Hi!
I just created a Mastodon account for the project at @apach...@fosstodon.org
Feel free to follow it!
It's likely to replace the apacheds twitter account in the near future.
Thanks!
--
*Emmanuel Lécharny - CTO* 205 Promenade des Anglais – 06200 NICE
T. +33 (0)4 89 97 36 50
P. +33 (0)6 08
Le 15/10/2018 à 15:20, Colm O hEigeartaigh a écrit :
> Hi Jiajia,
>
> My understanding is that the N are still needed as a user can create a
> (binary) distribution from our (source) distribution.
Absolutely, but they are different N files :-)
Usually, there need to be a 'distribution'
Le 11/10/2018 à 08:12, Li, Jiajia a écrit :
> Hi Colm,
>
> I have added the NOTICE, LICENSE and README, but I have one question,
> has-server with the hadoop-common(Apache license) dependency, so all the
> hadoop-common dependency jars will be under the target/lib folder, should we
> add N
+1. Built from git and packages. Checked the N files. Good to go.
Side note : we might want to use a tool to verify the N files which
are spread all over the project...
Le 21/05/2018 à 14:12, Colm O hEigeartaigh a écrit :
> This is a vote to release Apache Kerby 1.1.1.
>
> Artifacts:
>
>
Le 18/12/2017 à 10:57, Maslova Polina a écrit :
> I have attached the log of kdcinit with the results of search.
> When I tuned on the debug on Apache DS I recieve this in log:
that just means the client has brutally ended its side of the socket.
The server then sends a NoticeOfDisconnect back
Le 18/12/2017 à 09:53, Maslova Polina a écrit :
> Dear Jiajia!
>
> In the kdcinit log I have this
>
> 2017-12-18 10:10:11 DEBUG{LdapNetworkConnection.java:2288}-Search successful
> : MessageType : SEARCH_RESULT_DONE
> Message ID : 2
> Search Result Done
> Ldap Result
>
Hi Jiajia,
Le 24/11/2017 à 04:30, Li, Jiajia a écrit :
> Hi all,
>
> I would like to post a proposal about merging a new project HAS (Hadoop
> Authentication Service) to Apache Kerby. HAS is led by Intel and Alibaba, it
> is a solution to support the authentication of open source big data
Le 12/09/2017 à 14:01, Colm O hEigeartaigh a écrit :
> Hi all,
>
> Other git-based projects at Apache, such as the new git repo for the Apache
> Directory LDAP API or Apache CXF, have moved to use gitbox.apache.org. The
> main advantage is that the source is automatically synced with github, and
Finaly whipped it :-)
Built from tag and package, N checked : all is good
+1 !
Le 30/08/2017 à 12:30, Colm O hEigeartaigh a écrit :
> This is a vote to release Apache Kerby 1.0.1.
>
> Issues fixed:
>
> https://issues.apache.org/jira/projects/DIRKRB/versions/12340574
>
> Git tag:
>
>
Sorry, I didn't had time to check this release. I'll do that tonite, if
you don't call this vote done already :-)
--
Emmanuel Lecharny
Symas.com
directory.apache.org
the main published site still has
> "1.0.0-RC2".
>
> Colm.
>
> On Wed, May 17, 2017 at 10:33 AM, Emmanuel Lécharny <elecha...@gmail.com>
> wrote:
>
>>
>> Le 17/05/2017 à 10:32, Colm O hEigeartaigh a écrit :
>>> Is it possible to push
Le 17/05/2017 à 10:32, Colm O hEigeartaigh a écrit :
> Is it possible to push the staging site manually? I'm still waiting to see
> the updates I made propagate through...
What commit don't you see on the staging site ?
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Le 16/05/2017 à 15:42, Colm O hEigeartaigh a écrit :
> Thanks, I guess it takes +24 hours as I made some changes yesterday morning
> that still haven't appeared. Emmanuel - is there any way of seeing what the
> website looks like after changes to the SVN site, but before it gets
> published?
