You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomee.apache.org by Ashish Jain <as...@gmail.com> on 2007/10/16 11:15:15 UTC
allowHosts in OpenEjb3.0
Hi,
Is the attribute allowHosts removed in OpenEjb3.0? Is there any other
alternative for this attribute?
Thanks
Ashish
Re: allowHosts in OpenEjb3.0
Posted by Manu George <ma...@gmail.com>.
Ok I get it you can do -Dejbd.only_from. Sorry for the spam.
On 10/18/07, Manu George <ma...@gmail.com> wrote:
> Isn't this only for access on who can administer the server
> i.e.startup and shutdown? Is it also for who can access ejbd?
>
> Regards
> Manu
>
> On 10/17/07, Dain Sundstrom <da...@iq80.com> wrote:
> > On Oct 17, 2007, at 7:35 AM, Kevan Miller wrote:
> >
> > >
> > > On Oct 17, 2007, at 3:05 AM, Ashish Jain wrote:
> > >
> > >> Any help on this issue??
> > >
> > > Ashish,
> > > OpenEJB 3.0 supports an 'only_from' configuration option. Running
> > > openejb standalone, you should be able to accomplish what you want.
> > > E.g.:
> > >
> > > openejb start -Dadmin.only_from=127.0.0.1
> >
> > You can also set it via the conf/admin.properties file (the command
> > line above overrides this file).
> >
> > -dain
> >
>
Re: allowHosts in OpenEjb3.0
Posted by Manu George <ma...@gmail.com>.
Isn't this only for access on who can administer the server
i.e.startup and shutdown? Is it also for who can access ejbd?
Regards
Manu
On 10/17/07, Dain Sundstrom <da...@iq80.com> wrote:
> On Oct 17, 2007, at 7:35 AM, Kevan Miller wrote:
>
> >
> > On Oct 17, 2007, at 3:05 AM, Ashish Jain wrote:
> >
> >> Any help on this issue??
> >
> > Ashish,
> > OpenEJB 3.0 supports an 'only_from' configuration option. Running
> > openejb standalone, you should be able to accomplish what you want.
> > E.g.:
> >
> > openejb start -Dadmin.only_from=127.0.0.1
>
> You can also set it via the conf/admin.properties file (the command
> line above overrides this file).
>
> -dain
>
Re: allowHosts in OpenEjb3.0
Posted by Dain Sundstrom <da...@iq80.com>.
On Oct 17, 2007, at 7:35 AM, Kevan Miller wrote:
>
> On Oct 17, 2007, at 3:05 AM, Ashish Jain wrote:
>
>> Any help on this issue??
>
> Ashish,
> OpenEJB 3.0 supports an 'only_from' configuration option. Running
> openejb standalone, you should be able to accomplish what you want.
> E.g.:
>
> openejb start -Dadmin.only_from=127.0.0.1
You can also set it via the conf/admin.properties file (the command
line above overrides this file).
-dain
Re: allowHosts in OpenEjb3.0
Posted by Ashish Jain <as...@gmail.com>.
Hi Kevan,
Thanks for your suggestion. Can you suggest me how can I use
openejb start -Dadmin.only_from=127.0.0.1 in geronimo? I guess setting -
Dadmin.only_from=127.0.0.1 in geronimo classpath will make things work.
Thanks
Ashish
On 10/17/07, Kevan Miller <ke...@gmail.com> wrote:
>
>
> On Oct 17, 2007, at 3:05 AM, Ashish Jain wrote:
>
> > Any help on this issue??
>
> Ashish,
> OpenEJB 3.0 supports an 'only_from' configuration option. Running
> openejb standalone, you should be able to accomplish what you want.
> E.g.:
>
> openejb start -Dadmin.only_from=127.0.0.1
>
> (note: I've never used this...)
>
> As I've noted on Geronimo dev list, we may be able to get this
> configured with existing codebase in Geronimo. If this feature is
> important to users, we should probably get 'allowedHosts' support
> back into Geronimo... Either way, it's a discussion for the geronimo
> list...
>
> --kevan
>
>
Re: allowHosts in OpenEjb3.0
Posted by Kevan Miller <ke...@gmail.com>.
On Oct 17, 2007, at 3:05 AM, Ashish Jain wrote:
> Any help on this issue??
Ashish,
OpenEJB 3.0 supports an 'only_from' configuration option. Running
openejb standalone, you should be able to accomplish what you want.
