Re: [VOTE] Release UIMA-DUCC 2.2.0 RC3

* downloaded uima-ducc-2.2.0-bin.tar.gz * employed wiki instructions to replace uima-ducc-demo https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2 * demo running as expected since Friday * checked

Re: UIMA Website - replacing the "forum" view of our mailing list?

The LHS seems inconsistent between, for example, between home page and mailing list page in terms of order and content. On home page order is: General, community, scaleout... On mailing list page order is: General, scaleout, components... Under Community, HipChat appears on home page but not on m

Re: UIMA Website - replacing the "forum" view of our mailing list?

Never mind. Seems that clearing my Firefox cache fixed the problem, so this was user error...kind of. Lou. On Mon, Mar 20, 2017 at 1:55 PM, Marshall Schor wrote: > thanks for noticing, will investigate... > > -M > > > On 3/20/2017 11:14 AM, Lou DeGenaro wrote: > > Th

Re: [VOTE] Release UIMA-DUCC 2.2.1 RC1

I vote -1 for 3 reasons: 1. ducc_ling does not work for sim-cluster 2. WS has NPE for some non-existent job requests than can be easily fixed 3. Jobs with service dependencies are not working under Apache DUCC demo Lou. On Thu, Jul 27, 2017 at 3:45 PM, Jaroslaw Cwiklik wrote: > Hi, > > the UIM

Re: [VOTE] Release UIMA-DUCC 2.2.1 RC2

> Downloaded uima-ducc-2.2.1-bin.tar.gz : OK > Installed and started Apache DUCC demo http://uima-ducc-demo.apache.org:42133/jobs.jsp : - Jobs, Services, Reservations running : OK - WS - Jobs +

Re: [VOTE] Release UIMA-DUCC 2.2.1 RC3

> Downloaded uima-ducc-2.2.1-bin.tar.gz : OK > Installed and started Apache DUCC demo http://uima-ducc-demo.apache. org:42133/jobs.jsp : - Jobs, Services, Reservations running : OK - WS - Jobs

Re: How about moving to GitHub?

I applaud your taking the initiative towards improvement. I did have experience perhaps 1.5 years ago using GitHub for another non-Apache project. My view was negative, though I could not now recite the precise issues encountered. My best recollection is that the happy paths worked fine, but when

Re: How about moving to GitHub?

developer. That's not a desirable situation. > > Peter > > > Am 26.08.2017 um 14:47 schrieb Lou DeGenaro: > > I applaud your taking the initiative towards improvement. I did have > > experience perhaps 1.5 years ago using GitHub for another non-Apache > > pro

Re: [VOTE] Release UIMA-DUCC 2.2.1 RC5

Downloaded uima-ducc-2.2.1-bin.tar.gz https://dist.apache.org/ repos/dist/dev/uima/uima-ducc/ : OK Installed as UIMA DUCC demo http://uima-ducc-demo.apache.org:42133/jobs.jsp following wiki instructions https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2 : OK Inspected ducc-mon web pages:

Re: board report input, please

+1 Lou. On Tue, Sep 12, 2017 at 10:27 AM, Marshall Schor wrote: > here's the report: > > Board report for Apache UIMA, for September 2017. > > Apache UIMA's mission: the creation and maintenance of open-source > software related to the analysis of unstructured data, guided by the > UIMA Oasis S

Re: UIMA-AS Client API Change Discussion

AS cas) > > sendAndReceiveCAS(CAS cas, List > > componentMetricsList) > > > > To support targeting, I can overload the above creating two new methods > > > > sendCAS(CAS cas, String serviceTargetId) > > sendAndReceiveCAS(CAS cas, List > > componentMet

Re: [VOTE] UIMA-DUCC 2.2.2 RC1

Installed on Apache-DUCC. Get the following in the job submission script: id:5 location:26530@uima-ducc-vm2 ERROR: java.lang.NoSuchMethodException: fromJson java.lang.NoSuchMethodException: fromJson at org.apache.uima.ducc.transport.dispatcher.ClassManager.invoke(ClassManager.java:275)

Re: [VOTE] UIMA-DUCC 2.2.2 RC2

Installed on Apache DUCC http://uima-ducc-demo.apache.org:42133/jobs.jsp which looks better that RC1! Hope vote later today or tomorrow. Lou. On Thu, Feb 22, 2018 at 10:55 AM, Jerry Cwiklik wrote: > Hi, > > the UIMA-DUCC 2.2.2 release candidate 2 is ready for voting. > > This version contains