Le 16/05/2017 à 14:14, Colm O hEigeartaigh a écrit :
> Thanks Emmanuel...where is the staging site?
https://svn.apache.org/repos/asf/directory/site/trunk/ (and under
content/kerby)
Yes. I know. svn.
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Le 16/05/2017 à 11:44, Colm O hEigeartaigh a écrit :
> Yes, the release is done and available in Maven central + the dist. The
> website isn't updated yetis there anything I need to do to trigger the
> update apart from checkin to the website svn?
If the staging site is ok, I can publish
Cheked the source
checked the signature
checked the N files
sounds good to me
+1 !
Le 10/05/2017 à 12:14, Colm O hEigeartaigh a écrit :
> This is (the second) vote to release Apache Kerby 1.0.0. We had to cancel
> the first vote after Emmanuel identified some issues with the NOTICE +
>
Le 09/05/2017 à 14:23, Colm O hEigeartaigh a écrit :
> Hi Kai,
>
> What matters is what jars we are including in the "lib". Any changes Netty
> made to third party dependencies in these jars must be in the
> NOTICE/licenses.
Colm is right.
Now, it's enough - assuming that they have been double
Le 09/05/2017 à 12:24, Colm O hEigeartaigh a écrit :
> Thanks Emmanuel. The user would have to add zookeeper/nimbus in the poms
> before generating the distribution to add them, so I am going to remove
> these from the NOTICE file as they are not required.
>
> OK here are the changes I have
Le 09/05/2017 à 11:16, Colm O hEigeartaigh a écrit :
> OK, seeing as we don't bundle them by default, then IMO we don't need to
> include them in the NOTICE file. Emmanuel, can you confirm?
Everything that is not bundled does not have to be into N files.
If there is no way a user can grab the
Le 08/05/2017 à 21:40, Colm O hEigeartaigh a écrit :
> I don't think we need the Mockito notice as it's a test dependency, right?
right.
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Le 08/05/2017 à 14:44, Stefan Seelmann a écrit :
> On 05/08/2017 01:23 PM, Emmanuel Lécharny wrote:
>>
>> Le 08/05/2017 à 11:26, Colm O hEigeartaigh a écrit :
>>> Hi Emmanuel,
>>>
>>> Is there a wiki page or something that you are aware of at Apache that
Hi guys,
I have checked all the modules, and their dependencies. Here is the result :
kerby-all -> test[junit, assertj-core] : OK, no N, test
|
+-- kerby-common -> [commons.io] : OK, no N, Apache
+-- kerby-pkix -> [slf4j-api], test[slf4j-simple, mockito-core] : Need
to add the slf4j N
Le 07/05/2017 à 10:31, Colm O hEigeartaigh a écrit :
> I'm cancelling this vote until we have addressed Emmanuel's concerns.
> Emmanuel, can you review the changes Jiajia made?
Can you simply suspend the vote ? I'd like to be sure I'm not 100% wrong
with the N stuff.
We need to have a convo
Le 27/09/16 à 03:06, Zheng, Kai a écrit :
> An interesting idea indeed! Actually we Chinese have different naming scheme
> ... sure it would be good when come to consider an English name, but that
> would only happen when it's really needed, for example, being in a school
> with many foreigner
Le 21/09/16 à 10:45, Zheng, Kai a écrit :
> Hi folks,
>
> I'd like to update that our tech lead Jiajia on Kerby project is taking a
> long leave from the team and has delivered a very cute baby. Congratulations
> to Jiajia! After some basic ramp up, Sammi will help with her role in my side
>
Le 21/09/16 à 10:45, Zheng, Kai a écrit :
> Hi folks,
>
> I'd like to update that our tech lead Jiajia on Kerby project is taking a
> long leave from the team and has delivered a very cute baby.
Her best release, ever !!! ;-)
Congrats !
Le 27/07/16 à 10:54, Zheng, Kai a écrit :
> Maybe we could release this version as 1.0.0 directly? Any concern? I don't
> see any. We could claim the authorization feature and remote kadmin support
> as [EXPERIMENTAL].
