be to
retrieve it across an https: connection, the server is authenticated.
The https codebase server could be granted sufficient permission based
on it's URL, perhaps using RemotePolicy, or using a local policy file.
Are we going too far? Thoughts?
Cheers,
Peter.
Peter Firmstone wrote
Dan Creswell wrote:
One thing...
On 9 November 2012 10:44, Peter Firmstone j...@zeus.net.au wrote:
Motivated by Sim's suggestions:
Any objection to changing it to net.jini.io.**MarshalClassResolverSPI?
This places it right where it's needed.
Since all URI in a code base string
Simon IJskes - QCG wrote:
On 09-11-12 00:31, Peter Firmstone wrote:
Ok, because it's small I think we can consider it, can you provide the
hooks to load different providers? The non default providers themselves
can be a subproject. We need to carefully consider security since we're
making
Simon IJskes - QCG wrote:
On 09-11-12 11:44, Peter Firmstone wrote:
Motivated by Sim's suggestions:
Any objection to changing it to net.jini.io.MarshalClassResolverSPI?
Leave it near net.jini.loader.ClassLoading. I would have implemented
it in ClassLoading if i wasn't concerned about
Simon IJskes - QCG wrote:
On 09-11-12 13:49, Peter Firmstone wrote:
Simon IJskes - QCG wrote:
On 09-11-12 11:44, Peter Firmstone wrote:
Motivated by Sim's suggestions:
Any objection to changing it to net.jini.io.MarshalClassResolverSPI?
Leave it near net.jini.loader.ClassLoading. I would
Simon IJskes - QCG wrote:
On 09-11-12 13:48, Peter Firmstone wrote:
Simon IJskes - QCG wrote:
On 09-11-12 00:31, Peter Firmstone wrote:
Ok, because it's small I think we can consider it, can you provide the
hooks to load different providers? The non default providers
themselves
can
Simon IJskes - QCG wrote:
On 08-11-12 13:40, Peter Firmstone wrote:
Yes, but lets play around with it in skunk. Dan's made some valid
Indeed Dan has made valid remarks, but i really dont like skunk. Tom
suggested sub projects once. I did not see any benefits at that time.
But i think
+1
- Original message -
+1
On Mon, 2012-11-05 at 08:51 +, Dan Creswell wrote:
I'm supportive.
+1
On 4 November 2012 23:06, Greg Trasuk tras...@stratuscom.com wrote:
Hello all:
I'm willing to stand as a candidate for PMC chair, if no-one else has a
burning
Ok, found the problem, there's a bug on line 99 in
net.jini.loader.RiverClassLoader
You didn't really test this properly did you?
No biggy.
Too busy to help any further (2 hour road trip now).
Peter.
Peter Firmstone wrote:
Ok I've had a brief look at debugging failing tests, it's worth
, then lets
fix it, but it's up to users for format their paths correctly. I've
provided a utility class for that purpose.
I do have a suggestion prior to release though, that all new code in
org.apache.river be separated into org.apache.river.api or
org.apache.river.impl.
Cheers,
Peter.
are escaped correctly.
Hope this makes it clearer.
Peter.
No objections here.
Cheers,
Peter.
- Original message -
Any objection to or shall i convert the LocalHostProvider to a Spi?
I'd strongly discourage it, what are you trying to do, is there another way
without breaking encapsulation?
- Original message -
What is your motivation to ask this question?
Gregg
On Oct 24, 2012, at 7:08 AM, Simon IJskes - QCG si...@qcg.nl wrote:
Does anybody have a problem
in CodebaseAccessClassLoader as it sits, should be trivial to do, and
it
doesn't break anything with the defaults.
I wonder if Peter pulled it out when some of the other stuff he was pushing
into
the build created some problems late last year? Humm, it should be in there.
I have a local copy, further
.
Cheers,
Peter.
- Original message -
Shall we include a @Beta annotation for classes, methods etc that are
not considered stable?
Gr. Simon
It's been a little while since I spent time pouring over the discovery code.
We need to focus on discovery v2, which extends LookupDiscovery. From memory
the code in LookupDiscovery is disco v1.
Cheers,
Peter.
