Re: Copy-dependencies goal error

[Bernd Eckenfels]

Helle karl Heinz - thanks for Not considering the OPs Attitude and Tone towards 
perfectly Fine answers :-/

Bernd

> Am 06.10.2015 um 15:55 schrieb Karl Heinz Marbaise :
> 
> Hi Michael,
> 
> >
>> With all due respect I insulted no one.  Am I frustrated?  Yes, but I did 
>> not insult anyone.
>> 
>> Now I was perfectly fine with letting this go until I received your comment.
> > So let me use this opportunity to make a few more comments.
>> 
>> Thank you for suggesting That I go somewhere else for help.
> >  However, this is the Maven mailing list set up for the express
> > purpose of getting help with this software.
> 
> it is absolutely intended to ask here and I'm your opinion, cause this is 
> User Mailing list...
> 
>> Where else do you suggest I go?
> 
> Very good question...Unfortunately i haven't got a idea to suggest...
> 
> 
>> 
>> As for the volunteer service you provide, I thank you for that service.
> > But when I am dissatisfied with the service I am getting,
> >  please don't throw in my face that you are a volunteer.
> > You made that choice.
> >   And as a result, putting up with frustrated customers
> >  is something you are going to have to deal with.
> > It's part of the deal you signed on to when you volunteered.
> > If you are not willing to do that,
> > then maybe you should consider not volunteering.
> 
> Yes exactly the point.
> 
> If those who ansered here and don't like to answer or if they are the opinion 
> to waste their time..than really keep quiet..and let others do the job...
> 
>> 
>> Now I was told by a responder on this thread that I
> >  am not a customer because I did not pay for this software.
> > Nothing could be further from the truth.
> 
> There is no one paying for Maven it self...
> 
> > In my career I had many "customers" that did not pay for
> > the software I was supporting.
> > It was my job to provide them the best support that I could.
> 
> > I suggest that responders to requests for help on this
> > mailing list adopt the same approach, volunteer or not.
> 
> Yes...true...
> 
>> 
>> Another responder to this thread brought up that
> > he was volunteering and I was wasting his time.
> 
> If the original poster is wasting his/here time than just simply don't do it 
> anymore...
> 
> 
> > How about the time of mine he wasted when he suggested
> > I try something that made no difference in the outcome,
> > and had nothing to do with the problem?
> > And this has happened to me before with other
> > responders on this mailing list.
> 
> >I was in fact told by another responder that the reply of a specific person
> > was off topic and is often the case for that person.
>> 
>> Maybe you should spend some time pointing that out to those individuals
> > rather than chastising someone who is simply trying to get help.
>> 
>> Regards,
>> Mike
> 
> I'm really sorry Michael to read such things in the user mailing list which 
> is intended for people using Maven and searching for help and usage of Maven.
> 
> 
> To be honest if someone on the user list is the opinion to waste here/his 
> time just simple keep quiet...or better unsubscribe from the list...
> 
> Maven is an open source project which lives from its community...and 
> unfortunately i have to say that is not a good attitude of a "community" 
> against a userwho searches for help...
> 
> I never thought i need to write something like this
> 
> 
> Kind regards
> Karl Heinz Marbaise
> Apache Maven PMC Member
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
> 

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

RE: License Auditing

[Sander Verhagen]

Hi Jim,


Another suggestion, FWIW: our organization is using 
WhiteSource. We have it hooked into 
TeamCity, but they also have a Maven 
plugin (although seemingly not 
very actively maintained).

As the Maven advocate in our organization, I had first set us up with listings 
from the license-maven-plugin. I’m hearing that WhiteSource is giving us better 
insights. I do not know if it goes into the detail that you need. And I have no 
stakes in WhiteSource either ☺

Best regards, Sander.



Sander Verhagen
[  san...@sanderverhagen.net  ]

From: Jim Klo [mailto:jim@sri.com]
Sent: Tuesday, October 06, 2015 8:52
To: Maven Users List 
Subject: Re: License Auditing

Thanks,

We’re an Artifactory shop - so no Nexus - however however Artifactory Pro has a 
comparable feature.  The issue really though is that the license management I 
need is more granular than either solution offers. From what I can tell from 
their documentation, Nexus and Artifactory both manage licensing at the 
artifact level (source and binaries) not really the individual file level. Both 
seem to rely upon a license declaration to be present for each module and not 
necessarily look at the individual license headers within source files.

Jim Klo
Senior Software Engineer
Center for Software Engineering
SRI International
t.  @nsomnac

On Oct 6, 2015, at 7:09 AM, 
kemet.ctr.uh...@faa.gov wrote:

Hello Mark,

Nexus Pro Plus has that feature:  
http://www.sonatype.com/nexus/product-overview/nexus-pro-plus

Best Regards,

G Kemet Uhuru, PMP(r), SSGBP
SWIM COTSWG/SFDPS SW CM Lead
Communications, Information & Network Programs, Enterprise Product Support, 
AJM-3122
Engility Corporation-Engineering & Program Support Services
William J. Hughes Technical Center
Building 316 Second Floor Cubicle 2N131 (E-13)
Atlantic City International Airport, NJ 08405
Office Phone: 609-485-6154
Cell Phone: 609-254-6876



How many times per day do you say "like or you know" ?

http://sixminutes.dlugan.com/stop-um-uh-filler-words/

Don't make excusesMake Time!

Re: [release-plugin] prepare phase does not detect dirty Git files (on Windows)

[Vincent Latombe]

Hi Bernd,

you should make sure you are using a recent version of maven-release-plugin
(>=2.5). Older versions have compatibility issues because of the git scm
provider they depend on which is incompatible with current git versions.

Vincent

2015-10-05 22:26 GMT+02:00 Bernd Eckenfels :

> Unlike with a SVN workspace the release:prepare goal in a Git workspace
> seems to not error-out when it sees untracked (git status results
> in ??) files. I have seen this on windows.
>
> In some cases it was not mentioning the files at all (they are shown in
> -X debug output) in other cases it was printing a warning that it does
> not understand ?? file.
>
> [WARNING] Ignoring unrecognized line: ?? file.txt
>
> The files are not ignored, neither by the releaseBackup patterns nor
> by .gitignore. Any idea if this is a bug?
>
> I havent found a bug mentioning this, but this bug here shows an
> example for the warning:
> https://issues.apache.org/jira/browse/MRELEASE-881
>
> My Path contains GitHubs "git 4 windows" in version 1.9.5.github.0
>
>
> 36047 [INFO] Verifying that there are no local modifications...
> 36050 [INFO]   ignoring changes on: **\pom.xml.next,
> **\release.properties, **\pom.xml.branch, **\pom.xml.tag,
> **\pom.xml.backup, **\pom.xml.releaseBackup 36114 [INFO] Executing:
> cmd.exe /X /C "git status --porcelain" 36116 [INFO] Working directory:
> C:\ws\github\jabylon 36363 [DEBUG] ?? dirty.txt
> 36427 [DEBUG] ?? pom.xml.releaseBackup
> 36428 [DEBUG] ?? release.properties
> 36444 [INFO] Checking dependencies and plugins for snapshots ...
>
> Gruss
> Bernd
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
>
>

Release plugin behavior anomoly

[Robert Patrick]

Hi,

 

I am trying to use the release plugin with a new project where I want the 
entire project to use a single version number (vs. one version number per 
module).  I have the single version number part working like this:

 

1.)In my parent pom, I do the following:

  test

 snapshots-parent

  1.0.1-SNAPSHOT

  pom

 

  

${project.version}

  



2.)In my submodule POMs, I do the following:

  snapshots-consumer

 jar

  snapshots-consumer

 

  

test

snapshots-parent

${my-project-version}

../parent/pom.xml

  

 

  



  ${project.parent.groupId}

  snapshots-util

  ${project.parent.version}



  

 

This all works fine.  Unfortunately, when I run the release plugin's 
release:prepare goal, it replaces gthe parent version in all of my submodule 
POMs with the hard-coded value:

  

test

snapshots-parent

1.0.1

../parent/pom.xml

  

 

It should would be nice if I could figure out a way to get it to not do this.

 

Any thoughts?

Robert

 

Re: Copy-dependencies goal error

[Wayne Fay]

If you disagree with almost everything I said, there's really no point
in continuing to discuss it. The possibility of either of us being
convinced to change our minds is vanishingly small.

I'm glad Greg was able to help you solve your problem.

