Re: [Acegisecurity-developer] Spring Security is not portable

2009-05-14 Thread Ray Krueger
I have a simple war where I used spring-security to implement a BASIC login using JAAS.  It works fine on Tomcat but on JBoss I get the following error.  It seems to be ignoring my spring-security configuration because it wants to load users/roles from local file. 13:54:02,128 ERROR

Re: [Acegisecurity-developer] [ANN] Spring Security 2.0.0 Released

2008-04-15 Thread Ray Krueger
Great news! On 4/15/08, Ben Alex [EMAIL PROTECTED] wrote: Dear Spring Community After almost two years of development, Spring Security 2.0.0 is now available for download. This significant new release replaces Acegi Security as the official security module for Spring applications. Spring

[Acegisecurity-developer] IntelliJ license

2008-02-29 Thread Ray Krueger
Our IntelliJ IDEA license expires tomorrow (yep, we have one, contact me for details). I've contacted IntelliJ to acquire a new open-source license. - This SF.net email is sponsored by: Microsoft Defy all challenges.

[Acegisecurity-developer] OpenID out of the sandbox

2008-01-27 Thread Ray Krueger
I've pulled the OpenID module out of the sand box, but rather than merging it into core, it is it's own module. Meaning that integrating it into a project will require both the spring-security-core and spring-security-openid jar files. The OpenID module has also been added to the parent pom.xml,

[Acegisecurity-developer] Acegi OpenID Support Update

2008-01-15 Thread Ray Krueger
I've updated the OpenID support in the sandbox, um, finally :) I'll talk with Ben and Luke about getting it promoted to its rightful home soon enough. Anyway, read more at... ShamelessSelfPromotion http://raykrueger.blogspot.com/2008/01/acegi-openid-support-update.html /ShamelessSelfPromotion

Re: [Acegisecurity-developer] build failed

2008-01-13 Thread Ray Krueger
you guys use, if any? Any hints about IDE usage would be very welcomed (.project .classpath anyone?) On Jan 12, 2008 9:51 PM, Ray Krueger [EMAIL PROTECTED] wrote: I had a bad file or two that was causing trouble. I blew those out and got fresh code from SVN and all is well. Candide

Re: [Acegisecurity-developer] build failed

2008-01-11 Thread Ray Krueger
Yeah, I think we have a problem building on Windows. I had a problem this morning on my Windows laptop. Once I got into the office I pulled the code down to my linux workstation and simply ran mvn install, everything went off without a hitch. I'll look at it on my train ride home I think :) On

Re: [Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Ray Krueger
You know, I think that responsibility may have been moved to the exceptionTranslationFilter. That's probably not very clear... Look at what entryPoints you have and look how they're being used. On Nov 8, 2007 5:42 AM, [EMAIL PROTECTED] wrote: I looked inside the

Re: [Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Ray Krueger
No problem, glad I could help. That's the trick to remember with Acegi that I think people misunderstand. The filters that actually handle credentials, like the BasicProcessingFilter, AuthenticationProcessingFilter, DigestProcessingFilter only do anything when the credentials are presented. An

Re: [Acegisecurity-developer] Removal of Requirement for StatelessTicketCache on CasAuthenticationProvider

2007-11-06 Thread Ray Krueger
? Thanks -Scott Ray Krueger wrote: Number 3 above is generally the pattern followed in Acegi... private StatelessTicketCache statelessTicketCache = new NullStatelessTicketCache(); ...with a setter for it defining a custom implementation. I don't think that would be a big deal

Re: [Acegisecurity-developer] Trunk tests take 30 minutes and then fail.

2007-11-05 Thread Ray Krueger
Ok, so this is a Windows and/or Java 6 thing. I ran the full test suite on my linux box with java5 and all is well. On 11/4/07, Ray Krueger [EMAIL PROTECTED] wrote: It looks like that all starts from this test... Running

Re: [Acegisecurity-developer] Trunk tests take 30 minutes and then fail.

2007-11-04 Thread Ray Krueger
, java.naming.security.authenticat ion=simple, java.naming.security.credentials=**, java.naming.factory.object=org.springframework. ldap.core.support.DefaultDirObjectFactory} On 11/4/07, Ray Krueger [EMAIL PROTECTED] wrote: Maven version: 2.0.7 Java version: 1.6.0_01 OS name: windows xp version: 5.1 arch

Re: [Acegisecurity-developer] Trunk tests take 30 minutes and then fail.

2007-11-04 Thread Ray Krueger
It looks like that all starts from this test... Running org.springframework.security.providers.ldap.authenticator.PasswordComparisonAuthenticatorTests On 11/4/07, Ray Krueger [EMAIL PROTECTED] wrote: This type of stuff seems to be where it takes the longest... 2007-11-04 12:39:38,062 DEBUG

[Acegisecurity-developer] Trunk tests take 30 minutes and then fail.

