You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by Stefan Seelmann <ma...@stefan-seelmann.de> on 2018/06/03 08:39:50 UTC
Re: PSU SCIMple donation
Moving the discussion to public list.
Here is the current status:
* I forwared the CCLA to the secretary
* All committers listed in the CCLA have an ICLA recorded and are
already voted in as committers (Alex Haskell, Chris Harm, Chris Pike,
Shawn Smith, Steve Moyer)
* The initial IP clearance form is created [1]
Next steps:
* Identify the codebase: What I see [2] is the latest commit, correct?
* Decide on a name: which name should we use? SCIMple, eSCIMo, something
else? We just make to be sure the name is not trademarked yet.
* Check source and dependencies for Apache License compatibility (I do,
but more eyes are welcomed :-)
* Wait for secretary confirmation that CCLA is recorded
* Finish the IP clearance form
When this is done:
* Request a new git repo (gitbox with github mirror) and Jira project
* Push the code
* Add Apache license headers to all the files
* Rename Maven artifact and Java package names
* More to come...
Kind Regards,
Stefan
[1]
https://svn.apache.org/repos/asf/incubator/public/trunk/content/ip-clearance/directory-scimple.xml
[2]
https://github.com/PennState/SCIMple-Identity/commit/0bebc8fb8dcf838daeeacfd73362c6ee16711ffb
Re: PSU SCIMple donation
Posted by Emmanuel Lecharny <el...@apache.org>.
Fine. We will just move eSCIMo to the attic and change the website to
expose SCIMple.
Le lun. 18 juin 2018 à 16:19, Smith, Shawn E <se...@psu.edu> a écrit :
> If there's no objections, I'd like to see SCIMple stand. There are a few
> orgs that are already using it.
>
>
> Cheers,
>
> Shawn
> ------------------------------
> *From:* Emmanuel Lécharny <el...@gmail.com>
> *Sent:* Saturday, June 16, 2018 2:43:01 AM
>
> *To:* dev@directory.apache.org
> *Subject:* Re: PSU SCIMple donation
>
> Le 15/06/2018 à 18:03, Smith, Shawn E a écrit :
> > I think I have the dependencies cleaned up. I did discover that JSR-305
> is GPL, so those annotations are off the table which is unfortunate.
> >
> >
> > I also took all of the example projects out and put them in another
> project. That's where the hibernate dependencies were coming from.
> >
> >
> > There is one pull request being review, but the develop branch at
> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FPennState%2FSCIMple-Identity&data=02%7C01%7Cses44%40psu.edu%7Ca8c87c4a5fd6416c022008d5d35470a4%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636647281985945297&sdata=i%2BMv5JC4M2A2bwpihtqAXSEnzqBLMqfbZuDeShRcYYk%3D&reserved=0
> is the most current code.
>
> >
> >
> > Please advise on any additional steps we should take.
>
> I guess we can now import the code base. If we find any other
> incompatible license code later on, we can work that out before a
> release anyway.
>
> I can work on refactorng the website to point to the project.
>
> One thing we haven't decided yet, AFAIK, is the name of the project:
> should we keep SCIMple or pick another name ?
>
> --
> Emmanuel Lecharny
>
> Symas.com
> directory.apache.org
>
> --
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: PSU SCIMple donation
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 01/07/2018 à 23:39, Smith, Shawn E a écrit :
> There are a couple, but I'm heading out the door right now. Admins for now, me, Steve Moyer, Chris Harm and Chris Pike. I can get their Apache usernames tomorrow if you need. Mine is ussmith ( until I move back abroad..)
I guess you frst have to subscribe to the created JIRA space
(https://issues.apache.org/jira/projects/SCIMPLE/issues/?filter=allopenissues)
Same for all the others.
Thanks !
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by Emmanuel Lécharny <el...@gmail.com>.
Ok, guys, the staging site has been updated :
http://directory.staging.apache.org/
And more specifically http://directory.staging.apache.org/scimple
There are missing links, like the '5 minutes tutorial', users guide and
gen docs. I can update the last one if I can build the code. I will try
that one of the following evenings.
In teh mean time, please feel free to comment and/or send patches for
the missing pages, or the actual content. FTR, there is some
explanaition on how the CMS we use works on
directory.staging.apache.org/sources.html, see teh WEBSITE section.
Thanks !
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by "Smith, Shawn E" <se...@psu.edu>.
There are a couple, but I'm heading out the door right now. Admins for now, me, Steve Moyer, Chris Harm and Chris Pike. I can get their Apache usernames tomorrow if you need. Mine is ussmith ( until I move back abroad..)
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Emmanuel Lécharny <el...@gmail.com>
Sent: Sunday, July 1, 2018 5:22:39 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Le 01/07/2018 à 23:17, Smith, Shawn E a écrit :
> Seems reasonable to me
Do you have any tickets you may want to inject into th newly created Space ?
Also what's the list of person I should make admin for this space ?
Thanks !
