[Geoserver-devel] spring 4 upgrade

I have gathered up email, notes and conversations here:

We will be upgrading (one way or another) to Spring 4 shortly.

I would like to ask the PSC to review the above, add to it with your own research, and make a decision about:

  • Temp Fix: Build and Run with Java 8 carefully
  • Upgrade Now: Delay Release and Migrate to Spring 4

We have a couple of outstanding questions, most noticeably contacting Christian with respect to the Security CAS module.

On Tue, Mar 1, 2016 at 9:42 AM, Jody Garnett <jody.garnett@anonymised.com> wrote:

I have gathered up email, notes and conversations here:

* https://github.com/geoserver/geoserver/wiki/Spring-4-Upgrade

Made a small update on the Spring-asm issue introduction, with my findings
of a couple of days ago (long story
short, any usage of java 8 syntax in spring instantiated beans causes
problems).

We will be upgrading (one way or another) to Spring 4 shortly.

I would like to ask the PSC to review the above, add to it with your own
research, and make a decision about:

* Temp Fix: Build and Run with Java 8 carefully
* Upgrade Now: Delay Release and Migrate to Spring 4

We have a couple of outstanding questions, most noticeably contacting
Christian with respect to the Security CAS module.

I've just cc'ed Christian explicitly. Christian, we'd need some help of
yours to figure out how difficult a security
subsystem upgrade to Spring 4 would be, with extra attention to the CAS
module upgrade.

Cheers
Andrea

--

GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.

-------------------------------------------------------

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.

Hi Jody,
as said in the meeting, I’m supportive of a delay long enough to switch
everything to Spring 4 and make it solid (2-3 months)

Cheers
Andrea

···

On Wed, Mar 2, 2016 at 2:49 AM, Jody Garnett <jody.garnett@anonymised.com…> wrote:

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


Hi all

The Spring security API changed since 4.x. GeoServer is relying on getters and setters and this methods are gone. Since 4.x, the instance variables are set using a constructor. Not easy to change.

Additionally, the CAS java client also changed the public API, this is the second problem because the CAS jar is a dependency of Spring Security.

Will have a look at the problem during the weekend.

Do we have a branch where I can start investigating ?

Cheers
Christian

···

On Wed, Mar 2, 2016 at 4:29 AM, Andrea Aime <andrea.aime@anonymised.com.1268…> wrote:

Hi Jody,
as said in the meeting, I’m supportive of a delay long enough to switch
everything to Spring 4 and make it solid (2-3 months)

Cheers
Andrea


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

On Wed, Mar 2, 2016 at 2:49 AM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

The core api changes around ProviderManager and FilterChainProxy I think is something that won’t be too crazy to work around. I think the best bet there will be to have the geoserver counter parts (GeoServerSecurityManager, GeoServerFilterChainProxy) wrap the spring stuff rather than extend it. That way it can be recreated as needed via constructor rather than setters after the fact. In an ideal world nothing around thsoe classes would have to change, but that is probalby a bit too optimistic :slight_smile:

As for the CAS stuff you’re guess is as good as mine. I can confirm Christians findings that the api has changed significantly and from what I can tell without much guidance as to what the transition is from the old api to the new. Could potentially be looking at a re-implementation there but knowing next to nothing about CAS I delegate to Christian on that.

···

On Wed, Mar 2, 2016 at 4:29 AM, Andrea Aime <andrea.aime@anonymised.com> wrote:

Hi Jody,
as said in the meeting, I’m supportive of a delay long enough to switch
everything to Spring 4 and make it solid (2-3 months)

Cheers
Andrea


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

On Wed, Mar 2, 2016 at 2:49 AM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

I took the liberty of starting down the road of this described approach. I’ve gotten it to the point where all of the core modules compile (haven’t taken on extensions or community modules) against spring 4.2.5 and spring security 4.0.4. Haven’t actually run the server or any tests yet.

https://github.com/jdeolive/geoserver/tree/spring4-upgrade

I think the next step would be to merge this with andreas mockrunner branch and go ahead and perform the servlet api upgrade. With that done I think we would be in a position to start working through all of the unit tests.

···

On Wed, Mar 2, 2016 at 4:29 AM, Andrea Aime <andrea.aime@anonymised.com268…> wrote:

Hi Jody,
as said in the meeting, I’m supportive of a delay long enough to switch
everything to Spring 4 and make it solid (2-3 months)

Cheers
Andrea


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

On Wed, Mar 2, 2016 at 2:49 AM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Sounds good, want to make a geoserver branch. And thanks for getting things started, Kevin also did some research/experiment and may have a contribution.

