You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@activemq.apache.org by aanto <aa...@gmail.com> on 2016/02/03 23:09:59 UTC

Issue with ActiveMQ 5.13.0 - Jetty(9.2.13.v20150730.jar)

ActiveMQ 5.13 seems to have an Upgraded Jetty (from 8.x to
jetty-all-9.2.13.v20150730.jar).

This version of Jetty seems to be missing certain objects related to below
classes.
org.eclipse.jetty.jaas.callback	Jetty Jaas : Jaas Callbacks
org.eclipse.jetty.jaas.spi	        Jetty Jaas : Various Jaas Implementations
for Jetty

Jetty8 (Packed in 5.12 amq)
$ jar -tvf ./jetty\-all\-8.1.16.v20140903.jar  | grep
"jaas/spi/\|jaas/callback/"
     0 Wed Sep 03 13:16:02 EDT 2014 org/eclipse/jetty/plus/jaas/callback/
     0 Wed Sep 03 13:09:28 EDT 2014 org/eclipse/jetty/plus/jaas/spi/
  2397 Wed Sep 03 13:09:28 EDT 2014
org/eclipse/jetty/plus/jaas/callback/DefaultCallbackHandler.class
  1130 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/callback/RequestParameterCallback.class
  1266 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/callback/AbstractCallbackHandler.class
   727 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/callback/ObjectCallback.class
  2843 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/spi/AbstractLoginModule$JAASUserInfo.class
 14947 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/spi/LdapLoginModule.class
  1728 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/spi/UserInfo.class
  5416 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/spi/AbstractLoginModule.class
  4313 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/spi/AbstractDatabaseLoginModule.class
  3220 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/spi/JDBCLoginModule.class
  5522 Wed Sep 03 13:09:28 EDT 2014
org/eclipse/jetty/plus/jaas/spi/PropertyFileLoginModule.class
  2066 Wed Sep 03 13:09:26 EDT 2014
org/eclipse/jetty/plus/jaas/spi/DataSourceLoginModule.class

Jetty9 (Packed in 5.13 amq)
$ jar -tvf ./jetty\-all\-9.2.13.v20150730.jar  | grep
"jaas/spi/\|jaas/callback/"
$





--
View this message in context: http://activemq.2283324.n4.nabble.com/Issue-with-ActiveMQ-5-13-0-Jetty-9-2-13-v20150730-jar-tp4706895.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Issue with ActiveMQ 5.13.0 - Jetty(9.2.13.v20150730.jar)

Posted by khokhani <kh...@gmail.com>.
I think many developers choose to use Jetty for web console and Jolokia REST
API while security it with JAAS plug-in. 

What is way forward to security of ActiveMQ web console and Jolokia REST
API? 
Isn't it devops problem to maintain right version and add those jars to
activemq installation?

Please provide your inputs best practices, thanks.



--
View this message in context: http://activemq.2283324.n4.nabble.com/Issue-with-ActiveMQ-5-13-0-Jetty-9-2-13-v20150730-jar-tp4706895p4715267.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Issue with ActiveMQ 5.13.0 - Jetty(9.2.13.v20150730.jar)

Posted by Christopher Shannon <ch...@gmail.com>.
I don't think it's a good idea to include this jar file in the optional
directory.  While that directory contains dependencies that are optional,
those dependencies are still required by other optional ActiveMQ
artifacts.  We currently don't have a dependency anywhere on the jetty-jaas
jar file so in my opinion it would be best to leave it out to avoid
increasing the distribution size and if someone needs it (like yourself)
it's easy enough to copy it to that directory and add it to the classpath.

On Mon, Feb 8, 2016 at 3:47 PM, aanto <aa...@gmail.com> wrote:

> Thank you for the info.
>
> Would ActiveMQ tarball be adding jetty-jaas-*.jar into the lib./optional
> directory in the future, as developers may be using older references and
> would need to otherwise manually download this artifact.
>
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/Issue-with-ActiveMQ-5-13-0-Jetty-9-2-13-v20150730-jar-tp4706895p4707210.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>

Re: Issue with ActiveMQ 5.13.0 - Jetty(9.2.13.v20150730.jar)

Posted by aanto <aa...@gmail.com>.
Thank you for the info.

Would ActiveMQ tarball be adding jetty-jaas-*.jar into the lib./optional
directory in the future, as developers may be using older references and
would need to otherwise manually download this artifact.




--
View this message in context: http://activemq.2283324.n4.nabble.com/Issue-with-ActiveMQ-5-13-0-Jetty-9-2-13-v20150730-jar-tp4706895p4707210.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Issue with ActiveMQ 5.13.0 - Jetty(9.2.13.v20150730.jar)

Posted by Christopher Shannon <ch...@gmail.com>.
That's because Jetty moved the Jaas related classes into a new artifact:
https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-jaas/9.2.13.v20150730/jetty-jaas-9.2.13.v20150730.pom

On Wed, Feb 3, 2016 at 5:09 PM, aanto <aa...@gmail.com> wrote:

> ActiveMQ 5.13 seems to have an Upgraded Jetty (from 8.x to
> jetty-all-9.2.13.v20150730.jar).
>
> This version of Jetty seems to be missing certain objects related to below
> classes.
> org.eclipse.jetty.jaas.callback Jetty Jaas : Jaas Callbacks
> org.eclipse.jetty.jaas.spi              Jetty Jaas : Various Jaas
> Implementations
> for Jetty
>
> Jetty8 (Packed in 5.12 amq)
> $ jar -tvf ./jetty\-all\-8.1.16.v20140903.jar  | grep
> "jaas/spi/\|jaas/callback/"
>      0 Wed Sep 03 13:16:02 EDT 2014 org/eclipse/jetty/plus/jaas/callback/
>      0 Wed Sep 03 13:09:28 EDT 2014 org/eclipse/jetty/plus/jaas/spi/
>   2397 Wed Sep 03 13:09:28 EDT 2014
> org/eclipse/jetty/plus/jaas/callback/DefaultCallbackHandler.class
>   1130 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/callback/RequestParameterCallback.class
>   1266 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/callback/AbstractCallbackHandler.class
>    727 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/callback/ObjectCallback.class
>   2843 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/AbstractLoginModule$JAASUserInfo.class
>  14947 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/LdapLoginModule.class
>   1728 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/UserInfo.class
>   5416 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/AbstractLoginModule.class
>   4313 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/AbstractDatabaseLoginModule.class
>   3220 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/JDBCLoginModule.class
>   5522 Wed Sep 03 13:09:28 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/PropertyFileLoginModule.class
>   2066 Wed Sep 03 13:09:26 EDT 2014
> org/eclipse/jetty/plus/jaas/spi/DataSourceLoginModule.class
>
> Jetty9 (Packed in 5.13 amq)
> $ jar -tvf ./jetty\-all\-9.2.13.v20150730.jar  | grep
> "jaas/spi/\|jaas/callback/"
> $
>
>
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/Issue-with-ActiveMQ-5-13-0-Jetty-9-2-13-v20150730-jar-tp4706895.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>