Re: promoting maven @work / fail on proxy uname/pwd

2007-11-04 Thread Marco Mistroni
Yes, thanks brett
that's what i m trying to put in my colleagues mind.. they still think
that having  an http proxy username and password
can open the door to even the most protected software in our company..
I'll keep u posted on this... it'll be really silly to drop
maven/artifactory just for that/..
thanks again and regards
 marco

On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:

 Right - at the very least, even if you still need to use the proxy
 from there, you only have to configure the u/p in one place and it can
 be locked down to system administrators.

 - Brett

 On 04/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
  Yep, will certainly do
 
  On 11/3/07, Wayne Fay [EMAIL PROTECTED] wrote:
  
   Yea, we talked it out a bit and he realized that actually only his
   Artifactory instance will be going outside the firewall (through the
   proxy), so he needs to focus his attention on giving that box
   permission to get out to the Internet. I suggested a few approaches
   I've used/seen and he's going to work on it next week...
  
   Marco, do reply back when you solve it, for the benefit of other
   people who have similar configurations.
  
   Wayne
  
   On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
Ah, I misunderstood - I thought you were going to configure your
username and password for your repo manager/proxy :)
   
Good luck,
Brett
   
On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
 Brett,
   i  talked with Wayne (Fay) on the issue.
 for the way i want to imlpement it (an INternal repository) it is
   NOT  a
 maven problem
 proxy will be configured in Artifactory... so it's there where i
   should
 focus my attention..

 thanks a lot for reply and regards
  marco

 On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:
 
  On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
   - how you developers are tackling the issue right now?
   - does mvn 2.1 really provides that feature?
   - if so, when it will be out?
 
  I started a little work on it quite some time back, but it was
 not
   yet
  integrated into Maven and there were still some open questions.
 
  At this point, it is scheduled for 2.1, but I'd say it's no
   certainty
  to be included, unfortunately.
 
  the issue to watch is MNG-553.
 
  Regards,
  Brett
 
  --
  Brett Porter
  Blog: http://www.devzuz.org/blogs/bporter/
 
 
   -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 

   
   
--
Brett Porter
Blog: http://www.devzuz.org/blogs/bporter/
   
   
 -
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   
   
  
   -
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 


 --
 Brett Porter
 Blog: http://www.devzuz.org/blogs/bporter/

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




Re: promoting maven @work / fail on proxy uname/pwd

2007-11-04 Thread Wayne Fay
The file is protected by NTFS ACL/security. If they don't trust that,
what do they trust?? And its not like having the proxy name/pass is
going to do a hacker a lot of good, unless it is a common name/pass
that is shared across a lot of your equipment which is definitely not
a best practice!

A lot of people yell security! when they have no other reason to
complain about something, but they just don't like it (change is
hard/scary and Maven is new). Its a lot like the boy who cried wolf.
If you can really drill down into their issue/problem, many times you
can convince them that they are simply wrong...

Wayne

On 11/4/07, Marco Mistroni [EMAIL PROTECTED] wrote:
 Yes, thanks brett
 that's what i m trying to put in my colleagues mind.. they still think
 that having  an http proxy username and password
 can open the door to even the most protected software in our company..
 I'll keep u posted on this... it'll be really silly to drop
 maven/artifactory just for that/..
 thanks again and regards
  marco

 On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
 
  Right - at the very least, even if you still need to use the proxy
  from there, you only have to configure the u/p in one place and it can
  be locked down to system administrators.
 
  - Brett
 
  On 04/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
   Yep, will certainly do
  
   On 11/3/07, Wayne Fay [EMAIL PROTECTED] wrote:
   
Yea, we talked it out a bit and he realized that actually only his
Artifactory instance will be going outside the firewall (through the
proxy), so he needs to focus his attention on giving that box
permission to get out to the Internet. I suggested a few approaches
I've used/seen and he's going to work on it next week...
   
Marco, do reply back when you solve it, for the benefit of other
people who have similar configurations.
   