Still waiting on PSC votes.

···

On Wed, Mar 2, 2016 at 4:29 AM, Andrea Aime <andrea.aime@anonymised.com> wrote:

Hi Jody,
as said in the meeting, I’m supportive of a delay long enough to switch
everything to Spring 4 and make it solid (2-3 months)

Cheers
Andrea


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

On Wed, Mar 2, 2016 at 2:49 AM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Sure, just pushed the branch it to the geoserver repo.

···

On Wed, Mar 2, 2016 at 4:29 AM, Andrea Aime <andrea.aime@anonymised.com> wrote:

Hi Jody,
as said in the meeting, I’m supportive of a delay long enough to switch
everything to Spring 4 and make it solid (2-3 months)

Cheers
Andrea


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

On Wed, Mar 2, 2016 at 2:49 AM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

I’ve created a corresponding branch for GeoWebCache. https://github.com/GeoWebCache/geowebcache/tree/spring4-upgrade

So far it compiles, unit tests pass, and it starts up without any errors. The unit test coverage in GWC is far less complete than that of GeoServer though. I haven’t tried updating from Acegi Security 1.0.7 to Spring Security 4.0.4 beyond changing the POM to see how bad it looks, then changing it back to work on the rest of Spring first.

Kevin Michael Smith

smithkm@anonymised.com

On Wed, Mar 2, 2016, at 10:54 AM, Justin Deoliveira wrote:

Sure, just pushed the branch it to the geoserver repo.

On Wed, Mar 2, 2016 at 11:50 AM Jody Garnett <jody.garnett@anonymised.com> wrote:

Sounds good, want to make a geoserver branch. And thanks for getting things started, Kevin also did some research/experiment and may have a contribution.

Still waiting on PSC votes.

On Wed, Mar 2, 2016 at 10:25 AM Justin Deoliveira <jdeolive@anonymised.com> wrote:

I took the liberty of starting down the road of this described approach. I’ve gotten it to the point where all of the core modules compile (haven’t taken on extensions or community modules) against spring 4.2.5 and spring security 4.0.4. Haven’t actually run the server or any tests yet.

https://github.com/jdeolive/geoserver/tree/spring4-upgrade

I think the next step would be to merge this with andreas mockrunner branch and go ahead and perform the servlet api upgrade. With that done I think we would be in a position to start working through all of the unit tests.

On Wed, Mar 2, 2016 at 8:10 AM Justin Deoliveira <jdeolive@anonymised.com> wrote:

The core api changes around ProviderManager and FilterChainProxy I think is something that won’t be too crazy to work around. I think the best bet there will be to have the geoserver counter parts (GeoServerSecurityManager, GeoServerFilterChainProxy) wrap the spring stuff rather than extend it. That way it can be recreated as needed via constructor rather than setters after the fact. In an ideal world nothing around thsoe classes would have to change, but that is probalby a bit too optimistic :slight_smile:

As for the CAS stuff you’re guess is as good as mine. I can confirm Christians findings that the api has changed significantly and from what I can tell without much guidance as to what the transition is from the old api to the new. Could potentially be looking at a re-implementation there but knowing next to nothing about CAS I delegate to Christian on that.

On Wed, Mar 2, 2016 at 12:16 AM Christian Mueller <christian.mueller@anonymised.com…> wrote:

Hi all

The Spring security API changed since 4.x. GeoServer is relying on getters and setters and this methods are gone. Since 4.x, the instance variables are set using a constructor. Not easy to change.

Additionally, the CAS java client also changed the public API, this is the second problem because the CAS jar is a dependency of Spring Security.

Will have a look at the problem during the weekend.

Do we have a branch where I can start investigating ?

Cheers

Christian

On Wed, Mar 2, 2016 at 4:29 AM, Andrea Aime <andrea.aime@anonymised.com> wrote:

Hi Jody,

as said in the meeting, I’m supportive of a delay long enough to switch

everything to Spring 4 and make it solid (2-3 months)

Cheers

Andrea

On Wed, Mar 2, 2016 at 2:49 AM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Okay, I respect both options making this a tough decision. I wish we could hear back from Christian about the security-cas release, but the same spring4 migration needed by both plans.

I would like to go ahead with the release delay (do the spring 4 upgrade now), avoids an awkward 50% solution that we would need to support.


