[ http://issues.apache.org/jira/browse/GERONIMO-1344?page=all ]
John Sisson resolved GERONIMO-1344:
---
Fix Version: 1.1
Resolution: Fixed
Get java usage help when a trailing slash '/' is in GERONIMO_HOME environment
variable when running
[ http://issues.apache.org/jira/browse/GERONIMO-1344?page=all ]
John Sisson closed GERONIMO-1344:
-
Get java usage help when a trailing slash '/' is in GERONIMO_HOME environment
variable when running geronimo.bat
Hmm, it worked on my laptop :-)
I find the m:xxx goals aren't always reliable. Can you try
cd openejb
cvs -q up -dP
grep geronimo-spec-corba modules/core/project.xml
#you should see: artifactIdgeronimo-spec-corba/
artifactId
#or look on line 145 and you should see:
lichtner wrote:
On Tue, 17 Jan 2006, Jules Gosnell wrote:
just when you thought that this thread would die :-)
I think Jeff Genender wanted a discussion to be sparked, and it worked.
So, I am wondering how might I use e.g. a shared disc or majority voting
in this situation ? In
setjavaenv.bat is not called by deploy.bat
--
Key: GERONIMO-1490
URL: http://issues.apache.org/jira/browse/GERONIMO-1490
Project: Geronimo
Type: Bug
Components: startup/shutdown
Versions: 1.0
Reporter: John
Hi David,
I gave that a go and I had the dependencies in my project.xml file.
Manually updated cvs and ran maven, only to get the same error.
Where about's would this file be in my repo (and what file is it?)?
I'm new to maven - hence the q's!
Cheers,
-Ryan
On 18/01/2006, at 7:45 PM,
[ http://issues.apache.org/jira/browse/GERONIMO-1463?page=all ]
John Sisson closed GERONIMO-1463:
-
Resolution: Fixed
Tomcat doesn't always get the right servlet name when evaluating isUserInRole
Rajith Attapattu wrote:
More question if you don't mind.
2.) Assuming sombody wants to do session replication (All
Active) instead of (one Active and n backups) is there provision
within the WADI api to plug in this stratergy?
I'm giving this some thought in terms of SFSB support, I'm
Jeff Genender wrote:
I don't really see the disconnect between what you are saying,
there isn't - we are in strenuous agreement :-)
Rajith Attapattu wrote:
More question if you don't mind.
2.) Assuming sombody wants to do session replication (All
Active) instead of (one Active and n backups) is there provision
within the WADI api to plug in this stratergy?
I'm giving this some thought in terms of SFSB support, I'm
Oh Rajith - you've got me thinking :-(
I'm not happy with the last answer - lets try again
lets agree some points :
1) since changes made to sessions are made in app-space, apps are not
written with the expectation that a change collision may occur and the
container would not be able to
Jules Gosnell wrote:
Oh Rajith - you've got me thinking :-(
I'm not happy with the last answer - lets try again
lets agree some points :
1) since changes made to sessions are made in app-space, apps are not
written with the expectation that a change collision may occur and the
[
http://issues.apache.org/jira/browse/GERONIMO-1482?page=comments#action_12363097
]
Anders Hessellund Jensen commented on GERONIMO-1482:
Alan,
Some JAVA files cannot be generated from IDL. Those files usually come with the
runtime
Concerning the CSS vulnerability, attached is my correspondence with the
Tomcat team..
My original email**
Original Message
Subject: Possible Security exposure with Tomcat 5.5.15-beta
Date: Tue, 17 Jan 2006 14:46:06 -0500
From: Dave Colasurdo [EMAIL PROTECTED]
To:
[EMAIL PROTECTED] wrote, On 1/17/2006 7:50 AM:
I started refactoring login service along the lines discussed with Alan, David,
and others at the apachecon. This includes simplifying login service, and
authentication by assertion, delegation principals. David J, I know that you
want pluggable
Hi,
I see that there is a ServerInfo interface in
org.apache.geronimo.system.serverinfo package. This has
getVersion(), getBuildDate(), getBuildTime(), getBaseDirectory(),
getCopyright() methods. Is there any other information (like the
svn revision for the server build, etc.) about the server
I had an off-line discussion with Paul McMahan on this topic.
