Displaying #apache-syncope/2017-08-02.log:

Wed Aug 2 05:52:37 2017  ilgrosso:Joined the channel
Wed Aug 2 07:02:37 2017  svizzero81:Joined the channel
Wed Aug 2 07:03:52 2017  andreapatricelli:Joined the channel
Wed Aug 2 08:17:46 2017  sberyozkin:Joined the channel
Wed Aug 2 08:59:12 2017  coheigea:Joined the channel
Wed Aug 2 09:09:16 2017  ilgrosso:coheigea: ping
Wed Aug 2 09:09:24 2017  coheigea:ilgrosso: pong
Wed Aug 2 09:09:41 2017  ilgrosso:may I ask about the SNAPSHOT version for wss4j set on master? (just curious)
Wed Aug 2 09:09:59 2017  ilgrosso:is that because wss4j SNAPSHOT is java 8?
Wed Aug 2 09:11:36 2017  coheigea:ilgrosso: It's because CXF 3.2.0-SNAPSHOT has a dependency on WSS4J 2.2.0-SNAPSHOT. As I was testing the SAML SSO support in Syncope yesterday, there was an error when it was validating a SAML Response, as the cxf-rt-saml-sso module references a difference version of WSS4J to the 2.1.10 we were using in Syncope.
Wed Aug 2 09:11:56 2017  ilgrosso:ah sure, so it's because of CXF
Wed Aug 2 09:11:59 2017  ilgrosso:thx
Wed Aug 2 09:12:12 2017  coheigea:np. I'll be releasing WSS4J 2.2.0 fairly shortly anyway.
Wed Aug 2 09:12:37 2017  ilgrosso:I think we can simplify deps on master
Wed Aug 2 09:12:48 2017  ilgrosso:instead of <dependency>
Wed Aug 2 09:12:48 2017  ilgrosso: <groupId>org.apache.cxf</groupId>
Wed Aug 2 09:12:48 2017  ilgrosso: <artifactId>cxf-rt-rs-security-sso-saml</artifactId>
Wed Aug 2 09:12:48 2017  ilgrosso: <version>${cxf.version}</version>
Wed Aug 2 09:12:49 2017  ilgrosso: <exclusions>
Wed Aug 2 09:12:51 2017  ilgrosso: <exclusion>
Wed Aug 2 09:12:53 2017  ilgrosso: <groupId>org.opensaml</groupId>
Wed Aug 2 09:12:55 2017  ilgrosso: <artifactId>opensaml-xacml-impl</artifactId>
Wed Aug 2 09:12:58 2017  ilgrosso: </exclusion>
Wed Aug 2 09:13:00 2017  ilgrosso: <exclusion>
Wed Aug 2 09:13:02 2017  ilgrosso: <groupId>org.opensaml</groupId>
Wed Aug 2 09:13:04 2017  ilgrosso: <artifactId>opensaml-xacml-saml-impl</artifactId>
Wed Aug 2 09:13:06 2017  ilgrosso: </exclusion>
Wed Aug 2 09:13:08 2017  ilgrosso: <exclusion>
Wed Aug 2 09:13:11 2017  ilgrosso: <groupId>org.apache.wss4j</groupId>
Wed Aug 2 09:13:13 2017  ilgrosso: <artifactId>wss4j-ws-security-dom</artifactId>
Wed Aug 2 09:13:15 2017  ilgrosso: </exclusion>
Wed Aug 2 09:13:17 2017  ilgrosso: </exclusions>
Wed Aug 2 09:13:20 2017  ilgrosso: </dependency>
Wed Aug 2 09:13:22 2017  ilgrosso: <dependency>
Wed Aug 2 09:13:24 2017  ilgrosso: <groupId>org.apache.wss4j</groupId>
Wed Aug 2 09:13:26 2017  ilgrosso: <artifactId>wss4j-ws-security-dom</artifactId>
Wed Aug 2 09:13:28 2017  ilgrosso: <version>2.1.10</version>
Wed Aug 2 09:13:30 2017  ilgrosso: <exclusions>
Wed Aug 2 09:13:33 2017  ilgrosso: <exclusion>
Wed Aug 2 09:13:35 2017  ilgrosso: <groupId>org.jasypt</groupId>
Wed Aug 2 09:13:37 2017  ilgrosso: <artifactId>jasypt</artifactId>
Wed Aug 2 09:13:39 2017  ilgrosso: </exclusion>
Wed Aug 2 09:13:41 2017  ilgrosso: <exclusion>
Wed Aug 2 09:13:44 2017  ilgrosso: <groupId>org.apache.geronimo.specs</groupId>
Wed Aug 2 09:13:46 2017  ilgrosso: <artifactId>geronimo-javamail_1.4_spec</artifactId>
Wed Aug 2 09:13:48 2017  ilgrosso: </exclusion>
Wed Aug 2 09:13:50 2017  ilgrosso: </exclusions>
Wed Aug 2 09:13:52 2017  ilgrosso: </dependency>
Wed Aug 2 09:14:01 2017  ilgrosso:we could simply remove both the wss4j-ws-security-dom from cxf-rt-rs-security-sso-saml and the explicit wss4j-ws-security-dom
Wed Aug 2 09:14:06 2017  ilgrosso:coheigea: sorry, a bit too confusion here
Wed Aug 2 09:14:10 2017  ilgrosso:let me rephrase
Wed Aug 2 09:14:59 2017  ilgrosso:in the root pom.xml (master), from https://paste.apache.org/UrRV to https://paste.apache.org/hSUh
Wed Aug 2 09:15:33 2017  ilgrosso:I remember I had to add the wss4j-ws-security-dom exclusion from CXF in order to have the latest wss4j-ws-security-dom
Wed Aug 2 09:15:45 2017  ilgrosso:but with CXF 3.2.0-SNAPSHOT there should be no more reason for that
Wed Aug 2 09:15:47 2017  ilgrosso:WDYT?