Respectfully,
Wayne

On Tue, Oct 6, 2015 at 2:17 PM,   wrote:
> Wayne,
>
> Thank you for your reply.  I think I disagree with almost everything you said.
>
> First I did not attack anyone.  Was my attitude bad, yes.  Did it get worse 
> when I felt like I was not getting the explanation I needed, most assuredly.  
> I called no one a name, nor insulted anyone's intelligence, and when I came 
> close to it I apologized.  That's more than I got from several of the 
> responders.  Just check the thread, its all there.
>
> Second, are you implying that you only support people that are happy with the 
> product?  It sounds to me that you are on the defensive already and as soon 
> as you get someone that is frustrated or displeased.   Like it is somehow 
> their fault.
>
> Third, how do you know how much time I've invested in trying to learn Maven?  
> How much is enough before I can have this "intelligent" Maven dialog with the 
> Maven community?  Users don't want to ask people for help (i.e. at least I 
> like to try and figure things out for myself), but there comes a time when 
> you are just plain stuck.  Maybe its because of a mental block and maybe 
> something you've read and researched just does not make any sense.  Yes I 
> understand that there are some people that probably post questions without 
> having made an effort to learn anything.  How do you determine that?  How do 
> you differentiate someone who has made an effort from someone who is just 
> trying to get an easy answer?
>
> With respect to vocabulary and the lingua franca, does "bogus" fit in that 
> category.
>
> Your comment about the Maven 4.0.0 POM model is particularly frustrating.  
> When you told me to do the research on the original version I did exactly as 
> you instructed.  That is how I determined that it was 2.2.1.  I'm sorry but I 
> think the POM model version question is valid.  In your original reply you 
> did not know the time frame.  I replied to you that it goes back at least 
> five years.  You did not respond.  So while I was doing the research on the 
> version and I found out it was 2.2.1 I thought the POM model version could be 
> a problem.  To tell me now after the fact that I should not have been 
> concerned would mean that I would either have to assume that you know that or 
> I would have to be a mind reader.
>
> And finally I demanded nothing from anyone.  I asked if two of the repliers 
> were contributors, and I reiterated a basic question I asked from the 
> beginning, several times.
>
> Yes I am partly to blame here.  But many of the Maven User List responders 
> have a little dirt on their hands too.  I don't see any of you acknowledging 
> that.
>
> Regards,
> Mike
>
> Michael Tarullo
> Contractor (Engility Corp)
> Enterprise Architect
> NSRR System Administrator
> FAA WJH Technical Center
> (609)485-5294
>
>
> -Original Message-
> From: Wayne Fay [mailto:wayne...@gmail.com]
> Sent: Tuesday, October 06, 2015 12:30 PM
> To: Maven Users List
> Subject: Re: Copy-dependencies goal error
>
> Maven is a rather complex piece of software. Many problems cannot be simply 
> distilled to "here's your simple problem, and here's your simple solution." I 
> understand this is what you want, but it is rarely that simple. And attacking 
> the people on this list who are trying to help you when you are frustrated 
> with the type of support they are providing is a really bad approach to 
> problem solving. Also recognize that many people on this list are not US-born 
> native English speakers, so there is sometimes a language barrier even when 
> we are all writing English.
>
> By using a free product, you (and your employer) should recognize that you 
> are trading off dollar costs for other costs - including your own time. 
> Please don't complain about people asking you to do something very simple 
> like install a couple other versions to see if that fixes your build issue. 
> It doesn't sound like you went back and tried 2.2.1 as I originally 
> recommended - simply to get more information about what happened, certainly 
> not intending to guarantee that would fix your issue. I'd be curious about 
> the error message you say that you got in 3.0.5.
>
> (Also, as a side-note, the POM model has been 4.0.0 for a long time - if I 
> was worried about that, I would have mentioned it. This is where "not really 
> knowing the product at all, and not wanting to" becomes a problem, you are 
> making bad assumptions.)
>
> And yes, the users of this list generally expect people to have some passing 
> familiarity with the product and the lingua franca that is utilized. There 
> are several free resources online to help you "get up to speed" 

Re: Copy-dependencies goal error

[Curtis Rueden]

Hi Wayne,

> I'm glad Greg was able to help you solve your problem.

Greg's response was great. But in fairness, it was Bernd who actually
stated the solution to Michael's problem. It would be nice if this thread
could wrap up with Michael acknowledging that Bernd's fix actually does the
job.

Regards,
Curtis

On Tue, Oct 6, 2015 at 3:11 PM, Wayne Fay  wrote:

> If you disagree with almost everything I said, there's really no point
> in continuing to discuss it. The possibility of either of us being
> convinced to change our minds is vanishingly small.
>
> I'm glad Greg was able to help you solve your problem.
>
> Respectfully,
> Wayne
>
> On Tue, Oct 6, 2015 at 2:17 PM,   wrote:
> > Wayne,
> >
> > Thank you for your reply.  I think I disagree with almost everything you
> said.
> >
> > First I did not attack anyone.  Was my attitude bad, yes.  Did it get
> worse when I felt like I was not getting the explanation I needed, most
> assuredly.  I called no one a name, nor insulted anyone's intelligence, and
> when I came close to it I apologized.  That's more than I got from several
> of the responders.  Just check the thread, its all there.
> >
> > Second, are you implying that you only support people that are happy
> with the product?  It sounds to me that you are on the defensive already
> and as soon as you get someone that is frustrated or displeased.   Like it
> is somehow their fault.
> >
> > Third, how do you know how much time I've invested in trying to learn
> Maven?  How much is enough before I can have this "intelligent" Maven
> dialog with the Maven community?  Users don't want to ask people for help
> (i.e. at least I like to try and figure things out for myself), but there
> comes a time when you are just plain stuck.  Maybe its because of a mental
> block and maybe something you've read and researched just does not make any
> sense.  Yes I understand that there are some people that probably post
> questions without having made an effort to learn anything.  How do you
> determine that?  How do you differentiate someone who has made an effort
> from someone who is just trying to get an easy answer?
> >
> > With respect to vocabulary and the lingua franca, does "bogus" fit in
> that category.
> >
> > Your comment about the Maven 4.0.0 POM model is particularly
> frustrating.  When you told me to do the research on the original version I
> did exactly as you instructed.  That is how I determined that it was
> 2.2.1.  I'm sorry but I think the POM model version question is valid.  In
> your original reply you did not know the time frame.  I replied to you that
> it goes back at least five years.  You did not respond.  So while I was
> doing the research on the version and I found out it was 2.2.1 I thought
> the POM model version could be a problem.  To tell me now after the fact
> that I should not have been concerned would mean that I would either have
> to assume that you know that or I would have to be a mind reader.
> >
> > And finally I demanded nothing from anyone.  I asked if two of the
> repliers were contributors, and I reiterated a basic question I asked from
> the beginning, several times.
> >
> > Yes I am partly to blame here.  But many of the Maven User List
> responders have a little dirt on their hands too.  I don't see any of you
> acknowledging that.
> >
> > Regards,
> > Mike
> >
> > Michael Tarullo
> > Contractor (Engility Corp)
> > Enterprise Architect
> > NSRR System Administrator
> > FAA WJH Technical Center
> > (609)485-5294
> >
> >
> > -Original Message-
> > From: Wayne Fay [mailto:wayne...@gmail.com]
> > Sent: Tuesday, October 06, 2015 12:30 PM
> > To: Maven Users List
> > Subject: Re: Copy-dependencies goal error
> >
> > Maven is a rather complex piece of software. Many problems cannot be
> simply distilled to "here's your simple problem, and here's your simple
> solution." I understand this is what you want, but it is rarely that
> simple. And attacking the people on this list who are trying to help you
> when you are frustrated with the type of support they are providing is a
> really bad approach to problem solving. Also recognize that many people on
> this list are not US-born native English speakers, so there is sometimes a
> language barrier even when we are all writing English.
> >
> > By using a free product, you (and your employer) should recognize that
> you are trading off dollar costs for other costs - including your own time.
> Please don't complain about people asking you to do something very simple
> like install a couple other versions to see if that fixes your build issue.
> It doesn't sound like you went back and tried 2.2.1 as I originally
> recommended - simply to get more information about what happened, certainly
> not intending to guarantee that would fix your issue. I'd be curious about
> the error message you say that you got in 3.0.5.
> >
> > (Also, as a side-note, the POM model has been 

Re: Copy-dependencies goal error

[Dan Tran]

If a bunch of ppl are giving me the same feedback.  I would step back and
have my ears wide open

-Dan

We have two ears and one mouth so that we can listen twice as much as we
speak.

