From patricia48@example.org Tue Jun 01 08:54:02 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 42717 invoked from network); 1 Jun 2004 08:54:02 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 08:54:02 -0000 Received: (qmail 12972 invoked by uid 500); 1 Jun 2004 08:53:55 -0000 Delivered-To: patricia48@example.org Received: (qmail 12903 invoked by uid 500); 1 Jun 2004 08:53:55 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 12888 invoked by uid 99); 1 Jun 2004 08:53:55 -0000 Received: from [83.161.120.155] (HELO mail15.ha.ovh.net) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 01:53:55 -0700 Received: (qmail 20115 invoked by uid 503); 1 Jun 2004 08:53:32 -0000 Received: from cney.net1.nerim.net (HELO CNEY3) (patricia48@example.org) by ns0.ovh.net with SMTP; 1 Jun 2004 08:53:32 -0000 From: "Christophe Ney" <patricia48@example.org> To: <patricia48@example.org> Cc: <patricia48@example.org> Subject: RE: secure pot for geronimo JVM Date: Tue, 1 Jun 2004 10:52:54 +0200 Message-ID: <patricia48@example.org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <001301c44756$a384b780$6401a8c0@Tabletti> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4927.1200 Importance: Normal X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Holger, ProActive is an open source project from the INRIA/OASIS lab, the source is available in the download. It is very high tech project that resulted research work conducted by the OASIS group, but the code base has been broadly deployed, and the software is now quite mature (see project docs) As you can imagine, this kind of project is really driven by a single team and CVS was not very attrative to them as they were refactoring quite a lot. SVN is what they need, so we are setting it up (does this ring any bell? :-) ) Looking at security, ObjectWeb would be very happy to set-up collaboration on Security with Apache, and we should be able to accomodate licensing for the parts that are of common interest (change to BSD is what we have already been able to achieve for ASM and JOTM). Thanks, Christophe Christophe Ney Executive Director ObjectWeb Consortium > -----Original Message----- > From: Holger Baxmann [mailto:patricia48@example.org] > Sent: lundi 31 mai 2004 23:31 > To: patricia48@example.org > Subject: secure pot for geronimo JVM > > > Is anybody aware of the ProActive project? > > http://www-sop.inria.fr/oasis/ProActive/ > > http://www-sop.inria.fr/oasis/ProActive/doc/api/org/objectweb/proa ctive/doc- files/Security.html I am on the way to evaluate it for having a secure, signed, non-vandalising wrapper to have a either paranoid SecurityManager environment or the default open-door startup environment for gero. Especially StartSecureNode could not be find by me in the (LGPLed) source downloads. AFAIK anonymous cvs is not available. Package names start with org.objectweb - so i was thinking ... thanks alot bax From patricia48@example.org Tue Jun 01 08:59:40 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 46105 invoked from network); 1 Jun 2004 08:59:39 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 08:59:39 -0000 Received: (qmail 18491 invoked by uid 500); 1 Jun 2004 08:59:34 -0000 Delivered-To: patricia48@example.org Received: (qmail 18278 invoked by uid 500); 1 Jun 2004 08:59:33 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 18265 invoked by uid 99); 1 Jun 2004 08:59:33 -0000 Received: from [83.161.120.155] (HELO mail15.ha.ovh.net) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 01:59:32 -0700 Received: (qmail 29629 invoked by uid 503); 1 Jun 2004 08:59:02 -0000 Received: from cney.net1.nerim.net (HELO CNEY3) (patricia48@example.org) by ns0.ovh.net with SMTP; 1 Jun 2004 08:59:02 -0000 From: "Christophe Ney" <patricia48@example.org> To: <patricia48@example.org> Cc: <patricia48@example.org> Subject: RE: secure pot for geronimo JVM Date: Tue, 1 Jun 2004 10:58:24 +0200 Message-ID: <patricia48@example.org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <001301c44756$a384b780$6401a8c0@Tabletti> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4927.1200 Importance: Normal X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Note: Resending due to invalid CC Holger, ProActive is an open source project from the INRIA/OASIS lab, the source is available in the download. It is very high tech project that resulted research work conducted by the OASIS group, but the code base has been broadly deployed, and the software is now quite mature (see project docs) As you can imagine, this kind of project is really driven by a single team and CVS was not very attrative to them as they were refactoring quite a lot. SVN is what they need, so we are setting it up (does this ring any bell? :-) ) Looking at security, ObjectWeb would be very happy to set-up collaboration on Security with Apache, and we should be able to accomodate licensing for the parts that are of common interest (change to BSD is what we have already been able to achieve for ASM and JOTM). Thanks, Christophe Christophe Ney Executive Director ObjectWeb Consortium > -----Original Message----- > From: Holger Baxmann [mailto:patricia48@example.org] > Sent: lundi 31 mai 2004 23:31 > To: patricia48@example.org > Subject: secure pot for geronimo JVM > > > Is anybody aware of the ProActive project? > > http://www-sop.inria.fr/oasis/ProActive/ > > http://www-sop.inria.fr/oasis/ProActive/doc/api/org/objectweb/proa ctive/doc- files/Security.html I am on the way to evaluate it for having a secure, signed, non-vandalising wrapper to have a either paranoid SecurityManager environment or the default open-door startup environment for gero. Especially StartSecureNode could not be find by me in the (LGPLed) source downloads. AFAIK anonymous cvs is not available. Package names start with org.objectweb - so i was thinking ... thanks alot bax From patricia48@example.org Tue Jun 01 09:19:06 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 60077 invoked from network); 1 Jun 2004 09:19:06 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 09:19:06 -0000 Received: (qmail 53933 invoked by uid 500); 1 Jun 2004 09:18:59 -0000 Delivered-To: patricia48@example.org Received: (qmail 53825 invoked by uid 500); 1 Jun 2004 09:18:56 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 53811 invoked by uid 500); 1 Jun 2004 09:18:56 -0000 Delivered-To: patricia48@example.org Received: (qmail 53807 invoked by uid 99); 1 Jun 2004 09:18:56 -0000 Received: from [83.161.120.155] (HELO voyager.coretrek.no) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 02:18:56 -0700 Received: from localhost (localhost [83.161.120.155]) by voyager.coretrek.no (Postfix) with ESMTP id 208AFA8999 for <patricia48@example.org>; Tue, 1 Jun 2004 11:18:35 +0200 (CEST) Received: from excalibur.intra.coretrek.com (wormhole.coretrek.no [83.161.120.155]) by voyager.coretrek.no (Postfix) with ESMTP id 850AEA8993 for <patricia48@example.org>; Tue, 1 Jun 2004 11:18:34 +0200 (CEST) Date: Tue, 1 Jun 2004 11:18:34 +0200 (CEST) From: =?iso-8859-1?Q?Endre_St=F8lsvik?