Re: [VOTE] UIMA-DUCC 2.2.2 RC2

- Downloaded bin -OK - Installed on Apache DUCC - OK - Spot checked various ducc-mon web pages - OK - Spot checked duccbook - OK, however > There is no mention in the Glossary of Managed Reservations (aka Arbitrary Processes) - should be added for next release - not a blocker. > I propose: >

Re: [VOTE] UIMA-DUCC 2.2.2 RC3

- downloaded uima-ducc-2.2.2-bin.tar.gz - spot checked issues fixed report - OK - spot checked README - OK - spot checked RELEASE_NOTES - OK ("verbose" fix not mentioned, no problem) - spot checked NOTICE - OK - spot checked LICENSE - OK - installed on apache-DUCC - OK - spot checked ducc-mon li

Re: [VOTE] UIMA-DUCC 2.2.2 RC4

> Downloaded uima-ducc-2.2.2-bin.tar.gz : OK > Installed and started Apache DUCC demo http://uima-ducc-demo.apache.o rg:42133/jobs.jsp : - Jobs, Services, Reservations running : OK - WS - Jobs

Re: Considering to move uimaFIT to git - comments?

+1 Lou. On Wed, Apr 11, 2018 at 8:07 PM, Richard Eckart de Castilho wrote: > Hi all, > > I am considering moving the uimaFIT codebase from SVN to git. INFRA told > me it is possible to move individual sub-projects of a TLP off SVN and onto > git; i.e. it is not necessary to convert the entire T

Re: board report - to be submitted 12 dec

cember 2018. > > Apache UIMA's mission: the creation and maintenance of open-source software > related to the analysis of unstructured data, guided by the UIMA Oasis > Standard. > > ## PMC changes: > > - Currently 16 PMC members. > - No new PMC members added in the l

Re: [VOTE] Release UIMA-DUCC 2.0.0 RC3

I have two complaints (so far): 1. When I build from source the resulting zip is: uima-ducc-2.0.1-SNAPSHOT-bin.tar.gz 2. After installing, a visit to the WS classes page with scroll mode preference results in: DataTables warning: table id=system-classes - Invalid JSON response I will open a J

Re: [VOTE] Release UIMA-DUCC 2.0.0 RC3

ferent matter. Trivial fix. On the next RC I > > can > > > choose 2.1.0 as the next version for DUCC. But this really is not > related > > > to the RC. We can change our poms to whatever version we want post > > release. > > > > > > On Fri

Re: [VOTE] Release UIMA-DUCC 2.0.0 RC5

Installed from binary tarball and ran 1.job - OK (see tutorial on DUCC wiki https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t0 which anticipates 2.0.0) Spot checked License and Notice - OK, but it seems (webserver)jetty-jsp-2.1-7.4.4.v20110707.jar should not be listed as it is covered by

Re: [VOTE] Release UIMA-DUCC 2.0.0 RC6

- built from source w/doc - installed on apache-ducc (demo) http://uima-ducc-demo.apache.org:42133/jobs.jsp +1 OK to release (non-binding vote) Lou. On Thu, Jul 23, 2015 at 3:49 PM, Jaroslaw Cwiklik wrote: > Hi, > > the Apache UIMA DUCC v2.0.0 RC6 is ready for voting. > > Same as RC5 with a fe

Re: [VOTE] Release UIMA-DUCC 2.0.0 RC7

- built from source - followed instructions on wiki [https://cwiki.apache .org/confluence/display/UIMA/DUCC#DUCC-t2] to deploy demo [http://uima-ducc -demo.apache.org:42133/jobs.jsp] - spot check WebServer links - spot check LICENCE, NOTICE, RELEASE_NOTES.html +1 OK to release Lou. On Mon, Aug 3

Re: Running UIMA Apps on Hadoop

Perhaps you have no choice, but if you do then consider DUCC https://uima. apache.org/doc-uimaducc-whatitam.html for UIMA scale-out. Lou. On Fri, Oct 9, 2015 at 5:54 PM, Yi-Wen Liu wrote: > Hi all, > > I am a USC student working on professor Mattmann's project "Integration of > cTAKES/UIMA and

Re: [VOTE] Release UIMA-DUCC 2.0.1 RC2

* fetched tar.gz from link * employed approximate instructions on wiki [https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2] to deploy demo [http://uima-ducc-demo.apache.org:42133/jobs.jsp] * spot check WebServer links DUCCBOOK says: Version 2.0.0 * spot check LICENCE, NOTICE, RELEASE