2007-11-03 Thread Ray Krueger
I just pulled the latest code from Trunk this morning. I ran the unit tests in ./core and had the following result... 2007-11-03 21:11:26,437 INFO net.sf.ehcache.CacheManager - VM shutting down with the CacheManager st ill active. Calling shutdown. Exception in thread Thread-77

Re: [Acegisecurity-developer] LDAP groupSearchFilter

2007-10-18 Thread Ray Krueger
Nice work. Thanks for following up on your own question. People don't do that often enough :) On 10/18/07, Dimas [EMAIL PROTECTED] wrote: Solved. The solution is easy as change {0} with {1} as a user parameter. {0} contains all the ldap base. {1} only the username. Uff :- ) --

Re: [Acegisecurity-developer] conditional filters?

2007-09-14 Thread Ray Krueger
That's really going to be fully dependent on your applications configuration. Maybe break up your Spring xml files so that all the acegi stuff is in it's own file. Then have your app load the right file based on the environment you want. The full file has all the normal Acegi stuff in it. The

Re: [Acegisecurity-developer] .classpath file in Subversion

2007-09-10 Thread Ray Krueger
I think the .classpath files should be removed. They are doomed to be stale. The project is now built with maven2 completely. Maven can create the .classpath files as needed. Executing mvn eclipse:eclipse from the project root will create everything needed. On 9/10/07, Scott Battaglia [EMAIL

Re: [Acegisecurity-developer] .classpath file in Subversion

2007-09-10 Thread Ray Krueger
Why isn't it? If you're only interested in working on core then... cd core mvn eclipse:eclipse On 9/10/07, Scott Battaglia [EMAIL PROTECTED] wrote: Executing mvn eclipse:eclipse creates projects for each of the modules, which is probably not what we want. -Scott Ray Krueger wrote: I

[Acegisecurity-developer] [ANN] Acegi Security 1.0.5 Released

2007-09-07 Thread Ray Krueger
Copied and Pasted from Lukes post on the support forums http://forum.springframework.org/showthread.php?t=43532 Release 1.0.5 is now available from Sourceforge. http://sourceforge.net/project/showfiles.php?group_id=104215 This is mainly a maintenance release - the changelog can be viewed here:

Re: [Acegisecurity-developer] (no subject)

2007-08-23 Thread Ray Krueger
Nice work Chris, any chance you could open some Jiras on that? On 8/23/07, Chris Berry [EMAIL PROTECTED] wrote: I managed to answer this one myself, by trolling the Internet and reading the Acegi source. The final answer was to create a RESTfulDefinitionSource. I used Spring constructor

Re: [Acegisecurity-developer] (no subject)

2007-08-23 Thread Ray Krueger
will (or is ;-) supplant all other web service methodologies. Acegi should support it natively. I need to soon do the same work for securing methods by Http Method Cheers, -- Chris On Aug 23, 2007, at 1:16 PM, Ray Krueger wrote: Nice work Chris, any chance you could open some Jiras

Re: [Acegisecurity-developer] question on FilterInvocationDefinitionSourceEditor class

2007-07-24 Thread Ray Krueger
There is a convention used when it comes to editors. To find an editor; Spring looks in the same package as the class in question for a class with the same name with editor appended. So to find the editor for org.acegisecurity.intercept.web.FilterInvocationDefinitionSource, Spring looks for

Re: [Acegisecurity-developer] [Newbie]Please help me get credential from the DB

2007-07-13 Thread Ray Krueger
Mack, yor best bet is going to be to do some research on your own first. Read the reference guide, read the articles and tutorials, and look at the samples. Also, the forums are the best place for user questions. http://forum.springframework.org On 7/12/07, Mack Boonyoung [EMAIL PROTECTED]

Re: [Acegisecurity-developer] acegi openid from sandbox tip

2007-07-08 Thread Ray Krueger
Yeah, you can tell from the giant block of commented out deps in our pom.xml file that I had some trouble. We can upload their binary to our maven repo until they get it in place at ibiblio or maven.org. Phillip if your going to try this stuff out you can contact me for any patches/fixes needed.

Re: [Acegisecurity-developer] an openid use aces

2007-07-08 Thread Ray Krueger
Eventually I was hoping to implement the suck in using the OpenId attribute exchange. So that you could create the local account once OpenId has been authenticated. You draw in the nickname and maybe email address and then create the local account. This was only thoughts though, I haven't looked

[Acegisecurity-developer] OpenID support updated

2007-07-03 Thread Ray Krueger
I've been sitting on this for far too long and finally committed the changes. I've committed the OpenId4java support and an OpenIdAuthenticationProcessingFilter built to replace the Servlet that is in there now. I've been poking around with it for a while...

Re: [Acegisecurity-developer] build successful, but no sandbox jars.

