Hi Roman, The stax-api and jabx-impl are bundled in Ranger, NOT PXF. To be specific, they are in hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm which is in apache-hawq-rpm-2.2.0.0-incubating.tar.gz <https://dist.apache.org/repos/dist/dev/incubator/hawq/2.2.0.0-incubating.RC2/apache-hawq-rpm-2.2.0.0-incubating.tar.gz> . You can get them with "rpm2cpio hawq-ranger-plugin-2.2.0.0-1.el7.centos.noarch.rpm | cpio -div".
The details of the dependency shows that: stax-api and jabx-impl is dependency of hadoop-common, while hadoop-common is dependency ranger plugin in hawq. *$ mvn project-info-reports:dependencies* *[INFO] Scanning for projects...* *[INFO] ------------------------------------------------------------------------* *[INFO] Reactor Build Order:* *[INFO]* *[INFO] HAWQ Ranger Plugin* *[INFO] HAWQ Ranger Admin Plugin* *[INFO] HAWQ Ranger Service* *[INFO]* *[INFO] ------------------------------------------------------------------------* *[INFO] Building HAWQ Ranger Admin Plugin 2.2.0.0* *[INFO] ------------------------------------------------------------------------* *[INFO]* *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ ranger-plugin-admin ---* *[INFO] org.apache.hawq:ranger-plugin-admin:jar:2.2.0.0* *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile* *[INFO] | +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile* *[INFO] | | +- com.sun.jersey:jersey-json:jar:1.9:compile* *[INFO] | | | +- org.codehaus.jettison:jettison:jar:1.1:compile* *[INFO] | | | +- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile* *[INFO] | | | | \- javax.xml.bind:jaxb-api:jar:2.2.2:compile* *[INFO] | | | | +- javax.xml.stream:stax-api:jar:1.0-2:compile* *[INFO] | | | | \- javax.activation:activation:jar:1.1:compile* *[INFO] ......* *[INFO] ------------------------------------------------------------------------* *[INFO] Building HAWQ Ranger Service 2.2.0.0* *[INFO] ------------------------------------------------------------------------* *[INFO]* *[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ ranger-plugin-service ---* *[INFO] org.apache.hawq:ranger-plugin-service:war:2.2.0.0* *[INFO] +- org.apache.ranger:ranger-plugins-common:jar:0.6.0:compile* *[INFO] | +- org.apache.hadoop:hadoop-common:jar:2.7.1:compile* *[INFO] | | +- com.sun.jersey:jersey-json:jar:1.9:compile* *[INFO] | | | +- org.codehaus.jettison:jettison:jar:1.1:compile* *[INFO] | | | \- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile* *[INFO] | | | \- javax.xml.bind:jaxb-api:jar:2.2.2:compile* *[INFO] | | | +- javax.xml.stream:stax-api:jar:1.0-2:compile* *[INFO] | | | \- javax.activation:activation:jar:1.1:compile* *[INFO] ......* *[INFO] ------------------------------------------------------------------------* *[INFO] Reactor Summary:* *[INFO]* *[INFO] HAWQ Ranger Plugin ................................. SUCCESS [ 0.425 s]* *[INFO] HAWQ Ranger Admin Plugin ........................... SUCCESS [ 0.252 s]* *[INFO] HAWQ Ranger Service ................................ SUCCESS [ 0.099 s]* *[INFO] ------------------------------------------------------------------------* *[INFO] BUILD SUCCESS* *[INFO] ------------------------------------------------------------------------* *[INFO] Total time: 0.992 s* *[INFO] Finished at: 2017-05-22T17:24:15+08:00* *[INFO] Final Memory: 19M/437M* *[INFO] ------------------------------------------------------------------------* Best regards, Ruilong Huo On Sat, May 27, 2017 at 7:32 AM, Roman Shaposhnik <[email protected]> wrote: > On Fri, May 26, 2017 at 8:11 AM, Ruilong Huo <[email protected]> wrote: > > Hi Roman, > > > > Thanks for your feedback! > > > > We will merge the license information for the C/C++ components and > prepare > > LICENSE and NOTICE files accordingly. > > Great! Let me know when can I review the actual files. > > > As for JSON in PXF which is incompatible with ASL v2, the fix is to > replace > > it with some library which is compatible or remove it? > > Correct. Here's a list of alternative libraries you should start migrating > to: > https://wiki.debian.org/qa.debian.org/jsonevil > > There's also http://johnzon.apache.org/ > > And finally: > > <dependency> > <groupId>com.tdunning</groupId> > <artifactId>json</artifactId> > <version>1.0</version> > </dependency> > > > Furthermore, Hongxu helped to get the license information for Ranger as > > well and it turns out that there two dependencies with GPL license which > is > > also not compatible with ASL v2: > > > > 1. stax-api-1.0-2.jar (GPL): StAX is a standard XML processing API that > > allows you to stream XML data from and to your application. > > > > 2. jaxb-impl-2.2.3-1.jar (CDDL 1.1 GPL 2.0): Old JAXB Runtime module. > > Contains sources required for runtime processing. > > > > They are actually directly required by hadoop common and thus is > indirectly > > required by HAWQ Ranger. > > I still need to double check it -- but I think those just bring in the > APIs which > get replaced during the runtime. Will take a deeper look, though. > > > They are bundled hawq binary during packaging with > > maven. > > Wait. Where are they bundled? I don't see them as part of PXF? > Thanks, > Roman. >
