tomee-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alex Soto <asot...@gmail.com>
Subject Re: DataSource Password Cipher
Date Tue, 30 Sep 2014 08:48:59 GMT
I have tried and just not working with war, I agree that this should go
inside tomee itself.

2014-09-30 10:45 GMT+02:00 Romain Manni-Bucau <rmannibucau@gmail.com>:

> proove it :p: actually cipher strategy should be in the container. "An
> integration jar" and not an app jar. Same thought as "resources are
> declared in the container"
>
> we can add a check in DataSourceFactory if something can't be loaded
> from container loader we can load it from tccl and log a error/warn,
> do you want to have a try/jira?
>
>
> Romain Manni-Bucau
> Twitter: @rmannibucau
> Blog: http://rmannibucau.wordpress.com/
> LinkedIn: http://fr.linkedin.com/in/rmannibucau
> Github: https://github.com/rmannibucau
>
>
> 2014-09-30 10:41 GMT+02:00 Alex Soto <asotobu@gmail.com>:
> > but with true cipher does not work
> >
> > 2014-09-30 10:39 GMT+02:00 Romain Manni-Bucau <rmannibucau@gmail.com>:
> >
> >> * openejb.resources.use-container-loader = true is a must whatever
> >> datasource you use. False is not recommanded
> >>
> >>
> >> Romain Manni-Bucau
> >> Twitter: @rmannibucau
> >> Blog: http://rmannibucau.wordpress.com/
> >> LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> Github: https://github.com/rmannibucau
> >>
> >>
> >> 2014-09-30 10:39 GMT+02:00 Romain Manni-Bucau <rmannibucau@gmail.com>:
> >> > is a "generally must" for all datasources, cipher or not.
> >> >
> >> >
> >> > Romain Manni-Bucau
> >> > Twitter: @rmannibucau
> >> > Blog: http://rmannibucau.wordpress.com/
> >> > LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> > Github: https://github.com/rmannibucau
> >> >
> >> >
> >> > 2014-09-30 9:53 GMT+02:00 Alex Soto <asotobu@gmail.com>:
> >> >> ok but then using openejb.resources.use-container-loader to false is
> a
> >> must
> >> >> for custom cipher and there is no problem. Ok :)
> >> >>
> >> >> 2014-09-30 9:51 GMT+02:00 Romain Manni-Bucau <rmannibucau@gmail.com
> >:
> >> >>
> >> >>> Meta-inf has another meaning in tomcat so -1 for me
> >> >>>
> >> >>> No issue using cipher, issue is to load a jdbc driver from an app
> only
> >> >>>
> >> >>> Le mardi 30 septembre 2014, Alex Soto <asotobu@gmail.com>
a écrit :
> >> >>> > Now it works :) the key point was that META-INF must be inside
> >> >>> > WEB-INF/classes which you know because it is not the standard
> place
> >> I was
> >> >>> > reading wrong. Then do you think there is any chance to use
> META-INF
> >> >>> > directory placed on webapps/META-INF instead the one inside
> classes?
> >> I
> >> >>> know
> >> >>> > this is because classes is inside classpath, but I don't like
so
> much
> >> >>> > having a META-INF inside classes directory (of course it has
sense
> >> if you
> >> >>> > are using a jar file, but in case of war file looks a bit
strange.
> >> >>> >
> >> >>> > BTW I don't understand your point about using datasource cipher
> >> approach
> >> >>> in
> >> >>> > production.
> >> >>> >
> >> >>> > 2014-09-29 19:25 GMT+02:00 Romain Manni-Bucau <
> rmannibucau@gmail.com
> >> >:
> >> >>> >
> >> >>> >> Well not sure it was clear but i spoke of the fact to
load a jdbc
> >> driver
> >> >>> >> from an app. It can make sense in tests (arquillian) and
on some
> >> cloud
> >> >>> >> providers but this wouldnt be not a good default - why
no noise
> was
> >> done
> >> >>> on
> >> >>> >> it.
> >> >>> >>
> >> >>> >>
> >> >>> >>
> >> >>> >> Le lundi 29 septembre 2014, Alex Soto <asotobu@gmail.com>
a
> écrit :
> >> >>> >> > So if you wouldn t use in production let s drop it
from docs
> and
> >> let s
> >> >>> >> > explain how to do it in production, I mean it has
no sense to
> >> explain
> >> >>> it
> >> >>> >> if
> >> >>> >> > it is only used to play with
> >> >>> >> >
> >> >>> >> > El dilluns, 29 setembre de 2014, Romain Manni-Bucau
<
> >> >>> >> rmannibucau@gmail.com
> >> >>> >> >
> >> >>> >> > va escriure:
> >> >>> >> >
> >> >>> >> >> And you added the missing file as well?
> >> >>> >> >> Not sure there is a doc about it but i wouldnt
use it in prod.
> >> >>> >> >>
> >> >>> >> >> Le lundi 29 septembre 2014, Alex Soto <asotobu@gmail.com
> >> >>> >> <javascript:;>>
> >> >>> >> >> a écrit :
> >> >>> >> >> > hummm I have added that property :( maybe
I am missing
> >> something.
> >> >>> BTW
> >> >>> >> is
> >> >>> >> >> > this flag documented? I have not read in
any place that this
> >> flag
> >> >>> >> should
> >> >>> >> >> be
> >> >>> >> >> > set to true.
> >> >>> >> >> >
> >> >>> >> >> > 2014-09-29 12:14 GMT+02:00 Romain Manni-Bucau
<
> >> >>> rmannibucau@gmail.com
> >> >>> >> >> <javascript:;>>:
> >> >>> >> >> >
> >> >>> >> >> >> What i pasted you works
> >> >>> >> >> >>
> >> >>> >> >> >> Le lundi 29 septembre 2014, Alex Soto
<asotobu@gmail.com
> >> >>> >> <javascript:;>>
> >> >>> >> >> a écrit :
> >> >>> >> >> >> > Yes, the directory is flatten.
No luck, it is still not
> >> working,
> >> >>> I
> >> >>> >> >> have
> >> >>> >> >> >> > attached code in first email, if
you can't receive it, I
> can
> >> >>> paste
> >> >>> >> the
> >> >>> >> >> >> > whole code as a mail message, so
you can try it.
> >> >>> >> >> >> >
> >> >>> >> >> >> > Alex.
> >> >>> >> >> >> >
> >> >>> >> >> >> > 2014-09-28 22:28 GMT+02:00 Jean-Louis
Monteiro <
> >> >>> >> >> jlmonteiro@tomitribe.com <javascript:;>
> >> >>> >> >> >> >:
> >> >>> >> >> >> >
> >> >>> >> >> >> >> Side note Alex: this is a flatten
package directory,
> not a
> >> >>> >> >> hierarchical
> >> >>> >> >> >> >> package tree.
> >> >>> >> >> >> >>
> >> >>> >> >> >> >>
> >> >>> >> >> >> >> --
> >> >>> >> >> >> >> Jean-Louis Monteiro
> >> >>> >> >> >> >> http://twitter.com/jlouismonteiro
> >> >>> >> >> >> >> http://www.tomitribe.com
> >> >>> >> >> >> >>
> >> >>> >> >> >> >> On Sun, Sep 28, 2014 at 8:48
PM, Romain Manni-Bucau <
> >> >>> >> >> >> rmannibucau@gmail.com <javascript:;>
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> wrote:
> >> >>> >> >> >> >>
> >> >>> >> >> >> >> > $ cat
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >>
> >> >>> >> >> >>
> >> >>> >> >> >>
> >> >>> >> >>
> >> >>> >> >>
> >> >>> >>
> >> >>> >>
> >> >>>
> >> >>>
> >>
> webapps/cipher/WEB-INF/classes/META-INF/org.apache.openejb.cipher.PasswordCipher/reverse
> >> >>> >> >> >> >> > org.superbiz.PasswordReverse
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> > and add in conf/system.properties:
> >> >>> >> >> >> >> > openejb.resources.use-container-loader
= false
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> > This is true by default
(and it is important to keep
> it
> >> true
> >> >>> by
> >> >>> >> >> >> >> > default - we can maybe
log this property in case of
> >> failure)
> >> >>> >> since
> >> >>> >> >> >> >> > otherwise you likely create
potential leaks.
