Re: [DISCUSS] Release Karaf 2.4.0

[Matt Sicker]

JPA with and without bytecode weaving perhaps?


On 10 July 2014 15:51, Krzysztof Sobkowiak 
wrote:

> Hi
>
> I have just tested jdbc, jms, jndi commands and performed some tests
> with ActiveMQ and Camel. This part looks ok. I'll try to perform some
> more tests tomorrow. Are there any special parts which should be tested
> more intensive?
>
> Best regards
> Krzysztof
>
> On 09.07.2014 21:16, Jean-Baptiste Onofré wrote:
> > By the way, it's the same Aries * "new" releases that we will have on
> > master, karaf-3.0.x (for the next 3.0.2) and karaf-2.x (for the next
> > 2.4.0).
> > Just to be clear.
> >
> > Regards
> > JB
> >
> > On 07/09/2014 07:44 PM, Christian Schneider wrote:
> >> We should also include the upcoming aries jpa release. It contains some
> >> important fixes.
> >> The bug in the current aries jpa makes it almost impossible to use. (See
> >> https://issues.apache.org/jira/browse/ARIES-1160)
> >> JB offered to prepare this release.
> >>
> >> Christian
> >>
> >> Am 09.07.2014 17:24, schrieb Guillaume Nodet:
> >>> Now that Aries releases are done, I'd like to discuss a 2.4.0 release
> >>> asap.
> >>> I think it's in a good shape, but i'll do a bit more testing and I
> >>> would
> >>> welcome any additional volunteers.
> >>>
> >>> Anyway, does anyone as any urgent stuff to put in before we release ?
> >>> I'd like to start the release friday or monday if nothing requires a
> >>> delay.
> >>>
> >>> Thoughts ?
> >>>
> >>> Guillaume
> >>>
> >>
> >>
> >
>
>
> --
> Krzysztof Sobkowiak
>
> JEE & OSS Architect | Senior Solution Architect @ Capgemini | Committer
> @ ASF
> Capgemini  | Software Solutions Center
>  | Wroclaw
> e-mail: krzys.sobkow...@gmail.com  |
> Twitter: @KSobkowiak
> Calendar: http://goo.gl/yvsebC
>



-- 
Matt Sicker 

Re: [DISCUSS] Release Karaf 2.4.0

[Krzysztof Sobkowiak]

Hi

I have just tested jdbc, jms, jndi commands and performed some tests
with ActiveMQ and Camel. This part looks ok. I'll try to perform some
more tests tomorrow. Are there any special parts which should be tested
more intensive?

Best regards
Krzysztof

On 09.07.2014 21:16, Jean-Baptiste Onofré wrote:
> By the way, it's the same Aries * "new" releases that we will have on
> master, karaf-3.0.x (for the next 3.0.2) and karaf-2.x (for the next
> 2.4.0).
> Just to be clear.
>
> Regards
> JB
>
> On 07/09/2014 07:44 PM, Christian Schneider wrote:
>> We should also include the upcoming aries jpa release. It contains some
>> important fixes.
>> The bug in the current aries jpa makes it almost impossible to use. (See
>> https://issues.apache.org/jira/browse/ARIES-1160)
>> JB offered to prepare this release.
>>
>> Christian
>>
>> Am 09.07.2014 17:24, schrieb Guillaume Nodet:
>>> Now that Aries releases are done, I'd like to discuss a 2.4.0 release
>>> asap.
>>> I think it's in a good shape, but i'll do a bit more testing and I
>>> would
>>> welcome any additional volunteers.
>>>
>>> Anyway, does anyone as any urgent stuff to put in before we release ?
>>> I'd like to start the release friday or monday if nothing requires a
>>> delay.
>>>
>>> Thoughts ?
>>>
>>> Guillaume
>>>
>>
>>
>


-- 
Krzysztof Sobkowiak

JEE & OSS Architect | Senior Solution Architect @ Capgemini | Committer
@ ASF
Capgemini  | Software Solutions Center
 | Wroclaw
e-mail: krzys.sobkow...@gmail.com  |
Twitter: @KSobkowiak
Calendar: http://goo.gl/yvsebC

Re: Support certificate based authentication for karaf JAAS

[Jean-Baptiste Onofré]

We already have the PublicKeyLoginModule (that we use for SSH key based 
authentication).


