Danny Angus ha scritto:
> On 5/9/07, Stefano Bagnara <[EMAIL PROTECTED]> wrote:
>> Danny Angus ha scritto:
>> > Stefano,
>> > Why did you add "stage" and remove lib and src test?
>> I'm sorry I had not the time tonight to check if I broke the ant build
>> tonight. I think I fixed it now.
> 
> I think this will also break the gump stuff I did yesterday.
> Unless you have a really good reason I'd like to back out your changes.

To keep consistency with every other James project and to keep
consistency between maven2 needs and ant needs I would prefer if you
don't place libs in the /lib folder.
About the test folder I don't see the need to have it if we don't have
tests, but if you need it to avoid loosing more time with gump I'll take
care to readd it (and fix the pom to include junit, and place junit jar
in the stage folder).

>> It is CDDL and we are allowed to add them.
> 
> No. incorrect. "Each license in this category requires some degree of
> reciprocity; therefore, software under these licenses may only be
> included in binary form within an Apache product"
> 
> That means we are allowed to distribute them in the final tar but
> *not* to have them in svn where they can be downloaded directly
> without anyone agreeing to the terms of the CDDL.

A question: are you 100% sure?

> In other words this link is not allowed:
> http://svn.apache.org/repos/asf/james/mailet/trunk/stage/javax.mail/jars/mail-1.4.jar

Why do you think this link is different from any mail.jar present in
maven repositories?

IANAL, but we already been there. Please check with the ASF legal team
if you think we are not in line with legal requirements because we
already do the same at least in JAMES Server and in most other JAMES
project (junit CPL is again a binary only license).

To quote a message from Noel 09/08/2006 (RE: Javamail/Activation
licensing issue)
------------------------------------------------------------
Stefano,

> > The problem is that downloading this artifacts directly from
> > java.sun.com gives you signed jars including the OLD license file.

Yes, Sun still has issues coming to grips with its own changes.

> > To obtain binary/source JARs including the new CDDL license we have to
> > use the maven-repository where the glassfish project deploy the
artifacts

> > This jars are not signed by sun.

I know, and I am *NOT* happy about it.  Sun's own signing keys are (quite
properly) kept secure, and not used for java.net.  But I'm hoping to
convince Bill Shannon to join our WoT, and sign the files that he posts.
For example, I signed David Van Couvering's key, and he could sign Bill's.

In the meantime, I have spoken with Bill, and he tells me that those are the
jars that he posted there, and only Glassfish developers (~180) (are
supposed to) have write access to that repository area on java.net.

So if you'll download and commit those to SVN, I'll ask Bill to please
verify that what we have in SVN is what he posted.

> > This would really simplify the job of building james from subversion
> > using only ant.

Always a good thing.   :-)
------------------------------------------------------------

>> We already did the same for JAMES Server.
> 
> Well I think that that is wrong too.


I appreciate your concern: I think I provided you a lot of references on
why we have them in SVN. If you still think this is wrong please contact
the ASF legal team about this, so we'll have an official position.

Stefano

Reply via email to