few hours.
On 2/16/2011 8:32 PM, Peter Firmstone
I think someone also mentioned TestNG, which sounded promising, I was
happy to convert my junit tests, although I haven't done so yet.
Cheers,
Peter.
Greg Trasuk wrote:
On Sat, 2011-02-19 at 13:11, Patricia Shanahan wrote:
I'm converting my own informal tests of my FastList implementation
Patricia Shanahan wrote:
I want to get going on some performance tuning, but believe it is best
guided and controlled by well-organized benchmarks. To that end, I
propose adding a place for benchmarks to the River structure.
We will need several categories of benchmark code:
1. System level b
Patricia Shanahan wrote:
On 2/22/2011 12:16 AM, Peter Firmstone wrote:
Patricia Shanahan wrote:
I want to get going on some performance tuning, but believe it is best
guided and controlled by well-organized benchmarks. To that end, I
propose adding a place for benchmarks to the River structure
Patricia Shanahan wrote:
On 2/23/2011 6:26 PM, Peter Firmstone wrote:
Patricia Shanahan wrote:
On 2/22/2011 12:16 AM, Peter Firmstone wrote:
Patricia Shanahan wrote:
I want to get going on some performance tuning, but believe it is
best
guided and controlled by well-organized benchmarks. To
Hi Patricia,
I'm a little busy at the moment, the sparc computer is available
publicly over ssh with a fixed ip, if you send me your public ssh key,
I'll set up an account for you.
Regards,
Peter.
Patricia Shanahan wrote:
Peter wrote:
Trunk's not quite ready for branching & release yet, b
Thanks Benson,
You're welcome here any time.
Cheers,
Peter.
Mike McGrady wrote:
Keep in touch and you will be missed. This promises, I think, to be the decade
of River meets the sea if we keep a steady tiller and mind True North.
Sent from my iPhone
Michael McGrady
Principal investigator
For people who don't know TeX, it might be possible to use Lyx?
Peter.
Patricia Shanahan wrote:
On 3/9/2011 11:16 AM, Tom Hobbs wrote:
Hi Patricia,
The basic rule is, if you're the first person doing it, then you get
to chose. And as you say, the result will be in a format that
everyone can
;ll have to look into it. What format
does
it keep its files in?
Patricia
On 3/9/2011 1:32 PM, Peter Firmstone wrote:
For people who don't know TeX, it might be possible to use Lyx?
Peter.
Patricia Shanahan wrote:
On 3/9/2011 11:16 AM, Tom Hobbs wrote:
Dan Creswell wrote:
I think there are some other things we might consider:
(1) Do the tests in question always fail and only on SPARC?
Yes and only on the Java 6 JVM. The way security policy's are loaded
changed in Java 6. In reality a SecurityManager must be loaded at
startup with a po
Perhaps you might be interested in helping us fix some bugs or checking
the release documentation?
We're all just volunteers here, I've made attempts to identify the
source of the bug and lack the time needed to figure it out. Patricia
has offered to help. Feel free to jump in and get your ha
always agree on everything and in
fact have more in common even when we do disagree, what matters is that
we respect each others views, if you feel passionate enough about
something, jump in and join in the fun.
Peter.
Peter Firmstone wrote:
Perhaps you might be interested in helping us f
Greg Trasuk wrote:
Hi folks:
I'm hoping to get back to some hard-core River Surrogate development in
the next few weeks, and I've run into a problem:
On my development machine I still have a working directory pointed at
the incubator river repository. And I just realized that I have some
modif
Good job Tom, I wouldn't worry about the alarm bells bit, I think people
are still active behind the scenes, or thinking about what needs to
happen next. I'll get back into it soon too.
Cheers,
Peter.
Tom Hobbs wrote:
Comments always welcome, due date is 18th March.
Below is the April boar
I've been working on a caching SecurityManager, that provides for
permission revocation and Li Gong's method guard pattern (in fact
revocation works best with method guards, since not all standard
permissions are revocable).
Caching is used to overcome the performance bottleneck of method guar
From memory, Gregg provided the code with his CodebaseAccessClassLoader
patch.
Christopher Dolan wrote:
Wow, Gregg, it seems like every problem I bring up is one you've already
solved! Do you have a patch available that I can test?
Digressingly, I see that sun.rmi.server.LoaderHandler has the
+1 Definitely lock it down, no new material has been added for a long time.
Peter.
Dan Creswell wrote:
Lock it, it's the only way to retain any value that might be left.
If we're not doing that, we should take it down
On 26 April 2011 12:54, Luis Matta wrote:
I am re-sending this e-m
Some good news:
Oracle recently failed to renew the jini.net domain name, it became
available for back order on namejet. Patricia, Tom and myself combined
our resources and managed to win the domain via auction, we will be
donating jini.net to the Apache River project.
Cheers,
Peter.
Hi,
We've just obtained the jini.net domain name, how can this be donated to
the Apache River project?
For now we just want the domain to redirect to our apache river web
site. Sun Microsystems, used to maintain this domain, we recently
obtained it via auction when it expired.
Regards,
P
Before leaving Sun, I think it was Jim Waldo, had any internal Sun jini
links redirected to the apache web site, specifically the address:
http://river.apache.org/RIVER/index.html
This means any number of sites (like Artima) that reference old jini
sites within sun are redirected to apache riv
Niclas Hedhman wrote:
On Fri, May 20, 2011 at 6:31 AM, Jukka Zitting wrote:
Is this a vote to have a vote on a release? ;-)
Funny, isn't it?
Anyway, releases are always good, go for it! +1
Just remember, this is NOT a release vote. After the release artifacts
are produced
Patricia Shanahan wrote:
On 5/21/2011 4:21 AM, Peter Firmstone wrote:
...
4. Have all committers add their signatures to the Keys file.
...
Do I need to get into the Apache web of trust? If so, any suggestions
for how to do it? I live in San Diego, but will be in London for a
couple of
Tom Hobbs wrote:
Okay, since the last effort seemed to be a vote on having a vote, this
is vote on having a release!
The artifacts can be found here;
http://people.apache.org/~thobbs/river/
Hopefully I've done it all right, if not then please let me know and I
can get it fixed.
+1
Hey tha
The argument for generics in remote interfaces is to reduce boilerplate
code, the argument against is, it introduces unchecked type casts. (See
earlier discussion)
Is there another way to reduce the boilerplate code, using annotations
perhaps?
Or perhaps generics in combination with an anno
Patricia Shanahan wrote:
On 6/1/2011 6:19 PM, Peter Firmstone wrote:
The argument for generics in remote interfaces is to reduce boilerplate
code, the argument against is, it introduces unchecked type casts. (See
earlier discussion)
Is there another way to reduce the boilerplate code, using
I believe an annotation that flags ASM to post process the byte code
to add runtime type safety checks would do the trick.|
Then we can say, yes Generics are supported in remote code, you just
need to add this @RuntimeServiceCheck annotation.
Perhaps one of the following annotions:
@Runtim
James Grahn wrote:
but I'd
appreciate some clarification as to what that objection is. I don't
believe that any annotations or fancier tools will be necessary.
Are you suggesting type safety is NOT a necessary language feature in
distributed code?
By adding a Generic JavaSpace API to R
Sorry for not being of much assistance recently, River is a tough
release, I'll make some time to help tomorrow. Tom has been battling on
his own here, keeping the ship on course. Don't worry, I had to throw
away my first release artifacts too. A sterling effort.
Cheers,
Peter.
Jukka Zitt
'm not worried about the duff artifacts, this is what peer reviews are
for! "A man who has never made a mistake, has never made anything."
On 2 Jun 2011 10:27, "Peter Firmstone" wrote:
Sorry for not being of much assistance recently, River is a tough
release, I'll ma
James Grahn wrote:
What is the bigger picture you're concerned with?
Reliability, developers experiencing unexpected run time errors and
compatibility issues in deployed code when using Generics in Service API.
In our earlier discussions I provided an example of how generics can
remain inside
Most on the list would be aware of the stillborn Isolates API, which
showed much promise fixing many of the issues the Java platform has in
supporting secure distributed code. EG:
1. Class Visibility
2. Subprocess Isolation.
3. Unmarshalling attacks.
Released with Java 5 (which is now ou
Hi Tom,
Don't forget to increment the SERVER_VERSION constant in
com.sun.jini.constants.VersionConstants.java for the new release.
Also in the documentation,
river/trunk/src-doc/static/release-notes/index.html, the River release
version also has to be incremented, the above file also has a li
--- Begin Message ---
Phoenix wakes (Activates) up a Service when it's required on the server
side. I haven't thought of a good name for it, but unlike Phoenix, the
concept is to perform discovery, lookup and execute smart proxy's on
behalf of the client jvm at the client node, although I con
into the branch and tag.
I'm currently going through Jira at the moment and seeing what can be
closed. I'll post a message here asking for confirmation of any that
look closed but haven't been. I'm getting 503s from Jira right now
though.
Cheers,
Tom
On Mon, Jun 6, 2011
changed after my time. Mike Warres was the initial author
of this stuff, but others at Sun took over from him before the effort stopped.
I don't know if any of those guys are still following the conversation.
- Tim
On Dec 12, 2010, at 2:31 PM, Peter Firmstone wrote:
> Tim,
>
&
ing onto the past" to be a
nightmare for all concerned. One needs to look no further than the JDK
itself which is full of cruft and cut corners for the sake of
compatibility.
On 10 June 2011 08:51, Peter Firmstone wrote:
_Unicast Discovery v2 - Unmarshalling Attack with Registrar proxy._
Dan Creswell wrote:
On 8 June 2011 05:31, Peter Firmstone wrote:
Phoenix wakes (Activates) up a Service when it's required on the server
side. I haven't thought of a good name for it, but unlike Phoenix, the
concept is to perform discovery, lookup and execute smart proxy's o
Peter Firmstone wrote:
_Unicast Discovery v2 - Unmarshalling Attack with Registrar proxy._
During unicast discovery, we have the option of using SSL, Kerberos or
x500 discovery implementations, unfortunately, if the unicast
discovery implementation being used doesn't comply with constr
for.people who trust what they're downloading an don't want
to pay the perf costs etc?
I hope so, haven't considered configuration at this stage.
Cheers,
Peter.
On 11 Jun 2011 20:49, "Peter Firmstone" wrote:
Dan Creswell wrote:
On 8 June 2011 05:31, P
I've always found that Apache with mod perl and mod deflate makes web
pages (mostly text based) over slow connections perform much faster.
After studying the code, I don't think it'll be that hard to create an
SSL endpoint that supports deflate compression.
Cheers,
Peter.
release.
Good work, I'll download the rest soon.
Cheers,
Peter.
On 12 Jun 2011 09:05, "Peter Firmstone" wrote:
I've always found that Apache with mod perl and mod deflate makes web
pages (mostly text based) over slow connections perform much faster.
After studying th
ot;just" happen, as well as allow
a crashed endpoint JVM to recover.
Gregg
Sent from my iPhone
On Jun 12, 2011, at 2:54 AM, Peter Firmstone wrote:
Tom Hobbs wrote:
Always communicating in a separate JVM is going to have obvious performance
costs. Do we know what they are and are the
e 2.2.0 release?
No problem if you do, I've got some uncommitted stuff myself to put in.
Cheers,
Tom
On 13 Jun 2011 06:59, "Peter Firmstone (JIRA)" wrote:
[
https://issues.apache.org/jira/browse/RIVER-287?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
Is anyone else getting expired certificates with jtreg qa tests? This
seems to be the cause for a number of test failures I'm getting in jtreg.
Is someone able to run the jtreg tests and post the result?
Much appreciated,
Peter.
Test 115: TestEndpoint$TestNewRequest: Right server principal
With recent issues I've marked as resolved in Jira, I was unable to
assign the affected release version, the field doesn't take input in my
browser.
In the previous release of Jira, I was able to set the River release
version for issues, this is of course very useful for the
auto-generation
Cheers,
Peter.
Grammar and spelling have been sacrificed on the altar of messaging via
mobile device.
On 16 Jun 2011 03:37, "Peter Firmstone" wrote:
Is anyone else getting expired certificates with jtreg qa tests? This
seems to be the cause for a number of test failures I'm
Patricia Shanahan wrote:
I've started taking a look at the release notes, and found a couple of
broken links, to incubator and jini.net, in the html files.
I have other commitments tomorrow, so I probably won't be able to do
much about this until Sunday.
Will jini.net be alive again, at leas
42
URL: https://issues.apache.org/jira/browse/RIVER-142
Project: River
Issue Type: Bug
Components: net_jini_jeri
Affects Versions: jtsk_2.0
Reporter: Peter Jones
Assignee: Peter Firmstone
Priority: Minor
Attachments:
Sorry, dumb question, they're already running...
Peter Firmstone wrote:
How can I get Hudson to run the qa tests?
They all pass on Solaris sparc, I'd like to see Linux x86 and Windows
test results if possible.
I'd like to mark this issue resolved if possible.
Some jtreg te
River doesn't currently offer constraints for DGC, it's currently
vulnerable to attacks where the attacker knows the clientID, an attacker
makes clean calls, clients are removed and the service is garbage
collected, a simple DOS attack.
Should DGC be disabled in environments where security is
ption output for some tests.
Cheers,
Peter.
Peter Firmstone wrote:
River doesn't currently offer constraints for DGC, it's currently
vulnerable to attacks where the attacker knows the clientID, an
attacker makes clean calls, clients are removed and the service is
garbage coll
http://codahale.com/a-lesson-in-timing-attacks/
The lesson is verifying hash codes etc should be in constant time, don't
return early.
Hmm, an Executor, with a Future, could be used to process / compare
sensitive data, the submitting thread could sleep for a constant period,
then wake up & g
Patricia Shanahan wrote:
I'm working on the "Apache River Release Getting Started & More" page,
src-doc/static/info-index.html
I has several broken links. Some are easy to deal with - for example,
replacing incubator links with river.apache.org links.
How do you think we should handle refere
Does anyone know how to get javadoc to include .groovy files? So we can
document the Groovy config and include it in the api documentation?
Cheers,
Peter.
Peter Jones wrote:
On Jun 19, 2011, at 5:37 AM, Peter Firmstone wrote:
The easiest way to set DGC constraints would be via configuration.
Perhaps the reason this hasn't been implemented previously is, the constraints
would apply to all services that use DGC, so if you've set Auth
Patricia Shanahan wrote:
On 6/19/2011 9:21 PM, Peter Firmstone wrote:
Patricia Shanahan wrote:
...
We even have a link with title "starterkit-examples.jini.org (link
dead)". Unless someone can supply a working version of the link, I'm
going to delete the complete sentence.
T
Peter Firmstone wrote:
Peter Jones wrote:
On Jun 19, 2011, at 5:37 AM, Peter Firmstone wrote:
The easiest way to set DGC constraints would be via configuration.
Perhaps the reason this hasn't been implemented previously is, the
constraints would apply to all services that use DGC,
Peter Firmstone wrote:
I wonder if ImplRef can be used to store the Subject at the server,
different services might use different authenticating subjects.
Please ignore my stupid comment above, the server Subject can only be
stored in the ServerEndpoint implementation.
When investigating the above jira issue, I realised that there wasn't
much that could be done for concurrency for the existing implementation
without using Java 5 concurrency libraries, at the time we still
supported Java 1.4.
A java Policy is heavily contented because every protection domain
When deploying nodes in a Djinn, how do you currently manage your
security policies? How secure is your environment?
Java can use URL based policies, but this is subject to spoof attacks
and the URL cannot change without reconfiguring clients.
Currently the way the Java policy system works b
Anyone have a copy of disc...@davis.jini.org mail archives, or
subscribed and kept the list messages?
Cheers,
Peter.
Thanks Mark,
Mbox is my preference, but either will do, zipped and uploaded to:
https://issues.apache.org/jira/browse/RIVER-311
Cheers,
Peter.
Mark Brouwer wrote:
Hi Peter,
On Wed, 22 Jun 2011 12:33:06 +1000, Peter Firmstone wrote:
Anyone have a copy of disc...@davis.jini.org mail
Mark Brouwer wrote:
On Wed, 22 Jun 2011 17:20:13 +1000, Peter Firmstone wrote:
Thanks Mark,
Mbox is my preference, but either will do, zipped and uploaded to:
https://issues.apache.org/jira/browse/RIVER-311
Will try to do it tonight, will also add the messages of the Porter
project that
le.
OSGi calls these Local Permissions. The semantics of OSGi are slightly
different with permissions.perm defining the maximum allowable
Permission's for a bundle, which when empty is only limited by
AllPermission, which is not really what we want.
But we could have something similar
As I mentioned on the Security policy Service thread, OSGi uses a
permissions.perms file to describe a bundle's (jar file) local permissions.
The apache felix classes that parse this file are:
org.osgi.service.permissionadmin.PermissionInfo
org.apache.felix.framework.security.util.LocalPermissi
There's an interesting thread of discussion in the Porter mail archive
that Mark has uploaded for us (see River-311), relating to the TaskManager.
Here's a very interesting comment from Bob Scheifler:
Over the years we've been slowly eliminating use of Task.runAfter, and
in any overhaul I'd pre
Just wondering, could DGC be useful for keeping a port open on a firewall?
EG: Ping an endpoint occasionally to keep it alive while a lease exists?
The client doesn't know which port is open on a firewall, this
connection is set up by the firewall to allow replies from an external
host to be r
Patricia Shanahan wrote:
On 6/26/2011 1:23 PM, Peter Firmstone wrote:
There's an interesting thread of discussion in the Porter mail archive
that Mark has uploaded for us (see River-311), relating to the
TaskManager.
Here's a very interesting comment from Bob Scheifler:
Over the y
I think the way to look at this is to examine the non-trivial runAfter
implementations. If they have common elements that can be helped by some
utility classes, write those classes. If not, deal with each
individually.
We are now committed to 1.5, so if we did not have runAfter we could
repla
From the UDT website http://udt.sourceforge.net
UDT: Breaking the Data Transfer Bottleneck
UDT is a reliable UDP based application level data transport
protocol for distributed data intensive applications over wide area
high-speed networks. UDT uses UDP to transfer bulk data w
Sim IJskes - QCG wrote:
On 10-07-11 06:37, Peter wrote:
Any suggestions, ideas or assistance is welcome.
A ServerEndpoint needs to know its external contact identity. In case
of the TcpServerEndpoint the hostname where the client needs to
connect to.
Correct, that would be the publicly vis
You've still got my vote Tom, performing well, I'd like to see you
retain the position, provided you're happy doing so.
Cheers,
Peter.
Tom Hobbs wrote:
Hi guys,
By my counting I've been the PMC chair for 6-ish uneventful months. I
originally said that I'd do it for six, let you other guys k
No I didn't see a response, from memory an old release is moved to the
archive site, I think moved 2.1.1 to the archive site.
Can you ssh into the server? You might need to cd .. till you get to
the right directory.
Tom Hobbs wrote:
Did anyone see an infra response to this that I missed? I
Sim IJskes - QCG wrote:
On 18-07-11 14:07, Peter Firmstone wrote:
Sim IJskes - QCG wrote:
On 10-07-11 06:37, Peter wrote:
Any suggestions, ideas or assistance is welcome.
A ServerEndpoint needs to know its external contact identity. In case
of the TcpServerEndpoint the hostname where the
,
Tom
[1] http://www.apache.org/foundation/marks/responsibility.html
I've read the above document - Peter Firmstone.
gtra...@apache.org wrote:
Author: gtrasuk
Date: Tue Jul 19 15:23:56 2011
New Revision: 1148392
URL: http://svn.apache.org/viewvc?rev=1148392&view=rev
Log:
Continuing work on classloading for surrogate modules.
Modified:
river/jtsk/skunk/surrogate/test/org/apache/river/container/classloadin
Patricia Shanahan wrote:
I've read the document, and am thinking about its implications.
I am not a trademark enforcer. I have no training as a trademark
enforcer, and no interest in learning to be one. I did not understand
that joining the PMC meant becoming a trademark enforcer.
Patricia
t's being tested.
I'd like to think I'd have found it at some point...
Cheers,
Greg Trasuk.
On Tue, 2011-07-19 at 18:09, Peter Firmstone wrote:
gtra...@apache.org wrote:
Author: gtrasuk
Date: Tue Jul 19 15:23:56 2011
New Revision: 1148392
URL: http://svn.apache.
Sim IJskes - QCG wrote:
On 19-07-11 02:35, Peter Firmstone wrote:
Uuid). The problem they ran into; the service and proxy needed to be
trust verified again after the connection was reestablished, but
permissions had already been granted. To make matters worse it was the
I think that we only
Sim IJskes - QCG wrote:
On 20-07-11 14:04, Peter Firmstone wrote:
The Endpoint implementations I'm interested in are the SSLEndpoint's.
The socket in the SslConnection class is connected with a
SocketAddress (in SslConnection.connectToSocketAddress)
So if you have created your
Just thought I'd go over the ideas, thoughts and TODO's that come to
mind and get some feedback about what others are thinking and what tasks
they see as important. There's plenty of work for those so inclined and
generous with time.
Brief Summary:
* TaskManager - improve concurrency and
Peter Jones wrote:
On Jun 19, 2011, at 5:37 AM, Peter Firmstone wrote:
The easiest way to set DGC constraints would be via configuration.
Perhaps the reason this hasn't been implemented previously is, the constraints
would apply to all services that use DGC, so if you've set Auth
Patricia Shanahan wrote:
On 7/31/2011 1:43 AM, Peter Firmstone wrote:
...
* TaskManager - improve concurrency and remove the dependency on
Task.runAfter() in River code.
...
I'm playing with implementing a subclass of ThreadPoolExecutor that
modifies the number of threads based on the
th Rio.
Cheers,
Peter.
Cheers,
Greg Trasuk.
On Sun, 2011-07-31 at 04:43, Peter Firmstone wrote:
Just thought I'd go over the ideas, thoughts and TODO's that come to
mind and get some feedback about what others are thinking and what tasks
they see as important. There's plent
Peter wrote:
- Original message -
On 7/31/2011 5:35 AM, Peter Firmstone wrote:
I think this would be useful in an internet environment, where a developer
wants to export an object and hand it as a parameter to another service, and
have it unexported automatically when no longer
parse standard java format policy file's, to create PermissionGrant's
* custom policy file formats may be used by extending DefaultPolicyScanner.
*
* @author Peter Firmstone
* @see GrantPermission
* @see UmbrellaGrantPermission
* @see PolicyParser
* @see DefaultPolicyParser
* @see Defau
motePolicy service that logs the
updates and prints PermissionGrant's, so an administrator can view
changes as they occur remotely.
Any ideas?
Cheers,
Peter.
On 2 August 2011 01:52, Peter Firmstone wrote:
Just get some feedback on this potential remote policy service. The main
int
well in
* Collections.
*
* You shouldn't pass around PermissionGrant's to just anyone as they can
* provide an attacker with information about which Permission's may be
granted.
*
* @author Peter Firmstone
*/
public interface PermissionGrant {
/**
* A DynamicPolicy implementati
right" before you can get started (the startnow project's
PersistentJiniService and ConfigurableApplication classes were aimed
at trying to fill this void.
It seems like we also could use a good desktop ServiceUI client that
would provide good features out of the box to allow applic
Hi Patrick,
Can you try this for me:
specify the security manager as:
java.rmi.RMISecurityManager
By changing the bat file as per below?
@rem /*
@rem Licensed to the Apache Software Foundation (ASF) under one
@rem or more contributor license agreements. See the NOTICE file
@rem distributed w
Dan, you're wise and I respect your view.
Security matters to me because I plan to deploy over insecure networks.
Luckily security is mostly complete, Bob Scheifler's team achieved what
they set out to do, a very difficult task I might add. But this takes
skill on the application developers p
1 - 100 of 768 matches
Mail list logo