>
> Sorry too busy recently and don't have bandwidth on this. Hope it can
Le 27/07/16 à 08:52, Li, Jiajia a écrit :
> Hi all,
>
> March 13, the 1.0.0-RC2 of Kerby was released. We're thinking about a new
> Kerby release(RC3).
> From Mar 13 to Jul 27, 60 JIRA issues were resolved, including following
> important features:
>
> 1. Kerby authorization support. Gerard and
Le 25/05/16 à 10:41, Zheng, Kai a écrit :
> Yeah, I must learn from you and see how it's well balanced among work, life
> and open source contribution. :)
Easy : I'm a light sleeper (5:30/6h a night), and I'm married with a
wonderful wife who sleep 10 hours a night ! That leave me with 4 hours a
Le 25/05/16 à 00:18, Zheng, Kai a écrit :
> Thanks for the nice asking :)
>
> Haox is just a combination of my two boys' given names.
Nice !!
> I wished it would make some sense to them because in the whole year I spent
> lots of my spare time on the initial project having to leave them aside
Le 24/05/16 à 17:12, Zheng, Kai a écrit :
> Thanks Jiajia for thinking about this. Thanks Emmanuel for the info.
>
> Note, Hoax => Haox. The starting date would be 2015 (at the very beginning).
Just curious : does Haox means something in Chinese ?
Otherwise, where does the name come from ?
Le 24/05/16 à 10:49, Li, Jiajia a écrit :
> I'm writing the Kerby
> NOTICE(https://github.com/apache/directory-kerby/blob/trunk/NOTICE.txt).
> I'm not sure of the year of copyright, the NOTICE in ApacheDS is (Copyright
> 2003-2014), how about Kerby? Can anyone help me?
Starting date is 2014,
Le 06/05/16 23:41, Zheng, Kai a écrit :
> Hi Shawn, it's great we'll be able to have a meet. Yes, the whole next week
> I'll be hanging there.
Ra... I wish I could have gone :/
Enjoy the trip, and have some nice meeting with Shawn and Lucas ! All my
best to all of you, guys !
Le 05/04/16 02:11, Julian Hyde a écrit :
> The semantic versioning site[1] has some examples of what is appropriate, and
> gives '1.0.0-alpha.1’ as an example of a ‘pre-release version’. In this
> scheme, Kerby’s releases would be ‘1.0.0-M.1’ and ‘1.0.0-M.2’.
We don't follow that kind of
Le 11/03/16 07:52, Zheng, Kai a écrit :
> Thanks for the clarifying. Looks like not just me not knowing this.
> So a release needs a binding vote only from PMCs, is this specifically for
> Directory or all ASF projects?
This is for all the ASF projects : " the basic rule is that only PMC
Le 11/03/16 02:18, Li, Jiajia a écrit :
> Hi guys,
>
> Thanks to all who voted! The vote has passed with the following tally:
>
> +1 Binding (8 total)
> Emmanuel
> Stefan
> Colm
> Kai
> Lin
> Yaning
> Shawn
> Jiajia Li
For clarity, the only binding +1 are Stefan, Colm, Kai, Shawn and me,
which is
Le 28/01/16 08:00, Li, Jiajia a écrit :
> Yes, if no one push or review until tomorrow morning, I will push it.
have you setup teh CMS plugin in your browser ?
Le 28/01/16 07:36, Zheng, Kai a écrit :
> Sounds good to me. Thanks Jiajia.
>
> The web site looks still old. Is there anyone help with the review and
> pushing? Or can Jiajia do the pushing so that it can be speed up some bit?
> Thanks.
Everything that is pushed to the web site goes to
Le 27/01/16 08:44, Zheng, Kai a écrit :
> I'm not aware of any issue if any.
>
>>> We definitively have to move the 'official' web site to git
> By git, you mean just git or github?
git.
>
>>> so that it can be a sub-project of kerby
> Cool! So we can maintain the docs or the site in the codebase
Le 26/01/16 09:06, Li, Jiajia a écrit :
> We now changed the docs in github site:
> http://www.github.com/apache/directory-kerby,
The problem is that it's not what users are seeing.