Epictetus 




On Tue, Oct 6, 2015 at 1:19 PM, Curtis Rueden  wrote:

> Hi Wayne,
>
> > I'm glad Greg was able to help you solve your problem.
>
> Greg's response was great. But in fairness, it was Bernd who actually
> stated the solution to Michael's problem. It would be nice if this thread
> could wrap up with Michael acknowledging that Bernd's fix actually does the
> job.
>
> Regards,
> Curtis
>
> On Tue, Oct 6, 2015 at 3:11 PM, Wayne Fay  wrote:
>
> > If you disagree with almost everything I said, there's really no point
> > in continuing to discuss it. The possibility of either of us being
> > convinced to change our minds is vanishingly small.
> >
> > I'm glad Greg was able to help you solve your problem.
> >
> > Respectfully,
> > Wayne
> >
> > On Tue, Oct 6, 2015 at 2:17 PM,   wrote:
> > > Wayne,
> > >
> > > Thank you for your reply.  I think I disagree with almost everything
> you
> > said.
> > >
> > > First I did not attack anyone.  Was my attitude bad, yes.  Did it get
> > worse when I felt like I was not getting the explanation I needed, most
> > assuredly.  I called no one a name, nor insulted anyone's intelligence,
> and
> > when I came close to it I apologized.  That's more than I got from
> several
> > of the responders.  Just check the thread, its all there.
> > >
> > > Second, are you implying that you only support people that are happy
> > with the product?  It sounds to me that you are on the defensive already
> > and as soon as you get someone that is frustrated or displeased.   Like
> it
> > is somehow their fault.
> > >
> > > Third, how do you know how much time I've invested in trying to learn
> > Maven?  How much is enough before I can have this "intelligent" Maven
> > dialog with the Maven community?  Users don't want to ask people for help
> > (i.e. at least I like to try and figure things out for myself), but there
> > comes a time when you are just plain stuck.  Maybe its because of a
> mental
> > block and maybe something you've read and researched just does not make
> any
> > sense.  Yes I understand that there are some people that probably post
> > questions without having made an effort to learn anything.  How do you
> > determine that?  How do you differentiate someone who has made an effort
> > from someone who is just trying to get an easy answer?
> > >
> > > With respect to vocabulary and the lingua franca, does "bogus" fit in
> > that category.
> > >
> > > Your comment about the Maven 4.0.0 POM model is particularly
> > frustrating.  When you told me to do the research on the original
> version I
> > did exactly as you instructed.  That is how I determined that it was
> > 2.2.1.  I'm sorry but I think the POM model version question is valid.
> In
> > your original reply you did not know the time frame.  I replied to you
> that
> > it goes back at least five years.  You did not respond.  So while I was
> > doing the research on the version and I found out it was 2.2.1 I thought
> > the POM model version could be a problem.  To tell me now after the fact
> > that I should not have been concerned would mean that I would either have
> > to assume that you know that or I would have to be a mind reader.
> > >
> > > And finally I demanded nothing from anyone.  I asked if two of the
> > repliers were contributors, and I reiterated a basic question I asked
> from
> > the beginning, several times.
> > >
> > > Yes I am partly to blame here.  But many of the Maven User List
> > responders have a little dirt on their hands too.  I don't see any of you
> > acknowledging that.
> > >
> > > Regards,
> > > Mike
> > >
> > > Michael Tarullo
> > > Contractor (Engility Corp)
> > > Enterprise Architect
> > > NSRR System Administrator
> > > FAA WJH Technical Center
> > > (609)485-5294
> > >
> > >
> > > -Original Message-
> > > From: Wayne Fay [mailto:wayne...@gmail.com]
> > > Sent: Tuesday, October 06, 2015 12:30 PM
> > > To: Maven Users List
> > > Subject: Re: Copy-dependencies goal error
> > >
> > > Maven is a rather complex piece of software. Many problems cannot be
> > simply distilled to "here's your simple problem, and here's your simple
> > solution." I understand this is what you want, but it is rarely that
> > simple. And attacking the people on this list who are trying to help you
> > when you are frustrated with the type of support they are providing is a
> > really bad approach to problem solving. Also recognize that many people
> on
> > this list are not US-born native English speakers, so there is sometimes
> a
> > language barrier even when we are all writing English.
> > >
> > > By using a free product, you (and your employer) should recognize that
> > you are 

RE: Webstart Maven Plugin using jarsigner with proxy

[Martin Gainty]

-submit maven-jarsigner-plugin accomodation for proxy params in configuration 
request to d...@maven.apache.org

-submit your testcase and patch for accomodating 'proxy arguments within 
configuration' for maven-jarsigner-plugin to
https://issues.apache.org/jira/browse/MJARSIGNER/?selectedTab=com.atlassian.jira.jira-projects-plugin:summary-panel

Michael Osipov is the lead..if for any reason he is busy Im sure someone will 
implement this by month end
Nota Bene:maven-jarsigner-plugin proxy configuration changes will probably be 
voted on when RC is cut

Thanks Moe
Martin 



> Date: Tue, 6 Oct 2015 20:40:29 +0200
> Subject: Re: Webstart Maven Plugin using jarsigner with proxy
> From: sverre@gmail.com
> To: users@maven.apache.org
> 
> I am already using both maven-keytool-plugin and
> maven-jarsigner-plugin. Providing jarsigner proxy with
> maven-jarsigner-plugin is not what I have problem with. I am also
> using webstart-maven-plugin where I cannot find a way to set the proxy
> to use. From what I can see there looks to be no way of configuring
> extra jarsigner arguments using webstart-maven-plugin.
> 
> As a hack I have renamed /usr/java/latest/bin/jarsigner, created a new
> script called jarsigner that calls the renamed jarsigner with the
> proxy arguments. Not pretty, but it works as temporary patch.
> 
> This would be much easier if the tool jarsigner could use the
> configured Java proxy settings.
> 
> 
> 2015-10-06 19:20 GMT+02:00 Martin Gainty :
> >
> >
> >> Date: Tue, 6 Oct 2015 13:33:40 +0200
> >> Subject: Webstart Maven Plugin using jarsigner with proxy
> >> From: sverre@gmail.com
> >> To: users@maven.apache.org
> >>
> >> How can I provide Java properties to Maven webstart plugin to be used
> >> when calling Jarsigner?
> >>
> >> 
> >> org.codehaus.mojo
> >> webstart-maven-plugin
> >> 
> >> 
> >> ${keystore}
> >> ${storepass}
> >> ${storetype}
> >> ${sign.alias}
> >> ${tsa}
> >> 
> >> 
> >> 
> >
> > MG>2 step process supply authentication credentials via configuration
> > http://www.mojohaus.org/keytool/keytool-maven-plugin/
> > 
> > newKeyPassword
> > newStorePassword
> > 
> > NB:Some codehaus artifacts are still being transferred here so you should 
> > download everything you need (including source) asap
> > MG>
> >
> > MG>once keytool-maven-plugin packages your keystore file to a known 
> > location.. then call maven-jarsigner-plugin
> > https://maven.apache.org/plugins/maven-jarsigner-plugin/sign-mojo.html
> > 
> >  (supply keystore from known location)
> >  (support location of timestamp authority)
> > 
> >  -J-Dhttps.proxyHost=proxy.company.com
> >  -J-Dhttps.proxyPort=3128
> > 
> > 
> > MG>
> >>
> >> While using the maven-jarsigner-plugin I am able to supply properties
> >> for my Proxy.
> >> 
> >> org.apache.maven.plugins
> >> maven-jarsigner-plugin
> >> 
> >> 
> >> -J-Dhttps.proxyHost=proxy.company.com
> >> -J-Dhttps.proxyPort=3128
> >> -tsa
> >> ${tsa}
> >> 
> >> 
> >> 
> >>
> >> I cannot find any similar settings for the maven webstart plugin.
> >>
> >> Would not need to do this in my pom.xml if Jarsigner could use the
> >> default Java proxy settings I have configured in Java Control Panel
> >> Network Settings.
> >>
> >> -
> >> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> >> For additional commands, e-mail: users-h...@maven.apache.org
> >>
> >
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
> 
  

Re: Release plugin behavior anomoly

[Vincent Latombe]

Hi Robert,

you can't use properties within the project's artifactId or the parent
declaration (except for a few exceptions where it is expected to be
provided by command line, see https://issues.apache.org/jira/browse/MNG-5576
)

I would recommend you to have a look at the maven-release layout on
https://github.com/apache/maven-release. It is implementing the standard
versioning scheme to deal with this with maven.