- Original message -
On Fri, 2012-10-12 at 07:05, Simon IJskes - QCG
What's the reasoning behind removing authors names from code?
Isn't it the authors prerogative?
It's certainly helped me in the past to shed some light when able to contact
the original author.
Peter.
that it was written by more than one
developer.
We should also have a discussion with developers and find out whether this
would affect the time they're prepared to contribute. I've heard of young
developers who contribute free code to improve their employment prospects.
Regards,
Peter
.
Service api is a compile time boundary.
Cheers,
Peter.
- Original message -
From Simon IJskes - QCG si...@qcg.nl
Sent: Wed, 3 Oct 2012, 17:47:24 GMT-10
To dev@river.apache.org
Subject Re: generics
On 03-10-12 00:42, Peter wrote:
Don't forget that due to erasure, it isn't possible
Don't forget that due to erasure, it isn't possible to support generics in
service api.
Anything outside of service api is however.
Regards,
peter.
- Original message -
On 02-10-12 18:10, Greg Trasuk wrote:
As I recall, we didn't reach any concensus to change the public API
.
We need to look at how these codebase annotations are being generated, escape
any illegal characters and normalise them.
Peter.
Simon IJskes - QCG wrote:
On 20-09-12 08:37, Peter Firmstone wrote:
We need to look at how these codebase annotations are being generated,
escape any illegal characters and normalise them.
Would that involve modifying the core or just the tests?
The test harness. QAConfig I suspect
.
Regards,
Peter.
Bishnu Gautam wrote:
Hello River Team
It seems that Jini is getting its pace in terms of River. This is good indication and I think that River has great potential if we can build some application that can interact over Internet.I am planning to do a research work whether we can make
what a ClassLoader is! Anyone that doesn't
like it needn't use it, but I suspect given time, it'll grow on even the
most staunch disbeliever.
Cheers,
Peter.
be released until Java 9, so there's no hurry, but
to ensure we don't overlook any important details, lets create a related
Jira issue to develop a spec.
Cheers,
Peter.
GREGG WONDERLY wrote:
I want to use the netbeans modular application framework as my service UI host.
That is, I want to be able
an example of stack
inspection.
I need a little more time figure it out properly, then I'll come back
with some further thoughts / suggestions.
Cheers,
Peter.
The modular programming systems like OSGi and Netbeans etc., often have differing
needs, depending on what you want to expose
it, or provide another
way for the client to resolve the package, this needs to be a standard
interface that can be implemented at the client (or server for objects
traveling the other way). Then maven, osgi or some other means can be
used to resolve the missing dependency.
Thoughts?
Cheers,
Peter.
On 16/08/2012 4:02 PM, Apache Jenkins Server wrote:
Seehttps://builds.apache.org/job/River-QA-windows/53/
Well that's a milestone, that's the first time the River qa test suite
has run successfully native on Windows, without cigwin or any other
assistance.
Guess we can finally say Windows
Gregg,
Just thought I'd bring this back from previous list discussion, as it
displays some of the issues you had to overcome.
Cheers,
Peter.
Gregg Wonderly wrote:
Okay, I've done some more digging and thinking and one of the primary
issues I believe, comes down to how containers, whether
RMIClassLoader methods?
Should we have additional mechanisms for loading
CodebaseAccessClassLoader providers other than the static setter
method? Eg configuration or ServiceProvider?
Should we have more than one provider available?
Regards,
Peter.
to
PrefferedClassProvider, it might be worth incrementing River to version
3.0. The change to URI from URL may cause problems in some deployment
environments, it isn't 100% backward compatible, although on a positive
note, no code needs to be recompiled.
Cheers,
Peter.
On 6/08/2012 11:19 PM, Christopher
Thanks Dan.
Cheers,
Peter.
On 8/08/2012 6:09 PM, Dan Creswell wrote:
Yeah, sorry very busy with work and other bits and pieces but I agree with
Chris, file the bug cos the RFCs say you're right.
On 8 August 2012 08:32, Peter Firmstonej...@zeus.net.au wrote:
Thanks Chris,
The dev list has
This is a bit of a milestone, it's the first Hudson Windows build where
no tests failed, a minor misconfiguration error spoiled it.
Cheers,
Peter.