2007-06-20 Thread Ray Krueger
Hi Phillip, The sandbox is not built with the main build, try this... cd ./core mvn install cd ../sandbox/openid mvn install That oughta do it On 6/16/07, Phillip Rhodes [EMAIL PROTECTED] wrote: Hi everyone, I got the trunk of acegi codebase, installed maven 1, the

Re: [Acegisecurity-developer] remember previously logged in password with Acegi

2007-05-08 Thread Ray Krueger
See the Remember Me functionality in the user's guide. The user support forum is your best place to get help. http://forum.springframework.org/forumdisplay.php?f=33 On 5/8/07, Hilda Raymond [EMAIL PROTECTED] wrote: Hello, can anyone help me to configure the following in Acegi:

Re: [Acegisecurity-developer] maven 2 eclipse integration

2007-05-01 Thread Ray Krueger
Are you executing it out of the acegisecurity directory? And not in ./core or one of the other modules? On 4/30/07, Vishal Puri [EMAIL PROTECTED] wrote: Hi All Carlos and Luke, have you been able to generate eclipse .classpath and .project files with maven 2 for acegi ? Doing mvn

Re: [Acegisecurity-developer] maven 2 eclipse integration

2007-05-01 Thread Ray Krueger
executing in trunk/acegisecurity directory. Ray Krueger wrote: Are you executing it out of the acegisecurity directory? And not in ./core or one of the other modules? On 4/30/07, Vishal Puri [EMAIL PROTECTED] wrote: Hi All Carlos and Luke, have you been able to generate eclipse

Re: [Acegisecurity-developer] rememberme ...

2007-04-30 Thread Ray Krueger
Please use the forum at http://forum.springframework.org/forumdisplay.php?f=33 for user questions. You should also supply debug log output if possible. On 4/30/07, Tom Stroobants [EMAIL PROTECTED] wrote: Since a few months we are having problems with the rememberme option … We have a

Re: [Acegisecurity-developer] IllegalStateException On Login

2007-04-25 Thread Ray Krueger
The IllegalStateException is coming from Tomcat, not Acegi. I say that because you may have better luck looking for help with Tomcat with a wider audience than us. It looks like this IllegalStateException is not a new thing.

[Acegisecurity-developer] Cannot build, problems with ibiblio?

2007-04-24 Thread Ray Krueger
I'm still trying to get a contacts sample to build here. The only good way to do that is with maven 1.0. The maven1 builds for core and the contacts sample fail due to ibiblio returning 301 responses for some (maybe all) jar file downloads. This causes the build to fail for missing dependencies.

Re: [Acegisecurity-developer] Cannot build, problems with ibiblio?

2007-04-24 Thread Ray Krueger
project.properties : maven.repo.remote=http://repo1.maven.org/maven Hope this helps, Jose Luis. 2007/4/24, Ray Krueger [EMAIL PROTECTED]: I'm still trying to get a contacts sample to build here. The only good way to do that is with maven 1.0. The maven1 builds for core and the contacts

Re: [Acegisecurity-developer] Our build is a mess...

2007-04-23 Thread Ray Krueger
for this. http://opensource.atlassian.com/projects/spring/browse/SEC-445 On 4/23/07, Carlos Sanchez [EMAIL PROTECTED] wrote: On 4/21/07, Ray Krueger [EMAIL PROTECTED] wrote: * Maven 2.0.5 and 2.0.6 both cause the AuthorizeTagExpressionLanguageTests to fail, whereas 2.0.4 builds it fine. what

Re: [Acegisecurity-developer] Our build is a mess...

2007-04-23 Thread Ray Krueger
/.../AuthorizeTagExpressionLanguageTests.txt On 4/23/07, Ray Krueger [EMAIL PROTECTED] wrote: The AuthorizeTagExpressionLanguageTests fail for me on Windows XP in all Maven versions due to a NoSuchMethod exception. We had a discussion a few months back with one of the users having the same problem. I have no idea what

Re: [Acegisecurity-developer] Our build is a mess...

2007-04-23 Thread Ray Krueger
All, I've fixed the http://opensource.atlassian.com/projects/spring/browse/SEC-445 bug. The fix is to bring in servlet-api 2.4 so that we get the correct version of PageContext into the classpath. Is that going to be a problem? On 4/23/07, Ray Krueger [EMAIL PROTECTED] wrote: Running

Re: [Acegisecurity-developer] Our build is a mess...

2007-04-22 Thread Ray Krueger
On 4/22/07, Luke Taylor [EMAIL PROTECTED] wrote: Luke Taylor wrote: I suggested a while back that we refactor the sample app into a simple s/simple/single I like simple better :) webapp which uses the standard authentication filter and leave the other context files commented out in

[Acegisecurity-developer] Our build is a mess...

2007-04-21 Thread Ray Krueger
* Maven 2.0.5 and 2.0.6 both cause the AuthorizeTagExpressionLanguageTests to fail, whereas 2.0.4 builds it fine. * The contacts sample cannot be built with maven2 from the instructions on our website, the multiwar plugin doesn't exist. * Using 'mvn war' in samples/contacts produces an invalid

Re: [Acegisecurity-developer] Jalopy?