Vincent

2015-10-06 22:01 GMT+02:00 Robert Patrick :

> Hi,
>
>
>
> I am trying to use the release plugin with a new project where I want the
> entire project to use a single version number (vs. one version number per
> module).  I have the single version number part working like this:
>
>
>
> 1.)In my parent pom, I do the following:
>
>   test
>
>  snapshots-parent
>
>   1.0.1-SNAPSHOT
>
>   pom
>
>
>
>   
>
> ${project.version}
>
>   
>
>
>
> 2.)In my submodule POMs, I do the following:
>
>   snapshots-consumer
>
>  jar
>
>   snapshots-consumer
>
>
>
>   
>
> test
>
> snapshots-parent
>
> ${my-project-version}
>
> ../parent/pom.xml
>
>   
>
>
>
>   
>
> 
>
>   ${project.parent.groupId}
>
>   snapshots-util
>
>   ${project.parent.version}
>
> 
>
>   
>
>
>
> This all works fine.  Unfortunately, when I run the release plugin's
> release:prepare goal, it replaces gthe parent version in all of my
> submodule POMs with the hard-coded value:
>
>   
>
> test
>
> snapshots-parent
>
> 1.0.1
>
> ../parent/pom.xml
>
>   
>
>
>
> It should would be nice if I could figure out a way to get it to not do
> this.
>
>
>
> Any thoughts?
>
> Robert
>
>
>

Re: [release-plugin] prepare phase does not detect dirty Git files (on Windows)

[ecki]

Thanks vincet,

I already tried the latest version (because 2.5.2 announced scm 1.9.4 update), 
but I might need to try it again with a minimal POM so I can check which 
provider is loaded. If I understand correctly you would agree it is a bug to 
ignore untracked files. Because I can then open a JIRA as soon as I have the 
results with multiple os, git and maven versions.

Bernd

-- 
http://bernd.eckenfels.net

-Original Message-
From: Vincent Latombe 
To: Maven Users List 
Sent: Di., 06 Okt. 2015 22:56
Subject: Re: [release-plugin] prepare phase does not detect dirty Git files (on 
Windows)

Hi Bernd,

you should make sure you are using a recent version of maven-release-plugin
(>=2.5). Older versions have compatibility issues because of the git scm
provider they depend on which is incompatible with current git versions.

Vincent

2015-10-05 22:26 GMT+02:00 Bernd Eckenfels :

> Unlike with a SVN workspace the release:prepare goal in a Git workspace
> seems to not error-out when it sees untracked (git status results
> in ??) files. I have seen this on windows.
>
> In some cases it was not mentioning the files at all (they are shown in
> -X debug output) in other cases it was printing a warning that it does
> not understand ?? file.
>
> [WARNING] Ignoring unrecognized line: ?? file.txt
>
> The files are not ignored, neither by the releaseBackup patterns nor
> by .gitignore. Any idea if this is a bug?
>
> I havent found a bug mentioning this, but this bug here shows an
> example for the warning:
> https://issues.apache.org/jira/browse/MRELEASE-881
>
> My Path contains GitHubs "git 4 windows" in version 1.9.5.github.0
>
>
> 36047 [INFO] Verifying that there are no local modifications...
> 36050 [INFO]   ignoring changes on: **\pom.xml.next,
> **\release.properties, **\pom.xml.branch, **\pom.xml.tag,
> **\pom.xml.backup, **\pom.xml.releaseBackup 36114 [INFO] Executing:
> cmd.exe /X /C "git status --porcelain" 36116 [INFO] Working directory:
> C:\ws\github\jabylon 36363 [DEBUG] ?? dirty.txt
> 36427 [DEBUG] ?? pom.xml.releaseBackup
> 36428 [DEBUG] ?? release.properties
> 36444 [INFO] Checking dependencies and plugins for snapshots ...
>
> Gruss
> Bernd
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
>
>

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: Webstart Maven Plugin using jarsigner with proxy

[Sverre Moe]

I am already using both maven-keytool-plugin and
maven-jarsigner-plugin. Providing jarsigner proxy with
maven-jarsigner-plugin is not what I have problem with. I am also
using webstart-maven-plugin where I cannot find a way to set the proxy
to use. From what I can see there looks to be no way of configuring
extra jarsigner arguments using webstart-maven-plugin.

As a hack I have renamed /usr/java/latest/bin/jarsigner, created a new
script called jarsigner that calls the renamed jarsigner with the
proxy arguments. Not pretty, but it works as temporary patch.

This would be much easier if the tool jarsigner could use the
configured Java proxy settings.


2015-10-06 19:20 GMT+02:00 Martin Gainty :
>
>
>> Date: Tue, 6 Oct 2015 13:33:40 +0200
>> Subject: Webstart Maven Plugin using jarsigner with proxy
>> From: sverre@gmail.com
>> To: users@maven.apache.org
>>
>> How can I provide Java properties to Maven webstart plugin to be used
>> when calling Jarsigner?
>>
>> 
>> org.codehaus.mojo
>> webstart-maven-plugin
>> 
>> 
>> ${keystore}
>> ${storepass}
>> ${storetype}
>> ${sign.alias}
>> ${tsa}
>> 
>> 
>> 
>
> MG>2 step process supply authentication credentials via configuration
> http://www.mojohaus.org/keytool/keytool-maven-plugin/
> 
> newKeyPassword
> newStorePassword
> 
> NB:Some codehaus artifacts are still being transferred here so you should 
> download everything you need (including source) asap
> MG>
>
> MG>once keytool-maven-plugin packages your keystore file to a known 
> location.. then call maven-jarsigner-plugin
> https://maven.apache.org/plugins/maven-jarsigner-plugin/sign-mojo.html
> 
>  (supply keystore from known location)
>  (support location of timestamp authority)
> 
>  -J-Dhttps.proxyHost=proxy.company.com
>  -J-Dhttps.proxyPort=3128
> 
> 
> MG>
>>
>> While using the maven-jarsigner-plugin I am able to supply properties
>> for my Proxy.
>> 
>> org.apache.maven.plugins
>> maven-jarsigner-plugin
>> 
>> 
>> -J-Dhttps.proxyHost=proxy.company.com
>> -J-Dhttps.proxyPort=3128
>> -tsa
>> ${tsa}
>> 
>> 
>> 
>>
>> I cannot find any similar settings for the maven webstart plugin.
>>
>> Would not need to do this in my pom.xml if Jarsigner could use the
>> default Java proxy settings I have configured in Java Control Panel
>> Network Settings.
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
>> For additional commands, e-mail: users-h...@maven.apache.org
>>
>

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

RE: Copy-dependencies goal error

[Michael.CTR.Tarullo]

Wayne,

Thank you for your reply.  I think I disagree with almost everything you said.

First I did not attack anyone.  Was my attitude bad, yes.  Did it get worse 
when I felt like I was not getting the explanation I needed, most assuredly.  I 
called no one a name, nor insulted anyone's intelligence, and when I came close 
to it I apologized.  That's more than I got from several of the responders.  
Just check the thread, its all there.

Second, are you implying that you only support people that are happy with the 
product?  It sounds to me that you are on the defensive already and as soon as 
you get someone that is frustrated or displeased.   Like it is somehow their 
fault.

Third, how do you know how much time I've invested in trying to learn Maven?  
How much is enough before I can have this "intelligent" Maven dialog with the 
Maven community?  Users don't want to ask people for help (i.e. at least I like 
to try and figure things out for myself), but there comes a time when you are 
just plain stuck.  Maybe its because of a mental block and maybe something 
you've read and researched just does not make any sense.  Yes I understand that 
there are some people that probably post questions without having made an 
effort to learn anything.  How do you determine that?  How do you differentiate 
someone who has made an effort from someone who is just trying to get an easy 
answer?

With respect to vocabulary and the lingua franca, does "bogus" fit in that 
category.

Your comment about the Maven 4.0.0 POM model is particularly frustrating.  When 
you told me to do the research on the original version I did exactly as you 
instructed.  That is how I determined that it was 2.2.1.  I'm sorry but I think 
the POM model version question is valid.  In your original reply you did not 
know the time frame.  I replied to you that it goes back at least five years.  
You did not respond.  So while I was doing the research on the version and I 
found out it was 2.2.1 I thought the POM model version could be a problem.  To 
tell me now after the fact that I should not have been concerned would mean 
that I would either have to assume that you know that or I would have to be a 
mind reader.

And finally I demanded nothing from anyone.  I asked if two of the repliers 
were contributors, and I reiterated a basic question I asked from the 
beginning, several times.

Yes I am partly to blame here.  But many of the Maven User List responders have 
a little dirt on their hands too.  I don't see any of you acknowledging that.