On 5/08/2012 7:31 PM, Apache Jenkins Server wrote:
Seehttps://builds.apache.org/job/River-QA-windows/48/changes
Changes:
[peter_firmstone
Gregg Wonderly wrote:
On Jul 7, 2012, at 8:02 AM, Peter Firmstone wrote:
These doAs methods in this case cannot elevate Permission, they can reduce
Permission to that which the Subject has in common with other code on the
stack, but it cannot be used by code to gain privilege if it uses
Getting much closer to passing all tests on Windows without cigwin.
-
-
# of tests started = 1412
# of tests started = 1412
# of tests completed = 1412
# of tests completed = 1412
# of tests skipped = 46
# of
again. No deserialisation attacks can
allow creating ClassLoaders or setting the SecurityManager in
privileged context.
Solution:
Always ensure a domain with minimal privileges exists on the stack
during deserialisation.
Cheers,
Peter.
Gregg Wonderly wrote:
On Jul 7, 2012, at 8
All recent build failures appear to be related to a problem with svn,
Hudson's not updating correctly. I changed one test to perform a clean
checkout, but checkout didn't work either.
I'm running my own tests over the weekend, I'll report on the results.
Apache Jenkins Server wrote:
See
extra Permissions, so they probably have not written code
with doPrivileged blocks in mind for Principals.
Assume - makes an Ass out of you and me.
Thoughts?
Cheers,
Peter.
Hmm,
Don't know what's happening here, these two tests pass on my machine.
[java] SUMMARY =
[java]
[java] com/sun/jini/test/impl/discoverymanager/BadDiscoveryListener.td
[java] Test Passed: OK
[java]
[java]
always trust users not to grant
permission they don't understand to dancing pigs.
Administrators obviously get to grant more.
Thanks for the comments, much appreciated.
Cheers,
Peter.
Gregg Wonderly wrote:
On Jun 30, 2012, at 2:39 AM, Dan Creswell wrote:
I'd also suggest that too much
release, it may make the
following and I'd like to finish security prior to implementing UDT sockets to
enable internet based services and DNS SRV based discovery and codebases.
Peter.
advise, use URL's for all code bases, to avoid
annotation loss.
Thoughts?
Peter.
Well spotted, I spoke to Peter Kriens over the phone about this in 2010
(very smart guy btw), ClassDep doesn't detect Class.forName dependencies.
A string might not be defined until runtime, so it's not something that
can be easily determined. This could become even more difficult if
dynamic
cannot be forged and the chain must lead to
the certificate used to sign the jar file.
That might scale better?
Peter.
On 18/06/2012 10:24 PM, Peter Firmstone wrote:
Until recently, I thought SPKI Certificates were only suitable for
distributed user authorisation.
Quick recap: I sign
Thanks Sim.
Cheers,
Peter.
Simon IJskes - QCG wrote:
Ok, i will try to run all jenkins jobs with 1.7.0 and see if it works
on all platforms.
On 08-06-12 01:46, Peter Firmstone wrote:
I'm using ant version 1.7.1, I can upgrade if need be.
Peter.
Tom Hobbs wrote:
Whatever version we're
Only failed tests shown. Failed tests due to missing infrastructure in
all but one case.
jtreg:
[mkdir] Created dir:
/opt/src/River_Fixed_2nd_Try/peterConcurrentPolicy/qa/jtreg/JTlib-tmp
[move] Moving 8 files to
/opt/src/River_Fixed_2nd_Try/peterConcurrentPolicy/qa/jtreg/JTlib-tmp
[java]
[java] -
[java]
[java] # of tests started = 1412
[java] # of tests completed = 1412
[java] # of tests skipped = 46
[java] # of tests passed= 1412
[java] # of tests failed= 0
[java]
[java]
Hmm, I don't see any build errors, it just appeared to time out?
I thought there were issues with building on windows?
Should we extend the timeout and see what happens?
Peter.
Apache Jenkins Server wrote:
See https://builds.apache.org/job/River-QA-windows/15/changes
Changes
subproject for this stuff on svn.
Cheers,
Peter.
exception
on the java 7 methods for now, then it'll compile on 6 and 7.
Cheers,
Peter.