Our thoughts were that it is probably best to fix this problem in both
places if possible. The container fix seems best for not only the
console but also other uses ... but it is outside of our control and may
not be accepted by
On Jan 18, 2006, at 4:46 AM, Ryan Thomas wrote:
Hi David,
I gave that a go and I had the dependencies in my project.xml file.
Manually updated cvs and ran maven, only to get the same error.
Where about's would this file be in my repo (and what file is it?)?
I'm new to maven - hence the
Presumably in response to Dave's email to Tomcat, the following changes were made to Tomcat samples, yesterday afternoon: From: [EMAIL PROTECTED] Subject: svn commit: r369933 - in /tomcat/servletapi/servlet2.4-jsp2.0-tc5.x/jsr152/examples: cal/cal2.jsp security/protected/index.jsp Date:
ActiveMQ plan uses hardcoded obsolete org/apache/geronimo/ActiveMQ module name
--
Key: GERONIMO-1491
URL: http://issues.apache.org/jira/browse/GERONIMO-1491
Project: Geronimo
Type: Bug
[ http://issues.apache.org/jira/browse/GERONIMO-1450?page=all ]
Aaron Mulder updated GERONIMO-1450:
---
Summary: Console usage plans use old namspace parentId (was: Console
usage plans use old namspace)
Description:
The usage pages in the
I'd say the Wiki if it's pretty open to being changed as we move
forward (which would be my guess) or the geronimo/site SVN if it's
permanent (as in, completely documents 1.0 and is not attempting to
cover newer stuff).
Aaron
On 1/18/06, Jules Gosnell [EMAIL PROTECTED] wrote:
Guys,
I have the
Many org/apache/geronimo configIds still live in source tree
--
Key: GERONIMO-1492
URL: http://issues.apache.org/jira/browse/GERONIMO-1492
Project: Geronimo
Type: Bug
Versions: 1.0
Reporter:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jacek Laskowski wrote:
Am I reading it correctly that in CTR when a committer vetoed a
commit, it *ought to* be backed out *as soon as it's happened* and
discussed afterwards before being committed again?
No, the rules for handling a veto don't
Wiki might be a better idea for now so most people can contribute.
However if it's under svn then non-comiiters can only contribute via patches.
Another possiblity is to have it under the confluence thing that Hernan is working on.
Also with wiki there want be issue about the format (wether
Hossam,
I've been thinking and we can probably switch it so that in the event of us
not finding the components.xml we can switch it back to the jbi.xml and see
if there are any assets in place there, in this way we can support multiple
components and the more natural single component approach,
Hi Jules,
can you put your docs in confluence!?
There is already a section for performance in the TOC, it would be great if you put the clustering
documentation there.
Here is the link to the TOC, to edit confluence you will have to register first.
So assuming this appears to be somewhat examples related, is this
truly a container problem, or just the jsp examples implementation?
Jeff
Kevan Miller wrote:
Presumably in response to Dave's email to Tomcat, the following changes
were made to Tomcat samples, yesterday afternoon:
From:
Hi all,
I am developing a configuration plan involving
multiple GBeans. One of them, MainGBean, will make use
of the other GBeans. I am specifying the dependencies
as follows:
?xml version=1.0 encoding=UTF-8?
configuration
Hernan Cunico wrote:
Hi Jules,
can you put your docs in confluence!?
There is already a section for performance in the TOC, it would be
great if you put the clustering documentation there.
OK - can do, if everyone is happy with this...