Regards,
Mike

Michael Tarullo
Contractor (Engility Corp)
Enterprise Architect
NSRR System Administrator
FAA WJH Technical Center
(609)485-5294


-Original Message-
From: Wayne Fay [mailto:wayne...@gmail.com] 
Sent: Tuesday, October 06, 2015 12:30 PM
To: Maven Users List
Subject: Re: Copy-dependencies goal error

Maven is a rather complex piece of software. Many problems cannot be simply 
distilled to "here's your simple problem, and here's your simple solution." I 
understand this is what you want, but it is rarely that simple. And attacking 
the people on this list who are trying to help you when you are frustrated with 
the type of support they are providing is a really bad approach to problem 
solving. Also recognize that many people on this list are not US-born native 
English speakers, so there is sometimes a language barrier even when we are all 
writing English.

By using a free product, you (and your employer) should recognize that you are 
trading off dollar costs for other costs - including your own time. Please 
don't complain about people asking you to do something very simple like install 
a couple other versions to see if that fixes your build issue. It doesn't sound 
like you went back and tried 2.2.1 as I originally recommended - simply to get 
more information about what happened, certainly not intending to guarantee that 
would fix your issue. I'd be curious about the error message you say that you 
got in 3.0.5.

(Also, as a side-note, the POM model has been 4.0.0 for a long time - if I was 
worried about that, I would have mentioned it. This is where "not really 
knowing the product at all, and not wanting to" becomes a problem, you are 
making bad assumptions.)

And yes, the users of this list generally expect people to have some passing 
familiarity with the product and the lingua franca that is utilized. There are 
several free resources online to help you "get up to speed" in the form of 
user's manuals etc. Your response here will most likely be "but I don't want to 
learn Maven, I just need to use it for this quick thing in my job so just help 
me with that" and the collective answer here will be "but Maven is complex, 
there are so many variables, providing simple solutions to problems is even 
tougher when the user lacks the standard foundational knowledge that is 
typical."

It is fine that you only use Maven for your job and thus don't want to learn 
much - just 

RE: Copy-dependencies goal error

[Michael.CTR.Tarullo]

Thank you for stating that publicly Karl.

Michael Tarullo
Contractor (Engility Corp)
Enterprise Architect
NSRR System Administrator
FAA WJH Technical Center
(609)485-5294


-Original Message-
From: Karl Heinz Marbaise [mailto:khmarba...@gmx.de] 
Sent: Tuesday, October 06, 2015 9:55 AM
To: Maven Users List
Subject: Re: Copy-dependencies goal error

Hi Michael,

 >
> With all due respect I insulted no one.  Am I frustrated?  Yes, but I did not 
> insult anyone.
>
> Now I was perfectly fine with letting this go until I received your comment.
 > So let me use this opportunity to make a few more comments.
>
> Thank you for suggesting That I go somewhere else for help.
 >  However, this is the Maven mailing list set up for the express  > purpose 
 > of getting help with this software.

it is absolutely intended to ask here and I'm your opinion, cause this is User 
Mailing list...

> Where else do you suggest I go?

Very good question...Unfortunately i haven't got a idea to suggest...


>
> As for the volunteer service you provide, I thank you for that service.
 > But when I am dissatisfied with the service I am getting,  >  please don't 
 > throw in my face that you are a volunteer.
 > You made that choice.
 >   And as a result, putting up with frustrated customers
 >  is something you are going to have to deal with.
 > It's part of the deal you signed on to when you volunteered.
 > If you are not willing to do that,
 > then maybe you should consider not volunteering.

Yes exactly the point.

If those who ansered here and don't like to answer or if they are the opinion 
to waste their time..than really keep quiet..and let others do the job...

>
> Now I was told by a responder on this thread that I
 >  am not a customer because I did not pay for this software.
 > Nothing could be further from the truth.

There is no one paying for Maven it self...

 > In my career I had many "customers" that did not pay for
 > the software I was supporting.
 > It was my job to provide them the best support that I could.

 > I suggest that responders to requests for help on this
 > mailing list adopt the same approach, volunteer or not.

Yes...true...

>
> Another responder to this thread brought up that
 > he was volunteering and I was wasting his time.

If the original poster is wasting his/here time than just simply don't 
do it anymore...


 > How about the time of mine he wasted when he suggested
 > I try something that made no difference in the outcome,
 > and had nothing to do with the problem?
 > And this has happened to me before with other
 > responders on this mailing list.

 >I was in fact told by another responder that the reply of a specific 
person
 > was off topic and is often the case for that person.
>
> Maybe you should spend some time pointing that out to those individuals
 > rather than chastising someone who is simply trying to get help.
>
> Regards,
> Mike

I'm really sorry Michael to read such things in the user mailing list 
which is intended for people using Maven and searching for help and 
usage of Maven.


To be honest if someone on the user list is the opinion to waste 
here/his time just simple keep quiet...or better unsubscribe from the 
list...

Maven is an open source project which lives from its community...and 
unfortunately i have to say that is not a good attitude of a "community" 
against a userwho searches for help...

I never thought i need to write something like this


Kind regards
Karl Heinz Marbaise
Apache Maven PMC Member

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Webstart Maven Plugin using jarsigner with proxy

[Sverre Moe]

How can I provide Java properties to Maven webstart plugin to be used
when calling Jarsigner?


org.codehaus.mojo
webstart-maven-plugin


${keystore}
${storepass}
${storetype}
${sign.alias}
${tsa}




While using the maven-jarsigner-plugin I am able to supply properties
for my Proxy.

org.apache.maven.plugins
maven-jarsigner-plugin


-J-Dhttps.proxyHost=proxy.company.com
-J-Dhttps.proxyPort=3128
-tsa
${tsa}




I cannot find any similar settings for the maven webstart plugin.

Would not need to do this in my pom.xml if Jarsigner could use the
default Java proxy settings I have configured in Java Control Panel
Network Settings.

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: Copy-dependencies goal error

[Karl Heinz Marbaise]

Hi Michael,

>

With all due respect I insulted no one.  Am I frustrated?  Yes, but I did not 
insult anyone.

Now I was perfectly fine with letting this go until I received your comment.

> So let me use this opportunity to make a few more comments.


Thank you for suggesting That I go somewhere else for help.

>  However, this is the Maven mailing list set up for the express
> purpose of getting help with this software.

it is absolutely intended to ask here and I'm your opinion, cause this 
is User Mailing list...



Where else do you suggest I go?


Very good question...Unfortunately i haven't got a idea to suggest...




As for the volunteer service you provide, I thank you for that service.

> But when I am dissatisfied with the service I am getting,
>  please don't throw in my face that you are a volunteer.
> You made that choice.
>   And as a result, putting up with frustrated customers
>  is something you are going to have to deal with.
> It's part of the deal you signed on to when you volunteered.
> If you are not willing to do that,
> then maybe you should consider not volunteering.

Yes exactly the point.

If those who ansered here and don't like to answer or if they are the 
opinion to waste their time..than really keep quiet..and let others do 
the job...




Now I was told by a responder on this thread that I

>  am not a customer because I did not pay for this software.
> Nothing could be further from the truth.

There is no one paying for Maven it self...

> In my career I had many "customers" that did not pay for
> the software I was supporting.
> It was my job to provide them the best support that I could.

> I suggest that responders to requests for help on this
> mailing list adopt the same approach, volunteer or not.

Yes...true...



Another responder to this thread brought up that

> he was volunteering and I was wasting his time.

If the original poster is wasting his/here time than just simply don't 
do it anymore...



> How about the time of mine he wasted when he suggested
> I try something that made no difference in the outcome,
> and had nothing to do with the problem?
> And this has happened to me before with other
> responders on this mailing list.

>I was in fact told by another responder that the reply of a specific 
person

> was off topic and is often the case for that person.


Maybe you should spend some time pointing that out to those individuals

> rather than chastising someone who is simply trying to get help.


Regards,
Mike


I'm really sorry Michael to read such things in the user mailing list 
which is intended for people using Maven and searching for help and 
usage of Maven.



To be honest if someone on the user list is the opinion to waste 
here/his time just simple keep quiet...or better unsubscribe from the 
list...


Maven is an open source project which lives from its community...and 
unfortunately i have to say that is not a good attitude of a "community" 
against a userwho searches for help...


I never thought i need to write something like this


Kind regards
Karl Heinz Marbaise
Apache Maven PMC Member

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: License Auditing

[Mark H. Wood]

Doesn't the pro version of Nexus do license auditing and analysis?

