[RESULT] [VOTE] Release Apache Jackrabbit 2.4.8

2017-07-20 Thread Julian Reschke 

Hi there,

the vote passes as follows:

+1 Chetan Mehrotra 
+1 Julian Reschke 
+1 Marcel Reutegger 

Thanks for voting. I'll push the release out.

Best regards, Julian

[jira] [Updated] (JCR-4163) Retire Jackrabbit 2.4

2017-07-20 Thread Julian Reschke (JIRA) 

 [ 
https://issues.apache.org/jira/browse/JCR-4163?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated JCR-4163:

Description: 
Users of 2.4 who can move to Java 7 should switch to the latest stable 
release of 2.14.

Users of 2.4 who still are on Java 6 can switch to the latest release of 
2.12.


> Retire Jackrabbit 2.4
> -
>
> Key: JCR-4163
> URL: https://issues.apache.org/jira/browse/JCR-4163
> Project: Jackrabbit Content Repository
>  Issue Type: Task
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>
> Users of 2.4 who can move to Java 7 should switch to the latest stable 
> release of 2.14.
> Users of 2.4 who still are on Java 6 can switch to the latest release of 
> 2.12.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

[ANNOUNCE] Apache Jackrabbit 2.4.8 released

2017-07-20 Thread Julian Reschke 

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.4.8. The release is available for download at:

https://jackrabbit.apache.org/jcr/downloads.html#v2.4

IMPORTANT NOTE: we plan to retire the 2.4 branch soon (see 
https://issues.apache.org/jira/browse/JCR-4163).


Users of 2.4 who can move to Java 7 should switch to the latest stable
release of 2.14 (currently 2.14.2, see 
).


Users of 2.4 who still are on Java 6 can switch to the latest release of
2.12 (currently 2.12.7, see 
).


See the full release notes below for details about this release:

Release Notes -- Apache Jackrabbit -- Version 2.4.8

Introduction


This is Apache Jackrabbit(TM) 2.4, a fully compliant implementation of the
Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.4.8 is patch release that contains fixes and
improvements over Jackrabbit 2.4.7. Jackrabbit 2.4.x releases are considered
stable and targeted for production use.

Changes since Jackrabbit 2.4.7
--

Bug

[JCR-4118] - RepositoryChecker creates invalid node names
[JCR-4121] - ConcurrentModificationException in 
InternalVersionHistoryImpl.fixLegacy()

[JCR-4133] - fix javadoc problems that are errors with JDK8

Task

[JCR-4129] - get rid of unused org.json dependency

In addition to the above-mentioned changes, this release contains
all the changes included up to the Apache Jackrabbit 2.4.7 release.

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by SHA1 and MD5 checksums and a PGP
signature that you can use to verify the authenticity of your download.
The public key used for the PGP signature can be found at
https://svn.apache.org/repos/asf/jackrabbit/dist/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

RE: FW: Information on encryption methodology of Jack Rabbit Repository

2017-07-20 Thread Sathyaprasad M V 
Hi Justin,

We are using  DbDataStore -->

  

For Implementation   DbFileSystem -->
   
   


What we are trying to do here is how to tie  our  node path  to  the Id in the 
JCR_DATASTORE  within Sybase DB.


Thanks
Sathya


From: Justin Edelson [mailto:jus...@justinedelson.com]
Sent: Monday, July 17, 2017 6:18 PM
To: Dilipkumar S ; dev@jackrabbit.apache.org; 
us...@jackrabbit.apache.org
Cc: Florence Tournikian-Lalanne ; Subhransu Samant 
; Umamaheswari Jayachandran ; 
Sathyaprasad M V 
Subject: Re: FW: Information on encryption methodology of Jack Rabbit Repository

Hi,
I'm not sure that I totally understand what your question is at this point. It 
sounds like you are asking for the implementation details of the 
PersistenceManager and DataSource implementations, but you haven't actually 
specified which implementations you are using. I would suggest just looking at 
the source code for the specific implementations you are using. That will save 
everyone a lot of back and forth.

FWIW, in the normal Jackrabbit architecture, this statement is not true:

==>  fileNode is the actual file stored into DS_JCR_DATASTORE

Per 
https://wiki.apache.org/jackrabbit/DataStore
 the DataStore stores the binary *value*. So in your case, it is only storing 
the jcr:data property of fileNode.

