Re: [Wicket-user] Wicket 1.2 released!

2006-05-24 Thread Timothy Bennett
Will the 1.2 final release (along with wicket-extensions, wicket-spring, et.al.) be distributed to the ibiblio maven2 repo, or will they only be distributed to the wicketframework.org
 maven2 repo? The sourceforge-hosted maven2 repo has some serious connectivity and bandwidth issues...-- timothy


Re: [Wicket-user] Wicket 1.2 released!

2006-05-24 Thread Timothy Bennett
On 5/24/06, Martijn Dashorst [EMAIL PROTECTED] wrote:
I'm planning on putting them up on ibiblio. Maybe tonight, but definitely later this week. It also depends on the maven team to actually upload the distributions.Right.. the downside of relying on ibiblio... Fantastic!
Congrats to the Wicket team for a great release!!-- timothy


Re: [Wicket-user] LDAP Authentication

2006-05-18 Thread Timothy Bennett
On 5/18/06, Michiel Trimpe [EMAIL PROTECTED] wrote:















Has anyone already tried to implement LDAP-authentication
with Wicket?Yup, and in earnest. Check out what we are doing with Triplesec over at http://docs.safehaus.org/display/TRIPLESEC/Home
. Triplesec is a strong authentication identity management platform built on top of Apache Directory (http://directory.apache.org), and offers 2-factor authentication and authorization services using standards like LDAP, Kerberos, and HOTP.
We are using Wicket for the Triplesec server's web-based configuration wizard, admin application, account registration wizard, and demo apps, all of which require LDAP integration. In fact, if you are at JavaOne this week, you'll see the Triplesec-Wicket apps as part of the Triplesec presentation.
One of the cool things about Triplesec is that we also have some very nice API's for dealing with both authentication and authorization, and we've integrated these API's with Wicket. There is the Guardian API which is a read-only API for performing Kerberos (and LDAP) authentication and subsequent authorization by providing access to your application's security policy in the Triplesec LDAP store -- which gives you nice API's to access a user's security profile for your application accessing his roles, permissions, and denials. (
http://docs.safehaus.org/display/TRIPLESEC/Guardian+API+User%27s+Guide).There is also a read-write Admin API, which provides some nice APIs for managing users, password changes, application policies, security profiles, roles, and permissions.
Javadocs for the API's at http://triplesec.safehaus.org/maven/apidocs/index.html.At my day job... we are using Triplesec for Identity Management and my Wicket apps authenticate against Triplesec via Guardian. Integration with Wicket and Guardian's authorization API's provide my apps with role-based (and/or permission-based) access control at the deepest fine-grained component-level in Wicket.

If so, do you have some examples??Working on some docs at Safehaus now. When they are ready, I'll post here and update the Wicket wiki to point to them. I'm still putting the finishing touches on integration with Wicket's 
1.2 role-based authorization interfaces.
If not, could someone give me quick step-by-step pointers of
what is needed to implement it?Now that my shameless plug of Triplesec is over... if you can't use Triplesec for an Identity Management platform, or your application use case involves a vanilla LDAP integration, I might suggest you check out something like:
http://ldaptemplate.sourceforge.net/LdapTemplate is a project that seeks to provide a Spring Dao pattern for LDAP integration much like Spring's own JdbcTemplate and HibernateTemplate API's. It's on my TODO list, but I suspect you could take LdapTemplate and the Wicket-Spring integration extensions and have a nice Dao pattern for LDAP integration. But you'll have do all the work to set up your LDAP as a authN and authZ store
...which is what makes Triplesec and Guardian especially nice is that it is already setup as a specialized LDAP store for authN and authZ, including out-of-the-box support for optional one-time passwords generated by a midlet app you download to your cell phone instead of some keychain fob.
-- timothy


Re: [Wicket-user] LDAP Authentication

2006-05-18 Thread Timothy Bennett
On 5/18/06, Eelco Hillenius [EMAIL PROTECTED] wrote:
Timothy, you rock!Not me... These are the guys that rock... http://docs.safehaus.org/display/TRIPLESEC/TeamAnyway... While I'm not Mr. JAAS, I would like to point out that Guardian uses a subclass of the JAAS Krb5LoginModule to perform authentication and that it returns a SafehausPrincipal, which is a specialized subclass of the JAAS Principal. The SafehausPrincipal exposes the authenticated user's authorization Profile for the given application with which to apply RBAC.



Re: [Wicket-user] Invalidating a ResourceReference

2006-05-16 Thread Timothy Bennett
On 5/11/06, Johan Compagner [EMAIL PROTECTED] wrote:
if you make a resoure reference to a shared resource that is or can change.Then you need to control the caching headers and last modified times. Else the browser will not know that it needs to refresh it.
makes sense See resource.setCacheable
(boolean cacheable) and protected void configureResponse(final Response response)I set cachable to false to no avail. configureResponse is final, so I overrode setHeaders(), but that didn't work either. I guess I'm going to need a little sample code
timothy


Re: [Wicket-user] Invalidating a ResourceReference

2006-05-16 Thread Timothy Bennett
On 5/12/06, Timothy Bennett [EMAIL PROTECTED] wrote:
I set cachable to false to no avail. configureResponse is final, so I overrode setHeaders(), but that didn't work either. I guess I'm going to need a little sample code
Nevermind. I just got it working. I threw away the ResourceReference, and just built a Resource instead. 


[Wicket-user] Invalidating a ResourceReference

2006-05-11 Thread Timothy Bennett
Wicketeers,I'm on Wicket 1.2-rc3 and I'm having some trouble invalidating a loaded resource reference. I've got a tabular list view of data that has an action panel as one of the fields in the list view. This action panel contains a link to view the tabular data in the form of a graphical chart that will constructed dynamically using the JFreeChart API.
You can find my relevant code at http://papernapkin.org/pastebin/app/view/568.Everything works like a champ the first time I click to view a row's data as a chart. However, subsequent clicks on other rows in the data view always render the same chart created on the first link. I discovered the invalidate() method on the ResourceReference, but I don't think I'm using it correctly, but my chart is not invalidated after rendering.
Advice?Thanks in advance!Timothy


Re: [Wicket-user] Wicket 1.2-rc3 released

2006-05-03 Thread Timothy Bennett
On 5/1/06, Martijn Dashorst [EMAIL PROTECTED] wrote:
All,This release contains all major packages of the wicket project, including wicket, extensions, quickstart, spring, spring annot and auth roles.
As an experiment I also created our own maven repository on the sourceforge servers. You can find it at: 
http://wicketframework/maven2Nice having your own maven repo. Anyway you can release the jars of the spring, spring annot, and auth roles packages to your maven repo?


Re: [Wicket-user] TabbedPanel, InputForm and submit

2006-03-31 Thread Timothy Bennett

Eelco Hillenius wrote:


Yeah, sorry, behaviors are a new concept in 1.2, and they they work
now is very hard to backport.

 

No problem.  My next project starts in May and it will be on 1.2.  Look 
forward to taking advantage all the new stuff!



---
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnkkid=110944bid=241720dat=121642
___
Wicket-user mailing list
Wicket-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wicket-user


Re: [Wicket-user] VOTE

2006-02-20 Thread Timothy Bennett

Eelco Hillenius wrote:


1. Give me the constructor change and the Java 5 functionality in one
pass (Wicket 2.0)
2. Do the constructor change in a seperate release (Wicket 1.3) and
put Java 5 in the next (Wicket 2.0)
3. I don't want either one and I want to stay on Wicket 1.2.

 


I vote for #2


---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnkkid=103432bid=230486dat=121642
___
Wicket-user mailing list
Wicket-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wicket-user