Re: [Wicket-user] Wicket Acegi ?
i haven't looked much at the wicket security solution there are now i would say talk to the security master: Maurice :) johan On 6/1/07, Jan Kriesten [EMAIL PROTECTED] wrote: hi johan, hmm then i have to stopp working on it right now... because i am already passed the hour again good work! thanx for doing so! have you seen my example how to use acegi without using filters? best regards, --- jan. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
Eelco Hillenius wrote: I thought about that too but then I still have to drag in some JSP's for the login page and somehow integrate Acegi's authz taglib for conditional content. Not that it's a big deal but it literally all feels a bit mixed, I prefer to keep it pure. For the pure approach, definitively check out wicket-auth. I haven't looked at Maurice's project - it might be much better - but looking at wicket-auth will help you understand how Wicket's build in authorization mechanism works. Eelco Thies, great work with eHour - I love it already! I just want to support Eelco on wicket-auth. I used Acegi with Spring MVC in a rather large application, using a lot of conditional content-ing based on the authz tag. It worked but I never was happy with it, and when I tried out Wickets own take it felt just right. It does its thing in the Wicket way. (Disclaimer: I have a severe jsp/taglib allergy so that might affect my judgement.) And, while I'm here, I have migrated two (small) Wicket-applications from 1.2 to 1.3. Absolutely no problem at all. /Per -- View this message in context: http://www.nabble.com/Wicket---Acegi---tf3833443.html#a10889509 Sent from the Wicket - User mailing list archive at Nabble.com. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
As apparently not every author in this thread sees all the steps needed to use Acegi with Wicket, I am currently writing a howto on the Wicket wiki. The howto is extracted from a production system and describes the combination of Wicket, Acegi and Wicket-auth-roles. It will take a couple of days more as I can only work on it for at most an hour per day :( I'll post again when I am done :) Regards, Erik. -- Erik van Oosten http://2007.rubyenrails.nl/ http://day-to-day-stuff.blogspot.com/ -- View this message in context: http://www.nabble.com/Wicket---Acegi---tf3833443.html#a10900512 Sent from the Wicket - User mailing list archive at Nabble.com. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
* Erik van Oosten: As apparently not every author in this thread sees all the steps needed to use Acegi with Wicket, I am currently writing a howto on the Wicket wiki. The howto is extracted from a production system and describes the combination of Wicket, Acegi and Wicket-auth-roles. It will take a couple of days more as I can only work on it for at most an hour per day :( Hey, one hour per day contributing to Open Source is already a lot! Very useful contributions can be achieved with such an amount of time dedicated to an OSS project. Thanks Erik! -- Jean-Baptiste Quenot aka John Banana Qwerty http://caraldi.com/jbq/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
Hey, one hour per day contributing to Open Source is already a lot! hmm then i have to stopp working on it right now... because i am already passed the hour again johan - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
hi johan, hmm then i have to stopp working on it right now... because i am already passed the hour again good work! thanx for doing so! have you seen my example how to use acegi without using filters? best regards, --- jan. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
If you are using wicket 1.3 you could try the new wicket security framework swarm. unlike acegi it is not url based but component based. It was designed with simplicity in mind so you should be able to get started right away. You can find documentation here http://wicketstuff.org/confluence/display/STUFFWIKI/Wicket-Security The documentation is still work in progress but if you have any question you can always ask them on the mailing list. I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. Maurice On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: Hello all, I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? thanks in advance, Thies -- http://blog.ehour.nl/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
There was a thread some time ago. In http://www.nabble.com/forum/ViewPost.jtp?post=7285394framed=y this message I explained how we use Acegi in combination with wicket-auth-roles. Regards, Erik. Mr Mean wrote: I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. -- Erik van Oosten http://2007.rubyenrails.nl/ http://www.day-to-day-stuff.blogspot.com/ -- View this message in context: http://www.nabble.com/Wicket---Acegi---tf3833443.html#a10853872 Sent from the Wicket - User mailing list archive at Nabble.com. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
According to your mail, you are only using acegi to do the authentication and let auth-roles handle the authorization. Swarm provides functionality to handle both authentication and authorization and is perfectly capable of delegating to whatever authentication framework you desire. Maurice On 5/29/07, Erik van Oosten [EMAIL PROTECTED] wrote: There was a thread some time ago. In http://www.nabble.com/forum/ViewPost.jtp?post=7285394framed=y this message I explained how we use Acegi in combination with wicket-auth-roles. Regards, Erik. Mr Mean wrote: I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. -- Erik van Oosten http://2007.rubyenrails.nl/ http://www.day-to-day-stuff.blogspot.com/ -- View this message in context: http://www.nabble.com/Wicket---Acegi---tf3833443.html#a10853872 Sent from the Wicket - User mailing list archive at Nabble.com. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
Indeed. I was replying to give a reference to using Acegi. I think now, Swarm is the way to go. Regards, Erik. Mr Mean wrote: According to your mail, you are only using acegi to do the authentication and let auth-roles handle the authorization. Swarm provides functionality to handle both authentication and authorization and is perfectly capable of delegating to whatever authentication framework you desire. Maurice -- Erik van Oosten http://2007.rubyenrails.nl/ http://www.day-to-day-stuff.blogspot.com/ -- View this message in context: http://www.nabble.com/Wicket---Acegi---tf3833443.html#a10854306 Sent from the Wicket - User mailing list archive at Nabble.com. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
I'm using 1.2.6 so swarm is not in the picture. Will check out auth-roles as I'm on java 1.5, thx! On Tue, 29 May 2007, Maurice Marrink wrote: If you are using wicket 1.3 you could try the new wicket security framework swarm. unlike acegi it is not url based but component based. It was designed with simplicity in mind so you should be able to get started right away. You can find documentation here http://wicketstuff.org/confluence/display/STUFFWIKI/Wicket-Security The documentation is still work in progress but if you have any question you can always ask them on the mailing list. I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. Maurice On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: Hello all, I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? thanks in advance, Thies -- http://blog.ehour.nl/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
Johan, has an excellent point, but we too have a pre wicket 1.3 app so i guess i'll have to make a branche for that app anyhow if i want to replace or old security mechanisme. I don't think it will be much work to backport to 1.2.6. Let me know if you plan on staying with wicket 1.2.x or upgrade to 1.3 Maurice On 5/29/07, Johan Compagner [EMAIL PROTECTED] wrote: you could ofcourse upgrade to 1.3! Now you rewrite from struts to wicket but we are moving alone and then you have to rewrite it again to 1.3. johan On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: I'm using 1.2.6 so swarm is not in the picture. Will check out auth-roles as I'm on java 1.5, thx! On Tue, 29 May 2007, Maurice Marrink wrote: If you are using wicket 1.3 you could try the new wicket security framework swarm. unlike acegi it is not url based but component based. It was designed with simplicity in mind so you should be able to get started right away. You can find documentation here http://wicketstuff.org/confluence/display/STUFFWIKI/Wicket-Security The documentation is still work in progress but if you have any question you can always ask them on the mailing list. I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. Maurice On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: Hello all, I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? thanks in advance, Thies -- http://blog.ehour.nl/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
Hi Marice, While here may I ask a quick question? I've quickly glanced through the docs at Wiki and could see some reference to Hivemind. Does this implementation employs Apache HiveMind and if so I assume I have to place yet another jar on my classpath. Right or not? Regards, Francis On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Johan, has an excellent point, but we too have a pre wicket 1.3 app so i guess i'll have to make a branche for that app anyhow if i want to replace or old security mechanisme. I don't think it will be much work to backport to 1.2.6. Let me know if you plan on staying with wicket 1.2.x or upgrade to 1.3 Maurice On 5/29/07, Johan Compagner [EMAIL PROTECTED] wrote: you could ofcourse upgrade to 1.3! Now you rewrite from struts to wicket but we are moving alone and then you have to rewrite it again to 1.3. johan On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: I'm using 1.2.6 so swarm is not in the picture. Will check out auth-roles as I'm on java 1.5, thx! On Tue, 29 May 2007, Maurice Marrink wrote: If you are using wicket 1.3 you could try the new wicket security framework swarm. unlike acegi it is not url based but component based. It was designed with simplicity in mind so you should be able to get started right away. You can find documentation here http://wicketstuff.org/confluence/display/STUFFWIKI/Wicket-Security The documentation is still work in progress but if you have any question you can always ask them on the mailing list. I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. Maurice On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: Hello all, I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? thanks in advance, Thies -- http://blog.ehour.nl/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user -- Beware of bugs in the above code; I have only proved it correct, not tried it. -Donald Knuth -
Re: [Wicket-user] Wicket Acegi ?
Francis, Swarm does not use apache hivemind. The hivemind reference you saw in the example code is to an internal class who is coincidentally named like apache hivemind. Swarm only requires the following jars besides wicket: Wasp, commons-logging and Log4j. Maurice On 5/29/07, Francis Amanfo [EMAIL PROTECTED] wrote: Hi Marice, While here may I ask a quick question? I've quickly glanced through the docs at Wiki and could see some reference to Hivemind. Does this implementation employs Apache HiveMind and if so I assume I have to place yet another jar on my classpath. Right or not? Regards, Francis On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Johan, has an excellent point, but we too have a pre wicket 1.3 app so i guess i'll have to make a branche for that app anyhow if i want to replace or old security mechanisme. I don't think it will be much work to backport to 1.2.6. Let me know if you plan on staying with wicket 1.2.x or upgrade to 1.3 Maurice On 5/29/07, Johan Compagner [EMAIL PROTECTED] wrote: you could ofcourse upgrade to 1.3! Now you rewrite from struts to wicket but we are moving alone and then you have to rewrite it again to 1.3. johan On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: I'm using 1.2.6 so swarm is not in the picture. Will check out auth-roles as I'm on java 1.5, thx! On Tue, 29 May 2007, Maurice Marrink wrote: If you are using wicket 1.3 you could try the new wicket security framework swarm. unlike acegi it is not url based but component based. It was designed with simplicity in mind so you should be able to get started right away. You can find documentation here http://wicketstuff.org/confluence/display/STUFFWIKI/Wicket-Security The documentation is still work in progress but if you have any question you can always ask them on the mailing list. I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. Maurice On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: Hello all, I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? thanks in advance, Thies -- http://blog.ehour.nl/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net
Re: [Wicket-user] Wicket Acegi ?
Yes, I thought so too since I couldn't see any package reference to apache hivemind but just the name Hivemind, but to be sure I decided to ask. Thanks for the answer and great work. Francis On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Francis, Swarm does not use apache hivemind. The hivemind reference you saw in the example code is to an internal class who is coincidentally named like apache hivemind. Swarm only requires the following jars besides wicket: Wasp, commons-logging and Log4j. Maurice On 5/29/07, Francis Amanfo [EMAIL PROTECTED] wrote: Hi Marice, While here may I ask a quick question? I've quickly glanced through the docs at Wiki and could see some reference to Hivemind. Does this implementation employs Apache HiveMind and if so I assume I have to place yet another jar on my classpath. Right or not? Regards, Francis On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Johan, has an excellent point, but we too have a pre wicket 1.3 app so i guess i'll have to make a branche for that app anyhow if i want to replace or old security mechanisme. I don't think it will be much work to backport to 1.2.6. Let me know if you plan on staying with wicket 1.2.x or upgrade to 1.3 Maurice On 5/29/07, Johan Compagner [EMAIL PROTECTED] wrote: you could ofcourse upgrade to 1.3! Now you rewrite from struts to wicket but we are moving alone and then you have to rewrite it again to 1.3. johan On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: I'm using 1.2.6 so swarm is not in the picture. Will check out auth-roles as I'm on java 1.5, thx! On Tue, 29 May 2007, Maurice Marrink wrote: If you are using wicket 1.3 you could try the new wicket security framework swarm. unlike acegi it is not url based but component based. It was designed with simplicity in mind so you should be able to get started right away. You can find documentation here http://wicketstuff.org/confluence/display/STUFFWIKI/Wicket-Security The documentation is still work in progress but if you have any question you can always ask them on the mailing list. I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. Maurice On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: Hello all, I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? thanks in advance, Thies -- http://blog.ehour.nl/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Re: [Wicket-user] Wicket Acegi ?
No problem and thanks. Have you decided yet if you are going to upgrade to wicket 1.3? Maurice On 5/29/07, Francis Amanfo [EMAIL PROTECTED] wrote: Yes, I thought so too since I couldn't see any package reference to apache hivemind but just the name Hivemind, but to be sure I decided to ask. Thanks for the answer and great work. Francis On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Francis, Swarm does not use apache hivemind. The hivemind reference you saw in the example code is to an internal class who is coincidentally named like apache hivemind. Swarm only requires the following jars besides wicket: Wasp, commons-logging and Log4j. Maurice On 5/29/07, Francis Amanfo [EMAIL PROTECTED] wrote: Hi Marice, While here may I ask a quick question? I've quickly glanced through the docs at Wiki and could see some reference to Hivemind. Does this implementation employs Apache HiveMind and if so I assume I have to place yet another jar on my classpath. Right or not? Regards, Francis On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Johan, has an excellent point, but we too have a pre wicket 1.3 app so i guess i'll have to make a branche for that app anyhow if i want to replace or old security mechanisme. I don't think it will be much work to backport to 1.2.6. Let me know if you plan on staying with wicket 1.2.x or upgrade to 1.3 Maurice On 5/29/07, Johan Compagner [EMAIL PROTECTED] wrote: you could ofcourse upgrade to 1.3! Now you rewrite from struts to wicket but we are moving alone and then you have to rewrite it again to 1.3. johan On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: I'm using 1.2.6 so swarm is not in the picture. Will check out auth-roles as I'm on java 1.5, thx! On Tue, 29 May 2007, Maurice Marrink wrote: If you are using wicket 1.3 you could try the new wicket security framework swarm. unlike acegi it is not url based but component based. It was designed with simplicity in mind so you should be able to get started right away. You can find documentation here http://wicketstuff.org/confluence/display/STUFFWIKI/Wicket-Security The documentation is still work in progress but if you have any question you can always ask them on the mailing list. I am not sure if there is an existing wicket-acegi framework but i believe i have heard of people using them together. Optionally if you are using java 1.5 you could check out the wicket-auth-roles project. Maurice On 5/29/07, Thies Edeling [EMAIL PROTECTED] wrote: Hello all, I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? thanks in advance, Thies -- http://blog.ehour.nl/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing
Re: [Wicket-user] Wicket Acegi ?
On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Swarm only requires the following jars besides wicket: Wasp, commons-logging and Log4j. You did notice that Wicket now uses slf4j instead of clogging? Martijn -- Join the wicket community at irc.freenode.net: ##wicket Wicket 1.2.6 contains a very important fix. Download Wicket now! http://wicketframework.org - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
* Thies Edeling: I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? You can just add acegi filter in web.xml before wicket servlet, can't you? Going the Wicket way is not strictly necessary, I do it like this without integrating with Wicket authentication facilities. -- Jean-Baptiste Quenot aka John Banana Qwerty http://caraldi.com/jbq/ - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
I know martijn and i will fix this, in the meantime i would like to add to my defense that i am not the only stuff project to use log4j :) Maurice On 5/29/07, Martijn Dashorst [EMAIL PROTECTED] wrote: On 5/29/07, Maurice Marrink [EMAIL PROTECTED] wrote: Swarm only requires the following jars besides wicket: Wasp, commons-logging and Log4j. You did notice that Wicket now uses slf4j instead of clogging? Martijn -- Join the wicket community at irc.freenode.net: ##wicket Wicket 1.2.6 contains a very important fix. Download Wicket now! http://wicketframework.org - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
I know martijn and i will fix this, in the meantime i would like to add to my defense that i am not the only stuff project to use log4j :) You mean commons-logging :) Eelco - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
I'm migrating an existing Struts app to Wicket and have now reached the point where I have to add authentication/authorization to it. In the Struts app I used Acegi to add URL-based security. Ideally I'd re-use my existing Acegi config for Wicket but I can't find any documentation on how to do this. The 'Wicket way' of authentication is mentioned on the Wiki somewhere but details are missing. What's the best way to add simple role-based security to a Wicket app? You can just add acegi filter in web.xml before wicket servlet, can't you? Going the Wicket way is not strictly necessary, I do it like this without integrating with Wicket authentication facilities. I thought about that too but then I still have to drag in some JSP's for the login page and somehow integrate Acegi's authz taglib for conditional content. Not that it's a big deal but it literally all feels a bit mixed, I prefer to keep it pure. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket Acegi ?
:) indeed i realized my mistake after i hit the send button :) Maurice On 5/29/07, Eelco Hillenius [EMAIL PROTECTED] wrote: I know martijn and i will fix this, in the meantime i would like to add to my defense that i am not the only stuff project to use log4j :) You mean commons-logging :) Eelco - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket + Acegi Security ?
I just had a consultancy gig with a customer last week (one of the world's largest banks) who had massive troubles with implementing portlet technology just because of the historical dependency on URLs (they use SiteMinder) for authentication/ authorisation. Now, I don't want to downplay the advantages a product like SiteMinder or Acegi has, but I'd like to express that it sucks that those products impose a url model on you. It makes it harder for you to decide later on to restructure your site as well; in the end for non-document oriented webapplications, imo URLs should be part of your application internals really. I think the way to go is to have a proper JAAS implementation that is independent of URLs. I think Acegi can do such stuff too, so I think that would be a good path to investigate. Eelco Gert Jan Verhoog wrote: Hi list, Just wondering if anybody has successfully used the Acegi security framework with Wicket (Phil?). I'm currently using Acegi with SpringMVC and I'd like to use it with Spring/Wicket. I guess the techniques from the signin examples will do for now, but in future I need more sophisticated stuff like single sign-on and integration with other security stuff for which I'd like to use my existing acegi config. In my SpringMVC project, Acegi enforces authenticated access on certain pages based on url patterns. Using Wicket with it's volatile urls I don't see how this could work. cheers, Gert Jan --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
RE: [Wicket-user] Wicket + Acegi Security ?
-Original Message- From: Eelco Hillenius [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 02, 2005 4:28 AM To: wicket-user@lists.sourceforge.net Subject: Re: [Wicket-user] Wicket + Acegi Security ? Now, I don't want to downplay the advantages a product like SiteMinder or Acegi has, but I'd like to express that it sucks that those products impose a url model on you. It makes it harder for you to decide later on to restructure your site as well; in the end for non-document oriented webapplications, imo URLs should be part of your application internals really. Does Acegi impose a URL model on the application? I think the way to go is to have a proper JAAS implementation that is independent of URLs. I think Acegi can do such stuff too, so I think that would be a good path to investigate. Yup. Questions lurk in my mind too regarding whether to attempt Acegi or JAAS in Wicket. Gert Jan Verhoog wrote: Hi list, Just wondering if anybody has successfully used the Acegi security framework with Wicket (Phil?). I'm currently using Acegi with SpringMVC and I'd like to use it with Spring/Wicket. This is something that's on my TODO list as well, Gert. Thanks for bringing it up on the list. --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77alloc_id492op=click ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket + Acegi Security ?
I opened an issue for it: https://sourceforge.net/tracker/index.php?func=detailaid=1250242group_id=119783atid=684978 Help is appreciated! Eelco --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
Re: [Wicket-user] Wicket + Acegi Security ?
Very glad to hear that! I was too quick with my opinion it seems! Eelco Adam Chesney wrote: We have Acegi working with Wicket in our initial prototype project (User, Organisation, etc management). We had to subclass the AuthenticationProcessingFilter included with Acegi to look for a username/password pair in the request (instead of interrogating the URL) in order to determine that Authentication was required. Not sure if this is the best methodology, but it seems to work fine. Basically the filter does this: 1) look in request for username/password - if yes -- Authenticate and put Principal into Session and ThreadLocal SecureContext. 2) if no - look in session for Principal - if yes -- put Principal in ThreadLocal SecureContext 3) if no - redirect to login page With the correct Principal in the ThreadLocal SecureContext Acegi will work properly throughout. Acegi is nice and clean, and so not very hard to interact with. The beauties of open-source... :) Cheers, Adam Chesney Senior Architect Multicom Products Ltd = Tel: (+44) 117 908 1254 (Direct) Mobile (+44) 7780 962 961 email: [EMAIL PROTECTED] This communication is intended solely for the addressee and is confidential. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Although this e-mail and any attachments are believed to be free of any virus, or any other defect which might affect any computer or IT system into which they are received and opened, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by Multicom Products Limited for any loss or damage arising in any way from receipt or use thereof. - Original Message - From: Bennett, Timothy (JIS - Applications) [EMAIL PROTECTED] To: wicket-user@lists.sourceforge.net Sent: Tuesday, August 02, 2005 2:43 PM Subject: RE: [Wicket-user] Wicket + Acegi Security ? -Original Message- From: Eelco Hillenius [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 02, 2005 4:28 AM To: wicket-user@lists.sourceforge.net Subject: Re: [Wicket-user] Wicket + Acegi Security ? Now, I don't want to downplay the advantages a product like SiteMinder or Acegi has, but I'd like to express that it sucks that those products impose a url model on you. It makes it harder for you to decide later on to restructure your site as well; in the end for non-document oriented webapplications, imo URLs should be part of your application internals really. Does Acegi impose a URL model on the application? I think the way to go is to have a proper JAAS implementation that is independent of URLs. I think Acegi can do such stuff too, so I think that would be a good path to investigate. Yup. Questions lurk in my mind too regarding whether to attempt Acegi or JAAS in Wicket. Gert Jan Verhoog wrote: Hi list, Just wondering if anybody has successfully used the Acegi security framework with Wicket (Phil?). I'm currently using Acegi with SpringMVC and I'd like to use it with Spring/Wicket. This is something that's on my TODO list as well, Gert. Thanks for bringing it up on the list. --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77alloc_id492op=ick ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
