suspected issue

["jasonk@apps4u.com.au" <ja...@apps4u.com.au>]

HI , I started using UserGrid over the last few weeks and Ive come across a problem that concerns me , I have turned internet off on the mac's with use for our development for security reasons and to stop our developer using un approved software sources any way I noticed that our team leader had been turing on internet for our team and when I asked why I was told that user grid won't run unless the internet is on when starting the launcher , so I tested this my self and its is correct. we are running the portal on a local server and the same with user grid but when you start the launcher if the system is not connected to the internet at the time you start it it will not let anyone log in so the only reason I can see this would be the case is so it can phone home and if that is the case that is a real problem I would not expect the Apache foundation to sponsor a project that sent information back to some one. so Why is this the case and is it sending my information to some undisclosed entity .

  
 Jason Kristian | Director | Apps 4 U Pty Ltd.
 ph: +61 075699 8109
 mob: +61 0411 389 392
 e: Jason Kristian (mailto:jasonk@apps4u.com.au)

Re: suspected issue

[Rod Simpson <ro...@rodsimpson.com>]

We also need to make the recaptcha configurable via props file. So you can still reset passwords when running in a closed system. I think I opened a ticket for this, but maybe not yet. Rod Simpson

On Wed, Jul 9, 2014 at 10:29 AM, Ed Anuff <ed...@anuff.com> wrote:

> Just to elaborate, Usergrid uses Spring framework and loads a Spring
> applicationContext.xml file at startup (actually, there are several spring
> app context xml files in the project, the one in your case is probably
> usergrid-standalone-context.xml).  The applicationContext.xml file uses a
> number of Spring XML namespaces, which is pretty standard in the way Spring
> is used.  The problem is that the XML parser validates these namespaces and
> appears to make internet requests as part of that process.  It appears that
> this is failing when there is no internet connection.  It looks like this
> is similar to this -
> http://stackoverflow.com/questions/1729307/spring-schemalocation-fails-when-there-is-no-internet-connection.
>  From reading the stack overflow responses, it does appear that this might
> be worked around by making some changes to the applicationContext.xml and
> we'll look at doing that.
> Ed
> On Wed, Jul 9, 2014 at 9:13 AM, Scott Ganyo <sc...@ganyo.com> wrote:
>> I just tried it. There seems to be an issue with Spring XML loading /
>> validating.
>>
>> On Jul 9, 2014, at 9:06 AM, ryan bridges <ry...@fasterness.com> wrote:
>>
>> > How is the internet access being turned off? If you disable the network
>> > interfaces that tomcat, nginx, etc. are attempting to bind to, then the
>> app
>> > will fail to start.
>> >
>> >
>> > On Wed, Jul 9, 2014 at 11:44 AM, Todd Nine <to...@gmail.com> wrote:
>> >
>> >> Agreed.  The only thing that should ever need the internet are the
>> >> reCAPTCHA images for sign up and password reset.  They require
>> >> internet connectivity since they contact a 3rd party, otherwise
>> >> nothing should need communication outside of out the UG system,
>> >> especially when running the standalone.
>> >>
>> >>
>> >>
>> >> On Wed, Jul 9, 2014 at 6:50 AM, Dave <sn...@gmail.com> wrote:
>> >>> I'm not aware of any phone-home feature in Usergrid or the launcher,
>> and
>> >> I
>> >>> don't (yet) see anything suspect in the launcher source code.
>> >>>
>> >>> Do you know what hostname, IP address and/or port is being opened by
>> >>> Usergrid?
>> >>>
>> >>> - Dave
>> >>>
>> >>>
>> >>>
>> >>> On Tue, Jul 8, 2014 at 10:17 PM, jasonk@apps4u.com.au <
>> >> jasonk@apps4u.com.au>
>> >>> wrote:
>> >>>
>> >>>> HI , I started using UserGrid over the last few weeks and Ive come
>> >> across
>> >>>> a problem that concerns me , I have turned internet off on the mac's
>> >> with
>> >>>> use for our development for security reasons and to stop our developer
>> >>>> using un approved software sources any way I noticed that our team
>> >> leader
>> >>>> had been turing on internet for our team and when I asked why I was
>> told
>> >>>> that user grid won't run unless the internet is on when starting the
>> >>>> launcher , so I tested this my self and its is correct. we are running
>> >> the
>> >>>> portal on a local server and the same with user grid but when you
>> start
>> >> the
>> >>>> launcher if the system is not connected to the internet at the time
>> you
>> >>>> start it it will not let anyone log in so the only reason I can see
>> this
>> >>>> would be the case is so it can phone home and if that is the case that
>> >> is a
>> >>>> real problem I would not expect the Apache foundation to sponsor a
>> >> project
>> >>>> that sent information back to some one. so Why is this the case and is
>> >> it
>> >>>> sending my information to some undisclosed entity .
>> >>>>
>> >>>>
>> >>>> Jason Kristian | Director | Apps 4 U Pty Ltd.
>> >>>> ph: +61 075699 8109
>> >>>> mob: +61 0411 389 392
>> >>>> e: Jason Kristian (mailto:jasonk@apps4u.com.au)
>> >>>>
>> >>
>>
>>