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 01/07/2018 à 23:17, Smith, Shawn E a écrit :
> Seems reasonable to me
Do you have any tickets you may want to inject into th newly created Space ?
Also what's the list of person I should make admin for this space ?
Thanks !
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by "Smith, Shawn E" <se...@psu.edu>.
Seems reasonable to me
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Emmanuel Lécharny <el...@gmail.com>
Sent: Sunday, July 1, 2018 5:15:56 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
We need to create a JIRA space for the SCIMPLE project.
I suggest we keep it simple: we name it SCIMPLE.
Ok ?
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by Emmanuel Lécharny <el...@gmail.com>.
We need to create a JIRA space for the SCIMPLE project.
I suggest we keep it simple: we name it SCIMPLE.
Ok ?
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
Thanks Shawn and Steve.
I updated the form [1] and will now ask the Incubator PMC for IP clearance.
Kind Regards,
Stefan
[1] https://incubator.apache.org/ip-clearance/directory-scimple.html
Re: PSU SCIMple donation
Posted by "Smith, Shawn Eion" <se...@psu.edu>.
pom's and .g4's now have the license in the header.
Thanks,
Shawn
________________________________
From: Smith, Shawn Eion <se...@psu.edu>
Sent: Monday, July 16, 2018 9:58:37 AM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
How many times can I spell your name wrong... Apologies and thanks Stefan.
________________________________
From: Smith, Shawn Eion <se...@psu.edu>
Sent: Sunday, July 15, 2018 8:40:55 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Just saw my typo, thanks Stephan..
Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fghei36&data=02%7C01%7Cses44%40psu.edu%7C83be013f924c4c8d102a08d5eab4d41c%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636672984744838154&sdata=wkXktT8OBPfCKz%2FL2vQCgHP5jGglaoFuDtWjJmygfKY%3D&reserved=0>
________________________________
From: Smith, Shawn Eion
Sent: Sunday, July 15, 2018 2:02:39 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Thanks Sefan, I'll get those corrected.
________________________________
From: Stefan Seelmann <ma...@stefan-seelmann.de>
Sent: Friday, July 13, 2018 12:48:27 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Hi Shawn,
On 06/18/2018 09:18 PM, Stefan Seelmann wrote:
> Do you want to push the code yourself?
I see the code was pushed and you already added the Apache License
header to the Java files and renamed the packages, thanks for that :)
I run a apache-rat check, the remaining files that need the license
header in order to finish up the IP clearance are:
* all the pom.xmls
* all the antlr *.g4 files
I think the SCIM JSON schema files don't need a license header (and can
be excluded from RAT check) since they are defined in RFCs, correct?
(and JSON doesn't support comments anyway...)
Kind Regards,
Stefan
Re: PSU SCIMple donation
Posted by "Smith, Shawn Eion" <se...@psu.edu>.
How many times can I spell your name wrong... Apologies and thanks Stefan.
________________________________
From: Smith, Shawn Eion <se...@psu.edu>
Sent: Sunday, July 15, 2018 8:40:55 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Just saw my typo, thanks Stephan..
Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fghei36&data=02%7C01%7Cses44%40psu.edu%7C83be013f924c4c8d102a08d5eab4d41c%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636672984744838154&sdata=wkXktT8OBPfCKz%2FL2vQCgHP5jGglaoFuDtWjJmygfKY%3D&reserved=0>
________________________________
From: Smith, Shawn Eion
Sent: Sunday, July 15, 2018 2:02:39 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Thanks Sefan, I'll get those corrected.
________________________________
From: Stefan Seelmann <ma...@stefan-seelmann.de>
Sent: Friday, July 13, 2018 12:48:27 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Hi Shawn,
On 06/18/2018 09:18 PM, Stefan Seelmann wrote:
> Do you want to push the code yourself?
I see the code was pushed and you already added the Apache License
header to the Java files and renamed the packages, thanks for that :)
I run a apache-rat check, the remaining files that need the license
header in order to finish up the IP clearance are:
* all the pom.xmls
* all the antlr *.g4 files
I think the SCIM JSON schema files don't need a license header (and can
be excluded from RAT check) since they are defined in RFCs, correct?
(and JSON doesn't support comments anyway...)
Kind Regards,
Stefan
Re: PSU SCIMple donation
Posted by "Smith, Shawn Eion" <se...@psu.edu>.
Just saw my typo, thanks Stephan..
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Smith, Shawn Eion
Sent: Sunday, July 15, 2018 2:02:39 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Thanks Sefan, I'll get those corrected.
________________________________
From: Stefan Seelmann <ma...@stefan-seelmann.de>
Sent: Friday, July 13, 2018 12:48:27 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Hi Shawn,
On 06/18/2018 09:18 PM, Stefan Seelmann wrote:
> Do you want to push the code yourself?
I see the code was pushed and you already added the Apache License
header to the Java files and renamed the packages, thanks for that :)
I run a apache-rat check, the remaining files that need the license
header in order to finish up the IP clearance are:
* all the pom.xmls
* all the antlr *.g4 files
I think the SCIM JSON schema files don't need a license header (and can
be excluded from RAT check) since they are defined in RFCs, correct?