--
QCG, Software voor het MKB, 071-5890970, http://www.qcg.nl
Quality Consultancy Group b.v., Leiderdorp, Kvk Den Haag: 28088397
Simon IJskes - QCG wrote:
On 11-02-12 12:08, Peter wrote:
I'm glad you were watching Sim, I wasn't even aware it went awry.
Did you see the emails jenkins sent?
Gr. Simon
Yeah, those were just new junit tests that were testing some
functionality I hadn't yet implemented, I figured I could
Simon IJskes - QCG wrote:
On 11-02-12 12:08, Peter wrote:
- Original message -
On 11-02-12 06:56, Peter wrote:
Lets dedicate this release to Fred Oliver, please dive in and
review recent
code changes and ask questions, make sure the javadoc makes sense.
Let's make
it the best
+1 Peter.
Dan Creswell wrote:
Stop wondering - let's do it.
On 10 February 2012 06:00, Peter Firmstone j...@zeus.net.au wrote:
I only found out today that Fred Oliver passed away on April 9, 2011.
I had emailed Fred a number of times on and off list, he was always happy
to take the time
the release.
Peter.
on java.security.Policy.getPolicyNoCheck() that
ProtectionDomain.implies calls used in earlier Java releases. The code
hasn't been tested on Java 8.
I'm going to look into creating a timed reference, but for now the
Security Manager cache uses soft references.
Looks like I'm ready for a merge.
Cheers,
Peter.
Peter
.
Peter.
[jtreg] TEST RESULT: Failed. Execution failed: `main' threw
exception: TestFailedException: TEST FAILED: client failed to call back
in time
[jtreg] --
[jtreg] Test results: passed: 129; failed: 7; error: 2
[jtreg] Report
at the remote end?
I've attached a patch that will record the stack trace, which should
identify interrupt cause.
But you'll need to build River from source.
Alternatively I can commit the patch and you can pick up a Hudson build?
Regards,
Peter.
Bryan Thompson wrote:
I am curious whether there is any
You're welcome, thanks for cudos.
Cheers,
Peter.
Tom Hobbs wrote:
Well done, Peter. You're a serious work horse on River and we're
grateful for what you're getting done.
Cheers.
On Mon, Feb 6, 2012 at 7:23 AM, Peter Firmstone j...@zeus.net.au wrote:
Peter Firmstone wrote:
Good
Thanks Tom, much appreciated.
Cheers,
Peter.
Tom Hobbs wrote:
It's that time again.
Comments always welcome, due date is 8th February.
Below is the February board report for River
Apache River is a distributed computing architecture, based on the JSK
Starter Kit Source code donated
and a few java platform limitations.
Cheers,
Peter.
Peter Firmstone wrote:
Well, I think it's possible to do most things with web based services,
using style sheets html and javascript on the client and java or
modperl on the server, usually with an SQL database behind that. What
happens
.509, SPKI/SDSI emphasizes short-lived certificates,
rather than Certificate Revocation Lists (CRLs).
Cheers,
Peter.
.
That's why I contribute development time, to use River in my business,
it needs to do some basic things it can't do presently. To do things no
one else can; adapt quickly for a competitive edge.
Cheers,
Peter.
Gregg Wonderly wrote:
This is one of those places where Jini's power, using
E-Speak was a services architecture based on corba, similar in some
respects to Jini. They've got some high level learnings posted at:
http://www.hpl.hp.com/techreports/2004/HPL-2004-150.html
Cheers,
Peter.
+1 Peter.
- Original message -
+1
--
QCG, Software voor het MKB, 071-5890970, http://www.qcg.nl
Quality Consultancy Group b.v., Leiderdorp, Kvk Den Haag: 28088397
, then keytool was used to
import these certificate chains into the users trust stores.
Cheers,
Peter.
, but doesn't use keytool to generate the keys and
certificate. The private key is encrypted and password protected before
writing to file. I just figured it was best to replicate it blindly
without asking why.
Cheers,
Peter.
Gregg Wonderly wrote:
On 1/20/2012 2:03 PM, Peter Firmstone wrote:
Has anyone got a good example for ServiceUI, I'd personally like to
remove all references to Toaster's in our documentation.
