[jira] Commented: (GERONIMO-2925) Key used for encryption same for all server instances
[
https://issues.apache.org/jira/browse/GERONIMO-2925?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527698
]
Jarek Gawor commented on GERONIMO-2925:
---
David,
I think EncyptionManager.encrypt() should be able to encrypt anything even the
output of itself. Right now, like you mentioned, it will try to decrypt the
input if the input starts with the set prefix. Also, the current implementation
will return null (or throw some exception) if the input starts with a {, e.g.
{foobar.
Also, EncyptionManager.decrypt() will return null either if the decryption
fails or if there is no Encryption object installed for the prefix. Maybe
something to document in javadoc.
Key used for encryption same for all server instances
-
Key: GERONIMO-2925
URL: https://issues.apache.org/jira/browse/GERONIMO-2925
Project: Geronimo
Issue Type: Bug
Security Level: public(Regular issues)
Components: security
Affects Versions: 1.1.1, 1.1.2, 1.1.x, 1.2, 2.0-M5
Reporter: Michael Malgeri
Assignee: David Jencks
Priority: Critical
Attachments: GERONIMO-2925.patch
We understand that WASCE use AES to encrypt the password. You do
javax.crypto.Cipher.getInstance(AES) and init() with a hard-coded key.
This key is same for all the WASCE server instances. Anyone getting access
to a downloaded version of the software can have the algorithm and decrypt
the password. So we need your urgent help on the following:
1. provide a solution with key management that we can control
2. provide a pluggable encryption solution so that we can use our internal
algorithms and key management
At least,
3. the key should be dynamically generated in each of the installations that
would reduce the ability to decrypt to someone who has access to the server.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[VOTE] Release Geronimo Eclipse Plugin 2.0.0 (RC3)
Hi, Please review and vote on the release of the Geronimo Eclipse Plugin 2.0.0 RC3 (to correspond with the Geronimo 2.0.1 Server release). The deployable zip file is here: http://people.apache.org/~mcconne/releases/RC3/geronimo-eclipse-plugin-2.0.0-deployable-RC3.zip The update site zip file is here: http://people.apache.org/~mcconne/releases/RC3/geronimo-eclipse-plugin-2.0.0-updatesite-RC3.zip The current svn location is here (revision number 575886): https://svn.apache.org/repos/asf/geronimo/devtools/eclipse-plugin/branches/2.0.0 The future svn location will be here: https://svn.apache.org/repos/asf/geronimo/devtools/eclipse-plugin/tags/2.0.0 Install, ant build, and Staging Site instructions are here: - http://people.apache.org/~mcconne/releases/RC3/Geronimo_Eclipse_Plugin_2.0.0_Instructions-RC3.txt The vote will conclude at 04:00 AM EST on Tuesday, September 18th -- Thanks, Tim McConnell
[DISCUSS] Release Geronimo Eclipse Plugin 2.0.0 (RC3)
Start of discussion thread. -- Thanks, Tim McConnell
[BUILD] Trunk: Failed for Revision: 575890
OpenEJB trunk at 575890
Geronimo Revision: 575890 built with tests included
See the full build-0400.log file at
http://people.apache.org/~prasad/binaries/trunk/20070915/build-0400.log
13K downloaded
Downloading:
http://download.java.net/maven/1//com.sun.xml.bind/poms/jaxb-impl-2.0.5.pom
656b downloaded
Downloading: http://download.java.net/maven/1//ognl/poms/ognl-2.6.9.pom
[WARNING] Unable to get resource 'ognl:ognl:pom:2.6.9' from repository java.net
(http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//ognl/ognl/2.6.9/ognl-2.6.9.pom
[WARNING] Unable to get resource 'ognl:ognl:pom:2.6.9' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading: http://repo1.maven.org/maven2/ognl/ognl/2.6.9/ognl-2.6.9.pom
792b downloaded
Downloading: http://download.java.net/maven/1//woodstox/poms/wstx-asl-3.2.1.pom
[WARNING] Unable to get resource 'woodstox:wstx-asl:pom:3.2.1' from repository
java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//woodstox/wstx-asl/3.2.1/wstx-asl-3.2.1.pom
[WARNING] Unable to get resource 'woodstox:wstx-asl:pom:3.2.1' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://repo1.maven.org/maven2/woodstox/wstx-asl/3.2.1/wstx-asl-3.2.1.pom
[WARNING] Unable to get resource 'woodstox:wstx-asl:pom:3.2.1' from repository
central (http://repo1.maven.org/maven2)
Downloading: http://download.java.net/maven/1//woodstox/jars/wstx-asl-3.2.1.jar
[WARNING] Unable to get resource 'woodstox:wstx-asl:jar:3.2.1' from repository
java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//woodstox/wstx-asl/3.2.1/wstx-asl-3.2.1.jar
[WARNING] Unable to get resource 'woodstox:wstx-asl:jar:3.2.1' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://repo1.maven.org/maven2/woodstox/wstx-asl/3.2.1/wstx-asl-3.2.1.jar
493K downloaded
Downloading: http://download.java.net/maven/1//ognl/jars/ognl-2.6.9.jar
[WARNING] Unable to get resource 'ognl:ognl:jar:2.6.9' from repository java.net
(http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//ognl/ognl/2.6.9/ognl-2.6.9.jar
[WARNING] Unable to get resource 'ognl:ognl:jar:2.6.9' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading: http://repo1.maven.org/maven2/ognl/ognl/2.6.9/ognl-2.6.9.jar
164K downloaded
Downloading:
http://download.java.net/maven/1//com.sun.xml.bind/jars/jaxb-impl-2.0.5.jar
769K downloaded
[INFO] snapshot org.apache.geronimo.modules:geronimo-kernel:2.1-SNAPSHOT:
checking for updates from apache-snapshots
[INFO] snapshot org.apache.geronimo.modules:geronimo-kernel:2.1-SNAPSHOT:
checking for updates from codehaus-snapshots
[INFO] snapshot org.apache.geronimo.modules:geronimo-kernel:2.1-SNAPSHOT:
checking for updates from apache.snapshots
[INFO] [enforcer:enforce {execution: default}]
Downloading:
http://repository.codehaus.org/com/sun/xml/bind/jaxb-xjc/2.0.3/jaxb-xjc-2.0.3.pom
[WARNING] Unable to get resource 'com.sun.xml.bind:jaxb-xjc:pom:2.0.3' from
repository codehaus.org (http://repository.codehaus.org)
Downloading:
http://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-xjc/2.0.3/jaxb-xjc-2.0.3.pom
165b downloaded
Downloading:
http://repository.codehaus.org/com/sun/xml/bind/jaxb-xjc/2.0.3/jaxb-xjc-2.0.3.jar
[WARNING] Unable to get resource 'com.sun.xml.bind:jaxb-xjc:jar:2.0.3' from
repository codehaus.org (http://repository.codehaus.org)
Downloading:
http://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-xjc/2.0.3/jaxb-xjc-2.0.3.jar
2918K downloaded
[INFO] [jaxb2:xjc {execution: default}]
[INFO] Generating source...
[INFO] parsing a schema...
[INFO] compiling a schema...
[INFO] org/apache/geronimo/system/plugin/model/ArtifactType.java
[INFO] org/apache/geronimo/system/plugin/model/AttributeType.java
[INFO] org/apache/geronimo/system/plugin/model/AttributesType.java
[INFO] org/apache/geronimo/system/plugin/model/CopyFileType.java
[INFO] org/apache/geronimo/system/plugin/model/DependencyType.java
[INFO] org/apache/geronimo/system/plugin/model/GbeanType.java
[INFO] org/apache/geronimo/system/plugin/model/HashType.java
[INFO] org/apache/geronimo/system/plugin/model/LicenseType.java
[INFO] org/apache/geronimo/system/plugin/model/ModuleType.java
[INFO] org/apache/geronimo/system/plugin/model/ObjectFactory.java
[INFO] org/apache/geronimo/system/plugin/model/PluginArtifactType.java
[INFO] org/apache/geronimo/system/plugin/model/PluginListType.java
[INFO] org/apache/geronimo/system/plugin/model/PluginType.java
[INFO] org/apache/geronimo/system/plugin/model/PrerequisiteType.java
[INFO] org/apache/geronimo/system/plugin/model/PropertyType.java
[INFO] org/apache/geronimo/system/plugin/model/ReferenceType.java
[INFO] org
Re: Obscuring passwords in new ways
Sounds nice!
Aaron
On 9/14/07, David Jencks [EMAIL PROTECTED] wrote:
Periodically users show up who want their passwords obscured in new
ways that allow their systems to break by removing the key used to
obscure them :-) (how's that for a biased view of the situation :-)
They don't like SimpleEncryption because the key is hardcoded and
thus the same for all geronimo instances.
See GERONIMO-2925
I've implemented something for this request that allows you to
register encryptors with the EncryptionManager. By default you get
the current SimpleEncryption which uses AES with a hardcoded key.
There's also a ConfiguredEncryption gbean that will generate and save
a key if not present or use a saved one.
You can register any number of Encryption instances with
EncrptionManager but only the first one you register will be used for
encryption. Others might be used for decryption.