Re: [VOTE] Release UIMA-DUCC 2.0.1 RC2

oops: should be 2.0.1. Lou. On Thu, Oct 15, 2015 at 11:04 AM, Lou DeGenaro wrote: > * fetched tar.gz from link > * employed approximate instructions on wiki > [https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2] to deploy > demo [http://uima-ducc-demo.apache.org:42

Re: [VOTE] Release UIMA-DUCC 2.0.1 RC3

* fetched tar.gz from link * employed approximate instructions on wiki [https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2] to deploy demo [http://uima-ducc-demo.apache.org:42133/jobs.jsp] * spot check WebServer links * spot check LICENSE, NOTICE, RELEASE_NOTES.html +1 OK to release Lo

Re: uima ducc installation

Yi-Wen, Do you have a firewall blocking ports? Is the port already in-use by another process? Anything interesting in $DUCC_HOME/apache-uima/apache-activemq/data/activemg .log? Lou. On Tue, Oct 20, 2015 at 2:28 AM, Yi-Wen Liu wrote: > Hi, > > I was trying to install UIMA DUCC 2.0.0 on my ma

Re: uima ducc installation

ders but didn't find activemq.log, does that mean I > probably missed some steps? > > Thanks, > Yi-Wen > > On Tue, Oct 20, 2015 at 4:36 AM, Lou DeGenaro > wrote: > > > Yi-Wen, > > > > Do you have a firewall blocking ports? > > > > Is the p

Re: uima ducc installation

rt > > This should produce an error in the logs about a missing activemq.xml, > but > > would at least show that AMQ is installed. AMQ creates the data > directory > > and logs when the broker starts, and also saves the pid. > > > > ~Burn > >

Re: uima ducc installation

to reproduce your compile jsp problem by specifying an > inaccessible directory, but that is certainly worth checking. > > Also have you run ./check_ducc and verified that all the daemons are > running on the head node (or ws pm rm sm & maybe an agent) > > ~Burn > > > On

Re: run fails

Yi-Wen, The DUCC job during runtime comprises two parts, one Job Driver and one or more Job Processes. The log file snippit you posted comprises the latter. Have you examined the Job Driver log file for any errors? The Job Driver log file is found in the same directory and starts with "JD-". Al

Re: run fails but has output

Yi-Wen, The DUCC Job first visits the Initialization state. This is when the Job Driver (JD) initializes your UIMA CollecitonReader (CR). The CR that you specified in your DUCC Job submission is constructed and its getTotal() method is invoked to determine the number of work items. But I think y

Re: run fails but has output

work, and I didn't > add any other special characters in CR. > > Is that error caused by invalid space and characters in Xml, or it's more > like syntax error of CR Xml? > > > > Thanks, > Yi-Wen > > > On Nov 17, 2015, at 5:37 AM, Lou DeGenar

Re: run fails but has output

n screen. > Another log file shows connection refused so I checked driver logs, and > found the three errors in first email. > > Is that error org.xml.sax.SAXParseException; Trying to serialize non-XML > 1.0 character caused by invalid space and characters in Xml, or it's more >

Re: run fails but has output

Yi-Wen, Oh, I see now you ran all-in-one local. But that had errors or ran to completion successfully? Lou. On Tue, Nov 17, 2015 at 5:29 PM, Lou DeGenaro wrote: > Yi-Wen, > > With respect to the ducc.log, I still saw that the DUCC Job was Running > as far as the JD was c

Re: some short questions about UIMA DUCC

Yi-Wen, Privileged ducc_ling is for situations where sharing of resources and data privacy are desired. For example, user "ducc" would use ducc_ling to assume the identity of the job submitter in order to gain access to read and write. This is useful on large compute clusters with many users. Wh

Re: some short questions about UIMA DUCC

estion, is that possible to specify configuration > file for my project running on ducc, in the job file? > > Thanks, > Yi-Wen > > On Tue, Nov 24, 2015 at 3:15 PM, Lou DeGenaro > wrote: > > > Yi-Wen, > > > > Privileged ducc_ling is for situations where shar

Re: submit job programically through http request

There is nothing magical about DUCC's CLI/API, though it is quite convenient. If one wanted to send/receive HTTP directly to the appropriate DUCC daemon one could. Fetch the DUCC's CLI package source code to discover how it is done. Lou. On Sun, Nov 29, 2015 at 6:19 PM, Eddie Epstein wrote: >