(and JSON doesn't support comments anyway...)
Kind Regards,
Stefan
Re: PSU SCIMple donation
Posted by "Smith, Shawn Eion" <se...@psu.edu>.
Thanks Sefan, I'll get those corrected.
________________________________
From: Stefan Seelmann <ma...@stefan-seelmann.de>
Sent: Friday, July 13, 2018 12:48:27 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Hi Shawn,
On 06/18/2018 09:18 PM, Stefan Seelmann wrote:
> Do you want to push the code yourself?
I see the code was pushed and you already added the Apache License
header to the Java files and renamed the packages, thanks for that :)
I run a apache-rat check, the remaining files that need the license
header in order to finish up the IP clearance are:
* all the pom.xmls
* all the antlr *.g4 files
I think the SCIM JSON schema files don't need a license header (and can
be excluded from RAT check) since they are defined in RFCs, correct?
(and JSON doesn't support comments anyway...)
Kind Regards,
Stefan
Re: PSU SCIMple donation
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
Hi Shawn,
On 06/18/2018 09:18 PM, Stefan Seelmann wrote:
> Do you want to push the code yourself?
I see the code was pushed and you already added the Apache License
header to the Java files and renamed the packages, thanks for that :)
I run a apache-rat check, the remaining files that need the license
header in order to finish up the IP clearance are:
* all the pom.xmls
* all the antlr *.g4 files
I think the SCIM JSON schema files don't need a license header (and can
be excluded from RAT check) since they are defined in RFCs, correct?
(and JSON doesn't support comments anyway...)
Kind Regards,
Stefan
Re: PSU SCIMple donation
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
On 06/18/2018 04:17 PM, Smith, Shawn E wrote:
> If there's no objections, I'd like to see SCIMple stand. There are a few orgs that are already using it.
Should be ok.
I found 2 other software projects with that name:
1. an R library
https://github.com/hrbrmstr/scimple
Initial commit 2017-03-03
2. a Python library
https://github.com/EnzoBnl/Scimple
Initial commit 2018-02-22
As SCIMple inital commit is from 2016-03-23 I think we are fine.
So here is the new git repo:
https://gitbox.apache.org/repos/asf/directory-scimple.git
Do you want to push the code yourself?
The GitBox repo is linked to a GitHub repo:
https://github.com/apache/directory-scimple. Once you setup 2FA at
https://gitbox.apache.org/setup/ you can also push directly to the
GitHub repo and merge PRs.
I also updated the IP clearence form.
Kind Regards,
Stefan
Re: PSU SCIMple donation
Posted by "Smith, Shawn E" <se...@psu.edu>.
If there's no objections, I'd like to see SCIMple stand. There are a few orgs that are already using it.
Cheers,
Shawn
________________________________
From: Emmanuel Lécharny <el...@gmail.com>
Sent: Saturday, June 16, 2018 2:43:01 AM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Le 15/06/2018 à 18:03, Smith, Shawn E a écrit :
> I think I have the dependencies cleaned up. I did discover that JSR-305 is GPL, so those annotations are off the table which is unfortunate.
>
>
> I also took all of the example projects out and put them in another project. That's where the hibernate dependencies were coming from.
>
>
> There is one pull request being review, but the develop branch at https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FPennState%2FSCIMple-Identity&data=02%7C01%7Cses44%40psu.edu%7Ca8c87c4a5fd6416c022008d5d35470a4%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636647281985945297&sdata=i%2BMv5JC4M2A2bwpihtqAXSEnzqBLMqfbZuDeShRcYYk%3D&reserved=0 is the most current code.
>
>
> Please advise on any additional steps we should take.
I guess we can now import the code base. If we find any other
incompatible license code later on, we can work that out before a
release anyway.
I can work on refactorng the website to point to the project.
One thing we haven't decided yet, AFAIK, is the name of the project:
should we keep SCIMple or pick another name ?
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 15/06/2018 à 18:03, Smith, Shawn E a écrit :
> I think I have the dependencies cleaned up. I did discover that JSR-305 is GPL, so those annotations are off the table which is unfortunate.
>
>
> I also took all of the example projects out and put them in another project. That's where the hibernate dependencies were coming from.
>
>
> There is one pull request being review, but the develop branch at https://github.com/PennState/SCIMple-Identity is the most current code.
>
>
> Please advise on any additional steps we should take.
I guess we can now import the code base. If we find any other
incompatible license code later on, we can work that out before a
release anyway.
I can work on refactorng the website to point to the project.
One thing we haven't decided yet, AFAIK, is the name of the project:
should we keep SCIMple or pick another name ?
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by "Smith, Shawn E" <se...@psu.edu>.
I think I have the dependencies cleaned up. I did discover that JSR-305 is GPL, so those annotations are off the table which is unfortunate.
I also took all of the example projects out and put them in another project. That's where the hibernate dependencies were coming from.