Wed Aug 2 09:16:29 2017  coheigea:Fine with me. Do you need to exclude jasypt and javamail as well?
Wed Aug 2 09:16:50 2017  coheigea:you could probably make the same change on 2.0.x?
Wed Aug 2 09:17:43 2017  ilgrosso:about jasypt and javamail, I am not sure effectively, we should check
Wed Aug 2 09:17:58 2017  ilgrosso:(to avoid duplicated versions of the same deps)
Wed Aug 2 09:18:23 2017  ilgrosso:about 2_0_X it depends on the WSS4J version bundled with CXF 3.1.12, let me check...
Wed Aug 2 09:19:12 2017  ilgrosso:ok, it's 2.1.10
Wed Aug 2 09:19:17 2017  ilgrosso:I'll make such changes, then
Wed Aug 2 09:19:38 2017  ilgrosso:since I am working on SYNCOPE-1146
Wed Aug 2 09:20:13 2017  coheigea:ok great.
Wed Aug 2 09:25:38 2017  coheigea:BTW the enduser tests are very unstable, I gave up trying to pass them after about 10 goes on master yesterday
Wed Aug 2 09:26:36 2017  ilgrosso:I know: the commit made by Matteo Alessandroni this morning should have fixed them
Wed Aug 2 09:26:55 2017  ilgrosso:https://github.com/apache/syncope/commit/89fe8311579a2079c33a17cadbdb9be8e172972f
Wed Aug 2 09:29:29 2017  coheigea:ah excellent :-)
Wed Aug 2 09:47:44 2017  ilgrosso:coheigea: in fact, finally the Jenkins build succeeded again: https://builds.apache.org/job/Syncope-2_0_X/74/
Wed Aug 2 10:02:37 2017  ilgrosso:Joined the channel
Wed Aug 2 10:04:08 2017  coheigea:Is there any way to avoid the annoying "Fetching p2.index from http://download.eclipse.org/releases/mars" messages?
Wed Aug 2 10:17:29 2017  ilgrosso:stackoverflow suggests to pass -o flag to Maven
Wed Aug 2 10:18:17 2017  ilgrosso:coheigea: wss4j pulls in org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:compile but we do have org.apache.geronimo.javamail:geronimo-javamail_1.4_mail:jar:1.8.4:compile
Wed Aug 2 10:18:27 2017  ilgrosso:hence, we still need to declare wss4j for exclusions
Wed Aug 2 10:18:35 2017  ilgrosso:(unfortunately)
Wed Aug 2 10:19:04 2017  ilgrosso:would it be possible to upgrade for wss4j 2.1.11 / 2.2.0 ?
Wed Aug 2 10:19:25 2017  ilgrosso:(I don't think there are reasons to keep an old geronimo.javamail)
Wed Aug 2 10:24:27 2017  coheigea:let me check
Wed Aug 2 10:29:35 2017  coheigea:ilgrosso: Any objections if I substitute the server + ajp ports in the standalone pom (in addition to the servlet port)? I can't start the standalone tomcat if there is an existing tomcat running due to those 2 ports conflicting.
Wed Aug 2 10:30:04 2017  ilgrosso:coheigea: np
Wed Aug 2 10:30:22 2017  ilgrosso:the substituted ports should be
Wed Aug 2 10:30:22 2017  ilgrosso: <cargo.servlet.port>9080</cargo.servlet.port>
Wed Aug 2 10:30:22 2017  ilgrosso: <cargo.tomcat.ajp.port>9889</cargo.tomcat.ajp.port>
Wed Aug 2 10:30:22 2017  ilgrosso: <cargo.rmi.port>9805</cargo.rmi.port>
Wed Aug 2 10:30:36 2017  ilgrosso:which ports are you missing?
Wed Aug 2 10:30:45 2017  coheigea:my local diff:
Wed Aug 2 10:30:49 2017  coheigea:+ <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8009" value="${cargo.tomcat.ajp.port}" />
Wed Aug 2 10:30:49 2017  coheigea:+ <replace file="${work.dir}/apache-tomcat-${tomcat.version}/conf/server.xml" token="8005" value="${cargo.rmi.port}" />
Wed Aug 2 10:30:55 2017  coheigea:(standalone/pom.xml)
Wed Aug 2 10:31:18 2017  ilgrosso:ah, in the standalone, I see
Wed Aug 2 10:31:32 2017  ilgrosso:please go ahead then
Wed Aug 2 10:31:39 2017  ilgrosso:(I though it was for debug / jrebel / embedded profiles)
Wed Aug 2 10:33:01 2017  coheigea:ok thanks
Wed Aug 2 12:47:38 2017  coheigea:Joined the channel
Wed Aug 2 15:07:13 2017  ilgrosso:Joined the channel
Wed Aug 2 16:57:43 2017  coheigea:Left the channel

Comments