Re: lower preprocessing time

Yi-Wen, The latency you are experiencing is by-design for a large-ish computing cluster. The normal life-cycle for a Job is: Received WaitingForDriver WaitingForResources Assigned Initializing Running Completing Completed There are some knobs you can turn to tune for your situation. 1. DUCC in

Re: submit job programically through http request

In org.apache.uima.ducc.transport.dispatcher.DuccEventDispatcher. dispatchAndWaitForDuccReply DUCC uses Camel to send a Job request and receive the reply (and thus HTTP is not directly used). Lou. On Mon, Nov 30, 2015 at 6:11 AM, Lou DeGenaro wrote: > There is nothing magical about DUCC&#x

Re: submit job programically through http request

ves from > BaseHttpDispatcher which does use the java.net HTTP stuff, not Camel. Jim > > On 11/30/15 8:22 AM, Lou DeGenaro wrote: > >> In org.apache.uima.ducc.transport.dispatcher.DuccEventDispatcher. >> dispatchAndWaitForDuccReply DUCC uses Camel to send a Job request and >> r

Re: lower preprocessing time

r Job as a Service 3. Use all-in-one local Lou. On Mon, Nov 30, 2015 at 9:21 AM, Lou DeGenaro wrote: > Yi-Wen, > > The latency you are experiencing is by-design for a large-ish computing > cluster. The normal life-cycle for a Job is: > > Received WaitingForDriver Waiting

Re: [jira] [Commented] (UIMA-4563) Traffic monitoring using Google Analytics

To initially get to the DUCC demo, one must start from here http://uima. apache.org/ which has the privacy statement link, then click on Demo Page or Demo Live. I don't think we need to add privacy statement links on the demo pages themselves. The site has already clearly stated its policy. I'm

Re: [jira] [Commented] (UIMA-4563) Traffic monitoring using Google Analytics

Oh, I see you added this to the Jira. I'll respond in kind. Lou. On Tue, Dec 22, 2015 at 3:14 PM, Lou DeGenaro wrote: > To initially get to the DUCC demo, one must start from here http://uima. > apache.org/ which has the privacy statement link, then click on Demo Page > or Demo

Re: uima ducc wait_for_completion

Yi-Wen, When submitting a DUCC Job, wait for completion should prevent the return until all your work items have been processed. What exactly do you mean by "main process"? Lou. On Sat, Feb 20, 2016 at 10:30 PM, Yi-Wen Liu wrote: > Hello, > > I am using ducc in a web app, and I need to know w

Re: Quarterly board report items?

According to GA for Apache UIMA site from inception of data collection (17 Dec 2015) to date: Sessions = 15,536 Avg. duration = 2:39 Lou. On Fri, Mar 4, 2016 at 1:17 PM, Marshall Schor wrote: > Hi, > > The board report is due Wed Mar 9th (this coming Wednesday). > > I'll put in the normal ite

Re: Moving UIMA DUCC out of the sandbox?

Will you be listening to Pomp and Circumstance during the graduation? :-) Lou. On Wed, Apr 13, 2016 at 2:46 PM, Jaroslaw Cwiklik wrote: > Thanks to all for suggestions and comments. I will graduate DUCC from the > sandbox before the next release of DUCC (2.1.0). I'll do svn move before > RC1 i

Re: [VOTE] Release UIMA-AS 2.8.1 RC3

- Downloaded from bin - OK - Checked README, RELEASE_NOTES, LICENSE and NOTICE - OK but... Noticed that SLF4J API Module (http://www.slf4j.org) org.slf4j:slf4j-api:jar:1.7.10 is not the same version as found in the AMQ lib dir - Started Broker using startBroker.sh - OK - Deployed Deploy_MeetingDe

Re: [VOTE] Release UIMA-AS 2.8.1 RC3

Why do we feel the need to edit the AMQ distribution rather than include it and its Notice and License information in its entirety? If we think a lighter weight AMQ distribution is desirable, any chance of get the AMQ folks to provide such instead of us hacking? On Tue, Apr 26, 2016 at 5:13 PM, R

Re: [jira] [Created] (UIMA-4911) Promote ducc from sandbox to the regular project

I notice that on the wiki page https://cwiki.apache.org/confluence/display/UIMA/Index there is a section entitled "Sandbox" comprising two bullet items: uimaFIT and DUCC[demo]. This should probably be changed. On Wed, Apr 27, 2016 at 9:27 AM, Jerry Cwiklik (JIRA) wrote: > Jerry Cwiklik created U