-- 
Mark H. Wood
Lead Technology Analyst

University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu


smime.p7s
Description: S/MIME cryptographic signature

RE: Copy-dependencies goal error

[Michael.CTR.Tarullo]

Manfred,

With all due respect I insulted no one.  Am I frustrated?  Yes, but I did not 
insult anyone.

Now I was perfectly fine with letting this go until I received your comment.  
So let me use this opportunity to make a few more comments.

Thank you for suggesting That I go somewhere else for help.  However, this is 
the Maven mailing list set up for the express purpose of getting help with this 
software.  Where else do you suggest I go?

As for the volunteer service you provide, I thank you for that service.  But 
when I am dissatisfied with the service I am getting, please don't throw in my 
face that you are a volunteer.  You made that choice.  And as a result, putting 
up with frustrated customers is something you are going to have to deal with.  
It's part of the deal you signed on to when you volunteered.  If you are not 
willing to do that, then maybe you should consider not volunteering.

Now I was told by a responder on this thread that I am not a customer because I 
did not pay for this software.  Nothing could be further from the truth.  In my 
career I had many "customers" that did not pay for the software I was 
supporting.  It was my job to provide them the best support that I could.  I 
suggest that responders to requests for help on this mailing list adopt the 
same approach, volunteer or not.

Another responder to this thread brought up that he was volunteering and I was 
wasting his time.  How about the time of mine he wasted when he suggested I try 
something that made no difference in the outcome, and had nothing to do with 
the problem?  And this has happened to me before with other responders on this 
mailing list.  I was in fact told by another responder that the reply of a 
specific person was off topic and is often the case for that person.

Maybe you should spend some time pointing that out to those individuals rather 
than chastising someone who is simply trying to get help.

Regards,
Mike 

Michael Tarullo
Contractor (Engility Corp)
Enterprise Architect
NSRR System Administrator
FAA WJH Technical Center
(609)485-5294

-Original Message-
From: Manfred Moser [mailto:manf...@simpligility.com] 
Sent: Monday, October 05, 2015 6:56 PM
To: users@maven.apache.org
Subject: Re: Copy-dependencies goal error

Michael,

Please refrain from insulting the efforts of the people on this list trying to 
help you. If you are not happy with the help you receive here, you are free to 
look for it elsewhere. I would like the discussions here to stay civil and on 
topic.

I hope you provide us all here with the same respect that you would expect us 
to have towards you.

We are all volunteers here.

Thank you

Manfred


michael.ctr.taru...@faa.gov wrote on 2015-10-05 15:28:
> That is fine with me, because your either wrong or incomprehensible 
> answers are wasting my time.
> 
> Michael Tarullo
> Contractor (Engility Corp)
> Enterprise Architect
> NSRR System Administrator
> FAA WJH Technical Center
> (609)485-5294
> 
> 
> -Original Message-
> From: Jörg Schaible [mailto:joerg.schai...@gmx.de]
> Sent: Monday, October 05, 2015 6:23 PM
> To: users@maven.apache.org
> Subject: RE: Copy-dependencies goal error
> 
> michael.ctr.taru...@faa.gov wrote:
> 
> > What are you talking about?
> >
> > Of course I don't pay. It's an open source product.
> 
> OK, then I don't answer anymore, because it's my free time and you're 
> wasting it.
> 
> Cheers,
> Jörg
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
> 
> 
>


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

RE: License Auditing

[Kemet.CTR.Uhuru]

Hello Mark,

Nexus Pro Plus has that feature:  
http://www.sonatype.com/nexus/product-overview/nexus-pro-plus

Best Regards,

G Kemet Uhuru, PMP(r), SSGBP
SWIM COTSWG/SFDPS SW CM Lead
Communications, Information & Network Programs, Enterprise Product Support, 
AJM-3122
Engility Corporation-Engineering & Program Support Services
William J. Hughes Technical Center
Building 316 Second Floor Cubicle 2N131 (E-13)
Atlantic City International Airport, NJ 08405
Office Phone: 609-485-6154
Cell Phone: 609-254-6876



How many times per day do you say "like or you know" ?

http://sixminutes.dlugan.com/stop-um-uh-filler-words/

Don't make excusesMake Time!


-Original Message-
From: Mark H. Wood [mailto:mw...@iupui.edu] 
Sent: Tuesday, October 06, 2015 9:41 AM
To: users@maven.apache.org
Subject: Re: License Auditing

Doesn't the pro version of Nexus do license auditing and analysis?

-- 
Mark H. Wood
Lead Technology Analyst

University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

RE: Webstart Maven Plugin using jarsigner with proxy

[Martin Gainty]

> Date: Tue, 6 Oct 2015 13:33:40 +0200
> Subject: Webstart Maven Plugin using jarsigner with proxy
> From: sverre@gmail.com
> To: users@maven.apache.org
> 
> How can I provide Java properties to Maven webstart plugin to be used
> when calling Jarsigner?
> 
> 
> org.codehaus.mojo
> webstart-maven-plugin
> 
> 
> ${keystore}
> ${storepass}
> ${storetype}
> ${sign.alias}
> ${tsa}
> 
> 
> 

MG>2 step process supply authentication credentials via configuration
http://www.mojohaus.org/keytool/keytool-maven-plugin/

newKeyPassword
newStorePassword

NB:Some codehaus artifacts are still being transferred here so you should 
download everything you need (including source) asap
MG>

MG>once keytool-maven-plugin packages your keystore file to a known location.. 
then call maven-jarsigner-plugin
https://maven.apache.org/plugins/maven-jarsigner-plugin/sign-mojo.html

 (supply keystore from known location)
 (support location of timestamp authority)

 -J-Dhttps.proxyHost=proxy.company.com
 -J-Dhttps.proxyPort=3128


MG>
> 
> While using the maven-jarsigner-plugin I am able to supply properties
> for my Proxy.
> 
> org.apache.maven.plugins
> maven-jarsigner-plugin
> 
> 
> -J-Dhttps.proxyHost=proxy.company.com
> -J-Dhttps.proxyPort=3128
> -tsa
> ${tsa}
> 
> 
> 
> 
> I cannot find any similar settings for the maven webstart plugin.
> 
> Would not need to do this in my pom.xml if Jarsigner could use the
> default Java proxy settings I have configured in Java Control Panel
> Network Settings.
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
> 
  

Re: Copy-dependencies goal error

[Wayne Fay]

Maven is a rather complex piece of software. Many problems cannot be
simply distilled to "here's your simple problem, and here's your
simple solution." I understand this is what you want, but it is rarely
that simple. And attacking the people on this list who are trying to
help you when you are frustrated with the type of support they are
providing is a really bad approach to problem solving. Also recognize
that many people on this list are not US-born native English speakers,
so there is sometimes a language barrier even when we are all writing
English.

By using a free product, you (and your employer) should recognize that
you are trading off dollar costs for other costs - including your own
time. Please don't complain about people asking you to do something
very simple like install a couple other versions to see if that fixes
your build issue. It doesn't sound like you went back and tried 2.2.1
as I originally recommended - simply to get more information about
what happened, certainly not intending to guarantee that would fix
your issue. I'd be curious about the error message you say that you
got in 3.0.5.

(Also, as a side-note, the POM model has been 4.0.0 for a long time -
if I was worried about that, I would have mentioned it. This is where
"not really knowing the product at all, and not wanting to" becomes a
problem, you are making bad assumptions.)

And yes, the users of this list generally expect people to have some
passing familiarity with the product and the lingua franca that is
utilized. There are several free resources online to help you "get up
to speed" in the form of user's manuals etc. Your response here will
most likely be "but I don't want to learn Maven, I just need to use it
for this quick thing in my job so just help me with that" and the
collective answer here will be "but Maven is complex, there are so
many variables, providing simple solutions to problems is even tougher
when the user lacks the standard foundational knowledge that is
typical."

It is fine that you only use Maven for your job and thus don't want to
learn much - just get your issue fixed. Please understand that our
collective tolerance for such users, when they have the wrong attitude
as you have demonstrated in this thread, is pretty low. Especially
when you say this is part of a COTS software which means that vendor
is "passing the buck" for support to this list when they themselves
should provide you more support which you are paying for. In the ideal
scenario, you open a ticket to that vendor, they have an internal
person who is good with Maven who provides you with support, and only
if they cannot solve the problem would they come to this list for
support on your behalf.

You should not be unhappy with the users of this list. You should
direct that anger to the COTS vendor who is failing to provide you
with support for a product that you have paid for! If your emails to
this list demonstrates how angry you get when you haven't paid for
something and don't get what you expect, I don't want to be around
when we throw substantial real dollars into the mix - I anticipate a
stream of obscenity-laced emails flying in every direction.