If you look at the http://startnow.dev.java.net project under the
adminui tree, you'll find
Simon IJskes - QCG wrote:
On 23-01-12 01:57, Peter Firmstone wrote:
A number of jtreg tests a failing due to expired certificates.
Are these included in the QA build on builds? Do they fail there, but
are disabled or so?
Gr. Sim
No, they've got a GPL platform library dependency, jtreg
Simon IJskes - QCG wrote:
On 23-01-12 21:56, Peter Firmstone wrote:
Simon IJskes - QCG wrote:
On 23-01-12 01:57, Peter Firmstone wrote:
A number of jtreg tests a failing due to expired certificates.
Are these included in the QA build on builds? Do they fail there, but
are disabled or so
dependencies in
existing software, to assist restructuring by hand to support Maven or
Gradle builds (with the same build structure).
No one's written any tools to automate the process so it's better to
start that way than try to migrate later.
Cheers,
Peter.
Jeff Ramsdale wrote:
Maven
It's the way Entries are separately serialized.
Yes you're right.
Peter.
Dan Creswell wrote:
Depends what you call a platform service but at least in the case of
both Registrar and JavaSpace the ability to custom serialise on the
client and avoid leaking classes into the server-JVM makes
upgraded to
jdk1.6.0_30, but the certs are still out of date? This is causing some
jtreg tests to fail.
Cheers,
Peter.
/src/River_Fixed_2nd_Try/peterConcurrentPolicy/qa/jtreg/JTlib-tmp
[delete] Deleting:
/opt/src/River_Fixed_2nd_Try/peterConcurrentPolicy/qa/jtreg/test.props
BUILD FAILED
/opt/src/River_Fixed_2nd_Try/peterConcurrentPolicy/qa/build.xml:243:
if=jtreg.fail
Total time: 35 minutes 2 seconds
Peter
https://svn.apache.org/repos/asf/river/tck
Cheers,
Peter.
These are integration tests already written for River users to run
against their service code, to check sensible network behaviour etc.
It does require the user to write some Admin adapter code, but not much.
Cheers,
Peter.
Peter wrote:
Thanks Sim,
It's just a default netbeans ant script
and requires authentication.
If the platform only used reflective proxy's for services, River would be far
easier to deploy for new developers.
Has anyone previously looked into why we need smart proxy's for platform
services and what we'd lose if we only used reflective proxies?
Cheers,
Peter.
on jdk5, followed by a dummy merge.
Cheers,
Peter.
Greg,
Are there any areas where you could use some help with the Surrogate
implementation?
This year, we could make an impact with fresh releases for River,
Surrogate and the LDJ Kit.
Cheers,
Peter.
Discovery V1:
1. I don't want new users using Discovery V1 by mistake.
2. No support for security.
3. No migration path to Discovery V2.
4. Problem for existing deployed environments.
5. Removal would simplify understanding of Discovery API's for new
developers.
Peter.
live on.
But I'm not even sure if that's possible.
If option 2 then we would be releasing River 3.0.
Peter.
Christopher Dolan wrote:
You're acknowledging that there's no upgrade path and that's a *justification*
for abandoning the old version? :-)
This change would motivate a bump in the major
Simon IJskes - QCG wrote:
On 18-01-12 11:15, Peter Firmstone wrote:
This would include adding net.jini.security.Security to that jar file as
well and removing it from jsk-platform.jar
If it is so decided, shall i do the build.xml?
Gr. Sim
Sure, I could use some help.
Cheers,
Peter.
.
Thoughts?
Peter.
or
remove, but still make it possible to merge back changes we make to
the original project.
Peter, you've also done some research into mdns, did you come up with
other usable implementations for mdns?
Gr. Sim
I didn't really investigate Multicast DNS, mostly just DNS-SRV
Discovery, I still
Ok, thanks.
Simon IJskes - QCG wrote:
On 18-01-12 02:45, Peter Firmstone wrote:
Thank u both.
modify_appgroups.pl hudson-jobadmin --add=peter_firmstone
Now that you have access, i'm going to convert the skunk build to
manual start. I have a lot of problems with getting the QA build
Sim,
Could you try running skunk on FreeBSD?
Cheers,
Peter.
Apache Jenkins Server wrote:
See https://builds.apache.org/job/River-trunk-QA-bsd/6/
--
[...truncated 15501 lines...]
