Hi all
First, thanks for your votes.
Justin, I feared the discussion about the backport and I also feel
uncomfortable about the migration within 2.2.x. But lets have a look at
the current situation.
IMHO GSIP-82 is not a pure improvement proposal. In fact, it is a
cumulative bugfix (especially for the GUI) and it makes GUI filter chain
configuration possible. It also adds validation code to prevent
misconfiguration concerning filter chains. Within the last weeks, I had to
answer security questions and mostly I had to put people off to future
versions. Within the last days look at
http://sourceforge.net/mailarchive/forum.php?thread_name=20121204140710.98397dymbmve5oji%40webmail.nvoe.at&forum_name=geoserver-users
or
http://sourceforge.net/mailarchive/forum.php?thread_name=20121204140601.731010nafeocopx5%40webmail.nvoe.at&forum_name=geoserver-users
Another fact is that the filter tutorials have to be reworked, because
people have problems with them (me too). I have this on my list after GSIP
82, otherwise it does not make sense.
Additionally, CAS works quite will based on GSIP 82. There are two
alternatives:
1) Doing a backport and harvest the fruits of our common efforts
2) Avoiding the backport and
- telling users to wait on 2.3.x for security configuration concerning
authentication mechanisms
- removing CAS from the 2.2.x download page
- hope that only few admins invest their time in such configurations (we
offer it officially , but it does not work)
At the end of the day, I would like to backport and avoid all this
questions and time spent (from the users and mine) to get forward.
Perhaps I can make your decision easier. What about 2 commits on master,
the first for GSIP-82 and a second for CAS. Then you can have a look at the
commit and decide.
Cheers
Christian
2012/12/5 Ben Caradoc-Davies <[email protected]>
> +0.5 (enthusiastic support combined with my solid lack of understanding of
> the security subsystem).
>
>
> On 14/11/12 23:42, Christian Mueller wrote:
>
>> Please vote on
>>
>> http://geoserver.org/display/**GEOS/GSIP+82+-+Reworking+**
>> security+filter+chains<http://geoserver.org/display/GEOS/GSIP+82+-+Reworking+security+filter+chains>
>>
>> Thanks to all
>> Christian
>>
>
> --
> Ben Caradoc-Davies <[email protected]>
> Software Engineer
> CSIRO Earth Science and Resource Engineering
> Australian Resources Research Centre
>
------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