Re: [VOTE] Release UIMA-AS 2.8.1 RC6

- Downloaded from bin - OK - Checked README, RELEASE_NOTES, LICENSE and NOTICE - OK - slf4j issue fixed - Set JAVA_HOME to use 1.7.0 - Set UIMA_HOME - Started Broker using startBroker.sh - OK - ran OK: adjustExamplePath.sh ./validateDescriptor.sh ../examples/descriptors/tutorial/ex4/MeetingDetec

Re: [VOTE] Release UIMA-AS 2.8.1 RC6

Sorry, previous was sent prematurely. - Downloaded from bin - OK - Checked README, RELEASE_NOTES, LICENSE and NOTICE - OK - slf4j issue fixed - Set JAVA_HOME to use 1.7.0 - Set UIMA_HOME - Started Broker using startBroker.sh - OK - ran OK: adjustExamplePath.sh validateDescriptor.sh ../exampl

Re: [VOTE] Release UIMA-DUCC 2.1.0 RC1

- fetched uima-ducc-2.1.0-bin.tar.gz and installed as potential new apache ducc demo - WebServer DUCC Book link is broken [X] -1 Not OK to release Lou.

Re: [VOTE] Release UIMA-DUCC 2.1.0 RC2

* fetched tar.gz from link * employed approximate instructions on wiki [https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2] to deploy demo (currently http://uima-ducc-vm2.apache.org:42133/jobs.jsp which in the midst of migrating http://uima-ducc-demo.apache.org:42133/jobs.jsp) * spot che

Re: [VOTE] Release UIMA-DUCC 2.1.0 RC3

When I follow this link The source and binary zip/tars are staged here: https://dist.apache.org/repos/dist/dev/uima/uima-ducc/2.1.0/RC3/ I get the response Forbidden You don't have permission to access /repos/dist/dev/uima/uima-ducc/2.1.0/RC3/ on this server. Lou. On Wed, Jul 20, 2016 at 2

Re: [VOTE] Release UIMA-DUCC 2.1.0 RC3

Ok, so now it works. Dunno why!? Lou. On Thu, Jul 21, 2016 at 6:16 AM, Lou DeGenaro wrote: > When I follow this link > > The source and binary zip/tars are staged here: > https://dist.apache.org/repos/dist/dev/uima/uima-ducc/2.1.0/RC3/ > > I get the response > > Forb

Re: [VOTE] Release UIMA-DUCC 2.1.0 RC3

* fetched tar.gz from link * employed approximate instructions on wiki [https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2] to deploy demo (currently http://uima-ducc-vm2.apache.org:42133/jobs.jsp which in the midst of migrating http://uima-ducc-demo.apache.org:42133/jobs.jsp) * spot che

Re: [VOTE] Release UIMA-DUCC 2.1.0 RC4

- Installed from tar.gz (to uima-ducc-demo.apache.org:42133) - OK - Installed demo, which exercises Jobs, Services, and Reservations - OK - Spot checked WebServer links, including DuccBook - OK - Spot checked README, RELEASE_NOTES, LICENSE and NOTICE - OK [x] +1 OK to release Lou. On Thu, Jul 28

Re: [VOTE] Release UIMA-AS 2.9.0 RC1

- OK: on Red Hat Linux downloaded & unzipped uima-as-2.9.0-bin.zip - OK: followed README instructions to > setup environment variables > adjust examples paths > start broker

Re: [jira] [Created] (UIMA-5227) Customized user logging fails in DUCC Job Driver

The JD claims to employ the user's classpath to the build the user's error handler in the initialize() method of org.apache.uima.ducc.container.jd.classload.ProxyJobDriverErrorHandler. Does -Djava.util.logging.config.class get put into the Job specification's user "classpath"? On Wed, Dec 21, 20

Re: [VOTE] Release UIMA-DUCC 2.2.0 RC1

No, this admin command never worked and was never documented in 2.1.0. Having it appear in 2.1.0 was an escape from quality control - harmless, but slightly embarrassing. So it was removed from 2.2.0 build, but kept in source with the hope that it may be re-instated in a future release. On Thu, D

Re: [VOTE] Release UIMA-DUCC 2.2.0 RC1

Yep, looks like bin/tools are not documented. On Thu, Dec 22, 2016 at 10:14 AM, Marshall Schor wrote: > Maybe missing documentation? > > I see some new tooling for ducc is provided, in the folder bin/tools. At > least > one of these (ducc_status) and maybe others were not present in the > previ