Regards,
Justin

On Mon, Jul 17, 2017 at 7:53 AM Dilipkumar S 
> wrote:
Hi Justin,

Your response is shared to me by Julian Reschke:

=
What leads you to believe that the data is encrypted? I suppose in theory it 
could be encrypted if you have a custom DataStore implementation or there is 
encryption done by the JDBC driver, but there's none in the standard 
DbDataStore itself.
=

The data is actually not encrypted, to be specific it is hashed.

Our code interacts with Jack Rabbit API to insert the node key into VER_BUNDLE 
table, later the report file data is inserted into DS_JCR_DATASTORE.

Let me share you a piece of code which would be useful for you to understand 
the scenario.

===

  String path = uri2xpath(uri);
  session = openReadWriteSession();
  createContentNode(uri, metadata, session);
  Node root = session.getRootNode();
  Node newNode = root.getNode(path);
  // set the node type to file
  //and set the content of the file
  Node reportNode = newNode.addNode(FILE_NODE, NodeType.NT_FILE);
  Node fileNode = reportNode.addNode(Node.JCR_CONTENT, NodeType.NT_RESOURCE);

  ValueFactory valueFactory = session.getValueFactory();
  Binary b = valueFactory.createBinary(fileIn);
  LOGGER.debug("CONTENT stored id JCR_DATA_STORE ="+b+ " , "+uri);
  fileNode.setProperty(Property.JCR_DATA, b);
===


==>  reportNode is what we are saving into VER_BUNDLE

==>  fileNode is the actual file stored into DS_JCR_DATASTORE

We are halted with our analysis as the API belongs to JCR and was not sure how 
to extract the data stored in VER_BUNDLE to DATASTORE.

Could you please let us know on how the data is stored from VER_BUNDLE to 
DATASTORE.

If you are still unclear on the case, I would like to invite you to a 
conference call so that I could loop my product expert as well.

Thanks & Regards,
Dilipkumar S
From: Justin Edelson 
[mailto:jus...@justinedelson.com]
Sent: Friday, July 14, 2017 9:17 PM
To: dev@jackrabbit.apache.org; 
us...@jackrabbit.apache.org
Cc: Florence Tournikian-Lalanne 
>; Subhransu Samant 
>; Umamaheswari 
Jayachandran >; 
Dilipkumar S >
Subject: Re: FW: Information on encryption methodology of Jack Rabbit Repository

Hi, I responded to this email already. Did you see my response?

On Fri, Jul 14, 2017 at 9:13 AM Dilipkumar S 
> wrote:
Hello Users & Dev,

Could someone please assist with the below case.

Thanks & Regards,
Dilipkumar S

From: Dilipkumar S
Sent: Wednesday, July 12, 2017 11:01 AM
To: 'us...@jackrabbit.apache.org' 
>; 
'dev@jackrabbit.apache.org' 
>
Cc: 'subhra...@temenos.com'

[jira] [Resolved] (JCR-4162) Release Jackrabbit 2.4.8

2017-07-20 Thread Julian Reschke (JIRA) 

 [ 
https://issues.apache.org/jira/browse/JCR-4162?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke resolved JCR-4162.
-
Resolution: Fixed

> Release Jackrabbit 2.4.8
> 
>
> Key: JCR-4162
> URL: https://issues.apache.org/jira/browse/JCR-4162
> Project: Jackrabbit Content Repository
>  Issue Type: Task
>Reporter: Julian Reschke
>Assignee: Julian Reschke
>Priority: Trivial
>




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

RE: FW: Information on encryption methodology of Jack Rabbit Repository

2017-07-20 Thread Dilipkumar S 
Hello Justin,

I have not received your email.

Could you please re-forward me your response mail.

Thanks & Regards,
Dilipkumar S

From: Justin Edelson [mailto:jus...@justinedelson.com]
Sent: Friday, July 14, 2017 9:17 PM
To: dev@jackrabbit.apache.org; us...@jackrabbit.apache.org
Cc: Florence Tournikian-Lalanne ; Subhransu Samant 
; Umamaheswari Jayachandran ; 
Dilipkumar S 
Subject: Re: FW: Information on encryption methodology of Jack Rabbit Repository

Hi, I responded to this email already. Did you see my response?

On Fri, Jul 14, 2017 at 9:13 AM Dilipkumar S 
> wrote:
Hello Users & Dev,

Could someone please assist with the below case.