Wayne
   
On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
 Ah, I misunderstood - I thought you were going to configure your
 username and password for your repo manager/proxy :)

 Good luck,
 Brett

 On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
  Brett,
i  talked with Wayne (Fay) on the issue.
  for the way i want to imlpement it (an INternal repository) it is
NOT  a
  maven problem
  proxy will be configured in Artifactory... so it's there where i
should
  focus my attention..
 
  thanks a lot for reply and regards
   marco
 
  On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:
  
   On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
- how you developers are tackling the issue right now?
- does mvn 2.1 really provides that feature?
- if so, when it will be out?
  
   I started a little work on it quite some time back, but it was
  not
yet
   integrated into Maven and there were still some open questions.
  
   At this point, it is scheduled for 2.1, but I'd say it's no
certainty
   to be included, unfortunately.
  
   the issue to watch is MNG-553.
  
   Regards,
   Brett
  
   --
   Brett Porter
   Blog: http://www.devzuz.org/blogs/bporter/
  
  
-
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 


 --
 Brett Porter
 Blog: http://www.devzuz.org/blogs/bporter/


  -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


   
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   
   
  
 
 
  --
  Brett Porter
  Blog: http://www.devzuz.org/blogs/bporter/
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: promoting maven @work / fail on proxy uname/pwd

2007-11-04 Thread Marco Mistroni
Thanx wayne.. i'll do my best :)
worst that can happen, we'll stay to current 450 lines ant xml script and
i'll have a competitive edge
over my colleagues :))

regards
 marco

On 11/4/07, Wayne Fay [EMAIL PROTECTED] wrote:

 The file is protected by NTFS ACL/security. If they don't trust that,
 what do they trust?? And its not like having the proxy name/pass is
 going to do a hacker a lot of good, unless it is a common name/pass
 that is shared across a lot of your equipment which is definitely not
 a best practice!

 A lot of people yell security! when they have no other reason to
 complain about something, but they just don't like it (change is
 hard/scary and Maven is new). Its a lot like the boy who cried wolf.
 If you can really drill down into their issue/problem, many times you
 can convince them that they are simply wrong...

 Wayne

 On 11/4/07, Marco Mistroni [EMAIL PROTECTED] wrote:
  Yes, thanks brett
  that's what i m trying to put in my colleagues mind.. they still
 think
  that having  an http proxy username and password
  can open the door to even the most protected software in our company..
  I'll keep u posted on this... it'll be really silly to drop
  maven/artifactory just for that/..
  thanks again and regards
   marco
 
  On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
  
   Right - at the very least, even if you still need to use the proxy
   from there, you only have to configure the u/p in one place and it can
   be locked down to system administrators.
  
   - Brett
  
   On 04/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
Yep, will certainly do
   
On 11/3/07, Wayne Fay [EMAIL PROTECTED] wrote:

 Yea, we talked it out a bit and he realized that actually only his
 Artifactory instance will be going outside the firewall (through
 the
 proxy), so he needs to focus his attention on giving that box
 permission to get out to the Internet. I suggested a few
 approaches
 I've used/seen and he's going to work on it next week...

 Marco, do reply back when you solve it, for the benefit of other
 people who have similar configurations.

 Wayne

 On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
  Ah, I misunderstood - I thought you were going to configure your
  username and password for your repo manager/proxy :)
 
  Good luck,
  Brett
 
  On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
   Brett,
 i  talked with Wayne (Fay) on the issue.
   for the way i want to imlpement it (an INternal repository) it
 is
 NOT  a
   maven problem
   proxy will be configured in Artifactory... so it's there where
 i
 should
   focus my attention..
  
   thanks a lot for reply and regards
marco
  
   On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:
   
On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
 - how you developers are tackling the issue right now?
 - does mvn 2.1 really provides that feature?
 - if so, when it will be out?
   
I started a little work on it quite some time back, but it
 was
   not
 yet
integrated into Maven and there were still some open
 questions.
   
At this point, it is scheduled for 2.1, but I'd say it's no
 certainty
to be included, unfortunately.
   
the issue to watch is MNG-553.
   