If you try to encrypt a string that is already encrypted under a
different registered Encryption instance it will decrypt using the
old Encryption and re-encrypt using the registered Encryption. For
instance the properties file login module used to use {Standard} as
the prefix instead of {Simple} so I registered the SimpleEncryption
instance under both prefixes: the property files are re-encrypted
with the {Simple} prefix.
If you want to use the ConfiguredEncryption you can add this to
config.xml under rmi-naming module:
gbean name=org.apache.geronimo.configs/rmi-naming/2.1-SNAPSHOT/car?
name=ConfiguredEncryption,j2eeType=GBean
gbeanInfo=org.apache.geronimo.system.util.ConfiguredEncryption
attribute name=pathvar/security/ConfiguredSecretKey.ser/attribute
reference name=ServerInfopatternnameServerInfo/name/
pattern/reference
/gbean
I haven't tried this with app clients yet but I assume that adding
this gbean to client would work.
I'd appreciate review on this both for the idea of pluggable
Encryption and even more for my use of crypto which I am definitely
not an expert in.
thanks
david jencks
Re: [BUILD] Trunk: Failed for Revision: 575890
/home/prasad/geronimo/trunk/modules/geronimo-system/src/test/java/org/
apache/geronimo/system/plugin/CopyConfigTest.java:[258,69]
incompatible types
found : java.util.Listjava.io.Serializable
required: java.util.Listjava.lang.Object
I see this periodically and if I build again it always succeeds. I'm
not sure what is going on. It might have to do with the extra xjc
hint to make the generated classes serializable but I have no idea
why it wouldn't work consistently. Has anyone else experienced
inconsistent or flaky behavior from xjc or its maven plugin?
thanks
david jencks
On Sep 15, 2007, at 4:16 AM, [EMAIL PROTECTED] wrote:
OpenEJB trunk at 575890
Geronimo Revision: 575890 built with tests included
See the full build-0400.log file at http://people.apache.org/
~prasad/binaries/trunk/20070915/build-0400.log
13K downloaded
Downloading: http://download.java.net/maven/1//com.sun.xml.bind/
poms/jaxb-impl-2.0.5.pom
656b downloaded
Downloading: http://download.java.net/maven/1//ognl/poms/
ognl-2.6.9.pom
[WARNING] Unable to get resource 'ognl:ognl:pom:2.6.9' from
repository java.net (http://download.java.net/maven/1/)
Downloading: http://people.apache.org/repo/m2-incubating-
repository//ognl/ognl/2.6.9/ognl-2.6.9.pom
[WARNING] Unable to get resource 'ognl:ognl:pom:2.6.9' from
repository apache-incubator (http://people.apache.org/repo/m2-
incubating-repository/)
Downloading: http://repo1.maven.org/maven2/ognl/ognl/2.6.9/
ognl-2.6.9.pom
792b downloaded
Downloading: http://download.java.net/maven/1//woodstox/poms/wstx-
asl-3.2.1.pom
[WARNING] Unable to get resource 'woodstox:wstx-asl:pom:3.2.1' from
repository java.net (http://download.java.net/maven/1/)
Downloading: http://people.apache.org/repo/m2-incubating-
repository//woodstox/wstx-asl/3.2.1/wstx-asl-3.2.1.pom
[WARNING] Unable to get resource 'woodstox:wstx-asl:pom:3.2.1' from
repository apache-incubator (http://people.apache.org/repo/m2-
incubating-repository/)
Downloading: http://repo1.maven.org/maven2/woodstox/wstx-asl/3.2.1/
wstx-asl-3.2.1.pom
[WARNING] Unable to get resource 'woodstox:wstx-asl:pom:3.2.1' from
repository central (http://repo1.maven.org/maven2)
Downloading: http://download.java.net/maven/1//woodstox/jars/wstx-
asl-3.2.1.jar
[WARNING] Unable to get resource 'woodstox:wstx-asl:jar:3.2.1' from
repository java.net (http://download.java.net/maven/1/)
Downloading: http://people.apache.org/repo/m2-incubating-
repository//woodstox/wstx-asl/3.2.1/wstx-asl-3.2.1.jar
[WARNING] Unable to get resource 'woodstox:wstx-asl:jar:3.2.1' from
repository apache-incubator (http://people.apache.org/repo/m2-
incubating-repository/)
Downloading: http://repo1.maven.org/maven2/woodstox/wstx-asl/3.2.1/
wstx-asl-3.2.1.jar
493K downloaded
Downloading: http://download.java.net/maven/1//ognl/jars/
ognl-2.6.9.jar
[WARNING] Unable to get resource 'ognl:ognl:jar:2.6.9' from
repository java.net (http://download.java.net/maven/1/)
Downloading: http://people.apache.org/repo/m2-incubating-
repository//ognl/ognl/2.6.9/ognl-2.6.9.jar
[WARNING] Unable to get resource 'ognl:ognl:jar:2.6.9' from
repository apache-incubator (http://people.apache.org/repo/m2-
incubating-repository/)
Downloading: http://repo1.maven.org/maven2/ognl/ognl/2.6.9/
ognl-2.6.9.jar
164K downloaded
Downloading: http://download.java.net/maven/1//com.sun.xml.bind/
jars/jaxb-impl-2.0.5.jar
769K downloaded
[INFO] snapshot org.apache.geronimo.modules:geronimo-kernel:2.1-
SNAPSHOT: checking for updates from apache-snapshots
[INFO] snapshot org.apache.geronimo.modules:geronimo-kernel:2.1-
SNAPSHOT: checking for updates from codehaus-snapshots
[INFO] snapshot org.apache.geronimo.modules:geronimo-kernel:2.1-
SNAPSHOT: checking for updates from apache.snapshots
[INFO] [enforcer:enforce {execution: default}]
Downloading: http://repository.codehaus.org/com/sun/xml/bind/jaxb-
xjc/2.0.3/jaxb-xjc-2.0.3.pom
[WARNING] Unable to get resource 'com.sun.xml.bind:jaxb-xjc:pom:
2.0.3' from repository codehaus.org (http://repository.codehaus.org)
Downloading: http://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-
xjc/2.0.3/jaxb-xjc-2.0.3.pom
165b downloaded
Downloading: http://repository.codehaus.org/com/sun/xml/bind/jaxb-
xjc/2.0.3/jaxb-xjc-2.0.3.jar
[WARNING] Unable to get resource 'com.sun.xml.bind:jaxb-xjc:jar:
2.0.3' from repository codehaus.org (http://repository.codehaus.org)
Downloading: http://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-
xjc/2.0.3/jaxb-xjc-2.0.3.jar
2918K downloaded
[INFO] [jaxb2:xjc {execution: default}]
[INFO] Generating source...
[INFO] parsing a schema...
[INFO] compiling a schema...
[INFO] org/apache/geronimo/system/plugin/model/ArtifactType.java
[INFO] org/apache/geronimo/system/plugin/model/AttributeType.java
[INFO] org/apache/geronimo/system/plugin/model/AttributesType.java
[INFO] org/apache/geronimo/system/plugin/model/CopyFileType.java
[INFO] org/apache/geronimo/system/plugin/model/DependencyType.java
[INFO] org/apache
Re: Obscuring passwords in new ways
David,
Thank you for initiating this discussion and also implementing a quick
solution too. Matt asked if I could start a discussion on this. I said
yes and then went in to a long sleep mode :(. Let me get to business
(before I go to sleep again).
More inline...
On 9/15/07, David Jencks [EMAIL PROTECTED] wrote:
Periodically users show up who want their passwords obscured in new
ways that allow their systems to break by removing the key used to
obscure them :-) (how's that for a biased view of the situation :-)
I have to accept that I share your PoV.
They don't like SimpleEncryption because the key is hardcoded and
thus the same for all geronimo instances.
See GERONIMO-2925
I've implemented something for this request that allows you to
register encryptors with the EncryptionManager. By default you get
the current SimpleEncryption which uses AES with a hardcoded key.
There's also a ConfiguredEncryption gbean that will generate and save
a key if not present or use a saved one.
You can register any number of Encryption instances with
EncrptionManager but only the first one you register will be used for
encryption. Others might be used for decryption.
If you try to encrypt a string that is already encrypted under a
different registered Encryption instance it will decrypt using the
old Encryption and re-encrypt using the registered Encryption. For
instance the properties file login module used to use {Standard} as
the prefix instead of {Simple} so I registered the SimpleEncryption
instance under both prefixes: the property files are re-encrypted
with the {Simple} prefix.
Is this supposed to substitute for changing the key?
If you want to use the ConfiguredEncryption you can add this to
config.xml under rmi-naming module:
gbean name=org.apache.geronimo.configs/rmi-naming/2.1-SNAPSHOT/car?
name=ConfiguredEncryption,j2eeType=GBean
gbeanInfo=org.apache.geronimo.system.util.ConfiguredEncryption
attribute name=pathvar/security/ConfiguredSecretKey.ser/attribute
reference name=ServerInfopatternnameServerInfo/name/
pattern/reference
/gbean
Does it have to be a file under the server installation directory? At the
same time, I don't know if it really matters.
I haven't tried this with app clients yet but I assume that adding
this gbean to client would work.