There is one pull request being review, but the develop branch at https://github.com/PennState/SCIMple-Identity is the most current code.
Please advise on any additional steps we should take.
Cheers,
Shawn
[https://avatars0.githubusercontent.com/u/6545549?s=400&v=4]<https://github.com/PennState/SCIMple-Identity>
GitHub - PennState/SCIMple-Identity: Penn State's Open ...<https://github.com/PennState/SCIMple-Identity>
github.com
GitHub is where people build software. More than 28 million people use GitHub to discover, fork, and contribute to over 85 million projects.
________________________________
From: Stefan Seelmann <ma...@stefan-seelmann.de>
Sent: Thursday, June 14, 2018 2:59:27 PM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
Hi Shawn,
yes, that is totally fine.
Thanks,
Stefan
On 06/14/2018 07:14 PM, Smith, Shawn E wrote:
> Is an exclusion sufficient from a license perspective?
>
>
> For instance if I change the pom in scim-spec-protocol to have
>
>
> <dependency>
> <groupId>io.swagger</groupId>
> <artifactId>swagger-jaxrs</artifactId>
> <version>1.5.0</version>
> <exclusions>
> <exclusion>
> <groupId>com.fasterxml.jackson.dataformat</groupId>
> <artifactId>jackson-dataformat-xml</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.fasterxml.jackson.core</groupId>
> <artifactId>jackson-core</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.fasterxml.jackson.core</groupId>
> <artifactId>jackson-annotations</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.google.code.findbugs</groupId>
> <artifactId>annotations</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.fasterxml.jackson.core</groupId>
> <artifactId>jackson-databind</artifactId>
> </exclusion>
> <exclusion>
> <artifactId>jsr311-api</artifactId>
> <groupId>javax.ws.rs</groupId>
> </exclusion>
> </exclusions>
> </dependency>
>
> findbugs is no longer represented in the dependency tree
>
> [INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ scim-spec-protocol ---
> [INFO] edu.psu.swe.scim:scim-spec-protocol:jar:2.23-SNAPSHOT
> [INFO] +- javax:javaee-api:jar:7.0:provided
> [INFO] | \- com.sun.mail:javax.mail:jar:1.5.0:provided
> [INFO] | \- javax.activation:activation:jar:1.1.1:compile
> [INFO] +- io.swagger:swagger-jaxrs:jar:1.5.0:compile
> [INFO] | +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.8.8:compile
> [INFO] | | \- org.yaml:snakeyaml:jar:1.15:compile
> [INFO] | +- io.swagger:swagger-core:jar:1.5.0:compile
> [INFO] | | +- com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.8.8:compile
> [INFO] | | | \- joda-time:joda-time:jar:2.7:compile
> [INFO] | | \- io.swagger:swagger-models:jar:1.5.0:compile
> [INFO] | | \- io.swagger:swagger-annotations:jar:1.5.0:compile
> [INFO] | +- org.reflections:reflections:jar:0.9.10:compile
> [INFO] | | +- com.google.guava:guava:jar:20.0:compile
> [INFO] | | \- org.javassist:javassist:jar:3.18.2-GA:compile
> [INFO] | \- com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.8.8:compile
> [INFO] | +- com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:jar:2.8.8:compile
> [INFO] | \- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.8.8:compile
> [INFO] +- edu.psu.swe.scim:scim-spec-schema:jar:2.23-SNAPSHOT:compile
> [INFO] | +- javax.xml.bind:jaxb-api:jar:2.1:compile
> [INFO] | | \- javax.xml.stream:stax-api:jar:1.0-2:compile
> [INFO] | +- javax.validation:validation-api:jar:1.1.0.Final:compile
> [INFO] | +- org.slf4j:slf4j-api:jar:1.7.12:compile
> [INFO] | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.8.0:compile
> [INFO] | \- org.apache.commons:commons-lang3:jar:3.1:compile
> [INFO] +- org.projectlombok:lombok:jar:1.16.14:provided
> [INFO] +- junit:junit:jar:4.12:test
> [INFO] | \- org.hamcrest:hamcrest-core:jar:1.3:test
> [INFO] +- pl.pragmatists:JUnitParams:jar:1.0.4:test
> [INFO] +- org.slf4j:slf4j-simple:jar:1.7.12:test
> [INFO] \- org.antlr:antlr4-runtime:jar:4.5.3:compile
>
> Shanw
>
> ________________________________
> From: Smith, Shawn E <se...@psu.edu>
> Sent: Saturday, June 9, 2018 1:20:25 PM
> To: dev@directory.apache.org; Apache Directory Developers List
> Subject: Re: PSU SCIMple donation
>
> The dependency problem should be pretty easy to address, they're mostly in example projects. I'll look at it tomorrow.
>
> By the way, is anyone on the list going to Dockercon?