Site24x7 APM Insight: Get Deep Visibility into Application Performance

APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month

Monitor end-to-end web transactions and take corrective actions now

Troubleshoot faster and improve end-user experience. Signup Now!

http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list

Geoserver-devel@anonymised.comsts.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==

GeoServer Professional Services from the experts! Visit

http://goo.gl/it488V for more information.

==

Ing. Andrea Aime

@geowolf

Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272

mob: +39 339 8844549

http://www.geo-solutions.it

http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.



Site24x7 APM Insight: Get Deep Visibility into Application Performance

APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month

Monitor end-to-end web transactions and take corrective actions now

Troubleshoot faster and improve end-user experience. Signup Now!

http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list

Geoserver-devel@anonymised.comsts.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/geoserver-devel

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH


Site24x7 APM Insight: Get Deep Visibility into Application Performance

APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month

Monitor end-to-end web transactions and take corrective actions now

Troubleshoot faster and improve end-user experience. Signup Now!

http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140_______________________________________________

Geoserver-devel mailing list

Geoserver-devel@anonymised.comsts.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Site24x7 APM Insight: Get Deep Visibility into Application Performance

APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month

Monitor end-to-end web transactions and take corrective actions now

Troubleshoot faster and improve end-user experience. Signup Now!

http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140_______________________________________________

Geoserver-devel mailing list

Geoserver-devel@anonymised.comsts.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Jody Garnett


Site24x7 APM Insight: Get Deep Visibility into Application Performance

APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month

Monitor end-to-end web transactions and take corrective actions now

Troubleshoot faster and improve end-user experience. Signup Now!

http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list

Geoserver-devel@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.

Support for Java 8 for both users and developers is one of the major selling points for the 2.9 release. I think it is worthwhile to clear this technical debt so that we can deliver full support for Java 8.

If we get this out the door in the next month or so, we could even consider it a 3.0 release, as we have big changes with both Wicket 7 and Java 8. Or would that be GeoTools 9.0 (dropping major version in the tradition of Solaris and GeoTools)? :slight_smile:

Kind regards,
Ben.

On 01/03/16 21:42, Jody Garnett wrote:

I have gathered up email, notes and conversations here:

* https://github.com/geoserver/geoserver/wiki/Spring-4-Upgrade

We will be upgrading (one way or another) to Spring 4 shortly.

I would like to ask the PSC to review the above, add to it with your own
research, and make a decision about:

* Temp Fix: Build and Run with Java 8 carefully
* Upgrade Now: Delay Release and Migrate to Spring 4

We have a couple of outstanding questions, most noticeably contacting
Christian with respect to the Security CAS module.

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140

_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

--
Ben Caradoc-Davies <ben@anonymised.com>
Director
Transient Software Limited <http://transient.nz/&gt;
New Zealand

If we follow the tradition set for GeoServer 2.x, we should be switch to 3.0
once the JDBCConfig module is ready to become core and act as the
replacement for the data directory.

Cheers
Andrea

···

On Thu, Mar 3, 2016 at 6:08 AM, Ben Caradoc-Davies <ben@anonymised.com> wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.

Support for Java 8 for both users and developers is one of the major
selling points for the 2.9 release. I think it is worthwhile to clear
this technical debt so that we can deliver full support for Java 8.

If we get this out the door in the next month or so, we could even
consider it a 3.0 release, as we have big changes with both Wicket 7 and
Java 8. Or would that be GeoTools 9.0 (dropping major version in the
tradition of Solaris and GeoTools)? :slight_smile:

Kind regards,
Ben.

On 01/03/16 21:42, Jody Garnett wrote:

I have gathered up email, notes and conversations here:

We will be upgrading (one way or another) to Spring 4 shortly.

I would like to ask the PSC to review the above, add to it with your own
research, and make a decision about:

  • Temp Fix: Build and Run with Java 8 carefully
  • Upgrade Now: Delay Release and Migrate to Spring 4

We have a couple of outstanding questions, most noticeably contacting
Christian with respect to the Security CAS module.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Ben Caradoc-Davies <ben@anonymised.com…>
Director
Transient Software Limited <http://transient.nz/>
New Zealand


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


Think it will be a while yet for JDBC config - would actually like to see a range of catalogs (and resource pools) for different situations.

Can we hunt down remaining PSC members, today i take my internet stalking to Twitter and linked in.

···

On Thu, Mar 3, 2016 at 6:08 AM, Ben Caradoc-Davies <ben@anonymised.com> wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.

Support for Java 8 for both users and developers is one of the major
selling points for the 2.9 release. I think it is worthwhile to clear
this technical debt so that we can deliver full support for Java 8.