It is a pretty rough doc though... the rest of the
Can we resolve the Confluence vs. MoinMoin issue? Everything is
currently in MoinMoin except the documentation that Hernan has been
working on, is that right? If we're not committed to moving to
confluence, please put any Wiki content in MoinMoin. If we are
committed to moving to confluence,
reference does not take text content. You can look for
referenceType in
http://geronimo.apache.org/schemas-1.0/geronimo-config-1.0.xsd
Basically, referenceType extends patternType which holds a
gbean-nameGroup, which can be either a gbean-name (which holds a
full GBean name) or a bunch of
On Jan 18, 2006, at 11:24 AM, Jeff Genender wrote:
So assuming this appears to be somewhat examples related, is this
truly a container problem, or just the jsp examples implementation?
IANASE, but it seems that any vulnerabilities must be fixed in the
apps themselves -- certainly seems
On Jan 18, 2006, at 6:42 AM, Vamsavardhana Reddy wrote:
Hi,
I see that there is a ServerInfo interface in
org.apache.geronimo.system.serverinfo package. This has getVersion
(), getBuildDate(), getBuildTime(), getBaseDirectory(), getCopyright
() methods. Is there any other information
On Jan 18, 2006, at 6:29 AM, Alan D. Cabrera wrote:
[EMAIL PROTECTED] wrote, On 1/17/2006 7:50 AM:
I started refactoring login service along the lines discussed with
Alan, David, and others at the apachecon. This includes
simplifying login service, and authentication by assertion,
On Wed, 18 Jan 2006, Jules Gosnell wrote:
I haven't been able to convince myself to take the quorum approach
because...
shared-something approach:
- the shared something is a Single Point of Failure (SPoF) - although
you could use an HA something.
It's not really a spof. You just fail
First of all, someone pointed me recently to https://
openjacc.projects.dev2dev.bea.com/ which looks like it shares some
goals with us. I can't tell how its license affects our ability to
use it, and would appreciate some informed opinions.
I would like our JACC implementation to be
Where I am going at with this...is this a vulnerability caused by coding
the apps, or the containers themselves?
i.e., Will I have this problem with a perl app running on httpd? or
ASP/C# on IIS? Is this type of vulnerability a facet of responsibility
that lies on the container, or the
[ http://issues.apache.org/jira/browse/GERONIMO-1422?page=all ]
Kevan Miller closed GERONIMO-1422:
--
Resolution: Fixed
As Jules suggested, ActiveMQ's shutdown handler was being invoked. This meant
that the broker was stopping before Geronimo could
[
http://issues.apache.org/jira/browse/GERONIMO-1422?page=comments#action_12363134
]
Kevan Miller commented on GERONIMO-1422:
Oops, I forgot...
branches/1.0:
Sendingconfigs/activemq-broker/src/plan/plan.xml
Transmitting file data .
[ http://issues.apache.org/jira/browse/GERONIMO-1474?page=all ]
Paul McMahan updated GERONIMO-1474:
---
Attachment: GERONIMO-1474.patch
Attaching a patch that will escape any special html chars read from the web,
derby, and system logs before displaying
[ http://issues.apache.org/jira/browse/GERONIMO-1474?page=all ]
Paul McMahan updated GERONIMO-1474:
---
Geronimo Info: [Patch Available]
Cross site scripting vulnerabilites
---
Key: GERONIMO-1474
[
http://issues.apache.org/jira/browse/GERONIMO-1474?page=comments#action_12363140
]
Paul McMahan commented on GERONIMO-1474:
Please note that the patch for the admin portlets does *not* address any XSS
vulnerabilities in the sample applications.
I am actually looking for another job/contract right now (in the San Diego
area, or I can telecommute), so I thought I would mention it in case
anybody knows of any openings.
Guglielmo
Jeff, I believe it is the responsibility of the application to secure
itself against XSS attacks, and not the web container's. As you know,
the web container really has no way to differentiate between
legitimate and tainted content in the output stream.
The container could do paranoid things such
I agree that the application should code defensively for these types of
attacks. However, I'm still wondering if this type of attack isn't
something that the containers could assist with as well.
IIUC the attack is basically accomplished by appending some script to a
valid URL. If this URL
Snippets from another offline conversation with the Tomact folks..