[java]
com/sun/jini/test/spec/javaspace/conformance/snapshot
Simon IJskes - QCG wrote:
On 16-01-12 13:19, Peter Firmstone wrote:
Sim,
Could you try running skunk on FreeBSD?
Cheers,
Peter.
Apache Jenkins Server wrote:
Done. But there are some issues with hanging jobs, so its not clear
that it will run soon.
Gr. Sim
Thanks Sim
Oddly enough all the tests pass, I think it's looking in trunk, instead
of skunk for the output, not sure...
Peter.
Apache Jenkins Server wrote:
See https://builds.apache.org/job/River-trunk-QA-ubuntu-jdk7-skunk/3/changes
Changes:
[peter_firmstone] Ensure DelegateCombinerSecurityManager
into what needs to be done to migrate the jtreg tests to java
6. I think it was just the name service provider and finding a
replacement for keytool.
Cheers,
Peter.
:
java.home=/usr/jdk/jdk1.6.0_25
river.home=/opt/src/river
log.config=/home/peter/logging.properties
debug=true
debuglevel=lines,source,vars
Then from the command line
$ ant all.clean all.build
If you want to run the qa tests:
$ ant qa.run
Cheers,
Peter.
Bryan Thompson wrote:
What about
in use
Cheers,
Peter.
Bryan Thompson wrote:
Peter,
Rather than testing against the trunk, I would prefer to test the change
against the 2.2 release. That will allow me to avoid validating the entire
state of the trunk and let me focus on whether the change fixes the specific
DGC problem.
It looks like [1
Ok, found the problem, when I fixed River-142, I introduced a new bug,
after creating a new DGC thread, I didn't set the running flag to true,
so each time, a new thread is created.
Thankfully it's a very easy fix.
Cheers,
Peter.
Peter Jones wrote:
Peter,
That internal Executor interface
that the implementation has changed
recently. But I gather that Peter F. may have identified the root cause.
Cheers,
-- Peter
On Jan 13, 2012, at 7:28 AM, Bryan Thompson wrote:
Peter,
The DGC Threads are in the server JVM. They are nearly all for the exported
Futures.
Thanks,
Bryan
-Original
Which is why the Object.equals/hashCode for an endpoint implementation is
critical.
-- Peter
On Jan 13, 2012, at 2:05 AM, Gregg Wonderly wrote:
I would say, that it's very easy to just code up a configuration entry, or a
dynamic construction in code where a new endpoint is also created per
be fine in this regard.
-- Peter
On Jan 13, 2012, at 9:44 AM, Bryan Thompson wrote:
Peter,
Can you clarify what you mean by the end point in this context? That would
be the server side object which is being exported? I.e., the proxy wrapping
the Future? Or would this be the long lived
Bryan,
Thanks, that is indeed helpful to see, to be clear about which kind of threads
are causing the problem.
-- Peter
On Jan 13, 2012, at 9:52 AM, Bryan Thompson wrote:
Peter,
There is very little information in there. Basically a whole lot of DGC
Lease Checker threads all sleeping
Only if you use JrmpExporter.
I'll get back to shortly with some build instructions.
Cheers,
Peter.
Bryan Thompson wrote:
What about the following property? Is it still valid?
-Dsun.rmi.transport.tcp.connectionPool=true
Thanks,
Bryan
-Original Message-
From: Peter
and
stuff in before the next board report (Feb, I think) if we do want to
have a change.
Cheers,
Tom
I'd like to see you stay on, you're doing a good job it gives the
project stability.
Peter.
Hi Peter,
I was wondering if you had any thoughts on this post from Bryan on River
users?
Hope you don't mind me asking ;)
Best Regards,
Peter Firmstone.
---BeginMessage---
Hi Bryan,
Sorry that no one got back to you about this. I'm afraid that I don't
know the answer to your question
of threads
created based on available CPU's and a scaling factor and place the
tasks in a BlockingQueue, so if the queue is filled, it blocks.
Can you report the issue as a Bug on Jira for me, I'll fix this before
the next release.
Regards,
Peter.
Peter Firmstone wrote:
Hi Peter,
I
901 - 1000 of 1121 matches
Mail list logo