2007-04-20 Thread Ray Krueger
It might be worthwhile to consider pruning Jalopy down to where it only fixes those nagging things that Checkstyle finds (spaces around brackets and such). On 4/20/07, Luke Taylor [EMAIL PROTECTED] wrote: Ray Krueger wrote: Yeah, I totally agree. Applying Jalopy on the new code works well

Re: [Acegisecurity-developer] OpenID support added to sandbox!

2007-04-20 Thread Ray Krueger
, Ray Krueger [EMAIL PROTECTED] wrote: Thanks to the efforts of Robin Bramley; we now have a first draft of OpenID support in the sandbox. The code is mostly as-is from when Robin submitted sent it to me. I've done all the standard jalopy formatting of the code so it blends in and has the proper

[Acegisecurity-developer] Maven Repos for OpenID libs

2007-04-10 Thread Ray Krueger
I'm back from vacation, and after clearing my plate a bit, I'm trying to get this OpenID code uploaded. Does maven2 require a complete pom to download a single jar file? I uploaded the janrain library to http://acegisecurity.sourceforge.net/maven/com/janrain/Janrain-Openid/2007-02-26/ Next Maven2

Re: [Acegisecurity-developer] Re navigation

2007-03-20 Thread Ray Krueger
The forums are really the best place for answers. On that note, does this sound like the problem you're having? http://forum.springframework.org/showthread.php?p=108322#post108322 On 3/20/07, Hilda Raymond [EMAIL PROTECTED] wrote: I have an app setup with Acegi. But if I give a url of an

Re: [Acegisecurity-developer] OpenID support

2007-03-14 Thread Ray Krueger
-developer Digest, Vol 11, Issue 2 To: acegisecurity-developer@lists.sourceforge.net Reply-to: acegisecurity-developer@lists.sourceforge.net Date: Tue, 13 Mar 2007 08:40:43 -0700 snip Date: Thu, 8 Mar 2007 08:41:46 -0600 From: Ray Krueger Subject: Re: [Acegisecurity-developer] OpenID support I am

Re: [Acegisecurity-developer] Authentication Propagation across JMS

2007-03-13 Thread Ray Krueger
When you send the message, you could attach the Authentication to the message by calling: message.setObjectProperty(authentication, SecurityContextHolder.getContext().getAuthentication()); Then on the receiving end you just get it back... Authentication auth = (Authentication)

Re: [Acegisecurity-developer] OpenID support

2007-03-08 Thread Ray Krueger
I am interested in getting involved in this effort as well. I agree with the transparency of the OpenId vs Username field. One of the ideas that I lean towards is following a url pattern, rather than just the host.domain pattern. DHH (the rails guy) talked about this exact subject a few days ago

Re: [Acegisecurity-developer] Unresolved dependency problems

2007-02-27 Thread Ray Krueger
Brad, can you try deleting the following, and trying the build again? YOUR_HOME_FOLDER\.m2\repository\javax\servlet\jsp-api\2.0 Where 'YOUR_HOME_FOLDER' is something like C:\Documents and Settings\bcox Also, are you using Maven 2.0.4 or better? On 2/26/07, Carlos Sanchez [EMAIL PROTECTED]

Re: [Acegisecurity-developer] Jboss Portal + Acegi

2007-02-27 Thread Ray Krueger
Arturo, please consider posting on the forums, there are lots of folks out there who have tied JBoss Portal with Acegi. On 2/27/07, Arturo San Feliciano Martín [EMAIL PROTECTED] wrote: Hello, I´m still trying to join acegi with jboss portal. I put the jboss adapter but when I try to

Re: [Acegisecurity-developer] Jboss Portal + Acegi

2007-02-27 Thread Ray Krueger
Forgot to post the link, sorry http://forum.springframework.org/forumdisplay.php?f=33 On 2/27/07, Ray Krueger [EMAIL PROTECTED] wrote: Arturo, please consider posting on the forums, there are lots of folks out there who have tied JBoss Portal with Acegi. On 2/27/07, Arturo San Feliciano

Re: [Acegisecurity-developer] Unresolved dependency problems

2007-02-27 Thread Ray Krueger
Pasting massive logs to the list makes the listserv mad. I'm truncating this message for clarity. On 2/27/07, Ray Krueger [EMAIL PROTECTED] wrote: I just updated to the latest code from SVN and the build is failing for me as well. Same test actually

Re: [Acegisecurity-developer] Unresolved dependency problems

2007-02-27 Thread Ray Krueger
failures. There should be some clue as to what test failed. Can the html report be generated directly to get a summary? Can I run the maven-surefire-report-plugin direclty? (Sorry for the direct email rather than the list Brad, I do that a lot haha) On 2/27/07, Ray Krueger [EMAIL PROTECTED] wrote