Regards,
Brett
   
--
Brett Porter
Blog: http://www.devzuz.org/blogs/bporter/
   
   

 -
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   
   
  
 
 
  --
  Brett Porter
  Blog: http://www.devzuz.org/blogs/bporter/
 
 
   -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


   
  
  
   --
   Brett Porter
   Blog: http://www.devzuz.org/blogs/bporter/
  
   -
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




Re: promoting maven @work / fail on proxy uname/pwd

2007-11-03 Thread Marco Mistroni
Brett,
  i  talked with Wayne (Fay) on the issue.
for the way i want to imlpement it (an INternal repository) it is NOT  a
maven problem
proxy will be configured in Artifactory... so it's there where i should
focus my attention..

thanks a lot for reply and regards
 marco

On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:

 On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
  - how you developers are tackling the issue right now?
  - does mvn 2.1 really provides that feature?
  - if so, when it will be out?

 I started a little work on it quite some time back, but it was not yet
 integrated into Maven and there were still some open questions.

 At this point, it is scheduled for 2.1, but I'd say it's no certainty
 to be included, unfortunately.

 the issue to watch is MNG-553.

 Regards,
 Brett

 --
 Brett Porter
 Blog: http://www.devzuz.org/blogs/bporter/

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




Re: promoting maven @work / fail on proxy uname/pwd

2007-11-03 Thread Brett Porter
Ah, I misunderstood - I thought you were going to configure your
username and password for your repo manager/proxy :)

Good luck,
Brett

On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
 Brett,
   i  talked with Wayne (Fay) on the issue.
 for the way i want to imlpement it (an INternal repository) it is NOT  a
 maven problem
 proxy will be configured in Artifactory... so it's there where i should
 focus my attention..

 thanks a lot for reply and regards
  marco

 On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:
 
  On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
   - how you developers are tackling the issue right now?
   - does mvn 2.1 really provides that feature?
   - if so, when it will be out?
 
  I started a little work on it quite some time back, but it was not yet
  integrated into Maven and there were still some open questions.
 
  At this point, it is scheduled for 2.1, but I'd say it's no certainty
  to be included, unfortunately.
 
  the issue to watch is MNG-553.
 
  Regards,
  Brett
 
  --
  Brett Porter
  Blog: http://www.devzuz.org/blogs/bporter/
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 



-- 
Brett Porter
Blog: http://www.devzuz.org/blogs/bporter/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: promoting maven @work / fail on proxy uname/pwd

2007-11-03 Thread Wayne Fay
Yea, we talked it out a bit and he realized that actually only his
Artifactory instance will be going outside the firewall (through the
proxy), so he needs to focus his attention on giving that box
permission to get out to the Internet. I suggested a few approaches
I've used/seen and he's going to work on it next week...

Marco, do reply back when you solve it, for the benefit of other
people who have similar configurations.

Wayne

On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
 Ah, I misunderstood - I thought you were going to configure your
 username and password for your repo manager/proxy :)

 Good luck,
 Brett

 On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
  Brett,
i  talked with Wayne (Fay) on the issue.
  for the way i want to imlpement it (an INternal repository) it is NOT  a
  maven problem
  proxy will be configured in Artifactory... so it's there where i should
  focus my attention..
 
  thanks a lot for reply and regards
   marco
 
  On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:
  
   On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
- how you developers are tackling the issue right now?
- does mvn 2.1 really provides that feature?
- if so, when it will be out?
  
   I started a little work on it quite some time back, but it was not yet
   integrated into Maven and there were still some open questions.
  
   At this point, it is scheduled for 2.1, but I'd say it's no certainty
   to be included, unfortunately.
  
   the issue to watch is MNG-553.
  
   Regards,
   Brett
  
   --
   Brett Porter
   Blog: http://www.devzuz.org/blogs/bporter/
  
   -
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 


 --
 Brett Porter
 Blog: http://www.devzuz.org/blogs/bporter/

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: promoting maven @work / fail on proxy uname/pwd

2007-11-03 Thread Marco Mistroni
Yep, will certainly do

On 11/3/07, Wayne Fay [EMAIL PROTECTED] wrote:

 Yea, we talked it out a bit and he realized that actually only his
 Artifactory instance will be going outside the firewall (through the
 proxy), so he needs to focus his attention on giving that box
 permission to get out to the Internet. I suggested a few approaches
 I've used/seen and he's going to work on it next week...