>
> Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fghei36&data=02%7C01%7Cses44%40psu.edu%7C92c37f4f451c419e1f1908d5ce2d54f3%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636641616466043478&sdata=BSjhJ6N2DnBtFLtIATcELb0DgLxIvZTfMgaGJyb5mdg%3D&reserved=0>
>
> ________________________________
> From: Stefan Seelmann <ma...@stefan-seelmann.de>
> Sent: Saturday, June 9, 2018 10:01:16 AM
> To: dev@directory.apache.org
> Subject: Re: PSU SCIMple donation
>
> On 06/03/2018 10:39 AM, Stefan Seelmann wrote:
>> Next steps:
>> * Identify the codebase: What I see [2] is the latest commit, correct?
>> * Decide on a name: which name should we use? SCIMple, eSCIMo, something
>> else? We just make to be sure the name is not trademarked yet.
>
> Any thoughts on this?
>
>> * Check source and dependencies for Apache License compatibility (I do,
>> but more eyes are welcomed :-)
>
> I found the following problematic dependencies which are LGPL licensed
> and must not be included in an Apache release artifact.
>
> com.google.code.findbugs:annotations:2.0.1
> * LGPL
> * scim-server-rdbms, scim-spec-protocol, scim-server-couchdb, etc.
> * Transitive dependency of swagger-jaxrs
> * Fix: try to exclude?
>
> org.hibernate:hibernate-jpamodelgen:5.2.0.Final
> * LGPL
> * scim-server-rdbms
> * Fix: Change scope to provided as it is only used at build time
>
> org.hibernate:hibernate-core:5.0.9.Final
> org.hibernate:hibernate-entitymanager:5.0.9.Final
> * LGPL
> * scim-errai
> * Fix: switch to another JPA implementation (Apache OpenJPA), but I
> don't know deep Hibernate is wired into Errai.
> * Note: this is only an issue if it's planned to publish a WAR file that
> includes Hibernate. The current scim-errai seems to only be a showcase app.
>
>> * Wait for secretary confirmation that CCLA is recorded
>
> This is done
>
>
>
Re: PSU SCIMple donation
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
Hi Shawn,
yes, that is totally fine.
Thanks,
Stefan
On 06/14/2018 07:14 PM, Smith, Shawn E wrote:
> Is an exclusion sufficient from a license perspective?
>
>
> For instance if I change the pom in scim-spec-protocol to have
>
>
> <dependency>
> <groupId>io.swagger</groupId>
> <artifactId>swagger-jaxrs</artifactId>
> <version>1.5.0</version>
> <exclusions>
> <exclusion>
> <groupId>com.fasterxml.jackson.dataformat</groupId>
> <artifactId>jackson-dataformat-xml</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.fasterxml.jackson.core</groupId>
> <artifactId>jackson-core</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.fasterxml.jackson.core</groupId>
> <artifactId>jackson-annotations</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.google.code.findbugs</groupId>
> <artifactId>annotations</artifactId>
> </exclusion>
> <exclusion>
> <groupId>com.fasterxml.jackson.core</groupId>
> <artifactId>jackson-databind</artifactId>
> </exclusion>
> <exclusion>
> <artifactId>jsr311-api</artifactId>
> <groupId>javax.ws.rs</groupId>
> </exclusion>
> </exclusions>
> </dependency>
>
> findbugs is no longer represented in the dependency tree
>
> [INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ scim-spec-protocol ---
> [INFO] edu.psu.swe.scim:scim-spec-protocol:jar:2.23-SNAPSHOT
> [INFO] +- javax:javaee-api:jar:7.0:provided
> [INFO] | \- com.sun.mail:javax.mail:jar:1.5.0:provided
> [INFO] | \- javax.activation:activation:jar:1.1.1:compile
> [INFO] +- io.swagger:swagger-jaxrs:jar:1.5.0:compile
> [INFO] | +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.8.8:compile
> [INFO] | | \- org.yaml:snakeyaml:jar:1.15:compile
> [INFO] | +- io.swagger:swagger-core:jar:1.5.0:compile
> [INFO] | | +- com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.8.8:compile
> [INFO] | | | \- joda-time:joda-time:jar:2.7:compile
> [INFO] | | \- io.swagger:swagger-models:jar:1.5.0:compile
> [INFO] | | \- io.swagger:swagger-annotations:jar:1.5.0:compile
> [INFO] | +- org.reflections:reflections:jar:0.9.10:compile
> [INFO] | | +- com.google.guava:guava:jar:20.0:compile
> [INFO] | | \- org.javassist:javassist:jar:3.18.2-GA:compile
> [INFO] | \- com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.8.8:compile
> [INFO] | +- com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:jar:2.8.8:compile
> [INFO] | \- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.8.8:compile
> [INFO] +- edu.psu.swe.scim:scim-spec-schema:jar:2.23-SNAPSHOT:compile
> [INFO] | +- javax.xml.bind:jaxb-api:jar:2.1:compile
> [INFO] | | \- javax.xml.stream:stax-api:jar:1.0-2:compile
> [INFO] | +- javax.validation:validation-api:jar:1.1.0.Final:compile
> [INFO] | +- org.slf4j:slf4j-api:jar:1.7.12:compile
> [INFO] | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.8.0:compile
> [INFO] | \- org.apache.commons:commons-lang3:jar:3.1:compile
> [INFO] +- org.projectlombok:lombok:jar:1.16.14:provided
> [INFO] +- junit:junit:jar:4.12:test
> [INFO] | \- org.hamcrest:hamcrest-core:jar:1.3:test
> [INFO] +- pl.pragmatists:JUnitParams:jar:1.0.4:test
> [INFO] +- org.slf4j:slf4j-simple:jar:1.7.12:test
> [INFO] \- org.antlr:antlr4-runtime:jar:4.5.3:compile
>
> Shanw
>
> ________________________________
> From: Smith, Shawn E <se...@psu.edu>
> Sent: Saturday, June 9, 2018 1:20:25 PM
> To: dev@directory.apache.org; Apache Directory Developers List
> Subject: Re: PSU SCIMple donation
>
> The dependency problem should be pretty easy to address, they're mostly in example projects. I'll look at it tomorrow.
>
> By the way, is anyone on the list going to Dockercon?
>
> Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fghei36&data=02%7C01%7Cses44%40psu.edu%7C92c37f4f451c419e1f1908d5ce2d54f3%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636641616466043478&sdata=BSjhJ6N2DnBtFLtIATcELb0DgLxIvZTfMgaGJyb5mdg%3D&reserved=0>
>
> ________________________________
> From: Stefan Seelmann <ma...@stefan-seelmann.de>
> Sent: Saturday, June 9, 2018 10:01:16 AM
> To: dev@directory.apache.org
> Subject: Re: PSU SCIMple donation
>
> On 06/03/2018 10:39 AM, Stefan Seelmann wrote:
>> Next steps:
>> * Identify the codebase: What I see [2] is the latest commit, correct?
>> * Decide on a name: which name should we use? SCIMple, eSCIMo, something
>> else? We just make to be sure the name is not trademarked yet.
>
> Any thoughts on this?
>
>> * Check source and dependencies for Apache License compatibility (I do,
>> but more eyes are welcomed :-)
>
> I found the following problematic dependencies which are LGPL licensed
> and must not be included in an Apache release artifact.
>
> com.google.code.findbugs:annotations:2.0.1
> * LGPL
> * scim-server-rdbms, scim-spec-protocol, scim-server-couchdb, etc.
> * Transitive dependency of swagger-jaxrs
> * Fix: try to exclude?
>
> org.hibernate:hibernate-jpamodelgen:5.2.0.Final
> * LGPL
> * scim-server-rdbms
> * Fix: Change scope to provided as it is only used at build time
>
> org.hibernate:hibernate-core:5.0.9.Final
> org.hibernate:hibernate-entitymanager:5.0.9.Final
> * LGPL
> * scim-errai
> * Fix: switch to another JPA implementation (Apache OpenJPA), but I
> don't know deep Hibernate is wired into Errai.
> * Note: this is only an issue if it's planned to publish a WAR file that
> includes Hibernate. The current scim-errai seems to only be a showcase app.
>
>> * Wait for secretary confirmation that CCLA is recorded
>
> This is done
>
>
>
Re: PSU SCIMple donation
Posted by "Smith, Shawn E" <se...@psu.edu>.
Is an exclusion sufficient from a license perspective?
For instance if I change the pom in scim-spec-protocol to have
<dependency>
<groupId>io.swagger</groupId>
<artifactId>swagger-jaxrs</artifactId>
<version>1.5.0</version>
<exclusions>
<exclusion>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-xml</artifactId>
</exclusion>
<exclusion>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
</exclusion>
<exclusion>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-annotations</artifactId>
</exclusion>
<exclusion>
<groupId>com.google.code.findbugs</groupId>
<artifactId>annotations</artifactId>
</exclusion>
<exclusion>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
</exclusion>
<exclusion>
<artifactId>jsr311-api</artifactId>
<groupId>javax.ws.rs</groupId>
</exclusion>
</exclusions>
</dependency>
findbugs is no longer represented in the dependency tree
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ scim-spec-protocol ---
[INFO] edu.psu.swe.scim:scim-spec-protocol:jar:2.23-SNAPSHOT
[INFO] +- javax:javaee-api:jar:7.0:provided
[INFO] | \- com.sun.mail:javax.mail:jar:1.5.0:provided
[INFO] | \- javax.activation:activation:jar:1.1.1:compile
[INFO] +- io.swagger:swagger-jaxrs:jar:1.5.0:compile
[INFO] | +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.8.8:compile
[INFO] | | \- org.yaml:snakeyaml:jar:1.15:compile
[INFO] | +- io.swagger:swagger-core:jar:1.5.0:compile
[INFO] | | +- com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.8.8:compile
[INFO] | | | \- joda-time:joda-time:jar:2.7:compile
[INFO] | | \- io.swagger:swagger-models:jar:1.5.0:compile
[INFO] | | \- io.swagger:swagger-annotations:jar:1.5.0:compile
[INFO] | +- org.reflections:reflections:jar:0.9.10:compile
[INFO] | | +- com.google.guava:guava:jar:20.0:compile
[INFO] | | \- org.javassist:javassist:jar:3.18.2-GA:compile
[INFO] | \- com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.8.8:compile
[INFO] | +- com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:jar:2.8.8:compile
[INFO] | \- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.8.8:compile
[INFO] +- edu.psu.swe.scim:scim-spec-schema:jar:2.23-SNAPSHOT:compile
[INFO] | +- javax.xml.bind:jaxb-api:jar:2.1:compile
[INFO] | | \- javax.xml.stream:stax-api:jar:1.0-2:compile
[INFO] | +- javax.validation:validation-api:jar:1.1.0.Final:compile
[INFO] | +- org.slf4j:slf4j-api:jar:1.7.12:compile
[INFO] | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.8.0:compile
[INFO] | \- org.apache.commons:commons-lang3:jar:3.1:compile
[INFO] +- org.projectlombok:lombok:jar:1.16.14:provided
[INFO] +- junit:junit:jar:4.12:test
[INFO] | \- org.hamcrest:hamcrest-core:jar:1.3:test
[INFO] +- pl.pragmatists:JUnitParams:jar:1.0.4:test
[INFO] +- org.slf4j:slf4j-simple:jar:1.7.12:test
[INFO] \- org.antlr:antlr4-runtime:jar:4.5.3:compile
Shanw
________________________________
From: Smith, Shawn E <se...@psu.edu>
Sent: Saturday, June 9, 2018 1:20:25 PM
To: dev@directory.apache.org; Apache Directory Developers List
Subject: Re: PSU SCIMple donation
The dependency problem should be pretty easy to address, they're mostly in example projects. I'll look at it tomorrow.
By the way, is anyone on the list going to Dockercon?
Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fghei36&data=02%7C01%7Cses44%40psu.edu%7C92c37f4f451c419e1f1908d5ce2d54f3%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C636641616466043478&sdata=BSjhJ6N2DnBtFLtIATcELb0DgLxIvZTfMgaGJyb5mdg%3D&reserved=0>
________________________________
From: Stefan Seelmann <ma...@stefan-seelmann.de>
Sent: Saturday, June 9, 2018 10:01:16 AM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
On 06/03/2018 10:39 AM, Stefan Seelmann wrote:
> Next steps:
> * Identify the codebase: What I see [2] is the latest commit, correct?
> * Decide on a name: which name should we use? SCIMple, eSCIMo, something
> else? We just make to be sure the name is not trademarked yet.
Any thoughts on this?
> * Check source and dependencies for Apache License compatibility (I do,
> but more eyes are welcomed :-)
I found the following problematic dependencies which are LGPL licensed
and must not be included in an Apache release artifact.
com.google.code.findbugs:annotations:2.0.1
* LGPL
* scim-server-rdbms, scim-spec-protocol, scim-server-couchdb, etc.
* Transitive dependency of swagger-jaxrs
* Fix: try to exclude?
org.hibernate:hibernate-jpamodelgen:5.2.0.Final
* LGPL
* scim-server-rdbms
* Fix: Change scope to provided as it is only used at build time
org.hibernate:hibernate-core:5.0.9.Final
org.hibernate:hibernate-entitymanager:5.0.9.Final
* LGPL
* scim-errai
* Fix: switch to another JPA implementation (Apache OpenJPA), but I
don't know deep Hibernate is wired into Errai.
* Note: this is only an issue if it's planned to publish a WAR file that
includes Hibernate. The current scim-errai seems to only be a showcase app.
> * Wait for secretary confirmation that CCLA is recorded
This is done
Re: PSU SCIMple donation
Posted by "Smith, Shawn E" <se...@psu.edu>.
The dependency problem should be pretty easy to address, they're mostly in example projects. I'll look at it tomorrow.
By the way, is anyone on the list going to Dockercon?
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Stefan Seelmann <ma...@stefan-seelmann.de>
Sent: Saturday, June 9, 2018 10:01:16 AM
To: dev@directory.apache.org
Subject: Re: PSU SCIMple donation
On 06/03/2018 10:39 AM, Stefan Seelmann wrote:
> Next steps:
> * Identify the codebase: What I see [2] is the latest commit, correct?
> * Decide on a name: which name should we use? SCIMple, eSCIMo, something
> else? We just make to be sure the name is not trademarked yet.
Any thoughts on this?
> * Check source and dependencies for Apache License compatibility (I do,
> but more eyes are welcomed :-)
I found the following problematic dependencies which are LGPL licensed
and must not be included in an Apache release artifact.
com.google.code.findbugs:annotations:2.0.1
* LGPL
* scim-server-rdbms, scim-spec-protocol, scim-server-couchdb, etc.