As you describe, I see it more in Karaf, maybe extending/leveraging the 
PublicKeyLoginModule.


Regards
JB

On 07/10/2014 06:12 PM, Christian Schneider wrote:

That is possible of course.  I think it would not really match the scope
of cxf though.

The LoginModule would be pretty generic with no dependency on cxf. On
the other hand I think that a LoginModule for cert based authentication
can also make sense for karaf. For example if a user wants to secure the
karaf webconsole or a Servlet with client certs then he should have the
same requirements.
So I hope we can store this in karaf and provide it for all kinds of web
based authentication with ssl and certificates.

In fact the scope of login modules that provide just details about the
user without doing authentication would be every kind of authentication
that happens outside of JAAS.
So compared to Spring security it would be something like the
UserDetailsService they define.

So in case karaf is not a good place for this maybe it could be done in
pax ?

One further argument why it should not be done in CXF is if you look at
ActiveMQ they also have classes covering JAAS based authentication. Even
supporing certificate based authentication.
So if we put it in CXF we would basically duplicate the effort. So
ideally I think it should live in a project where ActiveMQ, CXF and
Karaf can use it.

Christian

Am 10.07.2014 16:54, schrieb Jean-Baptiste Onofré:

Hi Christian,

why not providing a login module in CXF (dedicated) ?

Regards
JB

On 07/10/2014 04:52 PM, Christian Schneider wrote:

We have the following issue in CXF:
https://issues.apache.org/jira/browse/CXF-5118

What we want to achieve is to let a user authenticate against a
webservice running in karaf using a client certificate.

We would like to leverage the karaf JAAS support to do the mapping from
certificate to user and to lookup the roles.
I have described some ideas how to do this in the issue above.

Some would require to change the LDAPLoginModule to support a mode to
just retrieve the groups and not do actual authentication
(configurable).
Which could be an issue if someone uses it as a user/password login
module and configures it incorrectly.

The other solutions have other issues.

So what solution would you choose?
Or should we alternatively keep this complete code out of karaf?

Christian








--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com

Re: Support certificate based authentication for karaf JAAS

[Christian Schneider]

That is possible of course.  I think it would not really match the scope 
of cxf though.


The LoginModule would be pretty generic with no dependency on cxf. On 
the other hand I think that a LoginModule for cert based authentication
can also make sense for karaf. For example if a user wants to secure the 
karaf webconsole or a Servlet with client certs then he should have the 
same requirements.
So I hope we can store this in karaf and provide it for all kinds of web 
based authentication with ssl and certificates.


In fact the scope of login modules that provide just details about the 
user without doing authentication would be every kind of authentication 
that happens outside of JAAS.
So compared to Spring security it would be something like the 
UserDetailsService they define.


So in case karaf is not a good place for this maybe it could be done in 
pax ?


One further argument why it should not be done in CXF is if you look at 
ActiveMQ they also have classes covering JAAS based authentication. Even 
supporing certificate based authentication.
So if we put it in CXF we would basically duplicate the effort. So 
ideally I think it should live in a project where ActiveMQ, CXF and 
Karaf can use it.


Christian

Am 10.07.2014 16:54, schrieb Jean-Baptiste Onofré:

Hi Christian,

why not providing a login module in CXF (dedicated) ?

Regards
JB

On 07/10/2014 04:52 PM, Christian Schneider wrote:

We have the following issue in CXF:
https://issues.apache.org/jira/browse/CXF-5118

What we want to achieve is to let a user authenticate against a
webservice running in karaf using a client certificate.

We would like to leverage the karaf JAAS support to do the mapping from
certificate to user and to lookup the roles.
I have described some ideas how to do this in the issue above.

Some would require to change the LDAPLoginModule to support a mode to
just retrieve the groups and not do actual authentication 
(configurable).

Which could be an issue if someone uses it as a user/password login
module and configures it incorrectly.

The other solutions have other issues.

So what solution would you choose?
Or should we alternatively keep this complete code out of karaf?

Christian






--
 
Christian Schneider

http://www.liquid-reality.de

Open Source Architect
Talend Application Integration Division http://www.talend.com

Re: JPA 2.1 (eclipselink) in Karaf 3.01

[Jean-Baptiste Onofré]

3.0.2 is planned in two weeks (you can see the release schedule on the 
website).