Thanks & Regards,
Dilipkumar S

From: Dilipkumar S
Sent: Wednesday, July 12, 2017 11:01 AM
To: 'us...@jackrabbit.apache.org' 
>; 
'dev@jackrabbit.apache.org' 
>
Cc: 'subhra...@temenos.com' 
>; Florence 
Tournikian-Lalanne >; 
'umamaheswa...@temenos.com' 
>
Subject: Information on encryption methodology of Jack Rabbit Repository

Hello Jack Rabbit,

Am posting this mail to you with comments posted by Julian 
Reschke
 under below JIRA,

https://issues.apache.org/jira/browse/JCR-4161

We require your assistance with reference to Jack Rabbit repository. Here by am 
adding the detailed information of the case below:


We have a Front end API using which the reports would be generated and the 
records will be stored in Jack Rabbit repository table DS_JCR_DATASTORE.

Currently we are facing an issue under which the report generated with the 
Frontend API is not accessible using open/Save mode with below error appended 
in the logs:

===
2017-07-03 15:10:31,462 | ERROR | defaultWIMFileBasedRealm/advisor | | | 
WebContainer : 1 | c.o.r.s.ContentRepositoryService | retrieveReport: Exception 
from the uderlying repository
javax.jcr.PathNotFoundException: aaa/report/G7893420170703691287
=

Based on the above error, we would like to perform analysis on whether the 
report generated exists or not with the repository table DS_JCR_DATASTORE, but 
we are restricted from performing the analysis due to below constraint:

The records generated and stored with DS_JCR_DATASTORE are in encrypted format

To do the analysis we need to map the relation between a session_id from the 
API against a record_id in repository table, therefore I request you to let us 
know the steps to decrypt the encrypted data in the table.

I've attached the logs & sample data from DS_JCR_DATASTORE for your reference.

Please let me know if you require any additional information.

Thanks & Regards,
Dilipkumar S

The information in this e-mail and any attachments is confidential and may be 
legally privileged. It is intended solely for the addressee or addressees. Any 
use or disclosure of the contents of this e-mail/attachments by a not intended 
recipient is unauthorized and may be unlawful. If you have received this e-mail 
in error please notify the sender. Please note that any views or opinions 
presented in this e-mail are solely those of the author and do not necessarily 
represent those of TEMENOS. We recommend that you check this e-mail and any 
attachments against viruses. TEMENOS accepts no liability for any damage caused 
by any malicious code or virus transmitted by this e-mail.

The information in this e-mail and any attachments is confidential and may be 
legally privileged. It is intended solely for the addressee or addressees. Any 
use or disclosure of the contents of this e-mail/attachments by a not intended 
recipient is unauthorized and may be unlawful. If you have received this e-mail 
in error please notify the sender. Please note that any views or opinions 
presented in this e-mail are solely those of the author and do not necessarily 
represent those of TEMENOS. We recommend that you check this e-mail and any 
attachments against viruses. TEMENOS accepts no liability for any

RE: FW: Information on encryption methodology of Jack Rabbit Repository

2017-07-20 Thread Dilipkumar S 
Hi Justin,

Your response is shared to me by Julian Reschke:

=
What leads you to believe that the data is encrypted? I suppose in theory it 
could be encrypted if you have a custom DataStore implementation or there is 
encryption done by the JDBC driver, but there's none in the standard 
DbDataStore itself.
=

The data is actually not encrypted, to be specific it is hashed.

Our code interacts with Jack Rabbit API to insert the node key into VER_BUNDLE 
table, later the report file data is inserted into DS_JCR_DATASTORE.

Let me share you a piece of code which would be useful for you to understand 
the scenario.

===

  String path = uri2xpath(uri);
  session = openReadWriteSession();
  createContentNode(uri, metadata, session);
  Node root = session.getRootNode();
  Node newNode = root.getNode(path);
  // set the node type to file
  //and set the content of the file
  Node reportNode = newNode.addNode(FILE_NODE, NodeType.NT_FILE);
  Node fileNode = reportNode.addNode(Node.JCR_CONTENT, NodeType.NT_RESOURCE);

  ValueFactory valueFactory = session.getValueFactory();
  Binary b = valueFactory.createBinary(fileIn);
  LOGGER.debug("CONTENT stored id JCR_DATA_STORE ="+b+ " , "+uri);
  fileNode.setProperty(Property.JCR_DATA, b);
===


è  reportNode is what we are saving into VER_BUNDLE

è  fileNode is the actual file stored into DS_JCR_DATASTORE

We are halted with our analysis as the API belongs to JCR and was not sure how 
to extract the data stored in VER_BUNDLE to DATASTORE.