I'd appreciate review on this both for the idea of pluggable
Encryption and even more for my use of crypto which I am definitely
not an expert in.
thanks
david jencks
1. The changed attributes are stored in config.xml. These will get
overwritten when a new encryptor is used, which is as we wanted. What about
the attributes that are in config.ser objects which are never changed? Do
we have to protect these files too? Any default passwords in our server
distributions that live in these config.sers's may not be of much concern as
we expect the users to change the default passwords anyway (no point
encrypting something that is well-known :o). I am referring to config.ser's
created upon deploying new configurations.
2. If a deployment plan is part of the archive being deployed, the plan
file will exist in the repository when the archive is extracted to the
configuration's directory. Should we get rid of these deployment plans once
the archive is distributed as they may contain passwords in clear text?
There may be other concerns, which I will put down as they come. We may
have to come up with some guidelines, make it clear what the users can
expect from G and how to protect their server.
Vamsi
PS: May be we should create a wiki page to capture this discussion.
[jira] Commented: (GERONIMO-2925) Key used for encryption same for all server instances
[ https://issues.apache.org/jira/browse/GERONIMO-2925?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527743 ] Vamsavardhana Reddy commented on GERONIMO-2925: --- Definitely better than what exists now. Key used for encryption same for all server instances - Key: GERONIMO-2925 URL: https://issues.apache.org/jira/browse/GERONIMO-2925 Project: Geronimo Issue Type: Bug Security Level: public(Regular issues) Components: security Affects Versions: 1.1.1, 1.1.2, 1.1.x, 1.2, 2.0-M5 Reporter: Michael Malgeri Assignee: David Jencks Priority: Critical Attachments: GERONIMO-2925.patch We understand that WASCE use AES to encrypt the password. You do javax.crypto.Cipher.getInstance(AES) and init() with a hard-coded key. This key is same for all the WASCE server instances. Anyone getting access to a downloaded version of the software can have the algorithm and decrypt the password. So we need your urgent help on the following: 1. provide a solution with key management that we can control 2. provide a pluggable encryption solution so that we can use our internal algorithms and key management At least, 3. the key should be dynamically generated in each of the installations that would reduce the ability to decrypt to someone who has access to the server. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
Re: Obscuring passwords in new ways
On Sep 15, 2007, at 10:24 AM, Vamsavardhana Reddy wrote:
David,
Thank you for initiating this discussion and also implementing a
quick solution too. Matt asked if I could start a discussion on
this. I said yes and then went in to a long sleep mode :(. Let
me get to business (before I go to sleep again).
More inline...
On 9/15/07, David Jencks [EMAIL PROTECTED] wrote:
Periodically users show up who want their passwords obscured in new
ways that allow their systems to break by removing the key used to
obscure them :-) (how's that for a biased view of the situation :-)
I have to accept that I share your PoV.
They don't like SimpleEncryption because the key is hardcoded and
thus the same for all geronimo instances.
See GERONIMO-2925
I've implemented something for this request that allows you to
register encryptors with the EncryptionManager. By default you get
the current SimpleEncryption which uses AES with a hardcoded key.
There's also a ConfiguredEncryption gbean that will generate and save
a key if not present or use a saved one.
You can register any number of Encryption instances with
EncrptionManager but only the first one you register will be used for
encryption. Others might be used for decryption.
If you try to encrypt a string that is already encrypted under a
different registered Encryption instance it will decrypt using the
old Encryption and re-encrypt using the registered Encryption. For
instance the properties file login module used to use {Standard} as
the prefix instead of {Simple} so I registered the SimpleEncryption
instance under both prefixes: the property files are re-encrypted
with the {Simple} prefix.
Is this supposed to substitute for changing the key?
Not really, more for changing to a new encryption type from the
Simple default. If you start the server up everything gets encrypted
with SimpleEncryption: it would be nice to support at least
installing a new Encryption later, which is pretty much what is now
supported. If you are careful you can change again. One question I
have is whether the current behavior of first explicitly installed
Encryption is the method used or last explicitly installed
Encryption is the method used is a better policy. I lean towards
first because then a user program can't change it as easily.
If you want to use the ConfiguredEncryption you can add this to
config.xml under rmi-naming module:
gbean name=org.apache.geronimo.configs/rmi-naming/2.1-SNAPSHOT/car?
name=ConfiguredEncryption,j2eeType=GBean
gbeanInfo=org.apache.geronimo.system.util.ConfiguredEncryption
attribute name=pathvar/security/ConfiguredSecretKey.ser/
attribute
reference name=ServerInfopatternnameServerInfo/name/
pattern/reference
/gbean
Does it have to be a file under the server installation
directory? At the same time, I don't know if it really matters.
No, if you supply an absolute path ServerInfo will resolve it to
itself.
I haven't tried this with app clients yet but I assume that adding
this gbean to client would work.
I'd appreciate review on this both for the idea of pluggable
Encryption and even more for my use of crypto which I am definitely
not an expert in.
thanks
david jencks
1. The changed attributes are stored in config.xml. These will
get overwritten when a new encryptor is used, which is as we
wanted. What about the attributes that are in config.ser objects
which are never changed? Do we have to protect these files too?
Any default passwords in our server distributions that live in
these config.sers's may not be of much concern as we expect the
users to change the default passwords anyway (no point encrypting
something that is well-known :o). I am referring to config.ser's
created upon deploying new configurations.
I think we should advise users to override passwords that may be
stored in config.ser in config.xml. We need to figure out how to do
this easily :-)
2. If a deployment plan is part of the archive being deployed, the
plan file will exist in the repository when the archive is
extracted to the configuration's directory. Should we get rid of
these deployment plans once the archive is distributed as they may
contain passwords in clear text?
I think we should preserve the source plans for reference and advise
people not to put sensitive passwords in them.
There may be other concerns, which I will put down as they come.
We may have to come up with some guidelines, make it clear what the
users can expect from G and how to protect their server.
Vamsi
PS: May be we should create a wiki page to capture this discussion.
At this point I think we should create the wiki page after we decide
what to do.
Did you have a chance to look at whether I am doing something stupid
with the crypto stuff, in particular generating the secret key?
thanks!
david jencks
[jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527744 ] Vamsavardhana Reddy commented on GERONIMO-2964: --- The stacktrace I posted earlier was from the plugin installer window. Here is the one from server window: ERROR - Error while starting; GBean is now in the FAILED state: abstractName=or g.apache.geronimo.configs/servlet-examples-tomcat/2.0.1/car?configurationName=or g.apache.geronimo.configs/servlet-examples-tomcat/2.0.1/car org.apache.geronimo.kernel.config.InvalidConfigException: Unable to deserialize GBeanState in classloader: [org.apache.geronimo.kernel.classloader.JarFileClassL oader id=org.apache.geronimo.configs/servlet-examples-tomcat/2.0.1/car] at org.apache.geronimo.kernel.config.SerializedGBeanState.loadGBeans(Ser ializedGBeanState.java:124) at org.apache.geronimo.kernel.config.SerializedGBeanState.getGBeans(Seri alizedGBeanState.java:65) at org.apache.geronimo.kernel.config.ConfigurationData.getGBeans(Configu rationData.java:171) at org.apache.geronimo.kernel.config.Configuration.init(Configuration. java:278) at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstruct orAccessorImpl.java:39) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingC onstructorAccessorImpl.java:27) at java.lang.reflect.Constructor.newInstance(Constructor.java:494) at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanI nstance.java:946) at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart (GBeanInstanceState.java:268) at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInsta nceState.java:102) at org.apache.geronimo.gbean.runtime.GBeanInstance.start(GBeanInstance.j ava:539) at org.apache.geronimo.kernel.basic.BasicKernel.startGBean(BasicKernel.j ava:361) at org.apache.geronimo.kernel.config.KernelConfigurationManager.load(Ker nelConfigurationManager.java:160) at org.apache.geronimo.kernel.config.SimpleConfigurationManager.loadConf iguration(SimpleConfigurationManager.java:310) at org.apache.geronimo.kernel.config.SimpleConfigurationManager.loadConf iguration(SimpleConfigurationManager.java:278) at org.apache.geronimo.kernel.config.SimpleConfigurationManager.loadConf iguration(SimpleConfigurationManager.java:253) at org.apache.geronimo.kernel.config.KernelConfigurationManager.loadConf iguration(KernelConfigurationManager.java:111) at org.apache.geronimo.kernel.config.KernelConfigurationManager$$FastCla ssByCGLIB$$b117102f.invoke(generated) at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53) at org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethod Invoker.java:38) at org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperatio n.java:124) at org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance. java:865) at org.apache.geronimo.kernel.basic.BasicKernel.invoke(BasicKernel.java: 239) at org.apache.geronimo.kernel.KernelGBean.invoke(KernelGBean.java:342) at org.apache.geronimo.kernel.KernelGBean$$FastClassByCGLIB$$1cccefc9.in voke(generated) at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53) at org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethod Invoker.java:38) at org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperatio n.java:124) at org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance. java:865) at org.apache.geronimo.kernel.basic.BasicKernel.invoke(BasicKernel.java: 239) at org.apache.geronimo.system.jmx.MBeanGBeanBridge.invoke(MBeanGBeanBrid ge.java:168) at com.sun.jmx.mbeanserver.DynamicMetaDataImpl.invoke(DynamicMetaDataImp l.java:213) at com.sun.jmx.mbeanserver.MetaDataImpl.invoke(MetaDataImpl.java:220) at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultM BeanServerInterceptor.java:815) at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:784 ) at javax.management.remote.rmi.RMIConnectionImpl.doOperation(RMIConnecti onImpl.java:1408) at javax.management.remote.rmi.RMIConnectionImpl.access$100(RMIConnectio nImpl.java:81) at javax.management.remote.rmi.RMIConnectionImpl$PrivilegedOperation.run (RMIConnectionImpl.java:1245) at java.security.AccessController.doPrivileged(Native Method) at javax.management.remote.rmi.RMIConnectionImpl.doPrivilegedOperation(R MIConnectionImpl.java:1348) at javax.management.remote.rmi.RMIConnectionImpl.invoke(RMIConnectionImp l.java:782) at sun.reflect.GeneratedMethodAccessor191.invoke(Unknown Source)
[jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527749 ] Anita Kulshreshtha commented on GERONIMO-2964: -- Vamsi thanks! Could you please add SUID to Holder class in g-j2ee and retest? Caused by: java.io.InvalidClassException: org.apache.geronimo.j2ee.annotation.Ho lder; local class incompatible: stream classdesc serialVersionUID = 822160424416 6047988, local class serialVersionUID = 6192393604530969651 at We need to more careful about modifying serializable classes. Cannot specify the Tomcat work directory for a web application -- Key: GERONIMO-2964 URL: https://issues.apache.org/jira/browse/GERONIMO-2964 Project: Geronimo Issue Type: Improvement Security Level: public(Regular issues) Components: Tomcat Affects Versions: 1.2, 2.0-M5 Reporter: Aman Nanner Priority: Minor Fix For: 1.2, 2.1 Attachments: g2964.war, GERONIMO-2964-combined-new.patch, GERONIMO-2964-combined.patch, GERONIMO-2964.patch, tomcat-config-workdir.patch, tomcat-workdir.patch In Tomcat, a work directory can be specified for a web application in a WEB-INF/context.xml file. The GeronimoStandardContext does not permit the user to specify a work directory, and so the work directory defaults to var/catalina/work/web-app. I've submitted a patch file that modifies the geronimo-tomcat-1.2 schema to permit the user to optionally specify a work directory. This work directory is then propagated into the TomcatContext. I've tested this and it seems to work well. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[BUILD] Trunk: Failed for Revision: 575929
OpenEJB trunk at 0
Geronimo Revision: 575929 built with tests skipped
See the full build-1100.log file at
http://people.apache.org/~prasad/binaries/trunk/20070915/build-1100.log
[WARNING] Unable to get resource
'org.apache.axis2:axis2-jaxws-api:pom:1.3-r562247' from repository central
(http://repo1.maven.org/maven2)
[INFO] [enforcer:enforce {execution: default}]
[INFO] [tools:copy-legal-files {execution: install-legal-files}]
[INFO] [resources:resources]
[INFO] Using default encoding to copy filtered resources.
[INFO] [compiler:compile]
[INFO] Nothing to compile - all classes are up to date
[INFO] [resources:testResources]
[INFO] Using default encoding to copy filtered resources.
[INFO] [compiler:testCompile]
[INFO] Not compiling test sources
[INFO] [surefire:test]
[INFO] Tests are skipped.
[INFO] [jar:jar]
[INFO] [tools:verify-legal-files {execution: verify-legal-files}]
[INFO] Checking legal files in: geronimo-openejb-2.1-SNAPSHOT.jar
[INFO] [install:install]
[INFO] Installing
/home/prasad/geronimo/trunk/modules/geronimo-openejb/target/geronimo-openejb-2.1-SNAPSHOT.jar
to
/home/prasad/.m2/repository/org/apache/geronimo/modules/geronimo-openejb/2.1-SNAPSHOT/geronimo-openejb-2.1-SNAPSHOT.jar
[INFO]
[INFO] Building Geronimo :: Axis
[INFO]task-segment: [install]
[INFO]
Downloading: http://download.java.net/maven/1//axis/poms/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading: http://repo1.maven.org/maven2/axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
central (http://repo1.maven.org/maven2)
Downloading:
http://download.java.net/maven/1//org.apache.openjpa/jars/openjpa-kernel-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970' from repository
java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//org/apache/openjpa/openjpa-kernel-5/1.0.0-r561970/openjpa-kernel-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://www.ibiblio.org/maven2/org/apache/openjpa/openjpa-kernel-5/1.0.0-r561970/openjpa-kernel-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970' from repository central
(http://www.ibiblio.org/maven2)
Downloading:
http://download.java.net/maven/1//org.apache.openjpa/jars/openjpa-jdbc-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970' from repository java.net
(http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//org/apache/openjpa/openjpa-jdbc-5/1.0.0-r561970/openjpa-jdbc-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://www.ibiblio.org/maven2/org/apache/openjpa/openjpa-jdbc-5/1.0.0-r561970/openjpa-jdbc-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970' from repository central
(http://www.ibiblio.org/maven2)
[INFO]
[ERROR] BUILD ERROR
[INFO]
[INFO] Failed to resolve artifact.
Missing:
--
1) org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970
Try downloading the file manually from the project website.
Then, install it using the command:
mvn install:install-file -DgroupId=org.apache.openjpa
-DartifactId=openjpa-kernel-5 \
-Dversion=1.0.0-r561970 -Dpackaging=jar -Dfile=/path/to/file
Path to dependency:
1) org.apache.geronimo.modules:geronimo-axis:jar:2.1-SNAPSHOT
2) org.apache.openejb:openejb-axis:jar:3.0.0-SNAPSHOT
3) org.apache.openejb:openejb-core:jar:3.0.0-SNAPSHOT
4) org.apache.openjpa:openjpa-persistence-jdbc:jar:1.0.0-r561970
5) org.apache.openjpa:openjpa-persistence:jar:1.0.0-r561970
6) org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970
2) org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970
Try downloading the file manually from the project website.
Then, install it using the command:
mvn
Re: Obscuring passwords in new ways
On 9/15/07, David Jencks [EMAIL PROTECTED] wrote:
On Sep 15, 2007, at 10:24 AM, Vamsavardhana Reddy wrote:
David,
Thank you for initiating this discussion and also implementing a quick
solution too. Matt asked if I could start a discussion on this. I said
yes and then went in to a long sleep mode :(. Let me get to business
(before I go to sleep again).
More inline...
On 9/15/07, David Jencks [EMAIL PROTECTED] wrote:
Periodically users show up who want their passwords obscured in new
ways that allow their systems to break by removing the key used to
obscure them :-) (how's that for a biased view of the situation :-)
I have to accept that I share your PoV.
They don't like SimpleEncryption because the key is hardcoded and
thus the same for all geronimo instances.
See GERONIMO-2925
I've implemented something for this request that allows you to
register encryptors with the EncryptionManager. By default you get
the current SimpleEncryption which uses AES with a hardcoded key.
There's also a ConfiguredEncryption gbean that will generate and save
a key if not present or use a saved one.
You can register any number of Encryption instances with
EncrptionManager but only the first one you register will be used for
encryption. Others might be used for decryption.
If you try to encrypt a string that is already encrypted under a
different registered Encryption instance it will decrypt using the
old Encryption and re-encrypt using the registered Encryption. For
instance the properties file login module used to use {Standard} as
the prefix instead of {Simple} so I registered the SimpleEncryption
instance under both prefixes: the property files are re-encrypted
with the {Simple} prefix.
Is this supposed to substitute for changing the key?
Not really, more for changing to a new encryption type from the Simple
default. If you start the server up everything gets encrypted with
SimpleEncryption: it would be nice to support at least installing a new
Encryption later, which is pretty much what is now supported. If you are
careful you can change again. One question I have is whether the current
behavior of first explicitly installed Encryption is the method used or
last explicitly installed Encryption is the method used is a better
policy. I lean towards first because then a user program can't change it
as easily.
Which user program are we referring to?
If you want to use the ConfiguredEncryption you can add this to
config.xml under rmi-naming module:
gbean name=org.apache.geronimo.configs/rmi-naming/2.1-SNAPSHOT/car?
name=ConfiguredEncryption,j2eeType=GBean
gbeanInfo=org.apache.geronimo.system.util.ConfiguredEncryption
attribute name=pathvar/security/ConfiguredSecretKey.ser/attribute
reference name=ServerInfopatternnameServerInfo/name/
pattern/reference
/gbean
Does it have to be a file under the server installation directory? At
the same time, I don't know if it really matters.
No, if you supply an absolute path ServerInfo will resolve it to itself.
I haven't tried this with app clients yet but I assume that adding
this gbean to client would work.
I'd appreciate review on this both for the idea of pluggable
Encryption and even more for my use of crypto which I am definitely
not an expert in.
thanks
david jencks
1. The changed attributes are stored in config.xml. These will get
overwritten when a new encryptor is used, which is as we wanted. What about
the attributes that are in config.ser objects which are never changed? Do
we have to protect these files too? Any default passwords in our server
distributions that live in these config.sers's may not be of much concern
as we expect the users to change the default passwords anyway (no point
encrypting something that is well-known :o). I am referring to config.ser's
created upon deploying new configurations.