Re: [Acegisecurity-developer] Unresolved dependency problems

2007-02-27 Thread Ray Krueger
that fail, just check the lines before [INFO] There are test failures. On 2/27/07, Ray Krueger [EMAIL PROTECTED] wrote: This test only fails in Maven 2.0.5 Executing mvn clean test with Maven 2.0.4 passes fine. This test also passes fine when run directly in the IDE (IntelliJ

Re: [Acegisecurity-developer] Beyond Low-Hanging Fruit: Domain Access Control List

2007-02-21 Thread Ray Krueger
I got this email the other day from those folks... Though I don't know if they're available to the public... {quote} Dear Ray, Greetings! We are happy to announce that video/ audio from TSE 2006 is now available! Here are the instructions: 1). Go to www.thespringexperience.com 2). userid =

Re: [Acegisecurity-developer] Multiple applications and different roles

2007-02-08 Thread Ray Krueger
Sounds like a single sign-on solution would work best. Have a look at the Acegi support for CAS. Using CAS with Acegi might provide the features you are looking for. On 2/8/07, Stephane Bailliez [EMAIL PROTECTED] wrote: Hi all, I'm trying to see whether there is an easy way to implement roles

Re: [Acegisecurity-developer] In the Acegi config xml file why use /A and /Z in the URL pattern?

2007-01-23 Thread Ray Krueger
The best explanation of FilterSecurityInterceptor ObjectDefinitionSource is here: http://acegisecurity.org/docbook/acegi.html#filter-invocation-authorization Basically, you are using regular expressions in the example you gave and the \A means beginging of the line and \Z means end of the line.

Re: [Acegisecurity-developer] Setting serviceProperties in Acegi

2007-01-19 Thread Ray Krueger
Ben answered your original email on this subject... Is there a reason you cannot use a PropertyPlaceholderConfigurer? http://www.springframework.org/docs/api/org/springframework/beans/factory/config/PropertyPlaceholderConfigurer.html On 1/19/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:

Re: [Acegisecurity-developer] [Fwd: [Fwd: Re: Authentication and authorization status in OGC-compliant OSS GIS software]]

2007-01-19 Thread Ray Krueger
If you can find a means to make java code authenticate against DACS, then it would be easy enough to write an Acegi AuthenticationProvider that talks to it. On 1/19/07, Krystian Nowak [EMAIL PROTECTED] wrote: Do you think it is possible to include DACS (http://dacs.dss.ca/) as a

Re: [Acegisecurity-developer] Setting serviceProperties in Acegi

2007-01-19 Thread Ray Krueger
into the CasProcessingFilterEntryPoint to allow customization of how the serviceUrl is added to the cas redirect. Oh, and a little tip, you don't have to hard code the http:// part you can use request.getScheme() (terrible name, go Sun). On 1/19/07, Ray Krueger [EMAIL PROTECTED] wrote: Now that I read your email a little

Re: [Acegisecurity-developer] How to propagate Authentication context?

2006-12-15 Thread Ray Krueger
You should post this to the community forum at: http://forum.springframework.org/forumdisplay.php?f=33 There are thousands of users out there that may have done such a thing. On 12/15/06, Tomislav Stojcevich [EMAIL PROTECTED] wrote: I have the same requirements and have found little

Re: [Acegisecurity-developer] @Secured @Transactional on the same bean(s) - best practice(s) ?

2006-10-26 Thread Ray Krueger
Wim, One of the applications that I work on has 3 interception layers going right now. Security, Transactions, and Monitoring. All interception is done using DefaultAutoProxyCreator with Advisors declared as beans. The interceptors are kept in a specific order using the order attribute of the

Re: [Acegisecurity-developer] getting user information at the page level

2006-08-31 Thread Ray Krueger
From a velocity page? I'm not sure how you get access to the request itself, but start with that... request.remoteUser request.userPrincipal.principal.username You need to add the ContextHolderAwareRequestFilter to your filterChainProxy for those to work, like Scott had mentioned. On 8/31/06,

Re: [Acegisecurity-developer] Dynamic defaultTargetUrl

2006-08-31 Thread Ray Krueger
We could wire in a strategy interface for that logic as well. On 8/31/06, Brian Pontarelli [EMAIL PROTECTED] wrote: Great I'm glad that worked. This could be an option on the APF at some point, but sub-classing is a good solution. It would be great to be able to add a parameter to URLs that

Re: [Acegisecurity-developer] getting user information at the page level

2006-08-31 Thread Ray Krueger
just try $request.userPrincipal.name and see what happens. I added things like email and zipcode to my AuthUser (which extends User). How do I get those values? Are they also somehow in the userPrincipal? Thanks a lot Charlie Ray Krueger said the following on 8/31/2006 1:28 PM: From

Re: [Acegisecurity-developer] About The Following Acegi Releases

2006-08-28 Thread Ray Krueger
See, I knew Carlos had an answer for that :P That is really good to know. Unfortunately, that only helps people that use mvn for THEIR project. That doesn't really help with Ben's scenario. I didn't think of that when I brought it up. People that are importing acegi into their project and would

Re: [Acegisecurity-developer] About The Following Acegi Releases

2006-08-28 Thread Ray Krueger
Ben were you suggesting having acegi-version.jar would be just binary, and acegi-version-sources.jar would be binary with source? I personally think that seperate binary and source jars is fine. The majority of projects work that way. Most people know that, or can figure it out. ~0 is my vote

Re: [Acegisecurity-developer] About The Following Acegi Releases

2006-08-28 Thread Ray Krueger
Well put... Dual jars covers both camps. I spend 85% of my day in mentor mode for Spring, Hibernate, and Acegi. So your people are time poor comment really swung my vote heh. On 8/28/06, Ben Alex [EMAIL PROTECTED] wrote: Ray Krueger wrote: Ben were you suggesting having acegi-version.jar

Re: [Acegisecurity-developer] ehcache 1.1 vs 1.2.1

2006-08-07 Thread Ray Krueger
Please consider using the support forums at: http://forum.springframework.org/forumdisplay.php?f=33 Consider this a reply to all 3 of your emails today. You have some classpath issues to work out. In your previous email you're missing a method from commons-lang ava.lang.NoSuchMethodError:

Re: [Acegisecurity-developer] JAAS Integration - JBoss hijacking?

2006-07-22 Thread Ray Krueger
Benjamin, you posted this thread once already. Myself and some others already replied. Please read the replies to your previous post. On 7/20/06, Benjamin Brown [EMAIL PROTECTED] wrote: Hi, I'm new to Acegi but I understand the basic concepts well enough to configure it with our Spring based

Re: [Acegisecurity-developer] Patch to fix get header on tomcat

2006-07-12 Thread Ray Krueger
Thanks for the patch, I have applied it. On 7/12/06, Nadeem Bitar [EMAIL PROTECTED] wrote: Hi, Can an Acegi developer kindly review the patch [1] that fixes a bug in retrieving headers from a request on tomcat, and hopefully incorporate it. Thanks, Nadeem [1]

Re: [Acegisecurity-developer] ACEGI patch to support AJAX

2006-07-07 Thread Ray Krueger
Hey Brian! Good to hear from ya... And definitely glad to have you tinkering with some new stuff for Acegi. I personally would love to have a look at your ideas. Any chance you could create a Jira at http://opensource.atlassian.com/projects/spring/browse/SEC and attach your code there. Then any

Re: [Acegisecurity-developer] Java Appliaction + Spring httpinvoker authentication

2006-07-06 Thread Ray Krueger
Luke was replying to the original email Zoran. Your email was definitely not the issue :) On 7/6/06, Zoran Regvart [EMAIL PROTECTED] wrote: Hi, On 7/6/06, Luke Taylor [EMAIL PROTECTED] wrote: Please post user questions in the forum, not the dev mailing list. sorry about that, do I need

Re: [Acegisecurity-developer] Authentication required but no role

2006-06-13 Thread Ray Krueger
One option is to always grant users a role like ROLE_AUTHENTICATED when they log in. Then you protect those areas with that ROLE_AUTHENTICATED role. This role wouldn't exist in your user maintenance screens and what not. For instance, if you're using the DaoAuthenticationProvider and JdbcDaoImpl;

Re: [Acegisecurity-developer] Authentication required but no role

2006-06-13 Thread Ray Krueger
Good call Scott, I didn't even realize we had such a thing :) On 6/13/06, Scott Battaglia [EMAIL PROTECTED] wrote: Would something like this help? http://www.acegisecurity.org/multiproject/acegi-security/apidocs/org/acegisecurity/vote/AuthenticatedVoter.html -Scott Ray Krueger wrote: One

Re: [Acegisecurity-developer] 1.0.1 patch release?

2006-06-10 Thread Ray Krueger
in his absense. There's nothing worse than reaching the illustrious 1.0 and then have it be broken for a month. ;-) Matt Ray Krueger wrote: OK so, 1.0.0 did not release well. The LDAP/Spring compatability issue, and the NotSerializableException issue both warrant getting

[Acegisecurity-developer] SEC-96 and backwards compatiblity

2006-05-31 Thread Ray Krueger
I looked at SEC-96 http://opensource.atlassian.com/projects/spring/browse/SEC-96 and thought it would be an easy thing to jump on. The refactoring is actually very beneficial, as the Md5 and Sha PasswordEncoder classes were basically duplicates with one word changed (yuck). I've refactored that

Re: [Acegisecurity-developer] SEC-96 and backwards compatiblity

2006-05-31 Thread Ray Krueger
Really, just scratch the thought. The BaseDigestPasswordEncoder is simple enough in it's purpose that I can leave it alone and put all my MessageDigest stuff in it's own subclass. On 5/30/06, Ray Krueger [EMAIL PROTECTED] wrote: I looked at SEC-96 http://opensource.atlassian.com/projects/spring

Re: [Acegisecurity-developer] Acegi Security 1.0.0 is released!

2006-05-31 Thread Ray Krueger
That should read: I saw that, should it have been 1.0.1 though? mashed the send button mid-correction hehe. On 5/31/06, Ray Krueger [EMAIL PROTECTED] wrote: I saw that, my should it have been 1.0.1 though? On 5/30/06, Carlos Sanchez [EMAIL PROTECTED] wrote: I took the freedom also to tag

Re: [Acegisecurity-developer] ldap blowing up after upgrade to 1.0 final

2006-05-31 Thread Ray Krueger
http://opensource.atlassian.com/projects/spring/browse/SEC-288 I made it a blocker for 1.0.1 This means that the 1078 people that have downloaded 1.0.0 to this point cannot use Ldap correct? On 5/31/06, Carlos Sanchez [EMAIL PROTECTED] wrote: I'm afraid it's true. It no longer compiles under

[Acegisecurity-developer] maven tests fail

2006-05-31 Thread Ray Krueger
I pulled an update from Subversion, and executed the following... cd core maven test The tests run and then build failed, test failures. One thing I've always wanted to know, and I know Carlos is going to have the quick answer on this... Where is one supposed to go to see what tests failed?

Re: [Acegisecurity-developer] Acegi Security 1.0.0 is released!

2006-05-30 Thread Ray Krueger
Can we get the maven repos updated? Right now mvn compile fails because org.acegisecurity:acegi-security-parent:pom:1.0.0 cannot be downloaded. On 5/30/06, Mark St.Godard [EMAIL PROTECTED] wrote: Hi Ben, The configuration was referencing net.sf... some of the config was moved over to org.

Re: [Acegisecurity-developer] Ldap changes

2006-05-09 Thread Ray Krueger
The project I work on right now is fast approaching the security phase. We are about 90% sure of LDAP right now. So I'm all for making the LDAP support as solid as possible. The approaches you've described would definitely allow the most flexibility. What Robert mentioned about the diversity of

Re: [Acegisecurity-developer] Build from CVS checkout broken

2006-04-20 Thread Ray Krueger
Let's have a look at a somewhat lighter task. Would you mind running maven java:compile from the core directory and tell us if that compiles ok? On 4/20/06, Richard Clark [EMAIL PROTECTED] wrote: I'm coming back to AGEGI after a hiatus, and I followed the instructions for a CVS checkout via

[Acegisecurity-developer] Quest question about using LDAP

2006-04-15 Thread Ray Krueger
When using LDAP as an authentication source, where do you guys feel the ROLEs belong? Should they be managed in LDAP by whatever LDAP admin is in charge, or should the ROLEs be stored in the application database and associated to some user table based on the LDAP username? I thinki it is a design

Re: [Acegisecurity-developer] Subversion?

2006-03-25 Thread Ray Krueger
+1 Big fan On 3/25/06, Matthew E. Porter [EMAIL PROTECTED] wrote: +1 On Mar 25, 2006, at 7:46 AM, Mark St.Godard wrote: +1 On 3/25/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: No concerns here. Scott -Original Message- From: Ben Alex [mailto:[EMAIL PROTECTED]

Re: [Acegisecurity-developer] checking for invalid user accounts in AuthenticationProvider implementations

2006-03-24 Thread Ray Krueger
Heya Tim. The JaasAuthenticationProvider doesn't use UserDetails at all. It uses Jaas, and Jaas LoginModules. The JaasAuthenticationProvider essentially leaves all the can this guy login? logic up to the LoginModule, and then reacts to any LoginException that might be thrown. On 3/23/06, Tim

Re: [Acegisecurity-developer] CVS build failing due to test failures.

2006-02-02 Thread Ray Krueger
OK, let's start over here. If I run maven -Dtestmatch=**/jaas/*Tests test:match from the core directory, I get no failures for the jaas tests. What command, and from what directory are you running the tests? On 2/2/06, Luke Taylor [EMAIL PROTECTED] wrote: Ray Krueger wrote: hehe yeah

Re: [Acegisecurity-developer] Sub classing JAAS provider implementation

2006-02-02 Thread Ray Krueger
Easy enough. Do you have a suggestion as to what properties should be protected, or should have getters for? On 2/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: It's a pity so many of the instance variables and methods in the JAAS Provider are declared private and aren't protected. I'd like

Re: [Acegisecurity-developer] CVS build failing due to test failures.

2006-02-01 Thread Ray Krueger
I am trying to jump in and see why the Jaas tests would be failing, but I cannot get Maven to play nice. Any ideas anyone? Carlos? *nudge nudge* [junit] [DEBUG] Finding class org.apache.ldap.server.normalization.NormalizationService [junit] [DEBUG] Finding class

Re: [Acegisecurity-developer] CVS build failing due to test failures.

