Re: Preparing Karaf runtime 4.3.4

Robert Varga Fri, 12 Nov 2021 05:36:07 -0800

On 12/11/2021 08:51, Grzegorz Grzybek wrote:

Hello


Hey,

Thanks JBO!

I didn't yet add Pax Web 8 to 4.4.0-SNAPSHOT, but I'm going to do it soon.


Thanks for all the hard work, I can't wait to give PW8 + R8 a spin!

Regards,
Robert


regards
Grzegorz Grzybek

pt., 12 lis 2021 o 08:50 Jean-Baptiste Onofré <j...@nanthrax.net> napisał(a):

Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
end). I will also work on new Decanter release for next week.

Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
to give a chance to everyone to test this new series before a GA.

Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency alignement

is required.


Karaf 4.3.4 will be on vote soon.

Regards
JB

Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre <j...@nanthrax.net> a

écrit :


Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB

Le 29 oct. 2021 à 15:28, Grzegorz Grzybek <gr.grzy...@gmail.com> a

écrit :


Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),

I'm

getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a

subtype

at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
at java.util.ServiceLoader.access$300(ServiceLoader.java:185)

~[?:1.8.0_312]

at

java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)

~[?:1.8.0_312]
at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480)

~[?:1.8.0_312]

at

org.eclipse.jetty.security.SecurityHandler.<clinit>(SecurityHandler.java:88)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at

org.eclipse.jetty.servlet.ServletContextHandler.<init>(ServletContextHandler.java:131)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at

org.eclipse.jetty.servlet.ServletContextHandler.<init>(ServletContextHandler.java:136)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at

org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.<init>(PaxWebServletContextHandler.java:97)

~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek <gr.grzy...@gmail.com>

napisał(a):

Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
jetty-jaspic, which has dependency on javax.security.auth.message...

Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):

The Jetty issue:

https://github.com/eclipse/jetty.project/issues/6554

resulted in pull request:

https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1

This removed the check for the realm being set, thus always creating

default identity service, even when one is not defined.
As a result the geronimo JASPI spec  (Java Authentication SPI),

Attempts

to construct a default JASPI factory, resulting in a Class Not Found
Exception.

I've had a quick look at the pax-web-jetty project, but i can't see

any

geronimo dependencies. As such one of the test modules must have the

api

and implementation built in, or it's using a different Jetty Identity
Service?

Cheers
Paul





From:   "Grzegorz Grzybek" <gr.grzy...@gmail.com>
To:     "Karaf Dev" <dev@karaf.apache.org>
Date:   29/10/2021 11:36
Subject:        Re: Preparing Karaf runtime 4.3.4



Hello

What's the problem with Jetty 9.4.44? I checked with Pax Web 8

without any

changes and I got:

[INFO] Results:
[INFO]
[WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
...
[INFO]
[INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
pax-web-itest-jetty ---
[INFO]

------------------------------------------------------------------------

[INFO] BUILD SUCCESS
[INFO]

------------------------------------------------------------------------

[INFO] Total time:  05:34 min
[INFO] Finished at: 2021-10-29T12:34:12+02:00
[INFO]

------------------------------------------------------------------------


The tests include authentication and TLS tests.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 11:44 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):

Hi JB,

Jetty 9.4.44 now attempts to create the default instance of the

jaspi,

even if it is not installed or used.
I've included the geronimo-jaspi implementation alongside the

geronimo

-jaspic_1.0_spec to address the issue.
Note that ordering is important as there is static code begin used

to

register the jaspic factories, thus the above packages need to

loaded

into

the runtime prior to the jetty bundles.

Cheers
Paul

From:   "Jean-Baptiste Onofre" <j...@nanthrax.net>
To:     dev@karaf.apache.org
Date:   29/10/2021 09:58
Subject:        Re: Preparing Karaf runtime 4.3.4

Hi guys,

I detected that Jetty 9.4.44 update breaks the authentication layer.
I’m fixing that and I will cut Pax Web 7.3.20 to integrate in Karaf

4.3.4.


I will keep you posted, however, the plan is still to submit Karaf

4.3.4

to vote during the week end.

Regards
JB

Le 12 oct. 2021 à 14:43, JB Onofré <j...@nanthrax.net> a écrit :

Hi guys

I’m working on Felix FileInstall release fixing the first losing

issue.

I will include couple of other important fixes.


I would like to submit Karaf 4.3.4 to vote during the week end or

early

next week.


Thoughts ?

Regards
JB

OpenPGP_signature
Description: OpenPGP digital signature

Re: Preparing Karaf runtime 4.3.4

Reply via email to