E.g.:
openejb start -Dadmin.only_from=127.0.0.1
(note: I've never used this...)
As I've noted on Geronimo dev list, we may be able to get this
configured with existing codebase in Geronimo. If this feature is
important to users, we should probably get 'allowedHosts' support
back into Geronimo... Either way, it's a discussion for the geronimo
list...
--kevan
Re: allowHosts in OpenEjb3.0
Posted by Manu George <ma...@gmail.com>.
Hi Ashish,
I believe you can open a JIRA for this. I guess openejb needs to
support this feature for geronimo to support it. So it may need
changes in both the projects. Probably you can open one in geronimo
and another in openejb and link them.
Regards
Manu
On 10/17/07, Karan Malhi <ka...@gmail.com> wrote:
> Ashish,
>
> I am sorry , but I don't know enough about Geronimo to answer this
> question. As Jacek mentioned earlier, the Geronimo users list would a
> place where you might want to post this question.
>
> Regards
>
> Karan Singh Malhi
>
> On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> > Hi Karan,
> > Is there any other alternative for the same functionality where
> > we can restrict the access to EJB application running on the server? I tried
> >
> >
> > <gbean name="EJBNetworkService"
> > class="org.apache.geronimo.openejb.EjbDaemonGBean">
> > <attribute name="port">${PlanOpenEJBPort}</attribute>
> > <attribute name="host">someip other than my localmachine where
> > server is running</attribute>
> > <attribute name="threads">20</attribute>
> > <dependency>
> > <name>OpenEjbSystem</name>
> > </dependency>
> > </gbean>
> >
> > Please see the host attribute.
> > Even than I could not restrict the access. Any user is able to access
> > the EJB on the server?
> >
> > Any idea how it can be enabled in geronimo 2.0 or openEjb 3.0.
> >
> >
> > Thanks
> > Ashish
> >
> >
> >
> > On 10/17/07, Karan Malhi <ka...@gmail.com> wrote:
> > >
> > > Ashish,
> > >
> > > I did some research and looks like the attribute was removed.
> > > Here are the list of attributes in Geronimo 1.2
> > > -name
> > > -port
> > > -host
> > > -allowHosts
> > > -logOnSuccess
> > > -logOnFailure
> > >
> > > You can find the exact plan.xml for Geronimo 1.2 here which describes
> > > the attributes used for EJBNetworkService:
> > >
> > > http://svn.apache.org/viewvc/geronimo/server/branches/1.2/configs/openejb/src/plan/plan.xml?diff_format=u&revision=476468&view=markup
> > >
> > > Here are the attributes supported by Geronimo 2.0
> > > -port
> > > -host
> > > -threads
> > > And here is the plan.xml for Geronimo 2.0:
> > >
> > > http://svn.apache.org/viewvc/geronimo/server/branches/2.0/configs/openejb/src/plan/plan.xml?diff_format=u&revision=583563&view=markup
> > >
> > >
> > > On 10/17/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
> > > > On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> > > > > Any help on this issue??
> > > >
> > > > I can't help you with this, but I noticed you sent it to
> > > > users@geronimo mailing list too and I'd expect more help there.
> > > >
> > > > Jacek
> > > >
> > > > --
> > > > Jacek Laskowski
> > > > http://www.JacekLaskowski.pl
> > > >
> > >
> > >
> > > --
> > > Karan Singh Malhi
> > >
> >
>
>
> --
> Karan Singh Malhi
>
Re: allowHosts in OpenEjb3.0
Posted by Karan Malhi <ka...@gmail.com>.
Ashish,
I am sorry , but I don't know enough about Geronimo to answer this
question. As Jacek mentioned earlier, the Geronimo users list would a
place where you might want to post this question.
Regards
Karan Singh Malhi
On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> Hi Karan,
> Is there any other alternative for the same functionality where
> we can restrict the access to EJB application running on the server? I tried
>
>
> <gbean name="EJBNetworkService"
> class="org.apache.geronimo.openejb.EjbDaemonGBean">
> <attribute name="port">${PlanOpenEJBPort}</attribute>
> <attribute name="host">someip other than my localmachine where
> server is running</attribute>
> <attribute name="threads">20</attribute>
> <dependency>
> <name>OpenEjbSystem</name>
> </dependency>
> </gbean>
>
> Please see the host attribute.
> Even than I could not restrict the access. Any user is able to access
> the EJB on the server?
>
> Any idea how it can be enabled in geronimo 2.0 or openEjb 3.0.