Re: [VOTE] Release UIMA-DUCC 2.2.0 RC1

ext > release candidate. Otherwise, please say why these don't need to be > documented :-) > > -Marshall > > > On 12/22/2016 11:06 AM, Lou DeGenaro wrote: > > Yep, looks like bin/tools are not documented. > > > > On Thu, Dec 22, 2016 at 10:14 AM, Marshall Sch

Re: Load on uima-ducc-vm2

Thanks! I found 3 renegade process that were likely left over from a previous DUCC lifetime. I killed them and top looks better now. Lou. On Tue, Jan 17, 2017 at 3:43 PM, Pono Takamori wrote: > Greetings from Infra, > The load on the uima-ducc-vm2.apache.org seems to have been about max > sin

Re: [VOTE] Release UIMA-DUCC 2.2.0 RC2

I contend that MessagesTest and the corresponding internationalization that I started during DUCC's gestation period years ago should be removed or uniformly employed, most especially in the UI. This is otherwise invisible to the enduser and administrator. Not a blocker, and non-trivial to remove

Re: Register service with customized pinger

Hello Florian, There is an example of a custom DUCC service running here http://uima-ducc-demo.apache.org:42133/service.details.jsp?name=CUSTOM:localhost:7175 See the Registry tab and note the "user" specified entries. These correspond to the ducc_services --register parameters. Lou. On Mon, D

Re: [VOTE] UIMA-DUCC 3.0.0 RC3

I'm not 100% sure that I want to vote -1 yet. I'm still debating myself and Eddie. Lou. On Wed, Feb 20, 2019 at 2:09 PM Jaroslaw Cwiklik wrote: > Cancelling RC3 due to problems with start_ducc found by Lou. > > > On Tue, Feb 19, 2019 at 1:21 PM Jerry Cwiklik wrote: > > > Hi, > > > > the UIMA-

Re: board report due in 2 days

3 UIMA-DUCC 3.0.0 RC's voted down. Working on RC 4. Reportable? Lou. On Mon, Mar 11, 2019 at 2:45 PM Marshall Schor wrote: > Hi, > > Please reply with items for the board report. > > I'll include new releases (Ruta 2.7.0). > > -Marshall > >

Re: [VOTE] UIMA-DUCC 3.0.0 RC6

> Downloaded uima-ducc-3.0.0-bin.tar.gz : OK > Installed and started Apache DUCC demo http://uima-ducc-demo.apache.org:42133/jobs.jsp : - Jobs, Services, Reservations running : OK - WS - Jobs +

[ANNOUNCE] CVE-2018-8035: Apache UIMA DUCC webserver cross-site scripting (XSS) vulnerability fix

0 or later Credit: Marshall Schor Lou DeGenaro, on behalf of the Apache UIMA Team

[ANNOUNCE] CVE-2018-8035: Apache UIMA DUCC webserver cross-site scripting (XSS) vulnerability fix

ilter user supplied inputs, which may result in unintended execution of user supplied javascript code. Mitigation: Users are advised to upgrade these UIMA components to the following levels: - Apache UIMA DUCC: upgrade to 3.0.0 or later Credit: Marshall Schor Lou DeGenaro, on behalf of the Apache UIMA Team

Re: upcoming board report

For consideration: 1. CVE-2018-8035: Apache UIMA DUCC webserver cross-site scripting (XSS) vulnerability due to unintended execution of user supplied javascript code. 2. DUCC 3.3.0 (which includes above) Lou. On Thu, Jun 6, 2019 at 12:03 PM Marshall Schor wrote: > I plan to submit the quarte

Re: UIMA website home page improvements

+1 Lou. On Thu, Nov 28, 2019 at 3:16 AM Peter Klügl wrote: > Nice! > > > Am 27.11.2019 um 19:46 schrieb Marshall Schor: > > I added a link to the > 900 github.com repos that depend on uimaj.core. > > > > I added a short paragraph on RUTA with a link on the home page. > > > > I took out the out-

Re: [DISCUSS] New PMC chairperson

I too would like to thank Marshall for his valuable contributions in his several roles on this project. My vote for Richard as new PMC Chair is [+1]. Loou. On Mon, Oct 19, 2020 at 4:11 AM Richard Eckart de Castilho wrote: > Hi all, > > first, I'd like to thank you, Marshall, for all the work a