It would be cool to update the real site instead of pushing the infos on
a github repo which is not the direct
Le 27/01/16 03:15, Li, Jiajia a écrit :
> Hi Emmanuel,
> Thanks for your reminder, as we said in todo list, we will update the website
> synchronization after the changes done in github repo.
> And now the asn1 changes shows in
> http://directory.staging.apache.org/kerby/kerby-asn1.html
> And
Le 26/01/16 06:49, Zheng, Kai a écrit :
> Hi Jiajia,
>
> The recent project site looks good. Some comments:
>
> Ref. the following, maybe we could rename 1.0.0-RC1-APIs to 1.0.0.-rc1,
> because we may have more contents other than just APIs related to put it in.
> $ ls -1 docs
> 1.0.0-RC1-APIs/
>
Le 11/01/16 10:18, Zheng, Kai a écrit :
> I don't quite understand your question. Apparently the codes are in some
> module(s), but isn't relevant to the question that whether it should stay in
> trunk or a branch. Kadmin-remote is a big new feature that involves
> significant new codes and
Le 11/01/16 12:12, Zheng, Kai a écrit :
>>> your initial message was "kadmin-remote branch is created for the remote
>>> kadmin support work.".
> My message here may be a little simple, but I based on the assumption and
> fact that we have discussed quite much about the feature.
'Quite much'
Le 04/01/16 08:39, Zheng, Kai a écrit :
> I know and agree with the point you made here. What I would say is that, our
> Kerberos implementation codes are still lacking many things and to be evolved
> fast. We may see many classes, variables, methods and codes are not
> referenced in the
Le 04/01/16 08:57, Li, Jiajia a écrit :
> Thanks Kai, I will check my env.
This is a weird error :/
I was able to run mvn apache-rat:check after having add these lines in
my ~/.m2/settings.xml file :
org.apache.rat
No idea why it works with that, and why it's necessary.
None of the
Le 03/01/16 21:50, Emmanuel Lécharny a écrit :
> Hi,
>
> another class, another question ;-)
>
> (Note that this class is currently not used in Kerby (it will be at some
> point, as this message is sent back to the client as a response to a
> KRB-AP-REQ message when the mutu
Le 04/01/16 06:18, Zheng, Kai a écrit :
> Not yet. There were two PDFs in the docs folder that document about it.
> They're still drafts but we're still pushing on that.
Ah, good to know !!!
I'll add a reference to this draft in the code.
Thanks Kai !
Le 04/01/16 06:12, Zheng, Kai a écrit :
> It's good to look at the life cycle of these decrypted objects but I don't
> think it will help a lot if we would do otherwise. Generally decrypting the
> part and using the decrypted result are not the same place.
Here is where the encrpted data is
Hi,
there is a class named org.apache.kerby.kerberos.kerb.type.ad.AdToken.
What is it used for ? (there is no reference to this class anywhere in
Kerby code)
AD-TOKEN ::= SEQUENCE {
token [0] OCTET STRING,
}
Le 30/12/15 09:49, Li, Jiajia a écrit :
> Hi all,
> As Kiran said: " we need to improve the packaging of kdc-dist, it is
> currently copying libraries into the module source root, though it is ignored
> by Git, it should best be copied to the 'target'
> directory."
>
> Currently the libs are in:
Le 30/12/15 10:46, Zheng, Kai a écrit :
> The logic is either from the spec (3961?) or MIT Kerberos codes. It's
> intended to form the salt in that way, thus given a certain password for a
> principal, the generated encryption key will be the same value for an
> encryption type. All the vendors
Hi,
looking at teh KerberosString class, I think it's not doing the job it's
suppose to do.
Kerberos String is a restricted version of the ASN.1 GeneralString,
limiting the chars that can be used to the ASCII sub-set (ie, 0x00..0x7F).
There is no control whatsoever on the value you can inject
Le 28/12/15 02:12, Zheng, Kai a écrit :
> Hi,
>
> I'd suggest we use 'trunk' instead of 'master' to name the trunk branch as
> mostly often seen in other projects.
+1 to that.
> It will be easier understood by new comers.
> Meanwhile, I'll update pom.xml files to use the version like
Le 24/12/15 01:56, Zheng, Kai a écrit :
> Nice picture!! My comments are embedded marked as [Kai].
>
> -Original Message-
> From: Emmanuel Lécharny [mailto:elecha...@gmail.com]
> Sent: Thursday, December 24, 2015 1:29 AM
> To: Apache Directory Developers List <d...
Le 24/12/15 01:31, Zheng, Kai a écrit :
> Thanks Emmanuel for the review and great comments! The questions are hard but
> fortunately I'm still kept in the loop so my pleasure to address them. My
> comments are embedded and marked by [Kai].
>
> -Original Message-
&
Le 24/12/15 14:14, Zheng, Kai a écrit :
> Ah it happens so fast and thank you so much. I wish we could have a compiler
> that accepts the ASN1 module definition files and then help generate/update
> these classes. It's one thing I want to develop but had better focus on our
> Kerberos things
Le 24/12/15 10:10, Emmanuel Lécharny a écrit :
> Le 24/12/15 01:31, Zheng, Kai a écrit :
> [Kai] They're very good suggestions and should become true, though a tiresome
> work because there are so many user defined types now. I'm wondering if any
> contributor would help with such.
Le 20/12/15 15:08, Zheng, Kai a écrit :
> Hi all,
>
> I took some time to finish refining the KrbClient API according to some
> discussion before after some further thinking, please checkout recent commits
> for the results. There are some ideas left to do but I don't do because
> they're still
Le 13/12/15 10:31, Zheng, Kai a écrit :
> Any thought? I plan to get the initial job done recently because I need a MIT
> Kerberos setup for some bug shooting but don't want to mess my server. Thanks!
That sounds like an option. When I need some env to do some test, I
usually clone a VM on my
Le 08/12/15 12:18, Zheng, Kai a écrit :
> Ah, right. Thanks. Will update when the job is all done. This time the
> overall goal is to support BER encoding/decoding, indefinitive lenghth
> encoding, primitive but constructed encoding/decoding and etc. The codes are
> almost done, but I'm still
Le 29/11/15 02:50, Marc Boorshtein a écrit :
> Sorry, was working on some other projects. My thought was instead of code
> that looks like this:
>
> requestOptions = new KOptions();
> requestOptions.add(KrbOption.USE_TGT, tgt);
> //requestOptions.add(KrbOption.SERVER_PRINCIPAL,
>
Le 26/11/15 12:44, Zheng, Kai a écrit :
> Thanks Emmanuel for the feedback and sorry for the late response as focusing
> on the ASN1 things.
>
>>> If those elements are going to be Enum, keep in mind that you can inherit
>>> from another enum.
> In current Kerby codes, for options and flags, we
Le 24/11/15 03:51, Marc Boorshtein a écrit :
> Yep, will do. MS actually has a really good article detailing the asn.1
> structure.
A long time ago (Isuspect ist was back in 2007), I wrote an ASN.1 SPNEGO
codec here is a bit of documentation :
Le 24/11/15 06:59, Zheng, Kai a écrit :
> There are good feedbacks from Steve recently. Based on discussions with him
> and Emmanuel, I assembled below thoughts.
>
> KrbClient and its relatives like KrbOption would be broken down according to
> supported mechanisms and functionalities.
>
Le 20/11/15 10:03, Zheng, Kai a écrit :
>>> I'm not sure I see the point of having one gigantic Enum gathering all the
>>> possible flags that we can set on any different kerberos element.
> Ok, got your point. Yeah, KrbOption is becoming big, including all kinds of
> options from frontended
Le 20/11/15 01:44, Zheng, Kai a écrit :
> Hi Steve,
>
> Ref. https://issues.apache.org/jira/browse/DIRKRB-458 you're going to add
> about 15 KDC flags into KrbOption. As we discussed it sounds reasonable. Now
> here I'm considering it may be good to categorize them or easily identify
> them as
Le 23/09/15 15:20, Zheng, Kai a écrit :
> Maybe this isn't a blocker? Guess we could fix this later when available.
It's definitively not a blocker.
Le 22/09/15 04:12, Li, Jiajia a écrit :
> Hi Emmanuel,
>
> Can I do some work for the header and download?
Thanks to Pierre-Arnaud, it's alreayd there ! (at least, on the staging
site)
> I guess we need to upload the zip file to some minors?
The mirrors will get updated automatically, it just
Le 22/09/15 08:44, Li, Jiajia a écrit :
> Sounds great!
Okie, I think I fixed the download issue I had.
I encourage all of you to check teh website
(directory.apache.org[/kerby]) to see if all teh links are correct, and
that you can safely download the packages, and check the signatures.
Be
Le 22/09/15 12:23, Zheng, Kai a écrit :
> Great work, Emmanuel, thanks a lot!
>
>
>
> I checked the web site and also the downloading. Nothing serious is found.
> Just a minor thing, ref. below snapshot.
The snapshot was removed from the mail...
Le 22/09/15 16:34, Lin Chen a écrit :
> Hi all,
> A minor issue found in website: Should the color of favicon.ico be
> changed? For now the icon is the same as that in LDAP API. Snapshot below.
FTR, the mailing list manager removes all the attachements.
Yes, we would need a new favicon for
Le 21/09/15 10:25, Li, Jiajia a écrit :
> Hi Emmanuel,
> Are there any update and more things to do for the release?
Hi Jiajia,
sorry for having delayed the web-site update. It's a work in progress,
and there are a few missing parts.
Here the current sstaging site :
Hi guys,
I'm therefore closing the vote, which was a success with 6 +1 and 2 +0
+1 :
Stefan,
Kiran,
Yaning,
Kai,
Colm
and me
+0 :
Jiajia,
Felix
I'll publish the packages soon.
Many thanks and congrats for this very first release !
Hi !
this is the very first release of Apache Kerby, 1.0.0-RC1 (second attempt).
This is a
release candidate, which means we are reaching an API freeze, but some
bug might be fixed before we move to an official GA.
Please cast your vote !
The revision :
Le 03/08/15 16:58, Zheng, Kai a écrit :
I just thought of another two items to do for the release. They came to my
mind during related discussions.
1. Double check all the left issues/JIRAs. If not must to have, we can
retarget them for 1.0.0-rc2, 1.0.0, and 2.0.0 accordingly.
2. Mavibot
Le 03/08/15 19:50, Stefan Seelmann a écrit :
Hi,
as we plan to do a release, I noticed that the Kerby parent POM does not
inherit from another POM, neither the Directory project [1], nor the
general ASF POM [2].
When the plan is to move Kerby sooner or later to its own TLP it may not
make
Le 29/07/15 22:52, Tom Mueller a écrit :
Greetings,
Kerby is new to me but I'm quite excited about what it has to offer. The
project goals look great as an embeddable Java Kerberos implementation is
really needed. Having read through the material on the website, downloaded
and built the
Le 06/07/15 07:06, Zheng, Kai a écrit :
Yaning,
How about going on with this simple API change, as previously proposed by
Stefan? I thought it can server well the same purpose for cursor.
ListString getIdentities(int start, int limit)
=
IteratorString getIdentities()
I'll suggest - again
Le 03/07/15 10:53, Zheng, Kai a écrit :
Would anyone let me know how to subscribe notificati...@directory.apache.org?
Thanks.
Send a mail to notifications-subscr...@directory.apache.org
No need to add a subject or an object.
Le 02/07/15 11:36, Zheng, Kai a écrit :
Thanks Emmanuel again for sorting this out. Some lazy guys like me should
definitely be more careful and keep the mentioned points in mind before
commit. Some notes here.
The README.md file has none.
I don't know if github markdown supports comment
81 matches
Mail list logo