I think we should advise users to override passwords that may be stored in
config.ser in config.xml. We need to figure out how to do this easily :-)
Sometime ago I had some code locally (not as part of the server code, but a
simple program that searches for config.ser's in the repository and
encrypts) to encrypt all config.ser's based on a password and write the
salt used to a file in the server's directory. When server starts, it
looks for this salt file and asks for the password so that config.ser's
can be decrypted and loaded. We may use something similar without a startup
password In this case, a loss of password would mean a totally unusable
server :(.
2. If a deployment plan is part of the archive being deployed, the plan
file will exist in the repository when the archive is extracted to the
configuration's directory. Should we get rid of these deployment plans once
the archive is distributed as they may contain passwords in clear text?
I think we should preserve the source plans for
[jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527757 ] Vamsavardhana Reddy commented on GERONIMO-2964: --- Anitha, I have proposed two patches. One with TomcatWebAppContext constructor change and one without the constructor change. With the SUID changed, I got past the deserialization problem, but hit the following error with clean 2.0.2-SNAPSHOT as well (2.0.2-SNAPSHOT+Patch without the constructor change). I changed the SUID and ran into another error. Stack trace given below: org.apache.geronimo.kernel.config.LifecycleException: start of org.apache.geroni mo.configs/servlet-examples-tomcat/2.0.1/car failed at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startCon figuration(SimpleConfigurationManager.java:547) at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startCon figuration(SimpleConfigurationManager.java:511) at org.apache.geronimo.kernel.config.SimpleConfigurationManager$$FastCla ssByCGLIB$$ce77a924.invoke(generated) at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53) at org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethod Invoker.java:38) at org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperatio n.java:124) at org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance. java:865) at org.apache.geronimo.kernel.basic.BasicKernel.invoke(BasicKernel.java: 239) at org.apache.geronimo.kernel.KernelGBean.invoke(KernelGBean.java:342) at org.apache.geronimo.kernel.KernelGBean$$FastClassByCGLIB$$1cccefc9.in voke(generated) at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53) at org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethod Invoker.java:38) at org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperatio n.java:124) at org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance. java:865) at org.apache.geronimo.kernel.basic.BasicKernel.invoke(BasicKernel.java: 239) at org.apache.geronimo.system.jmx.MBeanGBeanBridge.invoke(MBeanGBeanBrid ge.java:168) at com.sun.jmx.mbeanserver.DynamicMetaDataImpl.invoke(DynamicMetaDataImp l.java:213) at com.sun.jmx.mbeanserver.MetaDataImpl.invoke(MetaDataImpl.java:220) at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultM BeanServerInterceptor.java:815) at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:784 ) at javax.management.remote.rmi.RMIConnectionImpl.doOperation(RMIConnecti onImpl.java:1408) at javax.management.remote.rmi.RMIConnectionImpl.access$100(RMIConnectio nImpl.java:81) at javax.management.remote.rmi.RMIConnectionImpl$PrivilegedOperation.run (RMIConnectionImpl.java:1245) at java.security.AccessController.doPrivileged(Native Method) at javax.management.remote.rmi.RMIConnectionImpl.doPrivilegedOperation(R MIConnectionImpl.java:1348) at javax.management.remote.rmi.RMIConnectionImpl.invoke(RMIConnectionImp l.java:782) at sun.reflect.GeneratedMethodAccessor183.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces sorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:585) at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:294) at sun.rmi.transport.Transport$1.run(Transport.java:153) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.Transport.serviceCall(Transport.java:149) at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:4 66) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport .java:707) at java.lang.Thread.run(Thread.java:595) Caused by: org.apache.geronimo.kernel.config.InvalidConfigException: Unknown sta rt exception at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfiguratio nGBeans(ConfigurationUtil.java:514) at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(Ke rnelConfigurationManager.java:187) at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startCon figuration(SimpleConfigurationManager.java:530) ... 35 more Caused by: org.apache.geronimo.gbean.InvalidConfigurationException: Configuratio n org.apache.geronimo.configs/servlet-examples-tomcat/2.0.1/car failed to start due to the following reasons: The service J2EEApplication=null,WebModule=org.apache.geronimo.configs/servlet -examples-tomcat/2.0.1/car,j2eeType=JACCManager,name=JACCManager did not start b ecause Unknown realm: geronimo-admin The service J2EEApplication=null,j2eeType=WebModule,name=org.apache.geronimo.c onfigs/servlet-examples-tomcat/2.0.1/car did not start because
[jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527758 ] Vamsavardhana Reddy commented on GERONIMO-2964: --- Donald, Incase of patch with constructor change I ran into the error Could not find a valid constructor for GBean: TomcatWebApplicationContext. I ran into another error once I got past this error by not changing the TomcatWebApplicationContext constructor (see my previous comment). Will it be possible for you to verify if GERONIMO-2964.patch breaks compatibility the way you originally tested the patch posted by Aman? Thank you, Cannot specify the Tomcat work directory for a web application -- Key: GERONIMO-2964 URL: https://issues.apache.org/jira/browse/GERONIMO-2964 Project: Geronimo Issue Type: Improvement Security Level: public(Regular issues) Components: Tomcat Affects Versions: 1.2, 2.0-M5 Reporter: Aman Nanner Priority: Minor Fix For: 1.2, 2.1 Attachments: g2964.war, GERONIMO-2964-combined-new.patch, GERONIMO-2964-combined.patch, GERONIMO-2964.patch, tomcat-config-workdir.patch, tomcat-workdir.patch In Tomcat, a work directory can be specified for a web application in a WEB-INF/context.xml file. The GeronimoStandardContext does not permit the user to specify a work directory, and so the work directory defaults to var/catalina/work/web-app. I've submitted a patch file that modifies the geronimo-tomcat-1.2 schema to permit the user to optionally specify a work directory. This work directory is then propagated into the TomcatContext. I've tested this and it seems to work well. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527760 ] Vamsavardhana Reddy commented on GERONIMO-2964: --- Got the same error at plugin startup Unknown realm: geronimo-admin on G2.0.1-Tomcat when trying to install servlet-examples-tomcat-2.0.1.car as a plugin. Has anyone been able to install servlet and jsp samples plugin on G2.0.1? If not, I wouldn't worry so much about backward compatibility as we will need to release new plugins for 2.0.2 anyway. Comments? Cannot specify the Tomcat work directory for a web application -- Key: GERONIMO-2964 URL: https://issues.apache.org/jira/browse/GERONIMO-2964 Project: Geronimo Issue Type: Improvement Security Level: public(Regular issues) Components: Tomcat Affects Versions: 1.2, 2.0-M5 Reporter: Aman Nanner Priority: Minor Fix For: 1.2, 2.1 Attachments: g2964.war, GERONIMO-2964-combined-new.patch, GERONIMO-2964-combined.patch, GERONIMO-2964.patch, tomcat-config-workdir.patch, tomcat-workdir.patch In Tomcat, a work directory can be specified for a web application in a WEB-INF/context.xml file. The GeronimoStandardContext does not permit the user to specify a work directory, and so the work directory defaults to var/catalina/work/web-app. I've submitted a patch file that modifies the geronimo-tomcat-1.2 schema to permit the user to optionally specify a work directory. This work directory is then propagated into the TomcatContext. I've tested this and it seems to work well. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
Re: [jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
Donald, Just wondering whether you installed the plugin using Plugins portlet or using the command-line deployer. Were you able to install the servlet examples plugin prior to testing the patch provided by Aman? Vamsi On 9/16/07, Vamsavardhana Reddy (JIRA) [EMAIL PROTECTED] wrote: [ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527760] Vamsavardhana Reddy commented on GERONIMO-2964: --- Got the same error at plugin startup Unknown realm: geronimo-admin on G2.0.1-Tomcat when trying to install servlet-examples-tomcat-2.0.1.car as a plugin. Has anyone been able to install servlet and jsp samples plugin on G2.0.1? If not, I wouldn't worry so much about backward compatibility as we will need to release new plugins for 2.0.2 anyway. Comments? Cannot specify the Tomcat work directory for a web application -- Key: GERONIMO-2964 URL: https://issues.apache.org/jira/browse/GERONIMO-2964 Project: Geronimo Issue Type: Improvement Security Level: public(Regular issues) Components: Tomcat Affects Versions: 1.2, 2.0-M5 Reporter: Aman Nanner Priority: Minor Fix For: 1.2, 2.1 Attachments: g2964.war, GERONIMO-2964-combined-new.patch, GERONIMO-2964-combined.patch, GERONIMO-2964.patch, tomcat-config-workdir.patch, tomcat-workdir.patch In Tomcat, a work directory can be specified for a web application in a WEB-INF/context.xml file. The GeronimoStandardContext does not permit the user to specify a work directory, and so the work directory defaults to var/catalina/work/web-app. I've submitted a patch file that modifies the geronimo-tomcat-1.2 schema to permit the user to optionally specify a work directory. This work directory is then propagated into the TomcatContext. I've tested this and it seems to work well. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[BUILD] 2.0: Failed for Revision: 575950
OpenEJB trunk at 0
Geronimo Revision: 575950 built with tests skipped
See the full build-1400.log file at
http://people.apache.org/~prasad/binaries/2.0/20070915/build-1400.log
[INFO]
[INFO] Building Geronimo :: Axis
[INFO]task-segment: [install]
[INFO]
[INFO] [enforcer:enforce {execution: default}]
[INFO] [tools:copy-legal-files {execution: install-legal-files}]
[INFO] Created dir:
/home/prasad/geronimo/2.0/modules/geronimo-axis/target/classes/META-INF
[INFO] Copying 2 files to
/home/prasad/geronimo/2.0/modules/geronimo-axis/target/classes/META-INF
[INFO] [resources:resources]
[INFO] Using default encoding to copy filtered resources.