= <patricia48@example.org> X-X-Sender: patricia48@example.org To: patricia48@example.org Subject: Re: Geronimo code format In-Reply-To: <07258F4244D6F649B1A78993D070B7CA0181A865@ACSPMXE02> Message-ID: <patricia48@example.org> X-My-Opinion: War and bombs are bad. Peace and flowers are good. ;-D MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=iso-8859-1 Content-Transfer-Encoding: 8BIT X-Virus-Scanned: by AMaViS perl-11 (CoreTrek patch 1) X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N On Thu, 27 May 2004, Hamilton Verissimo de Oliveira (Engenharia - SPO) wrote: | -----Mensagem original----- | De: Aaron Mulder [mailto:patricia48@example.org] | | > Noooo!!! Please, no start braces on separate lines. I don't care | > for the extra spaces around parentheses much either. | | :-) | This 'braces on same/new line' subject is almost a religious issue ;-) This is because the devil have sent some of his spawn to earth to lure programmers to use curlies-on-new-line to induce war and fiendish behaviour amongst the otherwise lovingly nice developers. ANY person not posessed by satan immediately and naturally hates such practices, and will of course place the curly on the same line as the programming token to which it belongs. -- Mvh, Endre Stølsvik M743.920.4002] F743.920.4002] Developer @ CoreTrek AS - http://www.coretrek.com/ CoreTrek corporate portal / EIP - http://www.corelets.com/ From patricia48@example.org Tue Jun 01 11:07:04 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 31096 invoked from network); 1 Jun 2004 11:07:04 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 11:07:04 -0000 Received: (qmail 14294 invoked by uid 500); 1 Jun 2004 11:06:46 -0000 Delivered-To: patricia48@example.org Received: (qmail 14170 invoked by uid 500); 1 Jun 2004 11:06:45 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 14090 invoked by uid 99); 1 Jun 2004 11:06:44 -0000 Received: from [83.161.120.155] (HELO alan.toolazydogs.com) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 04:06:44 -0700 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: secure pot for geronimo JVM X-MIMEOLE: Produced By Microsoft Exchange V6.0.6249.0 Date: Tue, 1 Jun 2004 07:04:18 -0400 Message-ID: <patricia48@example.org> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: secure pot for geronimo JVM Thread-Index: AcRHtpyBuA9npja5TA6czCCOBYTTXAAEUlsw From: "Alan D. Cabrera" <patricia48@example.org> To: <patricia48@example.org> Cc: <patricia48@example.org> X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N This looks interesting. We welcome concrete suggestions for what technology pieces would be helpful to the Geronimo security architecture. Regards, Alan > -----Original Message----- > From: Christophe Ney [mailto:patricia48@example.org] > Sent: Tuesday, June 01, 2004 3:58 AM > To: patricia48@example.org > Cc: patricia48@example.org > Subject: RE: secure pot for geronimo JVM >=20 > Note: Resending due to invalid CC >=20 > Holger, >=20 > ProActive is an open source project from the INRIA/OASIS lab, > the source is available in the download. It is very high tech > project that resulted research work conducted by the OASIS > group, but the code base has been broadly deployed, and the > software is now quite mature (see project docs) >=20 > As you can imagine, this kind of project is really driven by > a single team and CVS was not very attrative to them as they > were refactoring quite a lot. SVN is what they need, so > we are setting it up (does this ring any bell? :-) ) >=20 > Looking at security, ObjectWeb would be very happy to set-up > collaboration on Security with Apache, and we should be able > to accomodate licensing for the parts that are of common interest > (change to BSD is what we have already been able to achieve for > ASM and JOTM). >=20 > Thanks, > Christophe >=20 > Christophe Ney > Executive Director > ObjectWeb Consortium >=20 >=20 > > -----Original Message----- > > From: Holger Baxmann [mailto:patricia48@example.org] > > Sent: lundi 31 mai 2004 23:31 > > To: patricia48@example.org > > Subject: secure pot for geronimo JVM > > > > > > Is anybody aware of the ProActive project? > > > > http://www-sop.inria.fr/oasis/ProActive/ > > > > http://www-sop.inria.fr/oasis/ProActive/doc/api/org/objectweb/proa > ctive/doc- > files/Security.html >=20 > I am on the way to evaluate it for having a secure, signed, non- > vandalising > wrapper to have a either paranoid SecurityManager environment or the > default > open-door startup environment for gero. >=20 > Especially StartSecureNode could not be find by me in the (LGPLed) source > downloads. AFAIK anonymous cvs is not available. >=20 > Package names start with org.objectweb - so i was thinking ... >=20 > thanks alot >=20 > bax >=20 From patricia48@example.org Tue Jun 01 11:11:03 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 33163 invoked from network); 1 Jun 2004 11:11:03 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 11:11:03 -0000 Received: (qmail 19729 invoked by uid 500); 1 Jun 2004 11:10:58 -0000 Delivered-To: patricia48@example.org Received: (qmail 19408 invoked by uid 500); 1 Jun 2004 11:10:56 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 19378 invoked by uid 99); 1 Jun 2004 11:10:55 -0000 Received: from [83.161.120.155] (HELO alan.toolazydogs.com) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 04:10:55 -0700 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: Security configuration X-MIMEOLE: Produced By Microsoft Exchange V6.0.6249.0 Date: Tue, 1 Jun 2004 07:07:09 -0400 Message-ID: <patricia48@example.org> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Security configuration Thread-Index: AcRHSpBPtN/rZW/STwicJb+HQrdCZAAfbW+g From: "Alan D. Cabrera" <patricia48@example.org> To: <patricia48@example.org> X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N > -----Original Message----- > From: Jeremy Boynes [mailto:patricia48@example.org] >=20 > Alan D. Cabrera wrote: >=20 >=20 > > What are the goals for the default configuration? I had always thought > > that it was a simple example of how the server could work. > > >=20 > The default configuration is the primary one that gets certified and so > needs to support all the J2EE functions. One of those is deployment > (JSR88) so we need a secure way for a deployer to connect to the server > and do things like start/stop applications and distribute new ones. >=20 > I set up a properties realm with a user "system" so that the deployer > could authenticate and this is what I was referring to as default - this > is not particularly secure and I would prefer to have a more robust > solution (say with encrypted passwords ;-) ) but it works for now. Encryption/hashing of the passwords in the properties file is simple enough to do. The secure transmittal of the passwords to the remote Geronimo server will be handled by using a more secure network protocol stack. Regards, Alan From patricia48@example.org Tue Jun 01 11:11:11 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 33315 invoked from network); 1 Jun 2004 11:11:11 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 11:11:11 -0000 Received: (qmail 20136 invoked by uid 500); 1 Jun 2004 11:11:01 -0000 Delivered-To: patricia48@example.org Received: (qmail 20004 invoked by uid 500); 1 Jun 2004 11:11:00 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 19424 invoked by uid 99); 1 Jun 2004 11:10:56 -0000 Received: from [83.161.120.155] (HELO alan.toolazydogs.com) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 04:10:56 -0700 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: Security configuration X-MIMEOLE: Produced By Microsoft Exchange V6.0.6249.0 Date: Tue, 1 Jun 2004 07:08:13 -0400 Message-ID: <patricia48@example.org> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Security configuration Thread-Index: AcRHVMUl4UQWzySqTPKniDYBOobapQAc9Qqw From: "Alan D. Cabrera" <patricia48@example.org> To: <patricia48@example.org> X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N > -----Original Message----- > From: hbaxmann [mailto:patricia48@example.org] >=20 > > is not particularly secure and I would prefer to have a more robust > > solution (say with encrypted passwords ;-) ) but it works for now. > > >=20 > <sarcasm> > Why not via SRP ? > </sarcasm> >=20 > sorry, could not resist Interesting, how would this fit into Geronimo to provide the general JAAS login mechanisms to obtain subjects? Regards, Alan From patricia48@example.org Tue Jun 01 11:24:14 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 40528 invoked from network); 1 Jun 2004 11:24:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 11:24:13 -0000 Received: (qmail 40677 invoked by uid 500); 1 Jun 2004 11:24:07 -0000 Delivered-To: patricia48@example.org Received: (qmail 40308 invoked by uid 500); 1 Jun 2004 11:24:04 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 40291 invoked by uid 99); 1 Jun 2004 11:24:04 -0000 Received: from [83.161.120.155] (HELO alan.toolazydogs.com) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 04:24:04 -0700 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C447CA.C925B8F8" Subject: SVN *.svn-base files X-MIMEOLE: Produced By Microsoft Exchange V6.0.6249.0 Date: Tue, 1 Jun 2004 07:22:55 -0400 Message-ID: <patricia48@example.org> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: SVN *.svn-base files Thread-Index: AcRHysmAOmKuxMrLQyuUNoPNSJgPYQ== From: "Alan D. Cabrera" <patricia48@example.org> To: "Apache Directory Developers List" <patricia48@example.org>, <patricia48@example.org> X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N This is a multi-part message in MIME format. ------_=_NextPart_001_01C447CA.C925B8F8 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable What are these files? They are huge. =20 =20 Regards, Alan ------_=_NextPart_001_01C447CA.C925B8F8 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <meta name=3DProgId content=3DWord.Document> <meta name=3DGenerator content=3D"Microsoft Word 10"> <meta name=3DOriginator content=3D"Microsoft Word 10"> <link rel=3DFile-List href=3D"cid:patricia48@example.org"> <!--[if gte mso 9]><xml> <o:OfficeDocumentSettings> <o:DoNotRelyOnCSS/> </o:OfficeDocumentSettings> </xml><![endif]--><!--[if gte mso 9]><xml> <w:WordDocument> <w:SpellingState>Clean</w:SpellingState> <w:GrammarState>Clean</w:GrammarState> <w:DocumentKind>DocumentEmail</w:DocumentKind> <w:EnvelopeVis/> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--> <style> <!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0in; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline; text-underline:single;} a:visited, span.MsoHyperlinkFollowed {color:purple; text-decoration:underline; text-underline:single;} span.EmailStyle17 {mso-style-type:personal-compose; mso-style-noshow:yes; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; font-family:Arial; mso-ascii-font-family:Arial; mso-hansi-font-family:Arial; mso-bidi-font-family:Arial; color:windowtext;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.25in 1.0in 1.25in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} --> </style> <!--[if gte mso 10]> <style> /* Style Definitions */=20 table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman";} </style> <![endif]--> </head> <body lang=3DEN-US link=3Dblue vlink=3Dpurple = style=3D'tab-interval:.5in'> <div class=3DSection1> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>What are these files?<span = style=3D'mso-spacerun:yes'>&nbsp; </span>They are huge.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p>&nbsp;</o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p>&nbsp;</o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Regards,<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Alan<o:p></o:p></span></font></p> </div> </body> </html> =00 ------_=_NextPart_001_01C447CA.C925B8F8-- From patricia48@example.org Tue Jun 01 12:10:49 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 64733 invoked from network); 1 Jun 2004 12:10:49 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 12:10:49 -0000 Received: (qmail 19854 invoked by uid 500); 1 Jun 2004 12:10:39 -0000 Delivered-To: patricia48@example.org Received: (qmail 19761 invoked by uid 500); 1 Jun 2004 12:10:38 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Delivered-To: moderator for patricia48@example.org Received: (qmail 4674 invoked by uid 99); 1 Jun 2004 12:02:49 -0000 From: "Jeff Machols" <patricia48@example.org> To: "'Apache Directory Developers List'" <patricia48@example.org>, <patricia48@example.org> Subject: RE: SVN *.svn-base files Date: Tue, 1 Jun 2004 08:02:05 -0400 Message-ID: <000c01c447d0$4445c7d0$0402a8c0@sydney> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000D_01C447AE.BD3698D0" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal In-Reply-To: <patricia48@example.org> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N This is a multi-part message in MIME format. ------=_NextPart_000_000D_01C447AE.BD3698D0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable It is the same as the .CVSROOT directory. Basically it is the entire directory you checked out. Subversion stores these files locally so it can compare against the working copy for commits. This way it doesn=92t have to go across the wire and compare all the files to see what has changed. Also stores the URL of repository and other internal info. =20 -----Original Message----- From: Alan D. Cabrera [mailto:patricia48@example.org]=20 Sent: Tuesday, June 01, 2004 7:23 AM To: Apache Directory Developers List; patricia48@example.org Subject: SVN *.svn-base files =20 What are these files? They are huge. =20 =20 Regards, Alan --- Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004 --- Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004 =20 ------=_NextPart_000_000D_01C447AE.BD3698D0 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <html xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3DWindows-1252"> <meta name=3DProgId content=3DWord.Document> <meta name=3DGenerator content=3D"Microsoft Word 10"> <meta name=3DOriginator content=3D"Microsoft Word 10"> <link rel=3DFile-List href=3D"cid:patricia48@example.org"> <!--[if gte mso 9]><xml> <o:OfficeDocumentSettings> <o:DoNotRelyOnCSS/> </o:OfficeDocumentSettings> </xml><![endif]--><!--[if gte mso 9]><xml> <w:WordDocument> <w:SpellingState>Clean</w:SpellingState> <w:GrammarState>Clean</w:GrammarState> <w:DocumentKind>DocumentEmail</w:DocumentKind> <w:EnvelopeVis/> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--> <style> <!-- /* Font Definitions */ @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:1627421319 743.920.4002 8 0 66047 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0in; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline; text-underline:single;} a:visited, span.MsoHyperlinkFollowed {color:purple; text-decoration:underline; text-underline:single;} span.EmailStyle17 {mso-style-type:personal; mso-style-noshow:yes; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; font-family:Arial; mso-ascii-font-family:Arial; mso-hansi-font-family:Arial; mso-bidi-font-family:Arial; color:windowtext;} span.EmailStyle18 {mso-style-type:personal-reply; mso-style-noshow:yes; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; font-family:Arial; mso-ascii-font-family:Arial; mso-hansi-font-family:Arial; mso-bidi-font-family:Arial; color:navy;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.25in 1.0in 1.25in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} --> </style> <!--[if gte mso 10]> <style> /* Style Definitions */=20 table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman";} </style> <![endif]--> </head> <body lang=3DEN-US link=3Dblue vlink=3Dpurple = style=3D'tab-interval:.5in'> <div class=3DSection1> <p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span = style=3D'font-size: 10.0pt;font-family:Arial;color:navy'>It is the same as the .CVSROOT = directory. <span style=3D'mso-spacerun:yes'>=A0</span>Basically it is the entire = directory you checked out.<span style=3D'mso-spacerun:yes'>=A0 </span>Subversion = stores these files locally so it can compare against the working copy for = commits.<span style=3D'mso-spacerun:yes'>=A0 </span>This way it doesn=92t have to go = across the wire and compare all the files to see what has changed.<span style=3D'mso-spacerun:yes'>=A0 </span>Also stores the URL of repository = and other internal info.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span = style=3D'font-size: 10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></span></font></p> <div style=3D'border:none;border-left:solid blue 1.5pt;padding:0in 0in = 0in 4.0pt'> <p class=3DMsoNormal><font size=3D2 face=3DTahoma><span = style=3D'font-size:10.0pt; font-family:Tahoma'>-----Original Message-----<br> <b><span style=3D'font-weight:bold'>From:</span></b> Alan D. Cabrera [mailto:patricia48@example.org] <br> <b><span style=3D'font-weight:bold'>Sent:</span></b> Tuesday, June 01, = 2004 7:23 AM<br> <b><span style=3D'font-weight:bold'>To:</span></b> Apache Directory = Developers List; patricia48@example.org<br> <b><span style=3D'font-weight:bold'>Subject:</span></b> SVN *.svn-base = files</span></font></p> <p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span = style=3D'font-size: 12.0pt'><o:p>&nbsp;</o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>What are these files?<span = style=3D'mso-spacerun:yes'>=A0 </span>They are huge.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p>&nbsp;</o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p>&nbsp;</o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Regards,<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Alan<o:p></o:p></span></font></p> </div> </div> </body> </html> <BR> <P><FONT SIZE=3D2>---<BR> <BR> Checked by AVG anti-virus system (http://www.grisoft.com).<BR> Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004<BR> </FONT> </P><BR> <P><FONT SIZE=3D2>---<BR> <BR> Checked by AVG anti-virus system (http://www.grisoft.com).<BR> Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004<BR> </FONT> </P> ------=_NextPart_000_000D_01C447AE.BD3698D0-- From patricia48@example.org Tue Jun 01 13:09:22 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 7416 invoked from network); 1 Jun 2004 13:09:22 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 13:09:22 -0000 Received: (qmail 62895 invoked by uid 500); 1 Jun 2004 13:09:01 -0000 Delivered-To: patricia48@example.org Received: (qmail 62700 invoked by uid 500); 1 Jun 2004 13:08:57 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 62571 invoked by uid 99); 1 Jun 2004 13:08:55 -0000 Received: from [83.161.120.155] (HELO umbongo.flamefew.net) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 06:08:55 -0700 Received: by umbongo.flamefew.net (Postfix on Linux (i386), from userid 500) id 5EB1713756; Tue, 1 Jun 2004 08:35:12 -0400 (EDT) Received: from localhost (localhost [83.161.120.155]) by umbongo.flamefew.net (Postfix on Linux (i386)) with ESMTP id 4D2C91348A for <patricia48@example.org>; Tue, 1 Jun 2004 08:35:12 -0400 (EDT) Date: Tue, 1 Jun 2004 08:35:12 -0400 (EDT) From: Henri Yandell <patricia48@example.org> X-X-Sender: patricia48@example.org To: patricia48@example.org Subject: RE: AW: Rushing too fast for SVN? was...Re: [VOTE] Switch to SVN In-Reply-To: <patricia48@example.org> Message-ID: <patricia48@example.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N On Tue, 1 Jun 2004, Noel J. Bergman wrote: > Henri Yandell wrote: > > > The only -ve I've found with SVN so far is the tagging. It works well > > when I want to tag a directory, but not when I want to tag a directory > > and a few files in the parent directory. > > > This would be a common thing to do when the build system inherits a > > file from higher up, either with Ant or with Maven. > > By convention, you put the Trunk, Tags, Branches, directory structure where > you have a separately versioned/releasable package. Within that, you don't > tag a directory or file; you tag the entire structure, e.g., a copy from > Trunk. > > Can you give an illustration of the problem you perceive? Using Jakarta Commons (at one point) as an example, let's say I'm releasing 5.0 of Commons Lang, I'd want to tag: jakarta-commons/lang/ jakarta-commons/commons-build/project.xml jakarta-commons/build.xml This became a 5 step intricate process or so for SVN and I'm not sure if I managed to do it correctly. It's very likely that I was just lacking in my svn-skills, but definitely a place I felt that SVN loses to CVS simplicity. Possibly another one would be where I don't want to release all the files. I may want to tag jakarta-commons/io with IO_1_0 but not a couple of .java files and one of the unit tests. I've not tried this yet in SVN, it may work the same as cvs [remove file locally, make sure not in CVS/Entries then local tag] but it would be another use-case I'd want to ensure SVN can handle. Hen From patricia48@example.org Tue Jun 01 19:15:42 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 42948 invoked from network); 1 Jun 2004 19:15:42 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 19:15:42 -0000 Received: (qmail 67779 invoked by uid 500); 1 Jun 2004 19:15:47 -0000 Delivered-To: patricia48@example.org Received: (qmail 67704 invoked by uid 500); 1 Jun 2004 19:15:46 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 67688 invoked by uid 99); 1 Jun 2004 19:15:46 -0000 Received: from [83.161.120.155] (HELO moutng.kundenserver.de) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 12:15:46 -0700 Received: from [83.161.120.155] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1BVEjK-00055i-00 for patricia48@example.org; Tue, 01 Jun 2004 21:15:22 +0200 Received: from [83.161.120.155] (helo=Tabletti) by mrelayng.kundenserver.de with asmtp (Exim 3.35 #1) id 1BVEjJ-0003kz-00 for patricia48@example.org; Tue, 01 Jun 2004 21:15:21 +0200 From: "hbaxmann" <patricia48@example.org> To: <patricia48@example.org> Subject: AW: Security configuration Date: Tue, 1 Jun 2004 21:15:20 +0200 Message-ID: <004901c4480c$c82ce790$6401a8c0@Tabletti> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 In-Reply-To: <patricia48@example.org> Importance: Normal X-Provags-ID: kundenserver.de patricia48@example.org auth:57a2a43a7a0aec2469dd81c0f8f2ca8b X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N > > > is not particularly secure and I would prefer to have a=20 > more robust=20 > > > solution (say with encrypted passwords ;-) ) but it works for now. > > > > >=20 > > <sarcasm> > > Why not via SRP ? > > </sarcasm> > >=20 > > sorry, could not resist >=20 > Interesting, how would this fit into Geronimo to provide the=20 > general JAAS login mechanisms to obtain subjects? >=20 You are asking seriously?=20 http://srp.stanford.edu/ Then in all aspects. There are many LoginMudules avail with SRP. =20 But, unfortunately it is useless. Because secure passwords does simply = not exist: http://fiatlux.zeitform.info/en/instructions/passwords.html Theoretically and in a academic point of view, and only there: it = provides security to a secure token (the password) on the wire - but nowhere = else. Nobody, nobody will try to exploit your delivery of PASSWORDS on the = wire. As we all know there are more cost&budget sparing treats to steal = passwords. The main debility is the mixup of authentication and authorization in conjunction with the possibility of duplication. So you may have not = only have more than one identity, you will exist more than once ... Especially if you want to save the anonymity of a user you are lost: = Guest, anonymous etc.etc., which you can not track if you do not have at = mindest a two-factor authentication. You need five points to do not make the non-existing security of = passwords not more worth: Don't tell anyone your password.=20 Don't write your password down anywhere.=20 When you decide on a password, make sure it can't be guessed.=20 If you think there's even a chance someone else might know your = password, change it.=20 Make sure no one is standing near you when you enter your password=20 In the point of real security: passwords do not have a security aspect. These points depends all on exclusively on human interaction. The = algorithm has zero chance. So the SRP implementations are a marcetecture thingy, more worse because they are a feint of security. But nice to implement :-) bax Refs: http://insight.zdnet.co.uk/internet/security/0,39020457,2120474,00.htm http://www.channelminds.com/article.php3?id_article=3D941 > Regards, > Alan >=20 From patricia48@example.org Tue Jun 01 19:24:22 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 54421 invoked from network); 1 Jun 2004 19:24:22 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 19:24:22 -0000 Received: (qmail 82582 invoked by uid 500); 1 Jun 2004 19:23:30 -0000 Delivered-To: patricia48@example.org Received: (qmail 82513 invoked by uid 500); 1 Jun 2004 19:23:29 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 82410 invoked by uid 99); 1 Jun 2004 19:23:28 -0000 Received: from [83.161.120.155] (HELO moutng.kundenserver.de) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 12:23:28 -0700 Received: from [83.161.120.155] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1BVEqn-00030A-00 for patricia48@example.org; Tue, 01 Jun 2004 21:23:05 +0200 Received: from [83.161.120.155] (helo=Tabletti) by mrelayng.kundenserver.de with asmtp (Exim 3.35 #1) id 1BVEqn-0007l7-00 for patricia48@example.org; Tue, 01 Jun 2004 21:23:05 +0200 From: "hbaxmann" <patricia48@example.org> To: <patricia48@example.org> Subject: AW: Geronimo code format Date: Tue, 1 Jun 2004 21:23:04 +0200 Message-ID: <004a01c4480d$dcb412a0$6401a8c0@Tabletti> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 In-Reply-To: <patricia48@example.org> Importance: Normal X-Provags-ID: kundenserver.de patricia48@example.org auth:57a2a43a7a0aec2469dd81c0f8f2ca8b X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N > | De: Aaron Mulder [mailto:patricia48@example.org] > | > | > Noooo!!! Please, no start braces on separate lines. I=20 > don't care =20 > | >for the extra spaces around parentheses much either. > | > | :-) > | This 'braces on same/new line' subject is almost a=20 > religious issue ;-) >=20 > This is because the devil have sent some of his spawn to=20 > earth to lure programmers to use curlies-on-new-line to=20 > induce war and fiendish behaviour amongst the otherwise=20 > lovingly nice developers. > ANY person not posessed by satan immediately and naturally=20 > hates such practices, and will of course place the curly on=20 > the same line as the programming token to which it belongs. >=20 BTW: Is in Java such an construct like I was familiar with when writing = C in my TurboPascal ages: #define begin { #define end } bax >=20 > --=20 > Mvh, > Endre St=F8lsvik M743.920.4002] F743.920.4002] > Developer @ CoreTrek AS - http://www.coretrek.com/ > CoreTrek corporate portal / EIP - http://www.corelets.com/ >=20 From patricia48@example.org Tue Jun 01 19:27:32 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 55775 invoked from network); 1 Jun 2004 19:27:32 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 19:27:32 -0000 Received: (qmail 95220 invoked by uid 500); 1 Jun 2004 19:27:40 -0000 Delivered-To: patricia48@example.org Received: (qmail 95183 invoked by uid 500); 1 Jun 2004 19:27:39 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 95170 invoked by uid 99); 1 Jun 2004 19:27:39 -0000 Received: from [83.161.120.155] (HELO moutng.kundenserver.de) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 12:27:39 -0700 Received: from [83.161.120.155] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1BVEur-0004J0-00 for patricia48@example.org; Tue, 01 Jun 2004 21:27:17 +0200 Received: from [83.161.120.155] (helo=Tabletti) by mrelayng.kundenserver.de with asmtp (Exim 3.35 #1) id 1BVEuq-0000Hn-00 for patricia48@example.org; Tue, 01 Jun 2004 21:27:17 +0200 From: "hbaxmann" <patricia48@example.org> To: <patricia48@example.org> Subject: AW: secure pot for geronimo JVM Date: Tue, 1 Jun 2004 21:27:15 +0200 Message-ID: <004b01c4480e$7283aa70$6401a8c0@Tabletti> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 In-Reply-To: <patricia48@example.org> Importance: Normal X-Provags-ID: kundenserver.de patricia48@example.org auth:57a2a43a7a0aec2469dd81c0f8f2ca8b X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Hi Christophe, > Holger, > > ProActive is an open source project from the INRIA/OASIS > lab, the source is available in the download. It is very high > tech project that resulted research work conducted by the > OASIS group, but the code base has been broadly deployed, and > the software is now quite mature (see project docs) > It is ... as far as I could see ... beautifull :) > As you can imagine, this kind of project is really driven by > a single team and CVS was not very attrative to them as they > were refactoring quite a lot. SVN is what they need, so we > are setting it up (does this ring any bell? :-) ) > All of them. What is the URL? > Looking at security, ObjectWeb would be very happy to set-up > collaboration on Security with Apache, and we should be able > to accomodate licensing for the parts that are of common > interest (change to BSD is what we have already been able to > achieve for ASM and JOTM). > This does not solve my can-not-found-StartSecureNode-in-source-download problem, or does I not got it. I am one of these germans, you know. bax > Thanks, > Christophe > > Christophe Ney > Executive Director > ObjectWeb Consortium > > > > -----Original Message----- > > From: Holger Baxmann [mailto:patricia48@example.org] > > Sent: lundi 31 mai 2004 23:31 > > To: patricia48@example.org > > Subject: secure pot for geronimo JVM > > > > > > Is anybody aware of the ProActive project? > > > > http://www-sop.inria.fr/oasis/ProActive/ > > > > http://www-sop.inria.fr/oasis/ProActive/doc/api/org/objectweb/proa > ctive/doc- > files/Security.html > > I am on the way to evaluate it for having a secure, signed, > non-vandalising wrapper to have a either paranoid > SecurityManager environment or the default open-door startup > environment for gero. > > Especially StartSecureNode could not be find by me in the > (LGPLed) source downloads. AFAIK anonymous cvs is not available. > > Package names start with org.objectweb - so i was thinking ... > > thanks alot > > bax > > From patricia48@example.org Tue Jun 01 19:51:21 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 68764 invoked from network); 1 Jun 2004 19:51:21 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 19:51:21 -0000 Received: (qmail 42760 invoked by uid 500); 1 Jun 2004 19:51:26 -0000 Delivered-To: patricia48@example.org Received: (qmail 42597 invoked by uid 500); 1 Jun 2004 19:51:25 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 42580 invoked by uid 99); 1 Jun 2004 19:51:25 -0000 Received: from [83.161.120.155] (HELO moutng.kundenserver.de) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 12:51:25 -0700 Received: from [83.161.120.155] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1BVFHq-000099-00 for patricia48@example.org; Tue, 01 Jun 2004 21:51:02 +0200 Received: from [83.161.120.155] (helo=Tabletti) by mrelayng.kundenserver.de with asmtp (Exim 3.35 #1) id 1BVFHq-0007pz-00 for patricia48@example.org; Tue, 01 Jun 2004 21:51:02 +0200 From: "hbaxmann" <patricia48@example.org> To: <patricia48@example.org> Subject: AW: Security configuration Date: Tue, 1 Jun 2004 21:51:00 +0200 Message-ID: <005801c44811$c3f9abe0$6401a8c0@Tabletti> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 In-Reply-To: <004901c4480c$c82ce790$6401a8c0@Tabletti> Importance: Normal X-Provags-ID: kundenserver.de patricia48@example.org auth:57a2a43a7a0aec2469dd81c0f8f2ca8b X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N > > > > is not particularly secure and I would prefer to have a > > more robust > > > > solution (say with encrypted passwords ;-) ) but it > works for now. > > > > > > > > > > <sarcasm> > > > Why not via SRP ? > > > </sarcasm> > > > > > > sorry, could not resist > > > > Interesting, how would this fit into Geronimo to provide the > > general JAAS login mechanisms to obtain subjects? > > > > You are asking seriously? > > http://srp.stanford.edu/ > > Then in all aspects. There are many LoginMudules avail with SRP. > > But, unfortunately it is useless. Because secure passwords > does simply not > exist: > > http://fiatlux.zeitform.info/en/instructions/passwords.html > > Theoretically and in a academic point of view, and only > there: it provides > security to a secure token (the password) on the wire - but > nowhere else. > Nobody, nobody will try to exploit your delivery of PASSWORDS > on the wire. > As we all know there are more cost&budget sparing treats to > steal passwords. > > The main debility is the mixup of authentication and authorization in > conjunction with the possibility of duplication. So you may > have not only > have more than one identity, you will exist more than once ... > > Especially if you want to save the anonymity of a user you > are lost: Guest, > anonymous etc.etc., which you can not track if you do not > have at mindest a > two-factor authentication. > > You need five points to do not make the non-existing security > of passwords > not more worth: > > Don't tell anyone your password. > Don't write your password down anywhere. > When you decide on a password, make sure it can't be guessed. > If you think there's even a chance someone else might know > your password, > change it. > Make sure no one is standing near you when you enter your password > In the point of real security: passwords do not have a > security aspect. > > These points depends all on exclusively on human interaction. > The algorithm > has zero chance. > > So the SRP implementations are a marcetecture thingy, more > worse because > they are a feint of security. > > But nice to implement :-) > > bax > > Refs: > http://insight.zdnet.co.uk/internet/security/0,39020457,2120474,00.htm > http://www.channelminds.com/article.php3?id_article=941 > Upps, I read it again and was missing one point. There is a good kind of usage for passwords: one time passwords. This to implement would be more worthwhile than SRP. http://www.faqs.org/rfcs/rfc2289.html There maybe makes the Diffie-Helman of SRP sense. http://www.ietf.org/rfc/rfc2945.txt bax > > Regards, > > Alan > > > > From patricia48@example.org Tue Jun 01 19:52:14 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 69727 invoked from network); 1 Jun 2004 19:52:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 19:52:13 -0000 Received: (qmail 45045 invoked by uid 500); 1 Jun 2004 19:52:16 -0000 Delivered-To: patricia48@example.org Received: (qmail 45001 invoked by uid 500); 1 Jun 2004 19:52:15 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 44974 invoked by uid 99); 1 Jun 2004 19:52:15 -0000 Received: from [83.161.120.155] (HELO mail15.ha.ovh.net) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 12:52:15 -0700 Received: (qmail 18789 invoked by uid 503); 1 Jun 2004 19:51:51 -0000 Received: from cney.net1.nerim.net (HELO CNEY3) (patricia48@example.org) by ns0.ovh.net with SMTP; 1 Jun 2004 19:51:51 -0000 From: "Christophe Ney" <patricia48@example.org> To: <patricia48@example.org> Cc: <patricia48@example.org> Subject: RE: secure pot for geronimo JVM Date: Tue, 1 Jun 2004 21:51:12 +0200 Message-ID: <patricia48@example.org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <004b01c4480e$7283aa70$6401a8c0@Tabletti> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4927.1200 Importance: Normal X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Got it :-) The class referenced by the StartSecureNode script is missing. I CC the proactive list to make sure they see your post. thanks, Christophe > -----Original Message----- > From: hbaxmann [mailto:patricia48@example.org] > Sent: mardi 1 juin 2004 21:27 > To: patricia48@example.org > Subject: AW: secure pot for geronimo JVM > > > Hi Christophe, > > > Holger, > > > > ProActive is an open source project from the INRIA/OASIS > > lab, the source is available in the download. It is very high > > tech project that resulted research work conducted by the > > OASIS group, but the code base has been broadly deployed, and > > the software is now quite mature (see project docs) > > > > It is ... as far as I could see ... beautifull :) > > > As you can imagine, this kind of project is really driven by > > a single team and CVS was not very attrative to them as they > > were refactoring quite a lot. SVN is what they need, so we > > are setting it up (does this ring any bell? :-) ) > > > > All of them. > What is the URL? > > > Looking at security, ObjectWeb would be very happy to set-up > > collaboration on Security with Apache, and we should be able > > to accomodate licensing for the parts that are of common > > interest (change to BSD is what we have already been able to > > achieve for ASM and JOTM). > > > > This does not solve my can-not-found-StartSecureNode-in-source-download > problem, or does I not got it. > > I am one of these germans, you know. > > bax > > > Thanks, > > Christophe > > > > Christophe Ney > > Executive Director > > ObjectWeb Consortium > > > > > > > -----Original Message----- > > > From: Holger Baxmann [mailto:patricia48@example.org] > > > Sent: lundi 31 mai 2004 23:31 > > > To: patricia48@example.org > > > Subject: secure pot for geronimo JVM > > > > > > > > > Is anybody aware of the ProActive project? > > > > > > http://www-sop.inria.fr/oasis/ProActive/ > > > > > > http://www-sop.inria.fr/oasis/ProActive/doc/api/org/objectweb/proa > > ctive/doc- > > files/Security.html > > > > I am on the way to evaluate it for having a secure, signed, > > non-vandalising wrapper to have a either paranoid > > SecurityManager environment or the default open-door startup > > environment for gero. > > > > Especially StartSecureNode could not be find by me in the > > (LGPLed) source downloads. AFAIK anonymous cvs is not available. > > > > Package names start with org.objectweb - so i was thinking ... > > > > thanks alot > > > > bax > > > > > > From patricia48@example.org Tue Jun 01 19:55:40 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 71257 invoked from network); 1 Jun 2004 19:55:40 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 19:55:40 -0000 Received: (qmail 54103 invoked by uid 500); 1 Jun 2004 19:55:44 -0000 Delivered-To: patricia48@example.org Received: (qmail 54054 invoked by uid 500); 1 Jun 2004 19:55:43 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 54039 invoked by uid 99); 1 Jun 2004 19:55:43 -0000 Received: from [83.161.120.155] (HELO server5.imagelinkusa.net) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 12:55:43 -0700 Received: from [83.161.120.155] (helo=[83.161.120.155]) by server5.imagelinkusa.net with asmtp (Exim 4.34) id 1BVFLw-0006jn-RM for patricia48@example.org; Tue, 01 Jun 2004 15:55:16 -0400 Message-ID: <patricia48@example.org> Date: Tue, 01 Jun 2004 15:59:26 -0400 From: Phillip Rhodes <patricia48@example.org> Reply-To: patricia48@example.org User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040511 MultiZilla/83.161.120.155f X-Accept-Language: en-us, en MIME-Version: 1.0 To: patricia48@example.org Subject: Re: AW: Geronimo code format References: <004a01c4480d$dcb412a0$6401a8c0@Tabletti> In-Reply-To: <004a01c4480d$dcb412a0$6401a8c0@Tabletti> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server5.imagelinkusa.net X-AntiAbuse: Original Domain - geronimo.apache.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - cpphacker.co.uk X-Source: X-Source-Args: X-Source-Dir: X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N >> >>This is because the devil have sent some of his spawn to >>earth to lure programmers to use curlies-on-new-line to >>induce war and fiendish behaviour amongst the otherwise >>lovingly nice developers. ONLY somebody possessed by Satan himself would write code with curlies-on-the-same-line format! Which is appropriate since, after looking at that style of code for very long your eyeballs will pop out of your head, and run for the hills, screaming in terror.... TTYL, Phil From patricia48@example.org Tue Jun 01 20:18:04 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 83984 invoked from network); 1 Jun 2004 20:18:04 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 20:18:04 -0000 Received: (qmail 16229 invoked by uid 500); 1 Jun 2004 20:18:08 -0000 Delivered-To: patricia48@example.org Received: (qmail 16180 invoked by uid 500); 1 Jun 2004 20:18:07 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 16158 invoked by uid 99); 1 Jun 2004 20:18:07 -0000 Received: from [83.161.120.155] (HELO moutng.kundenserver.de) (83.161.120.155) by apache.org (qpsmtpd/0.27.1) with ESMTP; Tue, 01 Jun 2004 13:18:07 -0700 Received: from [83.161.120.155] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1BVFhf-0005TI-00; Tue, 01 Jun 2004 22:17:43 +0200 Received: from [83.161.120.155] (helo=Tabletti) by mrelayng.kundenserver.de with asmtp (Exim 3.35 #1) id 1BVFhe-0002HX-00; Tue, 01 Jun 2004 22:17:42 +0200 From: "hbaxmann" <patricia48@example.org> To: <patricia48@example.org> Cc: <patricia48@example.org> Subject: AW: secure pot for geronimo JVM Date: Tue, 1 Jun 2004 22:17:41 +0200 Message-ID: <005901c44815$7df46be0$6401a8c0@Tabletti> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 In-Reply-To: <patricia48@example.org> Importance: Normal X-Provags-ID: kundenserver.de patricia48@example.org auth:57a2a43a7a0aec2469dd81c0f8f2ca8b X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Ok, let's do it the TOFU way ;-) Sorry for beeing so stupid not answering all ... The security reminds me on the good old e-speak days and the PSE (PersonalSecureEnvironment) of HP. This stuff is kind of alive still on = the web at http://bazaar.sis.pitt.edu/. Could be an alternative for the = subject, if everything else fails ... thanks a lot bax > Got it :-) >=20 > The class referenced by the StartSecureNode script is=20 > missing.=20 >=20 > I CC the proactive list to make sure they see your > post. >=20 > thanks, > Christophe >=20 > > -----Original Message----- > > From: hbaxmann [mailto:patricia48@example.org] > > Sent: mardi 1 juin 2004 21:27 > > To: patricia48@example.org > > Subject: AW: secure pot for geronimo JVM > >=20 > >=20 > > Hi Christophe, > >=20 > > > Holger, > > >=20 > > > ProActive is an open source project from the INRIA/OASIS > > > lab, the source is available in the download. It is very high=20 > > > tech project that resulted research work conducted by the=20 > > > OASIS group, but the code base has been broadly deployed, and=20 > > > the software is now quite mature (see project docs) > > >=20 > >=20 > > It is ... as far as I could see ... beautifull :) > >=20 > > > As you can imagine, this kind of project is really driven by a=20 > > > single team and CVS was not very attrative to them as they were=20 > > > refactoring quite a lot. SVN is what they need, so we are=20 > setting it=20 > > > up (does this ring any bell? :-) ) > > >=20 > >=20 > > All of them. > > What is the URL? > >=20 > > > Looking at security, ObjectWeb would be very happy to set-up > > > collaboration on Security with Apache, and we should be able=20 > > > to accomodate licensing for the parts that are of common=20 > > > interest (change to BSD is what we have already been able to=20 > > > achieve for ASM and JOTM). > > >=20 > >=20 > > This does not solve my=20 > > can-not-found-StartSecureNode-in-source-download > > problem, or does I not got it. > >=20 > > I am one of these germans, you know. > >=20 > > bax > >=20 > > > Thanks, > > > Christophe > > >=20 > > > Christophe Ney > > > Executive Director > > > ObjectWeb Consortium > > >=20 > > >=20 > > > > -----Original Message----- > > > > From: Holger Baxmann [mailto:patricia48@example.org] > > > > Sent: lundi 31 mai 2004 23:31 > > > > To: patricia48@example.org > > > > Subject: secure pot for geronimo JVM > > > > > > > > > > > > Is anybody aware of the ProActive project? > > > > > > > > http://www-sop.inria.fr/oasis/ProActive/ > > > > > > > >=20 > http://www-sop.inria.fr/oasis/ProActive/doc/api/org/objectweb/proa > > > ctive/doc- > > > files/Security.html > > >=20 > > > I am on the way to evaluate it for having a secure, signed, > > > non-vandalising wrapper to have a either paranoid=20 > > > SecurityManager environment or the default open-door startup=20 > > > environment for gero. > > >=20 > > > Especially StartSecureNode could not be find by me in the > > > (LGPLed) source downloads. AFAIK anonymous cvs is not available. > > >=20 > > > Package names start with org.objectweb - so i was thinking ... > > >=20 > > > thanks alot > > >=20 > > > bax > > >=20 > > >=20 > >=20 > >=20 >=20 From patricia48@example.org Tue Jun 01 22:19:43 2004 Return-Path: <patricia48@example.org> Delivered-To: patricia48@example.org Received: (qmail 48818 invoked from network); 1 Jun 2004 22:19:42 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 1 Jun 2004 22:19:42 -0000 Received: (qmail 73681 invoked by uid 500); 1 Jun 2004 22:19:54 -0000 Delivered-To: patricia48@example.org Received: (qmail 73630 invoked by uid 500); 1 Jun 2004 22:19:53 -0000 Mailing-List: contact patricia48@example.org; run by ezmlm Precedence: bulk list-help: <mailto:patricia48@example.org> list-unsubscribe: <mailto:patricia48@example.org> list-post: <mailto:patricia48@example.org> Reply-To: patricia48@example.org Delivered-To: mailing list patricia48@example.org Received: (qmail 73614 invoked by uid 99); 1 Jun 2004 22:19:53
{'source': 'Apache Software Foundation Public Mail Archives'}