UIMA-DUCC support

All, The DUCC segment of the Apache UIMA project is in need of hands-on help. Development has come to a halt and fixes, such as upgrading 3rd party dependencies, are at a standstill. Please volunteer to take on responsibility for DUCC support or it will have to be retired. Thanks! Lou DeGenaro

Re: [VOTE] DUCC contribution to the UIMA sandbox

+1 On Fri, Oct 12, 2012 at 3:12 PM, Jaroslaw Cwiklik wrote: > Hi, I'd like to move the DUCC [1] proposal along. > > To that end, I'm asking if you will please VOTE on bringing DUCC into the > Sandbox, after we get a software grant for it. > > [ ] +1 Approve the contribution > [ ] 0 Don't care >

https://cwiki.apache.org/confluence/display/UIMA/powered-by-apache-uima.html

[image: Your Home Page] Page Not FoundJust me? I've found other anomalies too...this the right place to complain (or to be instructed in the errors of my ways)? Lou.

Re: Citable UIMA-DUCC reference

Richard, It's not easy to find. Try https://cwiki.apache.org/confluence/display/UIMA/DUCC After the current UIMA-AS release is completed the first release of DUCC (yay!) will follow, hopefully in the next few weeks. Lou. On Fri, Oct 18, 2013 at 5:28 AM, Richard Eckart de Castilho wrote: > Hi

Re: Early review of DUCC pre-release - test code in non-standard place

Marshall, I'll look into the "MachineFactsTest" and "ReservationFactsTest" and 9 others issue. Thx! Lou. On Wed, Nov 20, 2013 at 9:05 PM, Marshall Schor wrote: > I see some classes that look like tests in the main (non-test) source tree > of at > least one project: uima-ducc-cli (see for ins

Re: Early review of DUCC pre-release - general approach for standard javascript libraries

I think there are two cases: build-time and run-time. For the run-time: I think we have to assume that external access is not possible for the target cluster. Hence, at run-time users employing the DUCC web-server need only access to it to obtain the necessary javascripts. For the build-time: if

Re: Early review of DUCC pre-release - test code in non-standard place

n change it to perhaps PamCheck.java. I happen to like it as it is, but will change if that is the convention. Also there are some packages in the examples project having "test" as a part of the package name. That's OK? Lou. On Thu, Nov 21, 2013 at 8:06 AM, Lou DeGenaro wrote

Re: Early review of DUCC pre-release - general approach for standard javascript libraries

I delivered Jira 3447 to remove extraneous material from the webserver's opensources directory. Lou. On Fri, Nov 22, 2013 at 9:04 AM, Lou DeGenaro wrote: > I think there are two cases: build-time and run-time. > > For the run-time: I think we have to assume that external

Re: Early review of DUCC pre-release - sign_jconsole_jar fails

Jira 3454 is delivered to detect improper ducc.properties specification of ducc.jvm and to give helpful message. On Thu, Nov 21, 2013 at 1:33 PM, Marshall Schor wrote: > On a linux box where I ran this after running post_install (which seemed > to run > OK), I do not have $JAVA_HOME set: > > ..

Re: Early review of DUCC pre-release - building on non-linux platform

Where exactly is this breaking...install, start? DUCC does not officially (or unofficially) support Windows OS. Would adding such code modifications indicate otherwise? Lou. On Mon, Nov 25, 2013 at 4:59 PM, Marshall Schor wrote: > I put into my local copy a test inside the chmod method which

Re: Early review of DUCC pre-release - building on non-linux platform

n't think making this modification would indicate that running is > supported > on windows; we could add a comment, also, just to be clear. > > -Marshall > On 11/26/2013 7:48 AM, Lou DeGenaro wrote: > > Where exactly is this breaking...install, start? DUCC does not > o

Re: Early review of DUCC pre-release - building on non-linux platform

le test. Since the test tests many things, > such > as generating key pairs, and using them to encode and decode a message > (comparing the result), it would be better I think to be able to run the > test. > > -Marshall > > > On 11/26/2013 10:00 AM, Lou DeGenaro wrote: &

Re: [jira] [Commented] (UIMA-3452) DUCCs jars should include a version number

In order of preference, I'd be in favor of: uima-ducc ducc uima and I'd be much less if favor of (meaning against): lib ducc-uima I like the idea of all the ducc jars in their own folder, happily quacking together! Lou. On Tue, Nov 26, 2013 at 11:38 AM, Jerry Cwiklik (JIRA) wrote: > >

Re: Early review of DUCC pre-release - Jars in the src tree?