[INFO] snapshot org.apache.openejb:openejb-axis:3.0.0-SNAPSHOT: checking for
updates from apache-snapshots
[INFO] snapshot org.apache.openejb:openejb-axis:3.0.0-SNAPSHOT: checking for
updates from codehaus-snapshots
[INFO] snapshot org.apache.openejb:openejb-axis:3.0.0-SNAPSHOT: checking for
updates from apache.snapshots
Downloading:
http://people.apache.org/repo/m2-snapshot-repository/org/apache/openejb/openejb-axis/3.0.0-SNAPSHOT/openejb-axis-3.0.0-20070913.142629-11.pom
2K downloaded
Downloading: http://download.java.net/maven/1//axis/poms/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading: http://repo1.maven.org/maven2/axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
central (http://repo1.maven.org/maven2)
Downloading:
http://download.java.net/maven/1//commons-discovery/poms/commons-discovery-0.4.pom
[WARNING] Unable to get resource 'commons-discovery:commons-discovery:pom:0.4'
from repository java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//commons-discovery/commons-discovery/0.4/commons-discovery-0.4.pom
[WARNING] Unable to get resource 'commons-discovery:commons-discovery:pom:0.4'
from repository apache-incubator
(http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://repo1.maven.org/maven2/commons-discovery/commons-discovery/0.4/commons-discovery-0.4.pom
5K downloaded
Downloading:
http://download.java.net/maven/1//org.apache.geronimo.specs/jars/geronimo-j2ee-connector_1.5_spec-1.1.jar
[WARNING] Unable to get resource
'org.apache.geronimo.specs:geronimo-j2ee-connector_1.5_spec:jar:1.1' from
repository java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//org/apache/geronimo/specs/geronimo-j2ee-connector_1.5_spec/1.1/geronimo-j2ee-connector_1.5_spec-1.1.jar
[WARNING] Unable to get resource
'org.apache.geronimo.specs:geronimo-j2ee-connector_1.5_spec:jar:1.1' from
repository apache-incubator
(http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository/org/apache/geronimo/specs/geronimo-j2ee-connector_1.5_spec/1.1/geronimo-j2ee-connector_1.5_spec-1.1.jar
[WARNING] Unable to get resource
'org.apache.geronimo.specs:geronimo-j2ee-connector_1.5_spec:jar:1.1' from
repository apache-incubating-repository
(http://people.apache.org/repo/m2-incubating-repository)
Downloading:
http://tomcat.apache.org/dev/dist/m2-repository/org/apache/geronimo/specs/geronimo-j2ee-connector_1.5_spec/1.1/geronimo-j2ee-connector_1.5_spec-1.1.jar
[WARNING] Unable to get resource
'org.apache.geronimo.specs:geronimo-j2ee-connector_1.5_spec:jar:1.1' from
repository tomcat-private-repository
(http://tomcat.apache.org/dev/dist/m2-repository)
Downloading:
http://svn.apache.org/repos/asf/openejb/repo//org/apache/geronimo/specs/geronimo-j2ee-connector_1.5_spec/1.1/geronimo-j2ee-connector_1.5_spec-1.1.jar
[WARNING] Unable to get resource
'org.apache.geronimo.specs:geronimo-j2ee-connector_1.5_spec:jar:1.1' from
repository openejb-3rdparty-builds
(http://svn.apache.org/repos/asf/openejb/repo/)
Downloading:
http://repo1.maven.org/maven2/org/apache/geronimo/specs/geronimo-j2ee-connector_1.5_spec/1.1/geronimo-j2ee-connector_1.5_spec-1.1.jar
36K downloaded
Downloading:
http://people.apache.org/repo/m2-snapshot-repository/org/apache/openejb/openejb-axis/3.0.0-SNAPSHOT/openejb-axis-3.0.0-20070913.142629-11.jar
13K downloaded
Downloading:
http://download.java.net/maven/1//commons-discovery/jars/commons-discovery-0.4.jar
[WARNING] Unable to get resource 'commons-discovery:commons-discovery:jar:0.4'
from repository java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2
[BUILD] Trunk: Failed for Revision: 575959
OpenEJB trunk at 0 Geronimo Revision: 575959 built with tests skipped See the full build-1400.log file at http://people.apache.org/~prasad/binaries/trunk/20070915/build-1400.log Downloading: http://repo1.maven.org/maven2/axis/axis-saaj/1.4/axis-saaj-1.4.pom [WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository central (http://repo1.maven.org/maven2) Downloading: http://download.java.net/maven/1//org.apache.openjpa/jars/openjpa-lib-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970' from repository java.net (http://download.java.net/maven/1/) Downloading: http://people.apache.org/repo/m2-incubating-repository//org/apache/openjpa/openjpa-lib/1.0.0-r561970/openjpa-lib-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970' from repository apache-incubator (http://people.apache.org/repo/m2-incubating-repository/) Downloading: http://www.ibiblio.org/maven2/org/apache/openjpa/openjpa-lib/1.0.0-r561970/openjpa-lib-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970' from repository central (http://www.ibiblio.org/maven2) Downloading: http://download.java.net/maven/1//org.apache.openjpa/jars/openjpa-kernel-5-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970' from repository java.net (http://download.java.net/maven/1/) Downloading: http://people.apache.org/repo/m2-incubating-repository//org/apache/openjpa/openjpa-kernel-5/1.0.0-r561970/openjpa-kernel-5-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970' from repository apache-incubator (http://people.apache.org/repo/m2-incubating-repository/) Downloading: http://www.ibiblio.org/maven2/org/apache/openjpa/openjpa-kernel-5/1.0.0-r561970/openjpa-kernel-5-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970' from repository central (http://www.ibiblio.org/maven2) Downloading: http://download.java.net/maven/1//org.apache.openjpa/jars/openjpa-kernel-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-kernel:jar:1.0.0-r561970' from repository java.net (http://download.java.net/maven/1/) Downloading: http://people.apache.org/repo/m2-incubating-repository//org/apache/openjpa/openjpa-kernel/1.0.0-r561970/openjpa-kernel-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-kernel:jar:1.0.0-r561970' from repository apache-incubator (http://people.apache.org/repo/m2-incubating-repository/) Downloading: http://www.ibiblio.org/maven2/org/apache/openjpa/openjpa-kernel/1.0.0-r561970/openjpa-kernel-1.0.0-r561970.jar [WARNING] Unable to get resource 'org.apache.openjpa:openjpa-kernel:jar:1.0.0-r561970' from repository central (http://www.ibiblio.org/maven2) [INFO] [ERROR] BUILD ERROR [INFO] [INFO] Failed to resolve artifact. Missing: -- 1) org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970 Try downloading the file manually from the project website. Then, install it using the command: mvn install:install-file -DgroupId=org.apache.openjpa -DartifactId=openjpa-lib \ -Dversion=1.0.0-r561970 -Dpackaging=jar -Dfile=/path/to/file Path to dependency: 1) org.apache.geronimo.modules:geronimo-axis:jar:2.1-SNAPSHOT 2) org.apache.openejb:openejb-axis:jar:3.0.0-SNAPSHOT 3) org.apache.openejb:openejb-core:jar:3.0.0-SNAPSHOT 4) org.apache.openjpa:openjpa-persistence-jdbc:jar:1.0.0-r561970 5) org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970 6) org.apache.openjpa:openjpa-jdbc:jar:1.0.0-r561970 7) org.apache.openjpa:openjpa-kernel:jar:1.0.0-r561970 8) org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970 2) org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970 Try downloading the file manually from the project website. Then, install it using the command: mvn install:install-file -DgroupId=org.apache.openjpa -DartifactId=openjpa-kernel-5 \ -Dversion=1.0.0-r561970 -Dpackaging=jar -Dfile=/path/to/file Path to dependency: 1) org.apache.geronimo.modules:geronimo-axis:jar:2.1-SNAPSHOT 2) org.apache.openejb:openejb-axis:jar:3.0.0-SNAPSHOT 3) org.apache.openejb:openejb-core:jar:3.0.0-SNAPSHOT 4) org.apache.openjpa:openjpa-persistence-jdbc:jar:1.0.0-r561970 5) org.apache.openjpa:openjpa-persistence:jar:1.0.0-r561970 6) org.apache.openjpa:openjpa-kernel-5:jar:1.0.0-r561970 3) org.apache.openjpa:openjpa-kernel:jar:1.0.0-r561970 Try downloading the file manually from the project website. Then, install it using the command: mvn install:install-file -DgroupId=org.apache.openjpa
[jira] Updated: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Vamsavardhana Reddy updated GERONIMO-2964: -- Fix Version/s: (was: 1.2) 2.0.x 2.0.2 Assignee: Vamsavardhana Reddy Cannot specify the Tomcat work directory for a web application -- Key: GERONIMO-2964 URL: https://issues.apache.org/jira/browse/GERONIMO-2964 Project: Geronimo Issue Type: Improvement Security Level: public(Regular issues) Components: Tomcat Affects Versions: 1.2, 2.0-M5 Reporter: Aman Nanner Assignee: Vamsavardhana Reddy Priority: Minor Fix For: 2.0.2, 2.0.x, 2.1 Attachments: g2964.war, GERONIMO-2964-combined-new.patch, GERONIMO-2964-combined.patch, GERONIMO-2964.patch, tomcat-config-workdir.patch, tomcat-workdir.patch In Tomcat, a work directory can be specified for a web application in a WEB-INF/context.xml file. The GeronimoStandardContext does not permit the user to specify a work directory, and so the work directory defaults to var/catalina/work/web-app. I've submitted a patch file that modifies the geronimo-tomcat-1.2 schema to permit the user to optionally specify a work directory. This work directory is then propagated into the TomcatContext. I've tested this and it seems to work well. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[BUILD] 2.0: Failed for Revision: 575994
OpenEJB trunk at 0
Geronimo Revision: 575994 built with tests skipped
See the full build-1800.log file at
http://people.apache.org/~prasad/binaries/2.0/20070915/build-1800.log
[INFO] Tests are skipped.