It's not yet on trunk as I didn't push the Aries change yet. I will do 
it during the week end "max".


Regards
JB

On 07/10/2014 05:39 PM, Rodrigo Serra wrote:

Thank for you fast response JB.

Is already in trunk? What is the release time for 3.0.2?

Regards,
Rodrigo

El 10/07/2014, a las 12:00, Jean-Baptiste Onofré  escribió:


Hi Rodrigo,

no, JPA 2.1 will be supported in 3.0.2.

Regards
JB

On 07/10/2014 04:57 PM, Rodrigo Serra wrote:

Hello,

Is supported eclipselink JPA 2.1 in Karaf 3.01?

Regards
Rodrigo



--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com




--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com

Re: JPA 2.1 (eclipselink) in Karaf 3.01

[Rodrigo Serra]

Thank for you fast response JB.

Is already in trunk? What is the release time for 3.0.2? 

Regards,
Rodrigo

El 10/07/2014, a las 12:00, Jean-Baptiste Onofré  escribió:

> Hi Rodrigo,
> 
> no, JPA 2.1 will be supported in 3.0.2.
> 
> Regards
> JB
> 
> On 07/10/2014 04:57 PM, Rodrigo Serra wrote:
>> Hello,
>> 
>> Is supported eclipselink JPA 2.1 in Karaf 3.01?
>> 
>> Regards
>> Rodrigo
>> 
> 
> -- 
> Jean-Baptiste Onofré
> jbono...@apache.org
> http://blog.nanthrax.net
> Talend - http://www.talend.com

Re: JPA 2.1 (eclipselink) in Karaf 3.01

[Jean-Baptiste Onofré]

Hi Rodrigo,

no, JPA 2.1 will be supported in 3.0.2.

Regards
JB

On 07/10/2014 04:57 PM, Rodrigo Serra wrote:

Hello,

Is supported eclipselink JPA 2.1 in Karaf 3.01?

Regards
Rodrigo



--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com

JPA 2.1 (eclipselink) in Karaf 3.01

[Rodrigo Serra]

Hello,

Is supported eclipselink JPA 2.1 in Karaf 3.01? 

Regards
Rodrigo

Re: Support certificate based authentication for karaf JAAS

[Jean-Baptiste Onofré]

Hi Christian,

why not providing a login module in CXF (dedicated) ?

Regards
JB

On 07/10/2014 04:52 PM, Christian Schneider wrote:

We have the following issue in CXF:
https://issues.apache.org/jira/browse/CXF-5118

What we want to achieve is to let a user authenticate against a
webservice running in karaf using a client certificate.

We would like to leverage the karaf JAAS support to do the mapping from
certificate to user and to lookup the roles.
I have described some ideas how to do this in the issue above.

Some would require to change the LDAPLoginModule to support a mode to
just retrieve the groups and not do actual authentication (configurable).
Which could be an issue if someone uses it as a user/password login
module and configures it incorrectly.

The other solutions have other issues.

So what solution would you choose?
Or should we alternatively keep this complete code out of karaf?

Christian



--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com

Support certificate based authentication for karaf JAAS

[Christian Schneider]

We have the following issue in CXF:
https://issues.apache.org/jira/browse/CXF-5118

What we want to achieve is to let a user authenticate against a 
webservice running in karaf using a client certificate.


We would like to leverage the karaf JAAS support to do the mapping from 
certificate to user and to lookup the roles.

I have described some ideas how to do this in the issue above.

Some would require to change the LDAPLoginModule to support a mode to 
just retrieve the groups and not do actual authentication (configurable).
Which could be an issue if someone uses it as a user/password login 
module and configures it incorrectly.


The other solutions have other issues.

So what solution would you choose?
Or should we alternatively keep this complete code out of karaf?

Christian

--
Christian Schneider
http://www.liquid-reality.de

Open Source Architect
http://www.talend.com

Re: db commands not available in Karaf 2.3.2

[Christian Schneider]

The tutorials where specific to karaf 2.x when I started them.

In the mean time I went through most of the code to make sure it also 
works fo karaf 3.
So if something does not work in karaf 3 please send me a mail or open 
an issue on github. If you have fixes you can also

open pull requests.

Unfortunately there is no common command syntax that works in karaf 2 
and 3 so often the installation will be different.