If we get this out the door in the next month or so, we could even
consider it a 3.0 release, as we have big changes with both Wicket 7 and
Java 8. Or would that be GeoTools 9.0 (dropping major version in the
tradition of Solaris and GeoTools)? :slight_smile:

Kind regards,
Ben.

On 01/03/16 21:42, Jody Garnett wrote:

I have gathered up email, notes and conversations here:

We will be upgrading (one way or another) to Spring 4 shortly.

I would like to ask the PSC to review the above, add to it with your own
research, and make a decision about:

  • Temp Fix: Build and Run with Java 8 carefully
  • Upgrade Now: Delay Release and Migrate to Spring 4

We have a couple of outstanding questions, most noticeably contacting
Christian with respect to the Security CAS module.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Ben Caradoc-Davies <ben@anonymised.com>
Director
Transient Software Limited <http://transient.nz/>
New Zealand


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime

@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313

fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.


On Thu, 3 Mar 2016 06:08:39 PM Ben Caradoc-Davies wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.

I'm OK with either solution (with a very slight preference for keeping a Java
8 solution). Happy for those who understand the implications (in particular,
the risks and work involved) at a deeper level to make the call on this.

Brad

Thanks Brad, updated the table accordingly. I probably should of phrased this as a yes/no question.

We are waiting on two PSC members:

  • Christian Mueller
  • Simone Giannecchini
···

On 3 March 2016 at 06:18, Brad Hards <bradh@…4091…> wrote:

On Thu, 3 Mar 2016 06:08:39 PM Ben Caradoc-Davies wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.
I’m OK with either solution (with a very slight preference for keeping a Java
8 solution). Happy for those who understand the implications (in particular,
the risks and work involved) at a deeper level to make the call on this.

Brad


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Jody Garnett

Ciao Jody,
I am for upgrading to Spring 4 + delaying the release.

I already told Andrea we can devote resources to help with the upgrade.

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Thu, Mar 3, 2016 at 6:04 PM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Thanks Brad, updated the table accordingly. I probably should of phrased
this as a yes/no question.

We are waiting on two PSC members:
- Christian Mueller
- Simone Giannecchini

--
Jody Garnett

On 3 March 2016 at 06:18, Brad Hards <bradh@anonymised.com> wrote:

On Thu, 3 Mar 2016 06:08:39 PM Ben Caradoc-Davies wrote:
> Thank you so much Jody for all your work rounding this up.
>
> I am +1 to delay the release and upgrade now to Spring 4.
I'm OK with either solution (with a very slight preference for keeping a
Java
8 solution). Happy for those who understand the implications (in
particular,
the risks and work involved) at a deeper level to make the call on this.

Brad

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Thanks Simone, updating the page. I will give Christian another day and then I would like to start making plans.

···

On 3 March 2016 at 09:16, Simone Giannecchini <simone.giannecchini@anonymised.com> wrote:

Ciao Jody,
I am for upgrading to Spring 4 + delaying the release.

I already told Andrea we can devote resources to help with the upgrade.

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it


AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Thu, Mar 3, 2016 at 6:04 PM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Thanks Brad, updated the table accordingly. I probably should of phrased
this as a yes/no question.

We are waiting on two PSC members:

  • Christian Mueller
  • Simone Giannecchini


Jody Garnett

On 3 March 2016 at 06:18, Brad Hards <bradh@anonymised.com> wrote:

On Thu, 3 Mar 2016 06:08:39 PM Ben Caradoc-Davies wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.
I’m OK with either solution (with a very slight preference for keeping a
Java
8 solution). Happy for those who understand the implications (in
particular,
the risks and work involved) at a deeper level to make the call on this.

Brad


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Jody Garnett

Hi all

I think it is necessary to upgrade, +1 here. I have seen Justin created a branch spring4-upgrade fixing the broken security code.

For CAS I have an online test scenario.

Cheers

···

On Thu, Mar 3, 2016 at 6:19 PM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Thanks Simone, updating the page. I will give Christian another day and then I would like to start making plans.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Jody Garnett

On 3 March 2016 at 09:16, Simone Giannecchini <simone.giannecchini@anonymised.com> wrote:

Ciao Jody,
I am for upgrading to Spring 4 + delaying the release.

I already told Andrea we can devote resources to help with the upgrade.

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it


AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Thu, Mar 3, 2016 at 6:04 PM, Jody Garnett <jody.garnett@anonymised.com…> wrote:

Thanks Brad, updated the table accordingly. I probably should of phrased
this as a yes/no question.