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> > Romain Manni-Bucau
> >> >>> >> >> >> >> > Twitter: @rmannibucau
> >> >>> >> >> >> >> > Blog: http://rmannibucau.wordpress.com/
> >> >>> >> >> >> >> > LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> >>> >> >> >> >> > Github: https://github.com/rmannibucau
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >> > 2014-09-28 20:22 GMT+02:00
Romain Manni-Bucau <
> >> >>> >> >> rmannibucau@gmail.com <javascript:;>
> >> >>> >> >> >> >:
> >> >>> >> >> >> >> > > Hmm, I don't have
it. not sure that's the list or my
> >> gmail.
> >> >>> >> >> >> >> > >
> >> >>> >> >> >> >> > >
> >> >>> >> >> >> >> > > Romain Manni-Bucau
> >> >>> >> >> >> >> > > Twitter: @rmannibucau
> >> >>> >> >> >> >> > > Blog: http://rmannibucau.wordpress.com/
> >> >>> >> >> >> >> > > LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> >>> >> >> >> >> > > Github: https://github.com/rmannibucau
> >> >>> >> >> >> >> > >
> >> >>> >> >> >> >> > >
> >> >>> >> >> >> >> > > 2014-09-28 18:45
GMT+02:00 Alex Soto <
> >> asotobu@gmail.com
> >> >>> >> >> <javascript:;>>:
> >> >>> >> >> >> >> > >> Well I have attached
a war file with sources, maybe
> >> the
> >> >>> user
> >> >>> >> >> list
> >> >>> >> >> >> has
> >> >>> >> >> >> >> > >> removed?
> >> >>> >> >> >> >> > >>
> >> >>> >> >> >> >> > >> 2014-09-28 18:33
GMT+02:00 Romain Manni-Bucau <
> >> >>> >> >> >> rmannibucau@gmail.com <javascript:;>
> >> >>> >> >> >> >> >:
> >> >>> >> >> >> >> > >>
> >> >>> >> >> >> >> > >>> can you provide
us a sample to let us investigate
> >> your
> >> >>> case
> >> >>> >> >> >> please?
> >> >>> >> >> >> >> > >>>
> >> >>> >> >> >> >> > >>>
> >> >>> >> >> >> >> > >>> Romain Manni-Bucau
> >> >>> >> >> >> >> > >>> Twitter:
@rmannibucau
> >> >>> >> >> >> >> > >>> Blog: http://rmannibucau.wordpress.com/
> >> >>> >> >> >> >> > >>> LinkedIn:
http://fr.linkedin.com/in/rmannibucau
> >> >>> >> >> >> >> > >>> Github: https://github.com/rmannibucau
> >> >>> >> >> >> >> > >>>
> >> >>> >> >> >> >> > >>>
> >> >>> >> >> >> >> > >>> 2014-09-26
10:40 GMT+02:00 Alex Soto <
> >> asotobu@gmail.com
> >> >>> >> >> <javascript:;>>:
> >> >>> >> >> >> >> > >>> > Hi I
am still having problems to register my own
> >> >>> >> >> implementation
> >> >>> >> >> >> of
> >> >>> >> >> >> >> > >>> Password
> >> >>> >> >> >> >> > >>> > Cipher.
I have just attached the war file.
> >> >>> >> >> >> >> > >>> >
> >> >>> >> >> >> >> > >>> > I have
just debug the class
> PasswordCipherFactory
> >> and I
> >> >>> >> have
> >> >>> >> >> >> seen
> >> >>> >> >> >> >> > that
> >> >>> >> >> >> >> > >>> impls
> >> >>> >> >> >> >> > >>> > = finder.mapAllImplementations(intf);
returns an
> >> empty
> >> >>> >> map,
> >> >>> >> >> so
> >> >>> >> >> >> it
> >> >>> >> >> >> >> > seems
> >> >>> >> >> >> >> > >>> it
> >> >>> >> >> >> >> > >>> > is reading
some empty META-INF directory.