Could you please let us know on how the data is stored from VER_BUNDLE to 
DATASTORE.

If you are still unclear on the case, I would like to invite you to a 
conference call so that I could loop my product expert as well.

Thanks & Regards,
Dilipkumar S
From: Justin Edelson [mailto:jus...@justinedelson.com]
Sent: Friday, July 14, 2017 9:17 PM
To: dev@jackrabbit.apache.org; us...@jackrabbit.apache.org
Cc: Florence Tournikian-Lalanne ; Subhransu Samant 
; Umamaheswari Jayachandran ; 
Dilipkumar S 
Subject: Re: FW: Information on encryption methodology of Jack Rabbit Repository

Hi, I responded to this email already. Did you see my response?

On Fri, Jul 14, 2017 at 9:13 AM Dilipkumar S 
> wrote:
Hello Users & Dev,

Could someone please assist with the below case.

Thanks & Regards,
Dilipkumar S

From: Dilipkumar S
Sent: Wednesday, July 12, 2017 11:01 AM
To: 'us...@jackrabbit.apache.org' 
>; 
'dev@jackrabbit.apache.org' 
>
Cc: 'subhra...@temenos.com' 
>; Florence 
Tournikian-Lalanne >; 
'umamaheswa...@temenos.com' 
>
Subject: Information on encryption methodology of Jack Rabbit Repository

Hello Jack Rabbit,

Am posting this mail to you with comments posted by Julian 
Reschke
 under below JIRA,

https://issues.apache.org/jira/browse/JCR-4161

We require your assistance with reference to Jack Rabbit repository. Here by am 
adding the detailed information of the case below:


We have a Front end API using which the reports would be generated and the 
records will be stored in Jack Rabbit repository table DS_JCR_DATASTORE.

Currently we are facing an issue under which the report generated with the 
Frontend API is not accessible using open/Save mode with below error appended 
in the logs:

===
2017-07-03 15:10:31,462 | ERROR | defaultWIMFileBasedRealm/advisor | | | 
WebContainer : 1 | c.o.r.s.ContentRepositoryService | retrieveReport: Exception 
from the uderlying repository
javax.jcr.PathNotFoundException: aaa/report/G7893420170703691287
=

Based on the above error, we would like to perform analysis on whether the 
report generated exists or not with the repository table DS_JCR_DATASTORE, but 
we are restricted from performing the analysis due to below constraint:

The records generated and stored with DS_JCR_DATASTORE are in encrypted format

To do the analysis we need to map the relation

[ANNOUNCE] Apache Jackrabbit 2.4.8 released

2017-07-20 Thread Julian Reschke 

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.4.8. The release is available for download at:

https://jackrabbit.apache.org/jcr/downloads.html#v2.4

IMPORTANT NOTE: we plan to retire the 2.4 branch soon (see 
https://issues.apache.org/jira/browse/JCR-4163).


Users of 2.4 who can move to Java 7 should switch to the latest stable
release of 2.14 (currently 2.14.2, see 
).


Users of 2.4 who still are on Java 6 can switch to the latest release of
2.12 (currently 2.12.7, see 
).


See the full release notes below for details about this release:

Release Notes -- Apache Jackrabbit -- Version 2.4.8

Introduction


This is Apache Jackrabbit(TM) 2.4, a fully compliant implementation of the
Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.4.8 is patch release that contains fixes and
improvements over Jackrabbit 2.4.7. Jackrabbit 2.4.x releases are considered
stable and targeted for production use.

Changes since Jackrabbit 2.4.7
--

Bug

[JCR-4118] - RepositoryChecker creates invalid node names
[JCR-4121] - ConcurrentModificationException in 
InternalVersionHistoryImpl.fixLegacy()

[JCR-4133] - fix javadoc problems that are errors with JDK8

Task

[JCR-4129] - get rid of unused org.json dependency

In addition to the above-mentioned changes, this release contains
all the changes included up to the Apache Jackrabbit 2.4.7 release.

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by SHA1 and MD5 checksums and a PGP
signature that you can use to verify the authenticity of your download.
The public key used for the PGP signature can be found at
https://svn.apache.org/repos/asf/jackrabbit/dist/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.