We are waiting on two PSC members:

  • Christian Mueller
  • Simone Giannecchini


Jody Garnett

On 3 March 2016 at 06:18, Brad Hards <bradh@anonymised.com> wrote:

On Thu, 3 Mar 2016 06:08:39 PM Ben Caradoc-Davies wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.
I’m OK with either solution (with a very slight preference for keeping a
Java
8 solution). Happy for those who understand the implications (in
particular,
the risks and work involved) at a deeper level to make the call on this.

Brad


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Thanks Christian, I will write up the blog post - and talk to you all next week with respect to planning.

···

On 3 March 2016 at 23:24, Christian Mueller <christian.mueller@anonymised.com> wrote:

Hi all

I think it is necessary to upgrade, +1 here. I have seen Justin created a branch spring4-upgrade fixing the broken security code.

For CAS I have an online test scenario.

Cheers


Jody Garnett

On Thu, Mar 3, 2016 at 6:19 PM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Thanks Simone, updating the page. I will give Christian another day and then I would like to start making plans.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH


Jody Garnett

On 3 March 2016 at 09:16, Simone Giannecchini <simone.giannecchini@anonymised.com> wrote:

Ciao Jody,
I am for upgrading to Spring 4 + delaying the release.

I already told Andrea we can devote resources to help with the upgrade.

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it


AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Thu, Mar 3, 2016 at 6:04 PM, Jody Garnett <jody.garnett@anonymised.com…> wrote:

Thanks Brad, updated the table accordingly. I probably should of phrased
this as a yes/no question.

We are waiting on two PSC members:

  • Christian Mueller
  • Simone Giannecchini


Jody Garnett

On 3 March 2016 at 06:18, Brad Hards <bradh@anonymised.com> wrote:

On Thu, 3 Mar 2016 06:08:39 PM Ben Caradoc-Davies wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.
I’m OK with either solution (with a very slight preference for keeping a
Java
8 solution). Happy for those who understand the implications (in
particular,
the risks and work involved) at a deeper level to make the call on this.

Brad


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

An update on this one.

Basically where it stands is that I think everything minus CAS has been ported over the new spring apis and afaik all tests are passing. I’ve run the server (with just the core modules) and can confirm that a quick smoke test doesn’t show any problems.

In terms of compability issues the only issue I have found thus far is the issue with the spring security login endpoints changing (ie. /j_spring_security_check is now /login). It’s on my list to circle back to see if we can somehow change some config to use the old paths. However when I looked before it didn’t look possible. I only know of one application (GeoExplorer) that utilizes the endpoints to login so i am not sure how far reaching this issue actually is.

So off the top of my head the remaining tasks are:

  • Port CAS
  • Look at the login/logout endpoint issue
  • Decide what to do about the login/logout issue if we can’t change them back
  • Do some more general and thorough testing
···


Jody Garnett

On 3 March 2016 at 23:24, Christian Mueller <christian.mueller@anonymised.com> wrote:

Hi all

I think it is necessary to upgrade, +1 here. I have seen Justin created a branch spring4-upgrade fixing the broken security code.

For CAS I have an online test scenario.

Cheers

On Thu, Mar 3, 2016 at 6:19 PM, Jody Garnett <jody.garnett@anonymised.com> wrote:

Thanks Simone, updating the page. I will give Christian another day and then I would like to start making plans.


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH


Jody Garnett

On 3 March 2016 at 09:16, Simone Giannecchini <simone.giannecchini@anonymised.com> wrote:

Ciao Jody,
I am for upgrading to Spring 4 + delaying the release.

I already told Andrea we can devote resources to help with the upgrade.

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it


AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Thu, Mar 3, 2016 at 6:04 PM, Jody Garnett <jody.garnett@anonymised.com…> wrote:

Thanks Brad, updated the table accordingly. I probably should of phrased
this as a yes/no question.

We are waiting on two PSC members:

  • Christian Mueller
  • Simone Giannecchini


Jody Garnett

On 3 March 2016 at 06:18, Brad Hards <bradh@anonymised.com> wrote:

On Thu, 3 Mar 2016 06:08:39 PM Ben Caradoc-Davies wrote:

Thank you so much Jody for all your work rounding this up.

I am +1 to delay the release and upgrade now to Spring 4.
I’m OK with either solution (with a very slight preference for keeping a
Java
8 solution). Happy for those who understand the implications (in
particular,
the risks and work involved) at a deeper level to make the call on this.

Brad


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel


Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel