Re: Preparing Karaf runtime 4.3.4

[Jean-Baptiste Onofré]

Hi Robert,

From an user standpoint, you are right.

I updated Karaf to use "individual" bundles. I think I sent a message on 
the mailing list about that.


Regards
JB

On 12/11/2021 14:34, Robert Varga wrote:

On 12/11/2021 10:23, Paul Stanley wrote:

Thanks JB.


Hello Paul,


I would have though that OSGI R8 is backwards compatible with R7, as I
didn't see any breaking changes in the spec.


True, but the artifact packaging with R8 broken up to support JPMS -- 
i.e. no osgi.cmpn anymore. That is a breaking change from build system 
perspective.


Regards,
Robert

Re: Preparing Karaf runtime 4.3.4

[Robert Varga]

On 12/11/2021 08:51, Grzegorz Grzybek wrote:

Hello


Hey,


Thanks JBO!

I didn't yet add Pax Web 8 to 4.4.0-SNAPSHOT, but I'm going to do it soon.


Thanks for all the hard work, I can't wait to give PW8 + R8 a spin!

Regards,
Robert



regards
Grzegorz Grzybek

pt., 12 lis 2021 o 08:50 Jean-Baptiste Onofré  napisał(a):


Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
end). I will also work on new Decanter release for next week.

Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
to give a chance to everyone to test this new series before a GA.

Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency alignement

is required.


Karaf 4.3.4 will be on vote soon.

Regards
JB


Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a

écrit :


Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB


Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a

écrit :


Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),

I'm

getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a

subtype

at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
at java.util.ServiceLoader.access$300(ServiceLoader.java:185)

~[?:1.8.0_312]

at

java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)

~[?:1.8.0_312]
at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480)

~[?:1.8.0_312]

at


org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at


org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at


org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at


org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)

~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 

napisał(a):



Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
jetty-jaspic, which has dependency on javax.security.auth.message...

Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


The Jetty issue:

https://github.com/eclipse/jetty.project/issues/6554

resulted in pull request:



https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1

This removed the check for the realm being set, thus always creating

a

default identity service, even when one is not defined.
As a result the geronimo JASPI spec  (Java Authentication SPI),

Attempts

to construct a default JASPI factory, resulting in a Class Not Found
Exception.

I've had a quick look at the pax-web-jetty project, but i can't see

any

geronimo dependencies. As such one of the test modules must have the

api

and implementation built in, or it's using a different Jetty Identity
Service?

Cheers
Paul





From:   "Grzegorz Grzybek" 
To: "Karaf Dev" 
Date:   29/10/2021 11:36
Subject:Re: Preparing Karaf runtime 4.3.4



Hello

What's the problem with Jetty 9.4.44? I checked with Pax Web 8

without any

changes and I got:

[INFO] Results:
[INFO]
[WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
...
[INFO]
[INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
pax-web-itest-jetty ---
[INFO]




[INFO] BUILD SUCCESS
[INFO]




[INFO] Total time:  05:34 min
[INFO] Finished at: 2021-10-29T12:34:12+02:00
[INFO]





The tests include authentication and TLS tests.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 11:44 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


Hi JB,

Jetty 9.4.44 now attempts to create the default instance of the

jaspi,

even if it is not installed or used.
I've included the geronimo-jaspi implementation alongside the

geronimo

-jaspic_1.0_spec to address the issue.
Note that ordering is important as there is static code begin used

to

register the jaspic factories, thus the above packages need to

loaded

into

the runtime prior to the jetty bundles.

Cheers
Paul




From:   "Jean-Baptiste Onofre" 
To: dev@karaf.apache.org
Date:   29/10/2021 09:58
Subject:Re: Preparing Karaf runtime 4.3.4



Hi guys,

I detected that Jetty 9.4.44 update

Re: Preparing Karaf runtime 4.3.4

[Robert Varga]

On 12/11/2021 10:23, Paul Stanley wrote:

Thanks JB.


Hello Paul,


I would have though that OSGI R8 is backwards compatible with R7, as I
didn't see any breaking changes in the spec.


True, but the artifact packaging with R8 broken up to support JPMS -- 
i.e. no osgi.cmpn anymore. That is a breaking change from build system 
perspective.


Regards,
Robert


OpenPGP_signature
Description: OpenPGP digital signature

Re: Preparing Karaf runtime 4.3.4

[Jean-Baptiste Onofré]

Hi Paul,

You are right: R8 is backward compatible with R7. However, as it's major 
change in the exposed features, we bump Karaf version.


With Karaf 5, it would be actually "easier" as OSGi is application 
manager service you register in the K5 runtime. It means that you will 
be able to change the service/Rx version without changing others K5 
services/runtime. It will be more flexible.


Regards
JB

On 12/11/2021 10:23, Paul Stanley wrote:

Thanks JB.

I would have though that OSGI R8 is backwards compatible with R7, as I
didn't see any breaking changes in the spec.
However I understand the logic in maintaining 2 stable build lines.

Thanks again.
Paul



From:   "Jean-Baptiste Onofré" 
To: dev@karaf.apache.org
Date:   12/11/2021 08:54
Subject:Re: Preparing Karaf runtime 4.3.4



Hi Paul,

We always maintain two stable branch. Today, it's Karaf 4.2.x and 4.3.x.

As soon as we will have first 4.4.0 GA, we will maintain 4.3.x and 4.4.x
(and 5.0.x is coming but that's a different story).

The reason is to give time for users to "migrate" from one main version
to another. For instance, Karaf 4.3.x is R7 based, whereas 4.4.x is R8
based, so, we give the chance for users to smoothly upgrade.

Regards
JB

On 12/11/2021 09:39, Paul Stanley wrote:

Hi JB,

If pax-web-8 is going into the next release, Is there any point

continuing

the 4.3.x line,  Why not move onto the karaf -4.4.x product?

Cheers
Paul




From:   "Jean-Baptiste Onofré" 
To: dev@karaf.apache.org
Date:   12/11/2021 08:27
Subject:Re: Preparing Karaf runtime 4.3.4



You can see the release notes in preparation:



https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350117




Regards
JB

On 12/11/2021 09:24, Steven Huypens wrote:

Hi JB,

Thanks! Looking forward to it.

Where can I find info about the fixes in the maven-bundle-plugin?

Best regards,
Steven

On Fri, Nov 12, 2021 at 9:13 AM Jean-Baptiste Onofré 
wrote:


Hi Steven,

yes, next Decanter release will include several fixes, including with
one about Prometheus appender.

Regards
JB

On 12/11/2021 09:10, Steven Huypens wrote:

Hi JB,

Please remember to fix the Decanter-issue we discussed on September

22

on

this mailing list. I think it should be an easy fix :

"While trying to expose a micrometer  Gauge,

I

noticed that its Double value is not shown by the PrometheusServlet.
Apparently only Integers and Longs are. "

Kind regards,
Steven

On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré



wrote:


Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the

week

end). I will also work on new Decanter release for next week.

Finally, I would like to propose a first Karaf runtime 4.4.0.RC1,

just

to give a chance to everyone to test this new series before a GA.

Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency

alignement

is required.


Karaf 4.3.4 will be on vote soon.

Regards
JB


Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a

écrit :


Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB


Le 29 oct. 2021 à 15:28, Grzegorz Grzybek 

a

écrit :


Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one

Jetty),

I'm

getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a

subtype

at java.util.ServiceLoader.fail(ServiceLoader.java:239)

~[?:1.8.0_312]

at java.util.ServiceLoader.access$300(ServiceLoader.java:185)

~[?:1.8.0_312]

at



java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)

~[?:1.8.0_312]
at

java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)

~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480)

~[?:1.8.0_312]

at








org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at








org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at








org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at








org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)

~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 

napisał(a):



Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has

dependency

on

jetty-jaspic, which has dependency on

javax.security.auth.message...


Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał

Re: Preparing Karaf runtime 4.3.4

[Paul Stanley]

Thanks JB.

I would have though that OSGI R8 is backwards compatible with R7, as I 
didn't see any breaking changes in the spec.
However I understand the logic in maintaining 2 stable build lines.

Thanks again.
Paul



From:   "Jean-Baptiste Onofré" 
To: dev@karaf.apache.org
Date:   12/11/2021 08:54
Subject:Re: Preparing Karaf runtime 4.3.4



Hi Paul,

We always maintain two stable branch. Today, it's Karaf 4.2.x and 4.3.x.

As soon as we will have first 4.4.0 GA, we will maintain 4.3.x and 4.4.x 
(and 5.0.x is coming but that's a different story).

The reason is to give time for users to "migrate" from one main version 
to another. For instance, Karaf 4.3.x is R7 based, whereas 4.4.x is R8 
based, so, we give the chance for users to smoothly upgrade.

Regards
JB

On 12/11/2021 09:39, Paul Stanley wrote:
> Hi JB,
> 
> If pax-web-8 is going into the next release, Is there any point 
continuing
> the 4.3.x line,  Why not move onto the karaf -4.4.x product?
> 
> Cheers
> Paul
> 
> 
> 
> 
> From:   "Jean-Baptiste Onofré" 
> To: dev@karaf.apache.org
> Date:   12/11/2021 08:27
> Subject:Re: Preparing Karaf runtime 4.3.4
> 
> 
> 
> You can see the release notes in preparation:
> 
> 
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350117

> 
> 
> Regards
> JB
> 
> On 12/11/2021 09:24, Steven Huypens wrote:
>> Hi JB,
>>
>> Thanks! Looking forward to it.
>>
>> Where can I find info about the fixes in the maven-bundle-plugin?
>>
>> Best regards,
>> Steven
>>
>> On Fri, Nov 12, 2021 at 9:13 AM Jean-Baptiste Onofré 
>> wrote:
>>
>>> Hi Steven,
>>>
>>> yes, next Decanter release will include several fixes, including with
>>> one about Prometheus appender.
>>>
>>> Regards
>>> JB
>>>
>>> On 12/11/2021 09:10, Steven Huypens wrote:
 Hi JB,

 Please remember to fix the Decanter-issue we discussed on September 
22
> on
 this mailing list. I think it should be an easy fix :

 "While trying to expose a micrometer  Gauge, 
I
 noticed that its Double value is not shown by the PrometheusServlet.
 Apparently only Integers and Longs are. "

 Kind regards,
 Steven

 On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré 

 wrote:

> Hi guys,
>
> I finally figured to move forward on release preparation.
>
> I will submit Karaf runtime 4.3.4 to vote soon (probably during the
> week
> end). I will also work on new Decanter release for next week.
>
> Finally, I would like to propose a first Karaf runtime 4.4.0.RC1,
> just
> to give a chance to everyone to test this new series before a GA.
>
> Regards
> JB
>
> On 07/11/2021 07:02, JB Onofré wrote:
>> Hi guys
>>
>> I gonna release pax web 7.3.21 to align version with Karaf.
>> I’m working on other third party projects where a dependency
> alignement
> is required.
>>
>> Karaf 4.3.4 will be on vote soon.
>>
>> Regards
>> JB
>>
>>> Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a
> écrit :
>>>
>>> Hi guys,
>>>
>>> As said in my previous email I have a fix that I’m testing now.
>>>
>>> I will let you know when done.
>>>
>>> Regards
>>> JB
>>>
 Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  
a
> écrit :

 Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one
> Jetty),
> I'm
 getting:

 java.util.ServiceConfigurationError:
 org.eclipse.jetty.security.Authenticator$Factory: Provider
 org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a
> subtype
 at java.util.ServiceLoader.fail(ServiceLoader.java:239)
>>> ~[?:1.8.0_312]
 at java.util.ServiceLoader.access$300(ServiceLoader.java:185)
> ~[?:1.8.0_312]
 at
>
> java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
 ~[?:1.8.0_312]
 at
> java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
 ~[?:1.8.0_312]
 at java.util.ServiceLoader$1.next(ServiceLoader.java:480)
> ~[?:1.8.0_312]
 at

>
>>>
> 
org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)
 ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
 ...
 at

>
>>>
> 
org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)
 ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
 at

>
>>>
> 
org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)
 ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
 at

>
>>>
> 
org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)
 ~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

 Checking...
 regards
 Grzegorz Grzybek

 pt., 29 paź 2021 o 13:19 

Re: Preparing Karaf runtime 4.3.4

[Jean-Baptiste Onofré]

Hi Paul,

We always maintain two stable branch. Today, it's Karaf 4.2.x and 4.3.x.

As soon as we will have first 4.4.0 GA, we will maintain 4.3.x and 4.4.x 
(and 5.0.x is coming but that's a different story).


The reason is to give time for users to "migrate" from one main version 
to another. For instance, Karaf 4.3.x is R7 based, whereas 4.4.x is R8 
based, so, we give the chance for users to smoothly upgrade.


Regards
JB

On 12/11/2021 09:39, Paul Stanley wrote:

Hi JB,

If pax-web-8 is going into the next release, Is there any point continuing
the 4.3.x line,  Why not move onto the karaf -4.4.x product?

Cheers
Paul




From:   "Jean-Baptiste Onofré" 
To: dev@karaf.apache.org
Date:   12/11/2021 08:27
Subject:Re: Preparing Karaf runtime 4.3.4



You can see the release notes in preparation:

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350117


Regards
JB

On 12/11/2021 09:24, Steven Huypens wrote:

Hi JB,

Thanks! Looking forward to it.

Where can I find info about the fixes in the maven-bundle-plugin?

Best regards,
Steven

On Fri, Nov 12, 2021 at 9:13 AM Jean-Baptiste Onofré 
wrote:


Hi Steven,

yes, next Decanter release will include several fixes, including with
one about Prometheus appender.

Regards
JB

On 12/11/2021 09:10, Steven Huypens wrote:

Hi JB,

Please remember to fix the Decanter-issue we discussed on September 22

on

this mailing list. I think it should be an easy fix :

"While trying to expose a micrometer  Gauge, I
noticed that its Double value is not shown by the PrometheusServlet.
Apparently only Integers and Longs are. "

Kind regards,
Steven

On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré 
wrote:


Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the

week

end). I will also work on new Decanter release for next week.

Finally, I would like to propose a first Karaf runtime 4.4.0.RC1,

just

to give a chance to everyone to test this new series before a GA.

Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency

alignement

is required.


Karaf 4.3.4 will be on vote soon.

Regards
JB


Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a

écrit :


Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB


Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a

écrit :


Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one

Jetty),

I'm

getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a

subtype

at java.util.ServiceLoader.fail(ServiceLoader.java:239)

~[?:1.8.0_312]

at java.util.ServiceLoader.access$300(ServiceLoader.java:185)

~[?:1.8.0_312]

at



java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)

~[?:1.8.0_312]
at

java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)

~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480)

~[?:1.8.0_312]

at






org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at






org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at






org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at






org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)

~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 

napisał(a):



Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has

dependency

on

jetty-jaspic, which has dependency on

javax.security.auth.message...


Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


The Jetty issue:

https://github.com/eclipse/jetty.project/issues/6554

resulted in pull request:







https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1


This removed the check for the realm being set, thus always

creating

a

default identity service, even when one is not defined.
As a result the geronimo JASPI spec  (Java Authentication SPI),

Attempts

to construct a default JASPI factory, resulting in a Class Not

Found

Exception.

I've had a quick look at the pax-web-jetty project, but i can't

see

any

geronimo dependencies. As such one of the test modules must have

the

api

and implementation built in, or it's using a different Jetty

Identity

Service?

Cheers
Paul





From:   "Grzegorz Grzybek" 
To: "Karaf Dev" 
Date:   29/10/2021 11:36
Subject:

Re: Preparing Karaf runtime 4.3.4

[Paul Stanley]

Hi JB,

If pax-web-8 is going into the next release, Is there any point continuing 
the 4.3.x line,  Why not move onto the karaf -4.4.x product?

Cheers
Paul




From:   "Jean-Baptiste Onofré" 
To: dev@karaf.apache.org
Date:   12/11/2021 08:27
Subject:Re: Preparing Karaf runtime 4.3.4



You can see the release notes in preparation:

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350117


Regards
JB

On 12/11/2021 09:24, Steven Huypens wrote:
> Hi JB,
> 
> Thanks! Looking forward to it.
> 
> Where can I find info about the fixes in the maven-bundle-plugin?
> 
> Best regards,
> Steven
> 
> On Fri, Nov 12, 2021 at 9:13 AM Jean-Baptiste Onofré 
> wrote:
> 
>> Hi Steven,
>>
>> yes, next Decanter release will include several fixes, including with
>> one about Prometheus appender.
>>
>> Regards
>> JB
>>
>> On 12/11/2021 09:10, Steven Huypens wrote:
>>> Hi JB,
>>>
>>> Please remember to fix the Decanter-issue we discussed on September 22 
on
>>> this mailing list. I think it should be an easy fix :
>>>
>>> "While trying to expose a micrometer  Gauge, I
>>> noticed that its Double value is not shown by the PrometheusServlet.
>>> Apparently only Integers and Longs are. "
>>>
>>> Kind regards,
>>> Steven
>>>
>>> On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré 
>>> wrote:
>>>
 Hi guys,

 I finally figured to move forward on release preparation.

 I will submit Karaf runtime 4.3.4 to vote soon (probably during the 
week
 end). I will also work on new Decanter release for next week.

 Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, 
just
 to give a chance to everyone to test this new series before a GA.

 Regards
 JB

 On 07/11/2021 07:02, JB Onofré wrote:
> Hi guys
>
> I gonna release pax web 7.3.21 to align version with Karaf.
> I’m working on other third party projects where a dependency 
alignement
 is required.
>
> Karaf 4.3.4 will be on vote soon.
>
> Regards
> JB
>
>> Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a
 écrit :
>>
>> Hi guys,
>>
>> As said in my previous email I have a fix that I’m testing now.
>>
>> I will let you know when done.
>>
>> Regards
>> JB
>>
>>> Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a
 écrit :
>>>
>>> Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one 
Jetty),
 I'm
>>> getting:
>>>
>>> java.util.ServiceConfigurationError:
>>> org.eclipse.jetty.security.Authenticator$Factory: Provider
>>> org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a
 subtype
>>> at java.util.ServiceLoader.fail(ServiceLoader.java:239)
>> ~[?:1.8.0_312]
>>> at java.util.ServiceLoader.access$300(ServiceLoader.java:185)
 ~[?:1.8.0_312]
>>> at
 
java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
>>> ~[?:1.8.0_312]
>>> at 
java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
>>> ~[?:1.8.0_312]
>>> at java.util.ServiceLoader$1.next(ServiceLoader.java:480)
 ~[?:1.8.0_312]
>>> at
>>>

>> 
org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)
>>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
>>> ...
>>> at
>>>

>> 
org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)
>>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
>>> at
>>>

>> 
org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)
>>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
>>> at
>>>

>> 
org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)
>>> ~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]
>>>
>>> Checking...
>>> regards
>>> Grzegorz Grzybek
>>>
>>> pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 
 napisał(a):
>>>
 Hi

 pax-web-jetty before Pax Web 8 used jetty-all, which has 
dependency
>> on
 jetty-jaspic, which has dependency on 
javax.security.auth.message...

 Let me check it.

 regards
 Grzegorz Grzybek

 pt., 29 paź 2021 o 13:12 Paul Stanley <
 paul.stan...@saaconsultants.com>
 napisał(a):

> The Jetty issue:
 https://github.com/eclipse/jetty.project/issues/6554
> resulted in pull request:
>
>

>> 
https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1

> This removed the check for the realm being set, thus always
>> creating
 a
> default identity service, even when one is not defined.
> As a result the geronimo JASPI spec  (Java Authentication SPI),
 Attempts
> to construct a default JASPI factory, resulting in a Class Not
>> Found
> Excepti

Re: Preparing Karaf runtime 4.3.4

[Jean-Baptiste Onofré]

You can see the release notes in preparation:

https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350117

Regards
JB

On 12/11/2021 09:24, Steven Huypens wrote:

Hi JB,

Thanks! Looking forward to it.

Where can I find info about the fixes in the maven-bundle-plugin?

Best regards,
Steven

On Fri, Nov 12, 2021 at 9:13 AM Jean-Baptiste Onofré 
wrote:


Hi Steven,

yes, next Decanter release will include several fixes, including with
one about Prometheus appender.

Regards
JB

On 12/11/2021 09:10, Steven Huypens wrote:

Hi JB,

Please remember to fix the Decanter-issue we discussed on September 22 on
this mailing list. I think it should be an easy fix :

"While trying to expose a micrometer  Gauge, I
noticed that its Double value is not shown by the PrometheusServlet.
Apparently only Integers and Longs are. "

Kind regards,
Steven

On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré 
wrote:


Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
end). I will also work on new Decanter release for next week.

Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
to give a chance to everyone to test this new series before a GA.

Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency alignement

is required.


Karaf 4.3.4 will be on vote soon.

Regards
JB


Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a

écrit :


Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB


Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a

écrit :


Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),

I'm

getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a

subtype

at java.util.ServiceLoader.fail(ServiceLoader.java:239)

~[?:1.8.0_312]

at java.util.ServiceLoader.access$300(ServiceLoader.java:185)

~[?:1.8.0_312]

at

java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)

~[?:1.8.0_312]
at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480)

~[?:1.8.0_312]

at




org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at




org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at




org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at




org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)

~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 

napisał(a):



Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has dependency

on

jetty-jaspic, which has dependency on javax.security.auth.message...

Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


The Jetty issue:

https://github.com/eclipse/jetty.project/issues/6554

resulted in pull request:





https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1

This removed the check for the realm being set, thus always

creating

a

default identity service, even when one is not defined.
As a result the geronimo JASPI spec  (Java Authentication SPI),

Attempts

to construct a default JASPI factory, resulting in a Class Not

Found

Exception.

I've had a quick look at the pax-web-jetty project, but i can't see

any

geronimo dependencies. As such one of the test modules must have

the

api

and implementation built in, or it's using a different Jetty

Identity

Service?

Cheers
Paul





From:   "Grzegorz Grzybek" 
To: "Karaf Dev" 
Date:   29/10/2021 11:36
Subject:Re: Preparing Karaf runtime 4.3.4



Hello

What's the problem with Jetty 9.4.44? I checked with Pax Web 8

without any

changes and I got:

[INFO] Results:
[INFO]
[WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
...
[INFO]
[INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
pax-web-itest-jetty ---
[INFO]




[INFO] BUILD SUCCESS
[INFO]




[INFO] Total time:  05:34 min
[INFO] Finished at: 2021-10-29T12:34:12+02:00
[INFO]





The tests include authentication and TLS tests.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 11:44 Paul Stanley <

paul.stan...@

Re: Preparing Karaf runtime 4.3.4

[Grzegorz Grzybek]

pt., 12 lis 2021 o 09:15 Jean-Baptiste Onofré  napisał(a):

> Hi Greg,
>
> It's a RC1, so best effort. If we are not able to include Pax Web 8, we
> will stay with 7.3 for RC1 and cut a RC2 with Pax Web 8.
>
> By the way, I'm about to release a new maven-bundle-plugin version,
> including fixes that could be interested for any project using the plugin.
>

What are the changes? :)

regards
Grzegorz


>
> Regards
> JB
>
> On 12/11/2021 08:51, Grzegorz Grzybek wrote:
> > Hello
> >
> > Thanks JBO!
> >
> > I didn't yet add Pax Web 8 to 4.4.0-SNAPSHOT, but I'm going to do it
> soon.
> >
> > regards
> > Grzegorz Grzybek
> >
> > pt., 12 lis 2021 o 08:50 Jean-Baptiste Onofré 
> napisał(a):
> >
> >> Hi guys,
> >>
> >> I finally figured to move forward on release preparation.
> >>
> >> I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
> >> end). I will also work on new Decanter release for next week.
> >>
> >> Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
> >> to give a chance to everyone to test this new series before a GA.
> >>
> >> Regards
> >> JB
> >>
> >> On 07/11/2021 07:02, JB Onofré wrote:
> >>> Hi guys
> >>>
> >>> I gonna release pax web 7.3.21 to align version with Karaf.
> >>> I’m working on other third party projects where a dependency alignement
> >> is required.
> >>>
> >>> Karaf 4.3.4 will be on vote soon.
> >>>
> >>> Regards
> >>> JB
> >>>
>  Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a
> >> écrit :
> 
>  Hi guys,
> 
>  As said in my previous email I have a fix that I’m testing now.
> 
>  I will let you know when done.
> 
>  Regards
>  JB
> 
> > Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a
> >> écrit :
> >
> > Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),
> >> I'm
> > getting:
> >
> > java.util.ServiceConfigurationError:
> > org.eclipse.jetty.security.Authenticator$Factory: Provider
> > org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a
> >> subtype
> > at java.util.ServiceLoader.fail(ServiceLoader.java:239)
> ~[?:1.8.0_312]
> > at java.util.ServiceLoader.access$300(ServiceLoader.java:185)
> >> ~[?:1.8.0_312]
> > at
> >> java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
> > ~[?:1.8.0_312]
> > at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
> > ~[?:1.8.0_312]
> > at java.util.ServiceLoader$1.next(ServiceLoader.java:480)
> >> ~[?:1.8.0_312]
> > at
> >
> >>
> org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)
> > ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> > ...
> > at
> >
> >>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)
> > ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> > at
> >
> >>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)
> > ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> > at
> >
> >>
> org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)
> > ~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]
> >
> > Checking...
> > regards
> > Grzegorz Grzybek
> >
> > pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 
> >> napisał(a):
> >
> >> Hi
> >>
> >> pax-web-jetty before Pax Web 8 used jetty-all, which has dependency
> on
> >> jetty-jaspic, which has dependency on javax.security.auth.message...
> >>
> >> Let me check it.
> >>
> >> regards
> >> Grzegorz Grzybek
> >>
> >> pt., 29 paź 2021 o 13:12 Paul Stanley <
> >> paul.stan...@saaconsultants.com>
> >> napisał(a):
> >>
> >>> The Jetty issue:
> >> https://github.com/eclipse/jetty.project/issues/6554
> >>> resulted in pull request:
> >>>
> >>>
> >>
> https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
> >>> This removed the check for the realm being set, thus always
> creating
> >> a
> >>> default identity service, even when one is not defined.
> >>> As a result the geronimo JASPI spec  (Java Authentication SPI),
> >> Attempts
> >>> to construct a default JASPI factory, resulting in a Class Not
> Found
> >>> Exception.
> >>>
> >>> I've had a quick look at the pax-web-jetty project, but i can't see
> >> any
> >>> geronimo dependencies. As such one of the test modules must have
> the
> >> api
> >>> and implementation built in, or it's using a different Jetty
> Identity
> >>> Service?
> >>>
> >>> Cheers
> >>> Paul
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> From:   "Grzegorz Grzybek" 
> >>> To: "Karaf Dev" 
> >>> Date:   29/10/2021 11:36
> >>> Subject:Re: Preparing Karaf runtime 4.3.4
> >>>
> >>>
> >>>
> >>> Hello
> >>>
> >>> What's the problem with Jetty 9.4.44? I checked with Pax Web 8
> >> without any

Re: Preparing Karaf runtime 4.3.4

[Steven Huypens]

Hi JB,

Thanks! Looking forward to it.

Where can I find info about the fixes in the maven-bundle-plugin?

Best regards,
Steven

On Fri, Nov 12, 2021 at 9:13 AM Jean-Baptiste Onofré 
wrote:

> Hi Steven,
>
> yes, next Decanter release will include several fixes, including with
> one about Prometheus appender.
>
> Regards
> JB
>
> On 12/11/2021 09:10, Steven Huypens wrote:
> > Hi JB,
> >
> > Please remember to fix the Decanter-issue we discussed on September 22 on
> > this mailing list. I think it should be an easy fix :
> >
> > "While trying to expose a micrometer  Gauge, I
> > noticed that its Double value is not shown by the PrometheusServlet.
> > Apparently only Integers and Longs are. "
> >
> > Kind regards,
> > Steven
> >
> > On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré 
> > wrote:
> >
> >> Hi guys,
> >>
> >> I finally figured to move forward on release preparation.
> >>
> >> I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
> >> end). I will also work on new Decanter release for next week.
> >>
> >> Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
> >> to give a chance to everyone to test this new series before a GA.
> >>
> >> Regards
> >> JB
> >>
> >> On 07/11/2021 07:02, JB Onofré wrote:
> >>> Hi guys
> >>>
> >>> I gonna release pax web 7.3.21 to align version with Karaf.
> >>> I’m working on other third party projects where a dependency alignement
> >> is required.
> >>>
> >>> Karaf 4.3.4 will be on vote soon.
> >>>
> >>> Regards
> >>> JB
> >>>
>  Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a
> >> écrit :
> 
>  Hi guys,
> 
>  As said in my previous email I have a fix that I’m testing now.
> 
>  I will let you know when done.
> 
>  Regards
>  JB
> 
> > Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a
> >> écrit :
> >
> > Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),
> >> I'm
> > getting:
> >
> > java.util.ServiceConfigurationError:
> > org.eclipse.jetty.security.Authenticator$Factory: Provider
> > org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a
> >> subtype
> > at java.util.ServiceLoader.fail(ServiceLoader.java:239)
> ~[?:1.8.0_312]
> > at java.util.ServiceLoader.access$300(ServiceLoader.java:185)
> >> ~[?:1.8.0_312]
> > at
> >> java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
> > ~[?:1.8.0_312]
> > at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
> > ~[?:1.8.0_312]
> > at java.util.ServiceLoader$1.next(ServiceLoader.java:480)
> >> ~[?:1.8.0_312]
> > at
> >
> >>
> org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)
> > ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> > ...
> > at
> >
> >>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)
> > ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> > at
> >
> >>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)
> > ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> > at
> >
> >>
> org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)
> > ~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]
> >
> > Checking...
> > regards
> > Grzegorz Grzybek
> >
> > pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 
> >> napisał(a):
> >
> >> Hi
> >>
> >> pax-web-jetty before Pax Web 8 used jetty-all, which has dependency
> on
> >> jetty-jaspic, which has dependency on javax.security.auth.message...
> >>
> >> Let me check it.
> >>
> >> regards
> >> Grzegorz Grzybek
> >>
> >> pt., 29 paź 2021 o 13:12 Paul Stanley <
> >> paul.stan...@saaconsultants.com>
> >> napisał(a):
> >>
> >>> The Jetty issue:
> >> https://github.com/eclipse/jetty.project/issues/6554
> >>> resulted in pull request:
> >>>
> >>>
> >>
> https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
> >>> This removed the check for the realm being set, thus always
> creating
> >> a
> >>> default identity service, even when one is not defined.
> >>> As a result the geronimo JASPI spec  (Java Authentication SPI),
> >> Attempts
> >>> to construct a default JASPI factory, resulting in a Class Not
> Found
> >>> Exception.
> >>>
> >>> I've had a quick look at the pax-web-jetty project, but i can't see
> >> any
> >>> geronimo dependencies. As such one of the test modules must have
> the
> >> api
> >>> and implementation built in, or it's using a different Jetty
> Identity
> >>> Service?
> >>>
> >>> Cheers
> >>> Paul
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> From:   "Grzegorz Grzybek" 
> >>> To: "Karaf Dev" 
> >>> Date:   29/10/2021 11:36
> >>> Subject:Re: Preparing Karaf runtime 4.3.4
> >>>

Re: Preparing Karaf runtime 4.3.4

[Jean-Baptiste Onofré]

Hi Greg,

It's a RC1, so best effort. If we are not able to include Pax Web 8, we 
will stay with 7.3 for RC1 and cut a RC2 with Pax Web 8.


By the way, I'm about to release a new maven-bundle-plugin version, 
including fixes that could be interested for any project using the plugin.


Regards
JB

On 12/11/2021 08:51, Grzegorz Grzybek wrote:

Hello

Thanks JBO!

I didn't yet add Pax Web 8 to 4.4.0-SNAPSHOT, but I'm going to do it soon.

regards
Grzegorz Grzybek

pt., 12 lis 2021 o 08:50 Jean-Baptiste Onofré  napisał(a):


Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
end). I will also work on new Decanter release for next week.

Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
to give a chance to everyone to test this new series before a GA.

Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency alignement

is required.


Karaf 4.3.4 will be on vote soon.

Regards
JB


Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a

écrit :


Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB


Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a

écrit :


Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),

I'm

getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a

subtype

at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
at java.util.ServiceLoader.access$300(ServiceLoader.java:185)

~[?:1.8.0_312]

at

java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)

~[?:1.8.0_312]
at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480)

~[?:1.8.0_312]

at


org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at


org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at


org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at


org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)

~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 

napisał(a):



Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
jetty-jaspic, which has dependency on javax.security.auth.message...

Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


The Jetty issue:

https://github.com/eclipse/jetty.project/issues/6554

resulted in pull request:



https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1

This removed the check for the realm being set, thus always creating

a

default identity service, even when one is not defined.
As a result the geronimo JASPI spec  (Java Authentication SPI),

Attempts

to construct a default JASPI factory, resulting in a Class Not Found
Exception.

I've had a quick look at the pax-web-jetty project, but i can't see

any

geronimo dependencies. As such one of the test modules must have the

api

and implementation built in, or it's using a different Jetty Identity
Service?

Cheers
Paul





From:   "Grzegorz Grzybek" 
To: "Karaf Dev" 
Date:   29/10/2021 11:36
Subject:Re: Preparing Karaf runtime 4.3.4



Hello

What's the problem with Jetty 9.4.44? I checked with Pax Web 8

without any

changes and I got:

[INFO] Results:
[INFO]
[WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
...
[INFO]
[INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
pax-web-itest-jetty ---
[INFO]




[INFO] BUILD SUCCESS
[INFO]




[INFO] Total time:  05:34 min
[INFO] Finished at: 2021-10-29T12:34:12+02:00
[INFO]





The tests include authentication and TLS tests.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 11:44 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


Hi JB,

Jetty 9.4.44 now attempts to create the default instance of the

jaspi,

even if it is not installed or used.
I've included the geronimo-jaspi implementation alongside the

geronimo

-jaspic_1.0_spec to address the issue.
Note that ordering is important as there is static code begin used

to

register the jaspic factories, thus the above packages need to

loaded

into

the runtime prior to the jetty bundles

Re: Preparing Karaf runtime 4.3.4

[Jean-Baptiste Onofré]

Hi Steven,

yes, next Decanter release will include several fixes, including with 
one about Prometheus appender.


Regards
JB

On 12/11/2021 09:10, Steven Huypens wrote:

Hi JB,

Please remember to fix the Decanter-issue we discussed on September 22 on
this mailing list. I think it should be an easy fix :

"While trying to expose a micrometer  Gauge, I
noticed that its Double value is not shown by the PrometheusServlet.
Apparently only Integers and Longs are. "

Kind regards,
Steven

On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré 
wrote:


Hi guys,

I finally figured to move forward on release preparation.

I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
end). I will also work on new Decanter release for next week.

Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
to give a chance to everyone to test this new series before a GA.

Regards
JB

On 07/11/2021 07:02, JB Onofré wrote:

Hi guys

I gonna release pax web 7.3.21 to align version with Karaf.
I’m working on other third party projects where a dependency alignement

is required.


Karaf 4.3.4 will be on vote soon.

Regards
JB


Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a

écrit :


Hi guys,

As said in my previous email I have a fix that I’m testing now.

I will let you know when done.

Regards
JB


Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a

écrit :


Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),

I'm

getting:

java.util.ServiceConfigurationError:
org.eclipse.jetty.security.Authenticator$Factory: Provider
org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a

subtype

at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
at java.util.ServiceLoader.access$300(ServiceLoader.java:185)

~[?:1.8.0_312]

at

java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)

~[?:1.8.0_312]
at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
~[?:1.8.0_312]
at java.util.ServiceLoader$1.next(ServiceLoader.java:480)

~[?:1.8.0_312]

at


org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
...
at


org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at


org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)

~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
at


org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)

~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]

Checking...
regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 

napisał(a):



Hi

pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
jetty-jaspic, which has dependency on javax.security.auth.message...

Let me check it.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 13:12 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


The Jetty issue:

https://github.com/eclipse/jetty.project/issues/6554

resulted in pull request:



https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1

This removed the check for the realm being set, thus always creating

a

default identity service, even when one is not defined.
As a result the geronimo JASPI spec  (Java Authentication SPI),

Attempts

to construct a default JASPI factory, resulting in a Class Not Found
Exception.

I've had a quick look at the pax-web-jetty project, but i can't see

any

geronimo dependencies. As such one of the test modules must have the

api

and implementation built in, or it's using a different Jetty Identity
Service?

Cheers
Paul





From:   "Grzegorz Grzybek" 
To: "Karaf Dev" 
Date:   29/10/2021 11:36
Subject:Re: Preparing Karaf runtime 4.3.4



Hello

What's the problem with Jetty 9.4.44? I checked with Pax Web 8

without any

changes and I got:

[INFO] Results:
[INFO]
[WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
...
[INFO]
[INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
pax-web-itest-jetty ---
[INFO]




[INFO] BUILD SUCCESS
[INFO]




[INFO] Total time:  05:34 min
[INFO] Finished at: 2021-10-29T12:34:12+02:00
[INFO]





The tests include authentication and TLS tests.

regards
Grzegorz Grzybek

pt., 29 paź 2021 o 11:44 Paul Stanley <

paul.stan...@saaconsultants.com>

napisał(a):


Hi JB,

Jetty 9.4.44 now attempts to create the default instance of the

jaspi,

even if it is not installed or used.
I've included the geronimo-jaspi implementation alongside the

geronimo

-jaspic_1.0_spec to address the issue.
Note that ordering is important as there is static code begin used

to

register the jaspic factories, thus the above packages need to

load

Re: Preparing Karaf runtime 4.3.4

[Steven Huypens]

Hi JB,

Please remember to fix the Decanter-issue we discussed on September 22 on
this mailing list. I think it should be an easy fix :

"While trying to expose a micrometer  Gauge, I
noticed that its Double value is not shown by the PrometheusServlet.
Apparently only Integers and Longs are. "

Kind regards,
Steven

On Fri, Nov 12, 2021 at 8:50 AM Jean-Baptiste Onofré 
wrote:

> Hi guys,
>
> I finally figured to move forward on release preparation.
>
> I will submit Karaf runtime 4.3.4 to vote soon (probably during the week
> end). I will also work on new Decanter release for next week.
>
> Finally, I would like to propose a first Karaf runtime 4.4.0.RC1, just
> to give a chance to everyone to test this new series before a GA.
>
> Regards
> JB
>
> On 07/11/2021 07:02, JB Onofré wrote:
> > Hi guys
> >
> > I gonna release pax web 7.3.21 to align version with Karaf.
> > I’m working on other third party projects where a dependency alignement
> is required.
> >
> > Karaf 4.3.4 will be on vote soon.
> >
> > Regards
> > JB
> >
> >> Le 31 oct. 2021 à 07:30, Jean-Baptiste Onofre  a
> écrit :
> >>
> >> Hi guys,
> >>
> >> As said in my previous email I have a fix that I’m testing now.
> >>
> >> I will let you know when done.
> >>
> >> Regards
> >> JB
> >>
> >>> Le 29 oct. 2021 à 15:28, Grzegorz Grzybek  a
> écrit :
> >>>
> >>> Now, when creating Pax Web 8 pax-web-jetty-bundle (all-in-one Jetty),
> I'm
> >>> getting:
> >>>
> >>> java.util.ServiceConfigurationError:
> >>> org.eclipse.jetty.security.Authenticator$Factory: Provider
> >>> org.eclipse.jetty.security.jaspi.JaspiAuthenticatorFactory not a
> subtype
> >>> at java.util.ServiceLoader.fail(ServiceLoader.java:239) ~[?:1.8.0_312]
> >>> at java.util.ServiceLoader.access$300(ServiceLoader.java:185)
> ~[?:1.8.0_312]
> >>> at
> java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:376)
> >>> ~[?:1.8.0_312]
> >>> at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
> >>> ~[?:1.8.0_312]
> >>> at java.util.ServiceLoader$1.next(ServiceLoader.java:480)
> ~[?:1.8.0_312]
> >>> at
> >>>
> org.eclipse.jetty.security.SecurityHandler.(SecurityHandler.java:88)
> >>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> >>> ...
> >>> at
> >>>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:131)
> >>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> >>> at
> >>>
> org.eclipse.jetty.servlet.ServletContextHandler.(ServletContextHandler.java:136)
> >>> ~[pax-web-jetty-bundle-8.0.1-SNAPSHOT.jar:?]
> >>> at
> >>>
> org.ops4j.pax.web.service.jetty.internal.PaxWebServletContextHandler.(PaxWebServletContextHandler.java:97)
> >>> ~[pax-web-jetty-8.0.1-SNAPSHOT.jar:?]
> >>>
> >>> Checking...
> >>> regards
> >>> Grzegorz Grzybek
> >>>
> >>> pt., 29 paź 2021 o 13:19 Grzegorz Grzybek 
> napisał(a):
> >>>
>  Hi
> 
>  pax-web-jetty before Pax Web 8 used jetty-all, which has dependency on
>  jetty-jaspic, which has dependency on javax.security.auth.message...
> 
>  Let me check it.
> 
>  regards
>  Grzegorz Grzybek
> 
>  pt., 29 paź 2021 o 13:12 Paul Stanley <
> paul.stan...@saaconsultants.com>
>  napisał(a):
> 
> > The Jetty issue:
> https://github.com/eclipse/jetty.project/issues/6554
> > resulted in pull request:
> >
> >
> https://github.com/eclipse/jetty.project/commit/4fd1a4ea4b7a989ea16f40ba7c49dc553ae2ace1
> > This removed the check for the realm being set, thus always creating
> a
> > default identity service, even when one is not defined.
> > As a result the geronimo JASPI spec  (Java Authentication SPI),
> Attempts
> > to construct a default JASPI factory, resulting in a Class Not Found
> > Exception.
> >
> > I've had a quick look at the pax-web-jetty project, but i can't see
> any
> > geronimo dependencies. As such one of the test modules must have the
> api
> > and implementation built in, or it's using a different Jetty Identity
> > Service?
> >
> > Cheers
> > Paul
> >
> >
> >
> >
> >
> > From:   "Grzegorz Grzybek" 
> > To: "Karaf Dev" 
> > Date:   29/10/2021 11:36
> > Subject:Re: Preparing Karaf runtime 4.3.4
> >
> >
> >
> > Hello
> >
> > What's the problem with Jetty 9.4.44? I checked with Pax Web 8
> without any
> > changes and I got:
> >
> > [INFO] Results:
> > [INFO]
> > [WARNING] Tests run: 201, Failures: 0, Errors: 0, Skipped: 2
> > ...
> > [INFO]
> > [INFO] --- maven-failsafe-plugin:2.22.2:verify (verify) @
> > pax-web-itest-jetty ---
> > [INFO]
> >
> 
> > [INFO] BUILD SUCCESS
> > [INFO]
> >
> 
> > [INFO] Total time:  05:34 min
> > [INFO] Finished at: 2021-10-29T12:34:12+02:00
> > [INFO]
> >
>