You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cocoon.apache.org by Hochsteger Andreas /INFO-MA <An...@oeamtc.at> on 2002/05/06 10:44:10 UTC
Cocoon sunSpot vs. Jetspeed / User Management and Authentication
Hi!
I just read parts of the sunSpot documentation and got a dejavu feeling,
while reading about sunlets and things like that. It seems that Jetspeed has
a similar functionality (as far as I understand it) but Jetspeed is never
mentioned in the docs.
Here are my questions:
* Is sunSpot something similar to Jetspeed? If so, why doesn't it use the
already existing Jetspeed?
* What's the difference / similarity between sunlets and portlets? Can
portlets be part of a sunlet?
* How stable/usable is sunRise and its components for production use? When
can we expect a first stable release (I don't need an exact date, just tell
me in some weeks or in some years ;-)?
* Are there any attempts to support User Management and Authentication
Standards like XACML (http://www.oasis-open.org/committees/xacml/), RBAC
(http://csrc.nist.gov/rbac/), SAML
(http://www.oasis-open.org/committees/security/), ...?
We are currently evaluating new technology for our web architecture and thus
evaluating User Management and Authentication solutions too which integrate
very well within Websites and Web-Applications and allow customization,
Single-sign-on and Profiling of User- and Application data, possible backed
by a LDAP authentication.
Is Cocoon sunRise the way to go or am I looking at the wrong place?
Thanks for your help,
Andreas Hochsteger
ÖAMTC Web- & Infomanagement
E-Mail: mailto:andreas.hochsteger@oeamtc.at
Telefon: ++43 1 711 99 - 1353
Internet: http://www.oeamtc.at
---------------------------------------------------------------------
Please check that your question has not already been answered in the
FAQ before posting. <http://xml.apache.org/cocoon/faqs.html>
To unsubscribe, e-mail: <co...@xml.apache.org>
For additional commands, e-mail: <co...@xml.apache.org>
RE: Cocoon sunSpot vs. Jetspeed / User Management and Authentication
Posted by Carsten Ziegeler <cz...@s-und-n.de>.
> -----Original Message-----
> From: Hochsteger Andreas /INFO-MA [mailto:Andreas.Hochsteger@oeamtc.at]
> Sent: Monday, May 06, 2002 10:44 AM
> To: 'cocoon-users@xml.apache.org'
> Subject: Cocoon sunSpot vs. Jetspeed / User Management and
> Authentication
>
>
> Hi!
>
> I just read parts of the sunSpot documentation and got a dejavu feeling,
> while reading about sunlets and things like that. It seems that
> Jetspeed has
> a similar functionality (as far as I understand it) but Jetspeed is never
> mentioned in the docs.
Jetspeed and Cocoon are two different projects with the same aim: a portal.
>
> Here are my questions:
> * Is sunSpot something similar to Jetspeed? If so, why doesn't it use the
> already existing Jetspeed?
The main difference between Jetspeed and sunspot is that sunspot is build
on top of cocoon, that means you can use all features of cocoon like the
xml processing pipelines, stylesheets for layout etc to build your portal.
Jetspeed is a separate technology, so if you want to use cocoon *and* if
you want a portal, jetspeed is (afaik) not an alternative.
> * What's the difference / similarity between sunlets and portlets? Can
> portlets be part of a sunlet?
A sunlet is simply a URI which produces XML, this can either be a Cocoon
XML pipeline, or an http request or any other URI. I don't know the
jetspeed portlets, but if they are accessible via a URI, yes you can use
them as a sunlet.
> * How stable/usable is sunRise and its components for production use? When
> can we expect a first stable release (I don't need an exact date,
> just tell
> me in some weeks or in some years ;-)?
sunrise and sunspot are stable. Both are a donnation of our company
(S&N AG, Germany) and are just for more than one year in various production
environments. An official cocoon release containing those two parts is
expected in summer this year.
> * Are there any attempts to support User Management and Authentication
> Standards like XACML (http://www.oasis-open.org/committees/xacml/), RBAC
> (http://csrc.nist.gov/rbac/), SAML
> (http://www.oasis-open.org/committees/security/), ...?
>
Sorry, I don't know those, but the sunrise authentication mechanism is
very flexible. sunrise itself is only a framework where you can plug-in
your authentication scheme, so I generally would say, if these standards
are usuable within a java servlet you can simply use it in sunrise
by writing a simple connector (and believe me this should be a really
simple connector and not a hugh project by itself).
> We are currently evaluating new technology for our web
> architecture and thus
> evaluating User Management and Authentication solutions too which
> integrate
> very well within Websites and Web-Applications and allow customization,
> Single-sign-on and Profiling of User- and Application data,
> possible backed
> by a LDAP authentication.
> Is Cocoon sunRise the way to go or am I looking at the wrong place?
>
This is not an easy question for *me*;)
In fact, the answer is simple: if you want
to use Cocoon for building your web application, sunRise is afaik the
only way to go - and it's a good choice, too :)
If you don't want to use Cocoon, well, you can use sunRise.
With sunRise you can do single-sign-on, Profiling of User- and
Application data, LDAP authentication and many more. We already have
done this in some projects...
Just let me know if I can provide you more information.
Carsten
Open Source Group sunShine - b:Integrated
================================================================
Carsten Ziegeler, S&N AG, Klingenderstrasse 5, D-33100 Paderborn
http://www.s-und-n.de mailto: cziegeler@s-und-n.de
----------------------------------------------------------------
The Cocoon Book:
http://www.amazon.com/exec/obidos/ASIN/0735712352/apachecocoona-20
The new weblog homepage: http://ziegeler.bei.t-online.de
================================================================
---------------------------------------------------------------------
Please check that your question has not already been answered in the
FAQ before posting. <http://xml.apache.org/cocoon/faqs.html>
To unsubscribe, e-mail: <co...@xml.apache.org>
For additional commands, e-mail: <co...@xml.apache.org>