> >> >>> >> >> >> >> > >>> >
> >> >>> >> >> >> >> > >>> > Do you
know why this may happens? I am running
> >> Apache
> >> >>> >> TomEE
> >> >>> >> >> >> 1.7.0
> >> >>> >> >> >> >> > >>> >
> >> >>> >> >> >> >> > >>> > --
> >> >>> >> >> >> >> > >>> >
> >> >>> >> +----------------------------------------------------------+
> >> >>> >> >> >> >> > >>> >   Alex
Soto Bueno
> >> >>> >> >> >> >> > >>> >   www.lordofthejars.com
> >> >>> >> >> >> >> > >>> >
> >> >>> >> +----------------------------------------------------------+
> >> >>> >> >> >> >> > >>>
> >> >>> >> >> >> >> > >>
> >> >>> >> >> >> >> > >>
> >> >>> >> >> >> >> > >>
> >> >>> >> >> >> >> > >> --
> >> >>> >> >> >> >> > >>
> >> >>> +----------------------------------------------------------+
> >> >>> >> >> >> >> > >>   Alex Soto Bueno
- Computer Engineer
> >> >>> >> >> >> >> > >>   www.lordofthejars.com
> >> >>> >> >> >> >> > >>
> >> >>> +----------------------------------------------------------+
> >> >>> >> >> >> >> >
> >> >>> >> >> >> >>
> >> >>> >> >> >> >
> >> >>> >> >> >> >
> >> >>> >> >> >> >
> >> >>> >> >> >> > --
> >> >>> >> >> >> >
> +----------------------------------------------------------+
> >> >>> >> >> >> >   Alex Soto Bueno - Computer Engineer
> >> >>> >> >> >> >   www.lordofthejars.com
> >> >>> >> >> >> >
> +----------------------------------------------------------+
> >> >>> >> >> >> >
> >> >>> >> >> >>
> >> >>> >> >> >> --
> >> >>> >> >> >>
> >> >>> >> >> >>
> >> >>> >> >> >> Romain Manni-Bucau
> >> >>> >> >> >> Twitter: @rmannibucau
> >> >>> >> >> >> Blog: http://rmannibucau.wordpress.com/
> >> >>> >> >> >> LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> >>> >> >> >> Github: https://github.com/rmannibucau
> >> >>> >> >> >>
> >> >>> >> >> >
> >> >>> >> >> >
> >> >>> >> >> >
> >> >>> >> >> > --
> >> >>> >> >> > +----------------------------------------------------------+
> >> >>> >> >> >   Alex Soto Bueno - Computer Engineer
> >> >>> >> >> >   www.lordofthejars.com
> >> >>> >> >> > +----------------------------------------------------------+
> >> >>> >> >> >
> >> >>> >> >>
> >> >>> >> >> --
> >> >>> >> >>
> >> >>> >> >>
> >> >>> >> >> Romain Manni-Bucau
> >> >>> >> >> Twitter: @rmannibucau
> >> >>> >> >> Blog: http://rmannibucau.wordpress.com/
> >> >>> >> >> LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> >>> >> >> Github: https://github.com/rmannibucau
> >> >>> >> >>
> >> >>> >> >
> >> >>> >> >
> >> >>> >> > --
> >> >>> >> > Enviat amb Gmail Mobile
> >> >>> >> >
> >> >>> >>
> >> >>> >> --
> >> >>> >>
> >> >>> >>
> >> >>> >> Romain Manni-Bucau
> >> >>> >> Twitter: @rmannibucau
> >> >>> >> Blog: http://rmannibucau.wordpress.com/
> >> >>> >> LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> >>> >> Github: https://github.com/rmannibucau
> >> >>> >>
> >> >>> >
> >> >>> >
> >> >>> >
> >> >>> > --
> >> >>> > +----------------------------------------------------------+
> >> >>> >   Alex Soto Bueno - Computer Engineer
> >> >>> >   www.lordofthejars.com
> >> >>> > +----------------------------------------------------------+
> >> >>> >
> >> >>>
> >> >>> --
> >> >>>
> >> >>>
> >> >>> Romain Manni-Bucau
> >> >>> Twitter: @rmannibucau
> >> >>> Blog: http://rmannibucau.wordpress.com/
> >> >>> LinkedIn: http://fr.linkedin.com/in/rmannibucau
> >> >>> Github: https://github.com/rmannibucau
> >> >>>
> >> >>
> >> >>
> >> >>
> >> >> --
> >> >> +----------------------------------------------------------+
> >> >>   Alex Soto Bueno - Computer Engineer
> >> >>   www.lordofthejars.com
> >> >> +----------------------------------------------------------+
> >>
> >
> >
> >
> > --
> > +----------------------------------------------------------+
> >   Alex Soto Bueno - Computer Engineer
> >   www.lordofthejars.com
> > +----------------------------------------------------------+
>



-- 
+----------------------------------------------------------+
  Alex Soto Bueno - Computer Engineer
  www.lordofthejars.com
+----------------------------------------------------------+

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message