 Marco, do reply back when you solve it, for the benefit of other
 people who have similar configurations.

 Wayne

 On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
  Ah, I misunderstood - I thought you were going to configure your
  username and password for your repo manager/proxy :)
 
  Good luck,
  Brett
 
  On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
   Brett,
 i  talked with Wayne (Fay) on the issue.
   for the way i want to imlpement it (an INternal repository) it is
 NOT  a
   maven problem
   proxy will be configured in Artifactory... so it's there where i
 should
   focus my attention..
  
   thanks a lot for reply and regards
marco
  
   On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:
   
On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
 - how you developers are tackling the issue right now?
 - does mvn 2.1 really provides that feature?
 - if so, when it will be out?
   
I started a little work on it quite some time back, but it was not
 yet
integrated into Maven and there were still some open questions.
   
At this point, it is scheduled for 2.1, but I'd say it's no
 certainty
to be included, unfortunately.
   
the issue to watch is MNG-553.
   
Regards,
Brett
   
--
Brett Porter
Blog: http://www.devzuz.org/blogs/bporter/
   
   
 -
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   
   
  
 
 
  --
  Brett Porter
  Blog: http://www.devzuz.org/blogs/bporter/
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




Re: promoting maven @work / fail on proxy uname/pwd

2007-11-03 Thread Brett Porter
Right - at the very least, even if you still need to use the proxy
from there, you only have to configure the u/p in one place and it can
be locked down to system administrators.

- Brett

On 04/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
 Yep, will certainly do

 On 11/3/07, Wayne Fay [EMAIL PROTECTED] wrote:
 
  Yea, we talked it out a bit and he realized that actually only his
  Artifactory instance will be going outside the firewall (through the
  proxy), so he needs to focus his attention on giving that box
  permission to get out to the Internet. I suggested a few approaches
  I've used/seen and he's going to work on it next week...
 
  Marco, do reply back when you solve it, for the benefit of other
  people who have similar configurations.
 
  Wayne
 
  On 11/3/07, Brett Porter [EMAIL PROTECTED] wrote:
   Ah, I misunderstood - I thought you were going to configure your
   username and password for your repo manager/proxy :)
  
   Good luck,
   Brett
  
   On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
Brett,
  i  talked with Wayne (Fay) on the issue.
for the way i want to imlpement it (an INternal repository) it is
  NOT  a
maven problem
proxy will be configured in Artifactory... so it's there where i
  should
focus my attention..
   
thanks a lot for reply and regards
 marco
   
On 11/2/07, Brett Porter [EMAIL PROTECTED] wrote:

 On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
  - how you developers are tackling the issue right now?
  - does mvn 2.1 really provides that feature?
  - if so, when it will be out?

 I started a little work on it quite some time back, but it was not
  yet
 integrated into Maven and there were still some open questions.

 At this point, it is scheduled for 2.1, but I'd say it's no
  certainty
 to be included, unfortunately.

 the issue to watch is MNG-553.

 Regards,
 Brett

 --
 Brett Porter
 Blog: http://www.devzuz.org/blogs/bporter/


  -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


   
  
  
   --
   Brett Porter
   Blog: http://www.devzuz.org/blogs/bporter/
  
   -
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 



-- 
Brett Porter
Blog: http://www.devzuz.org/blogs/bporter/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: promoting maven @work / fail on proxy uname/pwd

2007-11-02 Thread Brett Porter
On 03/11/2007, Marco Mistroni [EMAIL PROTECTED] wrote:
 - how you developers are tackling the issue right now?
 - does mvn 2.1 really provides that feature?
 - if so, when it will be out?

I started a little work on it quite some time back, but it was not yet
integrated into Maven and there were still some open questions.

At this point, it is scheduled for 2.1, but I'd say it's no certainty
to be included, unfortunately.

the issue to watch is MNG-553.

Regards,
Brett

-- 
Brett Porter
Blog: http://www.devzuz.org/blogs/bporter/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]