The ones in uima-ducc-examples have been removed via Jira 3461. On Tue, Nov 26, 2013 at 3:22 PM, Marshall Schor wrote: > The source tree has 4 Jars in it; normally the source tree is supposed to > only > have "sources" in it. Two are in the uima-ducc-examples/lib, and two are > in the > top lev

Re: Early review of DUCC pre-release - examples project has undocumented scripts

Fixed with Jira 3461. Lou. On Tue, Nov 26, 2013 at 3:59 PM, Marshall Schor wrote: > The examples project has scripts: build-ducc-authenticator-jar etc., which > are > not mentioned anywhere, and which have no internal documentation as to what > they're for and when you might want to run them.

Re: Early review of DUCC pre-release - Example code missing comments

The examples pertaining to the webserver have been commented. I've re-assigned Jira 3461 to Eddie for the remaining examples. Lou. On Tue, Nov 26, 2013 at 3:51 PM, Marshall Schor wrote: > DUCC has a project, uima-ducc-examples, which I'm guessing has examples > for the > user to learn from an

Re: Early review of DUCC pre-release - DUCC Web Server

Thanks for the several issues you raised here. I believe that all have now been addressed by Jira 3465. Lou. On Fri, Nov 22, 2013 at 11:36 AM, Marshall Schor wrote: > The docs say this is accessed at port 42133. Is this configurable? > -- > > The docs mention two display modes: scroll mo

Re: Early review of DUCC pre-release - duccdocs - more screenshots?

Screen shots added. Lou. On Fri, Nov 22, 2013 at 12:58 PM, Marshall Schor wrote: > There's quite a bit of documentation on the web server. I think this > could be > enhanced if there was a picture readers could look at. I think the docbook > system has some kind of callouts linking things on

Re: Early review of DUCC potential release concerns - jconsole, aopalliance, poms

Bogus version of jconsole is removed. Lou. On Wed, Nov 20, 2013 at 2:29 PM, Marshall Schor wrote: > I see there's a bogus version of jconsole (says for compiling). I hope we > can > find a better way and get rid of this. > --- > In the parent pom, the aopalliance.version property

Re: [VOTE] Release UIMA-DUCC 1.0.0 RC2

This was fixed for RC2. I'll close the Jira. Lou. On Fri, Dec 27, 2013 at 2:21 PM, Marshall Schor wrote: > I see there's an unresolved Major Jira for Ducc with Fix version 1.0.0: > > https://issues.apache.org/jira/browse/UIMA-3517 > > Should this be fixed before doing the release candidate? >

Re: [VOTE] Release UIMA-DUCC 1.0.0 RC8

I have DUCC RC5 running in 2 places both Linux following (my own) instructions on the wiki, one from source (Quick Start) and the other from binary (Install WebServer Demo). See https://cwiki.apache.org/confluence/display/UIMA/DUCC. None of the post-RC5 changes would affect my success. Lou. On

Re: [VOTE] Release UIMA-DUCC 1.0.0 RC10

Download and unzipped binary tarball Installed on uima-ducc-vm.apache.org following instructions for "Install WebServer Demo" on wiki @ https://cwiki.apache.org/confluence/display/UIMA/DUCC#DUCC-t2 Ran 1.job Also, followed notes to run with simulated agents Ran 1.job Registered and started a servi

re: [ANNOUNCE] Apache UIMA DUCC 1.0.0 Released

Is it premature or could/should the UIMA Home page be revised to include a link to DUCC. One suggestion is to follow the sentence on UIMA_AS: The UIMA-AS Scaleout Framework is an add-on to the base Java framework, supporting a very flexible scaleout ca

Re: [ANNOUNCE] Apache UIMA DUCC 1.0.0 Released

s" instead to subsume UIMA-AS and > DUCC. > >> > uimaFIT could fall under "Java Framework" and Ruta would fall under > >> "Tooling". > >> > > >> > How about setting up dedicated pages for UIMA-AS and UIMA-DUCC, as > they >

Re: [ANNOUNCE] Apache UIMA DUCC 1.0.0 Released

Feb 3, 2014 at 3:23 PM, Lou DeGenaro > wrote: > > > Doing as Jerry suggests is fine by me. That said, however... > > > > It seems that DUCC deserves equal billing in the diagram by either > changing > > UIMA-AS to UIMA-AS & UIMA-DUCC or removing the UIMA-AS as a

  1   2   3   4   5   6   7   8   9   10   >