Has Tomcat (the container) considered checking input URIs for scripting
tags and rendering them innocuous by substitution (e.g. script --
lt;scriptgt;) therefore never writing back scripting tags to the
browser? Are there
[ http://issues.apache.org/jira/browse/GERONIMO-1449?page=all ]
Donald Woods updated GERONIMO-1449:
---
Geronimo Info: [Patch Available]
Fix Version: 1.1
Assign To: Donald Woods
Looks like part 1 was fixed yesterday.
Part 2 - Turns out that
[ http://issues.apache.org/jira/browse/GERONIMO-1449?page=all ]
Donald Woods updated GERONIMO-1449:
---
Attachment: Geronimo-1449.patch
Attaching patch for Part 2 of the reported problem.
Cannot build from Geronimo 1.0 src zip - issues with missing
[ http://issues.apache.org/jira/browse/GERONIMO-1449?page=all ]
Donald Woods reassigned GERONIMO-1449:
--
Assign To: Matt Hogstrom (was: Donald Woods)
Matt, can you apply this patch to the 1.0 branch and trunk?
Cannot build from Geronimo 1.0 src
[ http://issues.apache.org/jira/browse/GERONIMODEVTOOLS-34?page=all ]
Lin Sun closed GERONIMODEVTOOLS-34:
---
This issue can be closed now. The only thing is that if you don't specify a
target-name, the target-name element will still appear in the
Add resource reference GUI created unnecessary target-name elements
---
Key: GERONIMODEVTOOLS-49
URL: http://issues.apache.org/jira/browse/GERONIMODEVTOOLS-49
Project: Geronimo-Devtools
Type: Bug
resource reference specified in geronimo-web.xml is not shown up in the naming
tab of the geronimo web deployment plan editor
-
Key: GERONIMODEVTOOLS-50
[ http://issues.apache.org/jira/browse/GERONIMO-1336?page=all ]
Donald Woods updated GERONIMO-1336:
---
Fix Version: 1.1
Priority: Minor (was: Major)
Validated patch against latest 1.0 branch.
Setting the Max PoolSize on a DataBase pool with
[ http://issues.apache.org/jira/browse/GERONIMODEVTOOLS-49?page=all ]
Sachin Patel resolved GERONIMODEVTOOLS-49:
--
Resolution: Fixed
Assign To: Sachin Patel
Add resource reference GUI created unnecessary target-name elements
Hi Jules,
many of the articles (if not all) started the same way and many of them are
still a work in progress.
It would be great if you can publish your doc there, I can give you a hand with the confluence
formatting if you want to.
Cheers!
Hernan
Jules Gosnell wrote:
Hernan Cunico wrote:
[
http://issues.apache.org/jira/browse/GERONIMO-1448?page=comments#action_12363171
]
Kevan Miller commented on GERONIMO-1448:
Hmmm. I was a bit curious as to why this fix would work. I just tested on trunk
and it's not working for me. After
So where is this document now? I am not very familiar with the web site
there seems to be more than one place.
On Wed, 18 Jan 2006, Hernan Cunico wrote:
Hi Jules,
many of the articles (if not all) started the same way and many of them are
still a work in progress.
It would be great if you
Jeff, to answer your question about containers on other servers
handling XSS, I can say that WebSphere too leaves it to the apps to
protect themselves. Would it be too paranoid for a container to handle
this ?
Joe, the scripts can be entered on the request just like any other parameter using the
Hey Hernan,
If u can publish a few tips on basic formatting with confluence that will help.
Maybe an email or a doc itself within confluence will do.
Regards,
Rajith.
On 1/18/06, lichtner [EMAIL PROTECTED] wrote:
So where is this document now? I am not very familiar with the web sitethere seems
I have also noticed that using struts tag to write out a string bean:write will take care of the problem.
Cheers
PrasadOn 1/18/06, Prasad Kashyap [EMAIL PROTECTED] wrote:
Jeff, to answer your question about containers on other servers
handling XSS, I can say that WebSphere too leaves it to the
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Should this also get sent to the incubator list or do we wait until
after the vote?