2006-02-01 Thread Ray Krueger
Sanchez [EMAIL PROTECTED] wrote: The test output is in the target folder test-reports or something like that On 2/1/06, Ray Krueger [EMAIL PROTECTED] wrote: I am trying to jump in and see why the Jaas tests would be failing, but I cannot get Maven to play nice. Any ideas anyone? Carlos? *nudge

Re: [Acegisecurity-developer] New LDAP stuff

2006-01-31 Thread Ray Krueger
Awesome. Brandon please have a look at Luke's docs as soon as they are up if you can, that would be a huge help. I have several people from different teams at my company asking me about Acegi and LDAP right now. They're pretty excited, but unfortunately I'm stuck yammering and hand-waiving about

[Acegisecurity-developer] New LDAP stuff

2006-01-30 Thread Ray Krueger
Hey guys, where can I point someone to if they wanted to read about LDAP support? I see the org.acegisecurity.providers.ldap package in the javadocs in the site; but that is the old stuff isn't it? --- This SF.net email is sponsored by: Splunk

Re: [Acegisecurity-developer] New LDAP stuff

2006-01-30 Thread Ray Krueger
Cool, that's what I hoped you would say. Now write some reference material! :P On 1/30/06, Luke Taylor [EMAIL PROTECTED] wrote: Ray Krueger wrote: Hey guys, where can I point someone to if they wanted to read about LDAP support? I see the org.acegisecurity.providers.ldap package

Re: [Acegisecurity-developer] Siteminder / Acegi 0.9.0 integration

2006-01-19 Thread Ray Krueger
That is actually just an overly verbose DEBUG statement if you look. If your Siteminder integration is actually working I would turn off DEBUG SecurityEnforcementFilter in log4j. On 1/19/06, Garvey, Paul M (GE Commercial Finance) [EMAIL PROTECTED] wrote: Help!, I am having a hard time

Re: [Acegisecurity-developer] Proposal: Rename AuthenticationDao interface

2005-11-17 Thread Ray Krueger
] On Behalf Of Ben Alex Sent: Thursday, November 17, 2005 9:23 AM To: acegisecurity-developer@lists.sourceforge.net Subject: Re: [Acegisecurity-developer] Proposal: Rename AuthenticationDao interface Ray Krueger wrote: You currently have an AuthenticationDao that successfully returns

Re: [Acegisecurity-developer] Proposal: Rename AuthenticationDao interface

2005-11-16 Thread Ray Krueger
what you're doing. I don't see a reason for you two implement a new AuthenticationProvider, unless the DaoAuthenticationProvider is not meeting you're needs. On 11/16/05, Scott McCrory [EMAIL PROTECTED] wrote: Ray Krueger wrote: I do sort of see your point Scott, but I have to agree with Mark

Re: [Acegisecurity-developer] How to unsubscribe this list??

2005-11-10 Thread Ray Krueger
Which means he probably didn't get that message :P On 11/10/05, Ben Alex [EMAIL PROTECTED] wrote: I have subscribed you. Marcelo Alcantara wrote: Hi, Somebody can help on how to unsubscribe this list?? Thanks in advance. Maralc -- Marcelo Alcantara Senior Developer/Architect

Re: [Acegisecurity-developer] Acegi 0.8.3 to 0.9.0 errors

2005-11-08 Thread Ray Krueger
Tiny URL version: http://tinyurl.com/8zhka On 11/7/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Oliver, Very, very interesting - excellent find. I have several things to test tomorrow. Scott -Original Message- From: Oliver Hutchison [mailto:[EMAIL PROTECTED]

Re: [Acegisecurity-developer] Vote: Release 0.9.0

2005-11-06 Thread Ray Krueger
+1 for Tuesday On 11/6/05, Ben Alex [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: Can I have until Tuesday to test 0.9.0-SNAPSHOT with our Siteminder-integrated application? We additionally make extensive use of Authz tags and method interceptors and I'd like to run them through

Re: [Acegisecurity-developer] Preparing for 0.9.0

2005-11-04 Thread Ray Krueger
Hey Ben, I jumped on http://opensource2.atlassian.com/projects/spring/browse/SEC-23 (Jaas Logout) even after we said we'd put it off till 1.0. I'll be committing it shortly... On 11/3/05, Ben Alex [EMAIL PROTECTED] wrote: Hi everyone CVS now contains pretty much all the tasks scheduled for

Re: [Acegisecurity-developer] Problem checking out from CVS with Maven

2005-11-04 Thread Ray Krueger
I'm pretty sure the Maven scm plugin requires you to have the cvs client in your path in order to check out from cvs. You'll need to install the cvs client first. For Windows: http://www.march-hare.com/cvspro/#free or http://www.wincvs.org/ On 11/4/05, Carlos Sanchez [EMAIL PROTECTED] wrote:

  1   2   >