In some Readme.txt files I already added the karaf 3 commands.

Christian

Am 10.07.2014 09:02, schrieb SapnaB:

Hi Achim,

Could we have a  mention of the Karaf version being used in the tutorial
series by Christian Schneider :

http://www.liquid-reality.de/display/liquid/2011/02/15/Karaf+Tutorial+Part+1+-+Installation+and+First+application
http://www.liquid-reality.de/display/liquid/2011/09/23/Karaf+Tutorial+Part+2+-+Using+the+Configuration+Admin+Service

The tutorials are great, but do not specify the Karaf version. Are they
applicable for both 2.3.x and 3.x series?

Thanks,
Sapna




--
View this message in context: 
http://karaf.922171.n3.nabble.com/db-commands-not-available-in-Karaf-2-3-2-tp4034053p4034114.html
Sent from the Karaf - Dev mailing list archive at Nabble.com.



--
 
Christian Schneider

http://www.liquid-reality.de

Open Source Architect
Talend Application Integration Division http://www.talend.com

Re: db commands not available in Karaf 2.3.2

[Jean-Baptiste Onofré]

Hi Sapna,

did you see my latest e-mail in the thread ?

The jdbc:* commands (equivalent to Christian's db commands) are 
available in the latest Karaf 2.3.x.


Regards
JB

On 07/10/2014 09:02 AM, SapnaB wrote:

Hi Achim,

Could we have a  mention of the Karaf version being used in the tutorial
series by Christian Schneider :

http://www.liquid-reality.de/display/liquid/2011/02/15/Karaf+Tutorial+Part+1+-+Installation+and+First+application
http://www.liquid-reality.de/display/liquid/2011/09/23/Karaf+Tutorial+Part+2+-+Using+the+Configuration+Admin+Service

The tutorials are great, but do not specify the Karaf version. Are they
applicable for both 2.3.x and 3.x series?

Thanks,
Sapna




--
View this message in context: 
http://karaf.922171.n3.nabble.com/db-commands-not-available-in-Karaf-2-3-2-tp4034053p4034114.html
Sent from the Karaf - Dev mailing list archive at Nabble.com.



--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com

Re: db commands not available in Karaf 2.3.2

[Achim Nierbeck]

That's a request you have to direct to Christian :)

but I'm sure he's gonna add those information asap :)

regards, Achim


2014-07-10 9:02 GMT+02:00 SapnaB :

> Hi Achim,
>
> Could we have a  mention of the Karaf version being used in the tutorial
> series by Christian Schneider :
>
>
> http://www.liquid-reality.de/display/liquid/2011/02/15/Karaf+Tutorial+Part+1+-+Installation+and+First+application
>
> http://www.liquid-reality.de/display/liquid/2011/09/23/Karaf+Tutorial+Part+2+-+Using+the+Configuration+Admin+Service
>
> The tutorials are great, but do not specify the Karaf version. Are they
> applicable for both 2.3.x and 3.x series?
>
> Thanks,
> Sapna
>
>
>
>
> --
> View this message in context:
> http://karaf.922171.n3.nabble.com/db-commands-not-available-in-Karaf-2-3-2-tp4034053p4034114.html
> Sent from the Karaf - Dev mailing list archive at Nabble.com.
>



-- 

Apache Member
Apache Karaf  Committer & PMC
OPS4J Pax Web  Committer &
Project Lead
blog 

Software Architect / Project Manager / Scrum Master

Re: db commands not available in Karaf 2.3.2

[SapnaB]

Hi Achim,

Could we have a  mention of the Karaf version being used in the tutorial
series by Christian Schneider :

http://www.liquid-reality.de/display/liquid/2011/02/15/Karaf+Tutorial+Part+1+-+Installation+and+First+application
http://www.liquid-reality.de/display/liquid/2011/09/23/Karaf+Tutorial+Part+2+-+Using+the+Configuration+Admin+Service

The tutorials are great, but do not specify the Karaf version. Are they
applicable for both 2.3.x and 3.x series?

Thanks,
Sapna




--
View this message in context: 
http://karaf.922171.n3.nabble.com/db-commands-not-available-in-Karaf-2-3-2-tp4034053p4034114.html
Sent from the Karaf - Dev mailing list archive at Nabble.com.