Alex Karasulu and I were talking about it and we both think that it
might
[ http://issues.apache.org/jira/browse/GERONIMO-1458?page=all ]
Alan Cabrera reassigned GERONIMO-1458:
--
Assign To: Alan Cabrera (was: Anders Hessellund Jensen)
Use JacORB IDL Compiler instead of Sun's idlj
[ http://issues.apache.org/jira/browse/GERONIMO-1458?page=all ]
Alan Cabrera resolved GERONIMO-1458:
Resolution: Fixed
Use JacORB IDL Compiler instead of Sun's idlj
-
Key: GERONIMO-1458
Deadlock in ActiveMQ close processing
-
Key: GERONIMO-1493
URL: http://issues.apache.org/jira/browse/GERONIMO-1493
Project: Geronimo
Type: Bug
Components: ActiveMQ
Versions: 1.0
Environment: Geronimo 1.0
Reporter:
Jules has the documentation for clustering and I am suggesting him to get that documentation
published in confluence.
Currently, there is just an empty entry in the Table of Contents pointing to *Clustering* in the
*Performance and high availability* section.
You can see the TOC here
Potential
--
Key: GERONIMO-1494
URL: http://issues.apache.org/jira/browse/GERONIMO-1494
Project: Geronimo
Type: Bug
Components: ActiveMQ
Versions: 1.0
Reporter: Kevan Miller
Priority: Minor
Fix For: 1.1
The geronimo.log posted to
On Jan 18, 2006, at 2:39 PM, Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Looks fine to me.
Should this also get sent to the incubator list or do we wait until
after the vote?
On Jan 18, 2006, at 3:48 PM, Dain Sundstrom wrote:
On Jan 18, 2006, at 2:39 PM, Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Looks fine to me.
agreed.
Should this also get
Dain Sundstrom wrote:
On Jan 18, 2006, at 2:39 PM, Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we vote on it?
Looks fine to me.
Should this also get sent to the incubator list or do we wait
[ http://issues.apache.org/jira/browse/GERONIMO-1494?page=all ]
John Sisson updated GERONIMO-1494:
--
Summary: Potential infinite loop in ActiveMQ shutdown processing (was:
Potential)
Potential infinite loop in ActiveMQ shutdown processing
Hi Rajith,
the following link is the *Notation Guide* for confluence that provides
available formats.
http://opensource2.atlassian.com/confluence/oss/renderer/notationhelp.action?section=all
Here are just a few tips for writing documentation that I have found useful.
- read other articles
Ok, I am not fixed on multiple-active-sessions.
But my concern is high availability with single-active-session model under high load conditions.
As u pointed out,
In the web world, clients commonly throw multiple concurrent requests atclusters, however, if we could assure total affinity, these
I have been scanning the geronimo lists and haven't seen any discussion
of moves toward ejb3 or jsr220 support.
Has any of this development stated yet ?
Should I be looking on openejb lists for this discussion ?
I am interested to know if the plan is to extend openejb or to add
another a
My sense is that we'll be looking at EJB3 for Geronimo 2.0, to be
delivered in the 6+ month time frame. I think OpenEJB would be a
logical place to raise this issue -- I know David Blevins has a lot of
thoughts on what should go into OpenEJB 3.
Aaron
On 1/18/06, Bobby Abraham [EMAIL PROTECTED]
Installer build failure when using Maven 1.0.2
--
Key: GERONIMO-1495
URL: http://issues.apache.org/jira/browse/GERONIMO-1495
Project: Geronimo
Type: Bug
Components: installer
Versions: 1.0
Environment: any
[ http://issues.apache.org/jira/browse/GERONIMO-1495?page=all ]
erik daughtrey updated GERONIMO-1495:
-
Attachment: installer-trunk-maven102-fix.patch
This patch fixes the build and works with both Maven 1.0.2 and 1.1 beta 2.