[INFO] [jar:jar]
[INFO] [tools:verify-legal-files {execution: verify-legal-files}]
[INFO] Checking legal files in: geronimo-persistence-jpa10-2.0.2-SNAPSHOT.jar
[INFO] [install:install]
[INFO] Installing
/home/prasad/geronimo/2.0/modules/geronimo-persistence-jpa10/target/geronimo-persistence-jpa10-2.0.2-SNAPSHOT.jar
to
/home/prasad/.m2/repository/org/apache/geronimo/modules/geronimo-persistence-jpa10/2.0.2-SNAPSHOT/geronimo-persistence-jpa10-2.0.2-SNAPSHOT.jar
[INFO]
[INFO] Building Geronimo :: OpenEJB
[INFO]task-segment: [install]
[INFO]
[INFO] [enforcer:enforce {execution: default}]
[INFO] [tools:copy-legal-files {execution: install-legal-files}]
[INFO] [resources:resources]
[INFO] Using default encoding to copy filtered resources.
Downloading:
http://download.java.net/maven/1//commons-dbcp/poms/commons-dbcp-1.3-r562808.pom
[WARNING] Unable to get resource 'commons-dbcp:commons-dbcp:pom:1.3-r562808'
from repository java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//commons-dbcp/commons-dbcp/1.3-r562808/commons-dbcp-1.3-r562808.pom
[WARNING] Unable to get resource 'commons-dbcp:commons-dbcp:pom:1.3-r562808'
from repository apache-incubator
(http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://repo1.maven.org/maven2/commons-dbcp/commons-dbcp/1.3-r562808/commons-dbcp-1.3-r562808.pom
[WARNING] Unable to get resource 'commons-dbcp:commons-dbcp:pom:1.3-r562808'
from repository central (http://repo1.maven.org/maven2)
[INFO] [compiler:compile]
[INFO] Nothing to compile - all classes are up to date
[INFO] [resources:testResources]
[INFO] Using default encoding to copy filtered resources.
[INFO] [compiler:testCompile]
[INFO] Not compiling test sources
[INFO] [surefire:test]
[INFO] Tests are skipped.
[INFO] [jar:jar]
[INFO] [tools:verify-legal-files {execution: verify-legal-files}]
[INFO] Checking legal files in: geronimo-openejb-2.0.2-SNAPSHOT.jar
[INFO] [install:install]
[INFO] Installing
/home/prasad/geronimo/2.0/modules/geronimo-openejb/target/geronimo-openejb-2.0.2-SNAPSHOT.jar
to
/home/prasad/.m2/repository/org/apache/geronimo/modules/geronimo-openejb/2.0.2-SNAPSHOT/geronimo-openejb-2.0.2-SNAPSHOT.jar
[INFO]
[INFO] Building Geronimo :: Axis
[INFO]task-segment: [install]
[INFO]
[INFO] [enforcer:enforce {execution: default}]
[INFO] [tools:copy-legal-files {execution: install-legal-files}]
[INFO] [resources:resources]
[INFO] Using default encoding to copy filtered resources.
Downloading: http://download.java.net/maven/1//axis/poms/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading: http://repo1.maven.org/maven2/axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
central (http://repo1.maven.org/maven2)
Downloading:
http://download.java.net/maven/1//org.apache.openjpa/jars/openjpa-lib-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970' from repository java.net
(http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//org/apache/openjpa/openjpa-lib/1.0.0-r561970/openjpa-lib-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://www.ibiblio.org/maven2/org/apache/openjpa/openjpa-lib/1.0.0-r561970/openjpa-lib-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970' from repository central
(http://www.ibiblio.org/maven2)
[INFO]
[ERROR] BUILD ERROR
[INFO]
[INFO] Failed to resolve artifact.
Missing:
--
1) org.apache.openjpa:openjpa-lib:jar:1.0.0-r561970
Try downloading the file manually from the project website.
Then, install it using the command:
mvn install:install-file -DgroupId=org.apache.openjpa
-DartifactId=openjpa-lib
[BUILD] Trunk: Failed for Revision: 575997
OpenEJB trunk at 0
Geronimo Revision: 575997 built with tests skipped
See the full build-1800.log file at
http://people.apache.org/~prasad/binaries/trunk/20070915/build-1800.log
[INFO] [compiler:compile]
[INFO] Nothing to compile - all classes are up to date
[INFO] [resources:testResources]
[INFO] Using default encoding to copy filtered resources.
[INFO] [compiler:testCompile]
[INFO] Not compiling test sources
[INFO] [surefire:test]
[INFO] Tests are skipped.
[INFO] [jar:jar]
[INFO] [tools:verify-legal-files {execution: verify-legal-files}]
[INFO] Checking legal files in: geronimo-persistence-jpa10-2.1-SNAPSHOT.jar
[INFO] [install:install]
[INFO] Installing
/home/prasad/geronimo/trunk/modules/geronimo-persistence-jpa10/target/geronimo-persistence-jpa10-2.1-SNAPSHOT.jar
to
/home/prasad/.m2/repository/org/apache/geronimo/modules/geronimo-persistence-jpa10/2.1-SNAPSHOT/geronimo-persistence-jpa10-2.1-SNAPSHOT.jar
[INFO]
[INFO] Building Geronimo :: OpenEJB
[INFO]task-segment: [install]
[INFO]
Downloading:
http://download.java.net/maven/1//commons-dbcp/poms/commons-dbcp-1.3-r562808.pom
[WARNING] Unable to get resource 'commons-dbcp:commons-dbcp:pom:1.3-r562808'
from repository java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//commons-dbcp/commons-dbcp/1.3-r562808/commons-dbcp-1.3-r562808.pom
[WARNING] Unable to get resource 'commons-dbcp:commons-dbcp:pom:1.3-r562808'
from repository apache-incubator
(http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://repo1.maven.org/maven2/commons-dbcp/commons-dbcp/1.3-r562808/commons-dbcp-1.3-r562808.pom
[WARNING] Unable to get resource 'commons-dbcp:commons-dbcp:pom:1.3-r562808'
from repository central (http://repo1.maven.org/maven2)
[INFO] [enforcer:enforce {execution: default}]
[INFO] [tools:copy-legal-files {execution: install-legal-files}]
[INFO] [resources:resources]
[INFO] Using default encoding to copy filtered resources.
[INFO] [compiler:compile]
[INFO] Nothing to compile - all classes are up to date
[INFO] [resources:testResources]
[INFO] Using default encoding to copy filtered resources.
[INFO] [compiler:testCompile]
[INFO] Not compiling test sources
[INFO] [surefire:test]
[INFO] Tests are skipped.
[INFO] [jar:jar]
[INFO] [tools:verify-legal-files {execution: verify-legal-files}]
[INFO] Checking legal files in: geronimo-openejb-2.1-SNAPSHOT.jar
[INFO] [install:install]
[INFO] Installing
/home/prasad/geronimo/trunk/modules/geronimo-openejb/target/geronimo-openejb-2.1-SNAPSHOT.jar
to
/home/prasad/.m2/repository/org/apache/geronimo/modules/geronimo-openejb/2.1-SNAPSHOT/geronimo-openejb-2.1-SNAPSHOT.jar
[INFO]
[INFO] Building Geronimo :: Axis
[INFO]task-segment: [install]
[INFO]
Downloading: http://download.java.net/maven/1//axis/poms/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
java.net (http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading: http://repo1.maven.org/maven2/axis/axis-saaj/1.4/axis-saaj-1.4.pom
[WARNING] Unable to get resource 'axis:axis-saaj:pom:1.4' from repository
central (http://repo1.maven.org/maven2)
Downloading:
http://download.java.net/maven/1//org.apache.openjpa/jars/openjpa-jdbc-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970' from repository java.net
(http://download.java.net/maven/1/)
Downloading:
http://people.apache.org/repo/m2-incubating-repository//org/apache/openjpa/openjpa-jdbc-5/1.0.0-r561970/openjpa-jdbc-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970' from repository
apache-incubator (http://people.apache.org/repo/m2-incubating-repository/)
Downloading:
http://www.ibiblio.org/maven2/org/apache/openjpa/openjpa-jdbc-5/1.0.0-r561970/openjpa-jdbc-5-1.0.0-r561970.jar
[WARNING] Unable to get resource
'org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970' from repository central
(http://www.ibiblio.org/maven2)
[INFO]
[ERROR] BUILD ERROR
[INFO]
[INFO] Failed to resolve artifact.