* Transitive dependency of swagger-jaxrs
* Fix: try to exclude?
org.hibernate:hibernate-jpamodelgen:5.2.0.Final
* LGPL
* scim-server-rdbms
* Fix: Change scope to provided as it is only used at build time
org.hibernate:hibernate-core:5.0.9.Final
org.hibernate:hibernate-entitymanager:5.0.9.Final
* LGPL
* scim-errai
* Fix: switch to another JPA implementation (Apache OpenJPA), but I
don't know deep Hibernate is wired into Errai.
* Note: this is only an issue if it's planned to publish a WAR file that
includes Hibernate. The current scim-errai seems to only be a showcase app.
> * Wait for secretary confirmation that CCLA is recorded
This is done
Re: PSU SCIMple donation
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 09/06/2018 à 16:01, Stefan Seelmann a écrit :
> On 06/03/2018 10:39 AM, Stefan Seelmann wrote:
>> Next steps:
>> * Identify the codebase: What I see [2] is the latest commit, correct?
>> * Decide on a name: which name should we use? SCIMple, eSCIMo, something
>> else? We just make to be sure the name is not trademarked yet.
>
> Any thoughts on this?
>
>> * Check source and dependencies for Apache License compatibility (I do,
>> but more eyes are welcomed :-)
>
> I found the following problematic dependencies which are LGPL licensed
> and must not be included in an Apache release artifact.
>
> com.google.code.findbugs:annotations:2.0.1
> * LGPL
> * scim-server-rdbms, scim-spec-protocol, scim-server-couchdb, etc.
> * Transitive dependency of swagger-jaxrs
> * Fix: try to exclude?
clearly.
>
> org.hibernate:hibernate-jpamodelgen:5.2.0.Final
> * LGPL
> * scim-server-rdbms
> * Fix: Change scope to provided as it is only used at build time
>
> org.hibernate:hibernate-core:5.0.9.Final
> org.hibernate:hibernate-entitymanager:5.0.9.Final
> * LGPL
> * scim-errai
> * Fix: switch to another JPA implementation (Apache OpenJPA), but I
> don't know deep Hibernate is wired into Errai.
> * Note: this is only an issue if it's planned to publish a WAR file that
> includes Hibernate. The current scim-errai seems to only be a showcase app.
This is clearly something that need to be replaced.
FTR, LGPL/GPL is not compatible with AL 2.0 in a sense that we can't
release code that contains LGPL/GPL packages without being tainted...
Thanks Stefan for the thorough analasys.
--
Emmanuel Lecharny
Symas.com
directory.apache.org
Re: PSU SCIMple donation
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
On 06/03/2018 10:39 AM, Stefan Seelmann wrote:
> Next steps:
> * Identify the codebase: What I see [2] is the latest commit, correct?
> * Decide on a name: which name should we use? SCIMple, eSCIMo, something
> else? We just make to be sure the name is not trademarked yet.
Any thoughts on this?
> * Check source and dependencies for Apache License compatibility (I do,
> but more eyes are welcomed :-)
I found the following problematic dependencies which are LGPL licensed
and must not be included in an Apache release artifact.
com.google.code.findbugs:annotations:2.0.1
* LGPL
* scim-server-rdbms, scim-spec-protocol, scim-server-couchdb, etc.
* Transitive dependency of swagger-jaxrs
* Fix: try to exclude?
org.hibernate:hibernate-jpamodelgen:5.2.0.Final
* LGPL
* scim-server-rdbms
* Fix: Change scope to provided as it is only used at build time
org.hibernate:hibernate-core:5.0.9.Final
org.hibernate:hibernate-entitymanager:5.0.9.Final
* LGPL
* scim-errai
* Fix: switch to another JPA implementation (Apache OpenJPA), but I
don't know deep Hibernate is wired into Errai.
* Note: this is only an issue if it's planned to publish a WAR file that
includes Hibernate. The current scim-errai seems to only be a showcase app.
> * Wait for secretary confirmation that CCLA is recorded
This is done
Re: PSU SCIMple donation
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 03/06/2018 à 10:39, Stefan Seelmann a écrit :
> Moving the discussion to public list.
>
> Here is the current status:
> * I forwared the CCLA to the secretary
> * All committers listed in the CCLA have an ICLA recorded and are
> already voted in as committers (Alex Haskell, Chris Harm, Chris Pike,
> Shawn Smith, Steve Moyer)
> * The initial IP clearance form is created [1]
Thanks for that, Stefan !
>
> Next steps:
> * Identify the codebase: What I see [2] is the latest commit, correct?
> * Decide on a name: which name should we use? SCIMple, eSCIMo, something
> else? We just make to be sure the name is not trademarked yet.
> * Check source and dependencies for Apache License compatibility (I do,
> but more eyes are welcomed :-)
So far, most of the dependencies are AL 2.0, CDDL, EPL or MIT.
javax.el is CDDL/GNU : to be checked
(I'm using https://mvnrepository.com/, which provides recursive
dependencies listing, with the License. It makes it quite easy to use).
--
Emmanuel Lecharny
Symas.com
directory.apache.org