Installer build
[ http://issues.apache.org/jira/browse/GERONIMO-1482?page=all ]
Alan Cabrera resolved GERONIMO-1482:
Fix Version: 1.x
Resolution: Fixed
Thanks!
Add CORBA spec version 3.0
--
Key: GERONIMO-1482
I got chance to have a mini-hackathon with some geronimo committers
over the weekend to hack up a real simple client API to some kind of
state store, which could be clustered, that the OpenEJB, ServiceMix,
Lingo and Tuscany guys could use.
Rather than focussing on the possible technical
Really cool stuff!
James Strachan wrote:
I got chance to have a mini-hackathon with some geronimo committers over
the weekend to hack up a real simple client API to some kind of state
store, which could be clustered, that the OpenEJB, ServiceMix, Lingo and
Tuscany guys could use.
Rather
Ok...besides my great stuff...I really mean that.
I took a look at the API and its a pretty good start to make a generic
pluggable layer for state clustering management.
I like this.
Jeff
James Strachan wrote:
I got chance to have a mini-hackathon with some geronimo committers over
the
It looks like a map-like interface. When you say this could manage state
for OpenEJB, what kind of state do you have in mind?
On Wed, 18 Jan 2006, James Strachan wrote:
I got chance to have a mini-hackathon with some geronimo committers
over the weekend to hack up a real simple client API to
Are there any people on the Harmony project that might (are) interested in an
ORB? Seems like prime territory for them.
Otherwise it looks good.
Alan D. Cabrera wrote:
Here is the incubation proposal
http://wiki.apache.org/incubator/CorbaProposal
Does anyone have any comments before we
[
http://issues.apache.org/jira/browse/GERONIMO-1495?page=comments#action_12363200
]
erik daughtrey commented on GERONIMO-1495:
--
This patch should be applied to both trunk and branches/1.0.
it's been tested on both.
Installer build failure when
[
http://issues.apache.org/jira/browse/GERONIMO-1495?page=comments#action_12363201
]
erik daughtrey commented on GERONIMO-1495:
--
The patch has been tested against trunk and branches/1.0.
It should be applied to both.
Installer build failure
On 1/16/06, Hiram Chirino [EMAIL PROTECTED] wrote:
Hi Guys,
I've done a release candidate build of ActiveMQ 4.0 M4 and have
posted it here:
http://people.apache.org/~chirino/incubator-activemq-4.0-M4/
I've tagged the source for that build as:
That would be great.
Regards,
Alan
Matt Hogstrom wrote, On 1/18/2006 6:29 PM:
Are there any people on the Harmony project that might (are) interested
in an ORB? Seems like prime territory for them.
Otherwise it looks good.
Alan D. Cabrera wrote:
Here is the incubation proposal
That would be great.
Regards,
Alan
Matt Hogstrom wrote, On 1/18/2006 6:29 PM:
Are there any people on the Harmony project that might (are) interested
in an ORB? Seems like prime territory for them.
Otherwise it looks good.
Alan D. Cabrera wrote:
Here is the incubation proposal
On 18 Jan 2006, at 18:10, lichtner wrote:
It looks like a map-like interface. When you say this could manage
state
for OpenEJB, what kind of state do you have in mind?
For a given client in EJB / JBI / Lingo / SCA there tends to be
chunks of state for each client. e.g. in EJB a single
Some questions, pls see below.On 1/19/06, David Jencks [EMAIL PROTECTED] wrote:
First of all, someone pointed me recently to https://openjacc.projects.dev2dev.bea.com/ which looks like it shares somegoals with us.I can't tell how its license affects our ability to
use it, and would appreciate some
This state is transactional, I take it?
On Wed, 18 Jan 2006 [EMAIL PROTECTED] wrote:
On 18 Jan 2006, at 18:10, lichtner wrote:
It looks like a map-like interface. When you say this could manage
state
for OpenEJB, what kind of state do you have in mind?
For a given client in EJB / JBI
91 matches
Mail list logo
