Justin,
there are two things I would like you to confirm:
(1) the sec-cas/web-sec-cas parentage changes are sane (I don’t know anything about these so I just wanted a double check before they go into stable); the build fix is the removal of the org.geoserver.web:web-security dependency (it is now a pom-only module)
(2) the web-sec-cas jar should be added to the plugin; I think it was inadvertently omitted
Both these changes can be seen here (but please do not merge):
https://github.com/geoserver/geoserver/pull/365/files
Please do not merge the pull request yet; I’ll decide on Monday whether to roll back the extra commits;. As Andrea pointed out on IRC, these affect files outside the build so can be included without changing anything. For clarity of history, I might just keep them. I will decide and complete the 2.4.1 release on Monday.
Thanks!
Kind regards,
···
On Thu, Oct 17, 2013 at 10:20 PM, Ben Caradoc-Davies <Ben.Caradoc-Davies@anonymised.com> wrote:
Ouch. It had a dependency on a pom-only module org.geoserver.web:web-security; that is never going to work. Trying again (locally).
If I get it going I would like an urgent review by someone who knows security before I release it in 2.4.2.
On 18/10/13 12:03, Ben Caradoc-Davies wrote:
Still not working. Reopened the thing that broke it:
https://jira.codehaus.org/browse/GEOS-5972–
Ben Caradoc-Davies Ben.Caradoc-Davies@anonymised.com
Software Engineer
CSIRO Earth Science and Resource Engineering
Australian Resources Research Centre
–
Justin Deoliveira
Vice President, Engineering | Boundless
jdeolive@anonymised.com
@j_deolive