Demanding short & simple responses to all inquiries such as yours will
result in little traffic on this list as there is rarely a short &
simple response to most of the questions. And yes, demanding is the
only word which is appropriate in the context of this thread.

We're happy to (try to) support you here, but I'd suggest that you
adopt a somewhat different approach & attitude first.

Thanks,
Wayne
Apache Maven PMC Member

On Mon, Oct 5, 2015 at 4:42 PM,   wrote:
> Here is why I care:
>
> Well I'm not a Maven contributor.  I don't wish to be.  I don't even want to 
> use the product, and wouldn't if I wasn't required to for my job.
>
> So I get the impression that certain people answer questions because they are 
> contributors and answer the question as if everyone else is a contributor and 
> is expected to know the product as such.
>
> You folks in the open source arena have a lot to learn.  Your reply that you 
> "fixed my stupid pom" is one of those things.  Good customer support would go 
> something like this.
>
> The problem you are having is because..  someone who is not a contributor or even an intermediate or advanced user can 
> understand>
>
> Here is what you need to do to fix that problem.  explain why this fix is needed in this case>
>
> You have done nothing to educate the user and to make them more 
> self-sufficient.
>
> Michael Tarullo
> Contractor (Engility Corp)
> Enterprise Architect
> NSRR System Administrator
> FAA WJH Technical Center
> (609)485-5294
>
>
> -Original Message-
> From: Bernd Eckenfels [mailto:e...@zusammenkunft.net]
> Sent: Monday, October 05, 2015 5:12 PM
> To: users@maven.apache.org
> Subject: Re: Copy-dependencies goal error
>
> Am Mon, 5 Oct 2015 21:08:02 +
> schrieb 

RE: Copy-dependencies goal error

[Michael.CTR.Tarullo]

Greg,

Thank you for your reply.  It is unfortunate that it had to come to this to get 
an explanation.  Why wasn't an explanation like this offered from the 
beginning?  I'm not saying I agree or even like the explanation, but it is an 
explanation.

I have done some homework on Maven.  I would never attempt to use the product 
without doing so.  But if I may speak freely, this product appears to require a 
certain amount of "esoteric" knowledge.  All I want to do is support the task 
I've been given.  Of course I want to know how to use the tool.  In fact when I 
wasn't finding the information I needed to do that, I turned to the Maven User 
Mailing List.  How much knowledge must one have before they do this?

Now let’s look at this particular situation, because I think it just might be 
unique (but I could be wrong).

In this particular case I inherited a POM file that was developed by people no 
longer responsible for its upkeep.  Those people were assisted by a software 
vendor that essentially no longer exists, so their employees that helped our 
people responsible for this are also no longer available either.  We have all 
been in this situation before.

Now the most important thing about this POM is that it is not even building 
software.  You (and a few other people) mention that does not matter.  I have a 
great difference of opinion here.  Maven is ostensibly a build tool.  Look at 
its terminology(e.g. as pertains to lifecycle stages).  But I think the problem 
that exists is that in making the product flexible in how it implements its 
features it has opened the door to be  used for more than just building 
software.  I think that is the case here.  The original creators of the POM in 
question used Maven to simply copy some files from one location probably simply 
because they could.  Now I don't know if that was a good or bad idea, all I 
know is that I have to support it, it broke on my watch and I have to fix it.  
When I could not figure out how to do that I turned to the Maven community for 
help,  and this is the result of that.

So when you explain to me about dependencies, I understand them in the context 
of building software, because that's how Maven is supposed to be used.  It 
appears to me that the people that originally developed this POM did not 
appreciate this when they used it almost as a script to copy files.  Now I 
don't know if that is their fault or Mavens fault, but the simple fact of the 
matter is that I have to support it.  And I would expect more than the struggle 
I've received during this experience.

I know my attitude has not be the best, but that is what frustration leads to.  
And certainly the attitude of some of the people you say were trying to "help" 
should also be addressed here as well.

Sincerely,
Mike

Michael Tarullo
Contractor (Engility Corp)
Enterprise Architect
NSRR System Administrator
FAA WJH Technical Center
(609)485-5294


-Original Message-
From: Greg Trasuk [mailto:tras...@stratuscom.com] 
Sent: Tuesday, October 06, 2015 12:39 PM
To: Maven Users List
Subject: Re: Copy-dependencies goal error

Hi Michael:

Aside - Are you at the FAA tech center in Atlantic City?  I taught a course 
there four days after 9/11.  Very nice people there, although the mood wasn’t 
great at the time, obviously.  I particularly enjoyed seeing what I thought was 
a museum of ancient computers in the cafeteria (core memory and all)- until 
they explained they were samples of the then-deployed ATC hardware!

Anyhow, I understand your frustration - Maven can have a somewhat steep 
learning curve.  It seems to me that the answers you’ve gotten so far are 
correct, but perhaps they seem unhelpful because you don’t already have enough 
knowledge of the product.  Unfortunately, with open source, you, the user, need 
to meet the user list half-way, and get some background knowledge so you can 
ask the right questions and use the answers effectively.   There’s a classic 
treatise by Eric Raymond on asking questions 
(http://catb.org/~esr/faqs/smart-questions.html) that you might want to read, 
although you might not like the content.   In fairness, there’s also a newer 
guide to answering questions out there 
(https://skippy.net/how-to-answer-questions) that we ought to read every now 
and then.

In short, you might not like the choice of open source, but I’m guessing your 
employer already made that choice, and they had good reasons, so… let’s work 
together!

Let’s start with…
> It is simply copying ZIP/MD5/SHA1 files from a Nexus repository to a local 
> workstation.

You’re mistaken.  Maven is not copying files, it is copying dependencies or 
artifacts.  Sorry if this seems like “maven-speak” to you, but you are going to 
continue to be frustrated until you try to get a clear mental model of what 
Maven is doing.  Let me try to help…

Maven is specifically geared to avoid worrying about where files are on disk.  
It does this so that (believe it or not) life is 

Re: Copy-dependencies goal error

[Greg Trasuk]

Hi Michael:

Aside - Are you at the FAA tech center in Atlantic City?  I taught a course 
there four days after 9/11.  Very nice people there, although the mood wasn’t 
great at the time, obviously.  I particularly enjoyed seeing what I thought was 
a museum of ancient computers in the cafeteria (core memory and all)- until 
they explained they were samples of the then-deployed ATC hardware!

Anyhow, I understand your frustration - Maven can have a somewhat steep 
learning curve.  It seems to me that the answers you’ve gotten so far are 
correct, but perhaps they seem unhelpful because you don’t already have enough 
knowledge of the product.  Unfortunately, with open source, you, the user, need 
to meet the user list half-way, and get some background knowledge so you can 
ask the right questions and use the answers effectively.   There’s a classic 
treatise by Eric Raymond on asking questions 
(http://catb.org/~esr/faqs/smart-questions.html) that you might want to read, 
although you might not like the content.   In fairness, there’s also a newer 
guide to answering questions out there 
(https://skippy.net/how-to-answer-questions) that we ought to read every now 
and then.

In short, you might not like the choice of open source, but I’m guessing your 
employer already made that choice, and they had good reasons, so… let’s work 
together!

Let’s start with…
> It is simply copying ZIP/MD5/SHA1 files from a Nexus repository to a local 
> workstation.

You’re mistaken.  Maven is not copying files, it is copying dependencies or 
artifacts.  Sorry if this seems like “maven-speak” to you, but you are going to 
continue to be frustrated until you try to get a clear mental model of what 
Maven is doing.  Let me try to help…

Maven is specifically geared to avoid worrying about where files are on disk.  
It does this so that (believe it or not) life is easier for developers, since 
you don’t need to manually manage a library of files that your software might 
depend on.

So, when you say that you have a POM that “copies files from your nexus 
repository to a local file system”, that’s not exactly correct, that’s only 
what it looks like from the outside.  In reality, what Maven is doing is 
attempting to track down all the artifacts that will be needed to fulfull the 
dependencies that are called out in your POM.  Normally, Maven uses all these 
artifacts as the compile-time class path for compiling other source code to 
create new artifacts, but in your case, your POM file calls out a build plugin 
that simply copies all those artifacts to a folder on the local file system.