Re: suspected issue

[Ed Anuff <ed...@anuff.com>]

Just to elaborate, Usergrid uses Spring framework and loads a Spring
applicationContext.xml file at startup (actually, there are several spring
app context xml files in the project, the one in your case is probably
usergrid-standalone-context.xml).  The applicationContext.xml file uses a
number of Spring XML namespaces, which is pretty standard in the way Spring
is used.  The problem is that the XML parser validates these namespaces and
appears to make internet requests as part of that process.  It appears that
this is failing when there is no internet connection.  It looks like this
is similar to this -
http://stackoverflow.com/questions/1729307/spring-schemalocation-fails-when-there-is-no-internet-connection.
 From reading the stack overflow responses, it does appear that this might
be worked around by making some changes to the applicationContext.xml and
we'll look at doing that.

Ed



On Wed, Jul 9, 2014 at 9:13 AM, Scott Ganyo <sc...@ganyo.com> wrote:

> I just tried it. There seems to be an issue with Spring XML loading /
> validating.
>
> On Jul 9, 2014, at 9:06 AM, ryan bridges <ry...@fasterness.com> wrote:
>
> > How is the internet access being turned off? If you disable the network
> > interfaces that tomcat, nginx, etc. are attempting to bind to, then the
> app
> > will fail to start.
> >
> >
> > On Wed, Jul 9, 2014 at 11:44 AM, Todd Nine <to...@gmail.com> wrote:
> >
> >> Agreed.  The only thing that should ever need the internet are the
> >> reCAPTCHA images for sign up and password reset.  They require
> >> internet connectivity since they contact a 3rd party, otherwise
> >> nothing should need communication outside of out the UG system,
> >> especially when running the standalone.
> >>
> >>
> >>
> >> On Wed, Jul 9, 2014 at 6:50 AM, Dave <sn...@gmail.com> wrote:
> >>> I'm not aware of any phone-home feature in Usergrid or the launcher,
> and
> >> I
> >>> don't (yet) see anything suspect in the launcher source code.
> >>>
> >>> Do you know what hostname, IP address and/or port is being opened by
> >>> Usergrid?
> >>>
> >>> - Dave
> >>>
> >>>
> >>>
> >>> On Tue, Jul 8, 2014 at 10:17 PM, jasonk@apps4u.com.au <
> >> jasonk@apps4u.com.au>
> >>> wrote:
> >>>
> >>>> HI , I started using UserGrid over the last few weeks and Ive come
> >> across
> >>>> a problem that concerns me , I have turned internet off on the mac's
> >> with
> >>>> use for our development for security reasons and to stop our developer
> >>>> using un approved software sources any way I noticed that our team
> >> leader
> >>>> had been turing on internet for our team and when I asked why I was
> told
> >>>> that user grid won't run unless the internet is on when starting the
> >>>> launcher , so I tested this my self and its is correct. we are running
> >> the
> >>>> portal on a local server and the same with user grid but when you
> start
> >> the
> >>>> launcher if the system is not connected to the internet at the time
> you
> >>>> start it it will not let anyone log in so the only reason I can see
> this
> >>>> would be the case is so it can phone home and if that is the case that
> >> is a
> >>>> real problem I would not expect the Apache foundation to sponsor a
> >> project
> >>>> that sent information back to some one. so Why is this the case and is
> >> it
> >>>> sending my information to some undisclosed entity .
> >>>>
> >>>>
> >>>> Jason Kristian | Director | Apps 4 U Pty Ltd.
> >>>> ph: +61 075699 8109
> >>>> mob: +61 0411 389 392
> >>>> e: Jason Kristian (mailto:jasonk@apps4u.com.au)
> >>>>
> >>
>
>

Re: suspected issue

[Scott Ganyo <sc...@ganyo.com>]

I just tried it. There seems to be an issue with Spring XML loading / validating.

On Jul 9, 2014, at 9:06 AM, ryan bridges <ry...@fasterness.com> wrote:

> How is the internet access being turned off? If you disable the network
> interfaces that tomcat, nginx, etc. are attempting to bind to, then the app
> will fail to start.
> 
> 
> On Wed, Jul 9, 2014 at 11:44 AM, Todd Nine <to...@gmail.com> wrote:
> 
>> Agreed.  The only thing that should ever need the internet are the
>> reCAPTCHA images for sign up and password reset.  They require
>> internet connectivity since they contact a 3rd party, otherwise
>> nothing should need communication outside of out the UG system,
>> especially when running the standalone.
>> 
>> 
>> 
>> On Wed, Jul 9, 2014 at 6:50 AM, Dave <sn...@gmail.com> wrote:
>>> I'm not aware of any phone-home feature in Usergrid or the launcher, and
>> I
>>> don't (yet) see anything suspect in the launcher source code.
>>> 
>>> Do you know what hostname, IP address and/or port is being opened by
>>> Usergrid?
>>> 
>>> - Dave
>>> 
>>> 
>>> 
>>> On Tue, Jul 8, 2014 at 10:17 PM, jasonk@apps4u.com.au <
>> jasonk@apps4u.com.au>
>>> wrote:
>>> 
>>>> HI , I started using UserGrid over the last few weeks and Ive come
>> across
>>>> a problem that concerns me , I have turned internet off on the mac's
>> with
>>>> use for our development for security reasons and to stop our developer
>>>> using un approved software sources any way I noticed that our team
>> leader
>>>> had been turing on internet for our team and when I asked why I was told
>>>> that user grid won't run unless the internet is on when starting the
>>>> launcher , so I tested this my self and its is correct. we are running
>> the
>>>> portal on a local server and the same with user grid but when you start
>> the
>>>> launcher if the system is not connected to the internet at the time you
>>>> start it it will not let anyone log in so the only reason I can see this
>>>> would be the case is so it can phone home and if that is the case that
>> is a
>>>> real problem I would not expect the Apache foundation to sponsor a
>> project
>>>> that sent information back to some one. so Why is this the case and is
>> it
>>>> sending my information to some undisclosed entity .
>>>> 
>>>> 
>>>> Jason Kristian | Director | Apps 4 U Pty Ltd.
>>>> ph: +61 075699 8109
>>>> mob: +61 0411 389 392
>>>> e: Jason Kristian (mailto:jasonk@apps4u.com.au)
>>>> 
>> 

Re: suspected issue

[ryan bridges <ry...@fasterness.com>]

How is the internet access being turned off? If you disable the network
interfaces that tomcat, nginx, etc. are attempting to bind to, then the app
will fail to start.


On Wed, Jul 9, 2014 at 11:44 AM, Todd Nine <to...@gmail.com> wrote:

> Agreed.  The only thing that should ever need the internet are the
> reCAPTCHA images for sign up and password reset.  They require
> internet connectivity since they contact a 3rd party, otherwise
> nothing should need communication outside of out the UG system,
> especially when running the standalone.
>
>
>
> On Wed, Jul 9, 2014 at 6:50 AM, Dave <sn...@gmail.com> wrote:
> > I'm not aware of any phone-home feature in Usergrid or the launcher, and
> I
> > don't (yet) see anything suspect in the launcher source code.
> >
> > Do you know what hostname, IP address and/or port is being opened by
> > Usergrid?
> >
> > - Dave
> >
> >
> >
> > On Tue, Jul 8, 2014 at 10:17 PM, jasonk@apps4u.com.au <
> jasonk@apps4u.com.au>
> > wrote:
> >
> >> HI , I started using UserGrid over the last few weeks and Ive come
> across
> >> a problem that concerns me , I have turned internet off on the mac's
> with
> >> use for our development for security reasons and to stop our developer
> >> using un approved software sources any way I noticed that our team
> leader
> >> had been turing on internet for our team and when I asked why I was told
> >> that user grid won't run unless the internet is on when starting the
> >> launcher , so I tested this my self and its is correct. we are running
> the
> >> portal on a local server and the same with user grid but when you start
> the
> >> launcher if the system is not connected to the internet at the time you
> >> start it it will not let anyone log in so the only reason I can see this
> >> would be the case is so it can phone home and if that is the case that
> is a
> >> real problem I would not expect the Apache foundation to sponsor a
> project
> >> that sent information back to some one. so Why is this the case and is
> it
> >> sending my information to some undisclosed entity .
> >>
> >>
> >>  Jason Kristian | Director | Apps 4 U Pty Ltd.
> >>  ph: +61 075699 8109
> >>  mob: +61 0411 389 392
> >>  e: Jason Kristian (mailto:jasonk@apps4u.com.au)
> >>
>

Re: suspected issue

[Todd Nine <to...@gmail.com>]

Agreed.  The only thing that should ever need the internet are the
reCAPTCHA images for sign up and password reset.  They require
internet connectivity since they contact a 3rd party, otherwise
nothing should need communication outside of out the UG system,
especially when running the standalone.



On Wed, Jul 9, 2014 at 6:50 AM, Dave <sn...@gmail.com> wrote:
> I'm not aware of any phone-home feature in Usergrid or the launcher, and I
> don't (yet) see anything suspect in the launcher source code.
>
> Do you know what hostname, IP address and/or port is being opened by
> Usergrid?
>
> - Dave
>
>
>
> On Tue, Jul 8, 2014 at 10:17 PM, jasonk@apps4u.com.au <ja...@apps4u.com.au>
> wrote:
>
>> HI , I started using UserGrid over the last few weeks and Ive come across
>> a problem that concerns me , I have turned internet off on the mac's with
>> use for our development for security reasons and to stop our developer
>> using un approved software sources any way I noticed that our team leader
>> had been turing on internet for our team and when I asked why I was told
>> that user grid won't run unless the internet is on when starting the
>> launcher , so I tested this my self and its is correct. we are running the
>> portal on a local server and the same with user grid but when you start the
>> launcher if the system is not connected to the internet at the time you
>> start it it will not let anyone log in so the only reason I can see this
>> would be the case is so it can phone home and if that is the case that is a
>> real problem I would not expect the Apache foundation to sponsor a project
>> that sent information back to some one. so Why is this the case and is it
>> sending my information to some undisclosed entity .
>>
>>
>>  Jason Kristian | Director | Apps 4 U Pty Ltd.
>>  ph: +61 075699 8109
>>  mob: +61 0411 389 392
>>  e: Jason Kristian (mailto:jasonk@apps4u.com.au)
>>

Re: suspected issue

[Dave <sn...@gmail.com>]

I'm not aware of any phone-home feature in Usergrid or the launcher, and I
don't (yet) see anything suspect in the launcher source code.

Do you know what hostname, IP address and/or port is being opened by
Usergrid?

- Dave



On Tue, Jul 8, 2014 at 10:17 PM, jasonk@apps4u.com.au <ja...@apps4u.com.au>
wrote:

> HI , I started using UserGrid over the last few weeks and Ive come across
> a problem that concerns me , I have turned internet off on the mac's with
> use for our development for security reasons and to stop our developer
> using un approved software sources any way I noticed that our team leader
> had been turing on internet for our team and when I asked why I was told
> that user grid won't run unless the internet is on when starting the
> launcher , so I tested this my self and its is correct. we are running the
> portal on a local server and the same with user grid but when you start the
> launcher if the system is not connected to the internet at the time you
> start it it will not let anyone log in so the only reason I can see this
> would be the case is so it can phone home and if that is the case that is a
> real problem I would not expect the Apache foundation to sponsor a project
> that sent information back to some one. so Why is this the case and is it
> sending my information to some undisclosed entity .
>
>
>  Jason Kristian | Director | Apps 4 U Pty Ltd.
>  ph: +61 075699 8109
>  mob: +61 0411 389 392
>  e: Jason Kristian (mailto:jasonk@apps4u.com.au)
>