Missing:
--
1) org.apache.openjpa:openjpa-jdbc-5:jar:1.0.0-r561970
Try downloading the file manually from the project website.
Then, install it using the command:
mvn
[jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527805 ] Anita Kulshreshtha commented on GERONIMO-2964: -- I did not expect SUID change to work.. The Holder class http://svn.apache.org/viewvc/geronimo/server/trunk/modules/geronimo-j2ee/src/main/java/org/apache/geronimo/j2ee/annotation/Holder.java?sortdir=downr1=566236r2=568253 changes a List to a Set, which is equivalent to deleting a field. This is not a compatible change as described here: http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/version.html#6678 This is likely to produce unexpected behavior irrespective of your patch. If we want to promise upward compatibility to our users, we need to fix this. Cannot specify the Tomcat work directory for a web application -- Key: GERONIMO-2964 URL: https://issues.apache.org/jira/browse/GERONIMO-2964 Project: Geronimo Issue Type: Improvement Security Level: public(Regular issues) Components: Tomcat Affects Versions: 1.2, 2.0-M5 Reporter: Aman Nanner Assignee: Vamsavardhana Reddy Priority: Minor Fix For: 2.0.2, 2.0.x, 2.1 Attachments: g2964.war, GERONIMO-2964-combined-new.patch, GERONIMO-2964-combined.patch, GERONIMO-2964.patch, tomcat-config-workdir.patch, tomcat-workdir.patch In Tomcat, a work directory can be specified for a web application in a WEB-INF/context.xml file. The GeronimoStandardContext does not permit the user to specify a work directory, and so the work directory defaults to var/catalina/work/web-app. I've submitted a patch file that modifies the geronimo-tomcat-1.2 schema to permit the user to optionally specify a work directory. This work directory is then propagated into the TomcatContext. I've tested this and it seems to work well. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
Re: Problem with referencing to beans from other ejb-jars
On Sep 13, 2007, at 10:31 PM, Kevan Miller wrote:
I thought I'd take the opportunity to send some love David B's
way... I think it's great the way he's been addressing these user
questions and documenting in the Wiki.
Thanks! :)
I hope we can get this stuff organized so that users can find this
information in a reasonable manner...
Yea, I've been thinking about that too. Not entirely sure where to
sew it into the larger tapestry that is our documentation.
-David
--kevan
On Sep 13, 2007, at 3:54 PM, David Blevins wrote:
Hi Tomasz,
I created a doc for you that describes the missing parts.
http://cwiki.apache.org/OPENEJB/ejb-refs.html
Keep what you have with the openejb-jar and add the parts
described in this to your ejb-jar.xml.
Unfortunately, while looking into this I discovered that our code
for overriding an @EJB annotation with an ejb-ref in the xml is
not implemented, thus if you have @EJB and the corresponding ejb-
ref as described in the first section of the document, you'll end
up with two refs and not one as you should.
We'll get this fixed asap, but until then follow the technique
described in the second part of the doc and in the next version of
Geronimo you'll be able to delete some of that xml and readd the
@EJB annotation.
-David
On Sep 13, 2007, at 6:58 AM, Tomasz Mazan wrote:
Hello
I got deployed module A (JAR) and application B (EAR).
A) Contains stateless bean
@Stateless(name = JmsDispatcherGate)
public class JmsDispatcherGateImpl implements DispatcherGateLocal,
DispatcherGateRemote {
and - of course - necessary interfaces.
ejb-jar.xml does'nt contain interesting content,
openejb-jar.xml contains module description
sys:moduleId
sys:groupIdmyejbmodule/sys:groupId
sys:artifactIdDispatcher/sys:artifactId
sys:version1.0/sys:version
sys:typejar/sys:type
/sys:moduleId
B) Application contains two ejb-jars with beans
geronimo-application.xml contains
dependencies
dependency
groupIdmyejbmodule/groupId
artifactIdDispatcher/artifactId
version1.0/version
typejar/type
/dependency
/dependencies
and one of B-module has openejb-jar.xml with similar dependencie's
definition.
Bean in B-module references to bean from A (EJB) using code below:
@EJB(name = JmsDispatcherGate)
private DispatcherGateLocal dispatcherGate;
Problem occurs on deploying B-application (EAR) while A (EJB) is
correctly
deployed and Geronimo Console JNDI Viewer show JmsDispatcherGate
bean. I
tried to use Remote interface - with no special difference.
Exception stacktrace:
15:31:18,812 FATAL [startup] Cannot find bean JmsDispatcherGate
referenced
by bean CoreManagerLocal.
15:31:18,812 ERROR [Deployer] Deployment failed due to
org.apache.geronimo.common.DeploymentException:
org.apache.openejb.OpenEJBException: Cannot find bean
JmsDispatcherGate
referenced by bean CoreManagerLocal.
at
org.apache.geronimo.openejb.deployment.EjbModuleBuilder.getEjbJarInf
o(EjbModuleBuilder.java:530)
at
org.apache.geronimo.openejb.deployment.EjbModuleBuilder.initContext(
EjbModuleBuilder.java:437)
at
org.apache.geronimo.openejb.deployment.EjbModuleBuilder$
$FastClassByCGLIB$$cd80af20.invoke(generated)
at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke
(FastMethodInvoker.java:38)
at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke
(GBeanOperation.java:124)
at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke
(GBeanInstance.java:830)
at org.apache.geronimo.gbean.runtime.RawInvoker.invoke
(RawInvoker.java:57)
at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke
(RawOperationInvoker.java:35)
at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept
(ProxyMethodInterceptor.java:96)
at
org.apache.geronimo.j2ee.deployment.ModuleBuilder$$EnhancerByCGLIB
$$dc485bed.initContext(generated)
at
org.apache.geronimo.j2ee.deployment.EARConfigBuilder.buildConfigurat
ion(EARConfigBuilder.java:576)
at
org.apache.geronimo.j2ee.deployment.EARConfigBuilder$
$FastClassByCGLIB$$38e56ec6.invoke(generated)
at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke
(FastMethodInvoker.java:38)
at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke
(GBeanOperation.java:124)
at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke
(GBeanInstance.java:830)
at org.apache.geronimo.gbean.runtime.RawInvoker.invoke
(RawInvoker.java:57)
at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke
(RawOperationInvoker.java:35)
at
[jira] Updated: (GERONIMO-3456) Make MEJB security configurable
[ https://issues.apache.org/jira/browse/GERONIMO-3456?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Anita Kulshreshtha updated GERONIMO-3456: - Attachment: mejb-ear-2.1-SNAPSHOT.ear MEJB.java I have attached MEJB for review. It can be deployed as an ear or stand alone ejb module. I have tested it by deploying it as an ear on trunk. The ear file is also attached. The ear contains an extra web part that is meant only for testing. By default the mejbuser role is mapped to admin . Make MEJB security configurable --- Key: GERONIMO-3456 URL: https://issues.apache.org/jira/browse/GERONIMO-3456 Project: Geronimo Issue Type: Bug Security Level: public(Regular issues) Components: OpenEJB, security Affects Versions: 2.0.1, 2.1 Environment: All Reporter: Anita Kulshreshtha Assignee: Anita Kulshreshtha Priority: Critical Fix For: 2.0.2, 2.1 Attachments: mejb-ear-2.1-SNAPSHOT.ear, MEJB.java Currently access to MEJB is not controlled. Add configurable security for MEJB. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[jira] Commented: (GERONIMO-2964) Cannot specify the Tomcat work directory for a web application
[ https://issues.apache.org/jira/browse/GERONIMO-2964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12527823 ] Vamsavardhana Reddy commented on GERONIMO-2964: --- SUID change may or may not result in unexpected behavior in case of installing 2.0.1.car as plugin in 2.0.2-SNAPSHOT server. Are you able to figure why it is not working with the 2.0.1 server which comes from the same codebase? Cannot specify the Tomcat work directory for a web application -- Key: GERONIMO-2964 URL: https://issues.apache.org/jira/browse/GERONIMO-2964 Project: Geronimo Issue Type: Improvement Security Level: public(Regular issues) Components: Tomcat Affects Versions: 1.2, 2.0-M5 Reporter: Aman Nanner Assignee: Vamsavardhana Reddy Priority: Minor Fix For: 2.0.2, 2.0.x, 2.1 Attachments: g2964.war, GERONIMO-2964-combined-new.patch, GERONIMO-2964-combined.patch, GERONIMO-2964.patch, tomcat-config-workdir.patch, tomcat-workdir.patch In Tomcat, a work directory can be specified for a web application in a WEB-INF/context.xml file. The GeronimoStandardContext does not permit the user to specify a work directory, and so the work directory defaults to var/catalina/work/web-app. I've submitted a patch file that modifies the geronimo-tomcat-1.2 schema to permit the user to optionally specify a work directory. This work directory is then propagated into the TomcatContext. I've tested this and it seems to work well. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