The idea of an “artifact” is key to understanding Maven. An artifact is 
typically a jar, war, or ear file that we use, either as a dependency for 
another artifact, or to install in a server environment.  In order to get us 
away from depending on the file system, an artifact in Maven is identified by 
its “Maven Coordinates” or “GAV Coordinates”, which are the group id, artifact 
id, and version of the artifact.  The artifact (every artifact!) is described 
using a POM file.  “POM” is unfortunately a bit of a misnomer - it originally 
means “Project Object Model”, but should really be something like “Artifact 
Descriptor”, as it’s really associated with the artifact, not a project.  Think 
of the POM as metadata that describes the artifact.

The general idea is that given an artifact’s GAV coordinates, Maven can go off 
to a repository like Maven Central or your local Nexus repository and retrieve 
(a) the artifact and (b) the artifact’s metadata, or POM file.

One mistake people make is thinking that the POM file tells Maven what to do.  
That isn’t correct - the POM file defines what an artifact _is_, and then Maven 
figures out how to build it, given the packaging type and the set of 
dependencies that are called out in the POM file.  It’s also possible for a POM 
file to define metadata only, without an actual artifact being specified 
(otherwise known as a POM artifact, since it calls out ‘pom’ packaging).  In 
this case, we still have GAV coordinates, but they’re more of a metadata 
identifier.  The POM you posted defines a POM artifact with the GAV coordinates 
“com.iona.fuse:all-products-1.0.0.0-fuse”, and calls out a number of 
dependencies on activemq, camel, and cxf artifacts.

Generally, “figuring out how to build it” requires Maven to track down and  
include transitive dependencies.  So if I call out Spring Framework version 
3.1, maybe it requires Apache commons collections version 2.2.  Maven knows 
that my artifact won’t work without Spring’s dependencies, so it looks up the 
metadata (POM file) for Spring 3.1, and adds its dependencies (i.e. transient 
dependencies) to the list of dependencies for my artifact.  Maven looks up the 
dependencies by going out to its repository (i.e. Maven Central or your local 
Nexus) and asking for the POM files for each of the dependencies.  It adds in 
the transitive dependencies, and then 

RE: Webstart Maven Plugin using jarsigner with proxy

[Martin Gainty]

> Date: Tue, 6 Oct 2015 13:33:40 +0200
> Subject: Webstart Maven Plugin using jarsigner with proxy
> From: sverre@gmail.com
> To: users@maven.apache.org
> 
> How can I provide Java properties to Maven webstart plugin to be used
> when calling Jarsigner?
> 
> 
> org.codehaus.mojo
> webstart-maven-plugin
> 
> 
> ${keystore}
> ${storepass}
> ${storetype}
> ${sign.alias}
> ${tsa}
> 
> 
> 

MG>2 step process supply authentication credentials via configuration
http://www.mojohaus.org/keytool/keytool-maven-plugin/

newKeyPassword
newStorePassword

NB:Some codehaus artifacts are still being transferred here so you should 
download everything you need (including source) asap
MG>

MG>once keytool-maven-plugin packages your keystore file to a known location.. 
then call maven-jarsigner-plugin
https://maven.apache.org/plugins/maven-jarsigner-plugin/sign-mojo.html

 (supply keystore from known location)
 (support location of timestamp authority)

 -J-Dhttps.proxyHost=proxy.company.com
 -J-Dhttps.proxyPort=3128


MG>
> 
> While using the maven-jarsigner-plugin I am able to supply properties
> for my Proxy.
> 
> org.apache.maven.plugins
> maven-jarsigner-plugin
> 
> 
> -J-Dhttps.proxyHost=proxy.company.com
> -J-Dhttps.proxyPort=3128
> -tsa
> ${tsa}
> 
> 
> 
> 
> I cannot find any similar settings for the maven webstart plugin.
> 
> Would not need to do this in my pom.xml if Jarsigner could use the
> default Java proxy settings I have configured in Java Control Panel
> Network Settings.
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
> 
  

Re: Is there a cache of version range resolutions?

[Benson Margulies]

I use 3.2.5. I've since confirmed that version ranges don't work the
same way as the release plugin, so in some sense this problem is moot.
But, still, the problem is the mysterious caching of a
previously-selected version.

On Sun, Oct 4, 2015 at 5:07 PM, Karl Heinz Marbaise  wrote:
> Hi,
>
> On 10/2/15 11:06 PM, Benson Margulies wrote:
>>
>> I've just tried version ranges for the first time, and I hit a pothole.
>>
>> Step 1: set version in dependency to: 7.14.0.c52.2. Run a build.
>>
>> Step 2: change version in pom to  [7.13.500.c52.2,7.13.600.c52.2).
>>
>> Now, mvn dependency:whatever shows the correct resolution, but an
>> actual build stubbornly uses the 7.14.0.c52.2 version in the
>> karaf-maven-plugin.
>
>
> Which Maven version do you use?
>
> Kind regards
> Karl Heinz Marbaise
>
>>
>> Completely wiping ~/.m2/repository fixed this.
>>
>> Can anyone give me higher-precision coordinates for what data I need
>> to nuke when this happens?
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
>> For additional commands, e-mail: users-h...@maven.apache.org
>>
>>
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
>

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: Copy-dependencies goal error

[Jörg Schaible]

Karl Heinz Marbaise wrote:

> Hi,
> 
> On 10/5/15 7:51 PM, Jörg Schaible wrote:
>> Hi Michael,
>>
>> michael.ctr.taru...@faa.gov wrote:
>>
>>> My apology about part of this reply.  I did not understand part of your
>>> suggestion.
>>>
>>> I thought you were saying 3.0.5 is the latest release.
>>>
>>> That said, I don't see how using the latest release or an older release
>>> makes any difference.
>>>
>>> I have a requirement to use 3.1.1 from a COTS product vendor, so that is
>>> probably not an option.  And "bogus" is just not a good enough
>>> explanation
>>> for me.  What specifically is wrong with what I am doing that does not
>>> work in this release?
>>
>> I just cite my original mail:
>>
>>> IIRC you have problems with 3.1.x when using dependencies with import
>>> scope, because it ignores then your settings then for transitive
>>> deps declaring their own repository in the POM.
>>
>> AFAICS, you are using dependencyManagement with dependencies declared
>> with scope "import"".
> 
> 
> The given pom does not contain any dependencyManagement...so it does
> simply plays not a role here...

If you read the OPs question from last week, you will see that he did not 
provide his POM there and from that description, I assumed he used an import 
scope. That was not the case.

> Apart from that import scope means only
> to use the dependencyManagement part and nothing else as described in
> the documentation...so it does not ignore it nor is it wrong...

And what does that have to do with the stuff defined in settings.xml? 

> See the original documentation
> https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html.

As long as the dependencies are resolved from the repos declared in 
settings.xml ...

https://issues.apache.org/jira/browse/MNG-5781

We were affected by this more than once, but - honestly - I could not 
reproduce it today (3.3.3, 3.1.1, 3.0.5).

> so this is NOT a problem in contrary it is exactly working as it should
> be...Apart from using repository definition in a pom is a bad
> practice...

Definitely.

> But this is a different story...

Sadly it was not forbidden when it was discussed the last time ...

Cheers,
Jörg



-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: License Auditing

[Jim Klo]

Thanks,

We’re an Artifactory shop - so no Nexus - however however Artifactory Pro has a 
comparable feature.  The issue really though is that the license management I 
need is more granular than either solution offers. From what I can tell from 
their documentation, Nexus and Artifactory both manage licensing at the 
artifact level (source and binaries) not really the individual file level. Both 
seem to rely upon a license declaration to be present for each module and not 
necessarily look at the individual license headers within source files.

Jim Klo
Senior Software Engineer
Center for Software Engineering
SRI International
t.  @nsomnac

> On Oct 6, 2015, at 7:09 AM, kemet.ctr.uh...@faa.gov wrote:
> 
> Hello Mark,
> 
> Nexus Pro Plus has that feature:  
> http://www.sonatype.com/nexus/product-overview/nexus-pro-plus
> 
> Best Regards,
> 
> G Kemet Uhuru, PMP(r), SSGBP
> SWIM COTSWG/SFDPS SW CM Lead
> Communications, Information & Network Programs, Enterprise Product Support, 
> AJM-3122
> Engility Corporation-Engineering & Program Support Services
> William J. Hughes Technical Center
> Building 316 Second Floor Cubicle 2N131 (E-13)
> Atlantic City International Airport, NJ 08405
> Office Phone: 609-485-6154
> Cell Phone: 609-254-6876
> 
> 
> 
> How many times per day do you say "like or you know" ?
> 
> http://sixminutes.dlugan.com/stop-um-uh-filler-words/
> 
> Don't make excusesMake Time!




smime.p7s
Description: S/MIME cryptographic signature