>
>
> Thanks
> Ashish
>
>
>
> On 10/17/07, Karan Malhi <ka...@gmail.com> wrote:
> >
> > Ashish,
> >
> > I did some research and looks like the attribute was removed.
> > Here are the list of attributes in Geronimo 1.2
> > -name
> > -port
> > -host
> > -allowHosts
> > -logOnSuccess
> > -logOnFailure
> >
> > You can find the exact plan.xml for Geronimo 1.2 here which describes
> > the attributes used for EJBNetworkService:
> >
> > http://svn.apache.org/viewvc/geronimo/server/branches/1.2/configs/openejb/src/plan/plan.xml?diff_format=u&revision=476468&view=markup
> >
> > Here are the attributes supported by Geronimo 2.0
> > -port
> > -host
> > -threads
> > And here is the plan.xml for Geronimo 2.0:
> >
> > http://svn.apache.org/viewvc/geronimo/server/branches/2.0/configs/openejb/src/plan/plan.xml?diff_format=u&revision=583563&view=markup
> >
> >
> > On 10/17/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
> > > On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> > > > Any help on this issue??
> > >
> > > I can't help you with this, but I noticed you sent it to
> > > users@geronimo mailing list too and I'd expect more help there.
> > >
> > > Jacek
> > >
> > > --
> > > Jacek Laskowski
> > > http://www.JacekLaskowski.pl
> > >
> >
> >
> > --
> > Karan Singh Malhi
> >
>
--
Karan Singh Malhi
Re: allowHosts in OpenEjb3.0
Posted by Vamsavardhana Reddy <c1...@gmail.com>.
Ashish,
The host attribute specifies the host to which the port will be bound.
Looks like allowHosts is not supported in G 2.0. The special case of
allowHosts="127.0.0.1" should be achievable by setting host="127.0.0.1".
Let me know if it works.
++Vamsi
On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
>
> Hi Karan,
> Is there any other alternative for the same functionality
> where
> we can restrict the access to EJB application running on the server? I
> tried
>
>
> <gbean name="EJBNetworkService"
> class="org.apache.geronimo.openejb.EjbDaemonGBean">
> <attribute name="port">${PlanOpenEJBPort}</attribute>
> <attribute name="host">someip other than my localmachine where
> server is running</attribute>
> <attribute name="threads">20</attribute>
> <dependency>
> <name>OpenEjbSystem</name>
> </dependency>
> </gbean>
>
> Please see the host attribute.
> Even than I could not restrict the access. Any user is able to access
> the EJB on the server?
>
> Any idea how it can be enabled in geronimo 2.0 or openEjb 3.0.
>
>
> Thanks
> Ashish
>
>
>
> On 10/17/07, Karan Malhi <ka...@gmail.com> wrote:
> >
> > Ashish,
> >
> > I did some research and looks like the attribute was removed.
> > Here are the list of attributes in Geronimo 1.2
> > -name
> > -port
> > -host
> > -allowHosts
> > -logOnSuccess
> > -logOnFailure
> >
> > You can find the exact plan.xml for Geronimo 1.2 here which describes
> > the attributes used for EJBNetworkService:
> >
> >
> http://svn.apache.org/viewvc/geronimo/server/branches/1.2/configs/openejb/src/plan/plan.xml?diff_format=u&revision=476468&view=markup
> >
> > Here are the attributes supported by Geronimo 2.0
> > -port
> > -host
> > -threads
> > And here is the plan.xml for Geronimo 2.0:
> >
> >
> http://svn.apache.org/viewvc/geronimo/server/branches/2.0/configs/openejb/src/plan/plan.xml?diff_format=u&revision=583563&view=markup
> >
> >
> > On 10/17/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
> > > On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> > > > Any help on this issue??
> > >
> > > I can't help you with this, but I noticed you sent it to
> > > users@geronimo mailing list too and I'd expect more help there.
> > >
> > > Jacek
> > >
> > > --
> > > Jacek Laskowski
> > > http://www.JacekLaskowski.pl
> > >
> >
> >
> > --
> > Karan Singh Malhi
> >
>
--
Vamsi (vamsic007@apache.org)
(Committer and Member of Apache Geronimo PMC)
Blog: http://vamsic007.livejournal.com/
One-stop-shop for JEE Application security configuration in Geronimo
OS Summit Asia 2007
http://www.ossummit.com/2007/program/talk/15
Re: allowHosts in OpenEjb3.0
Posted by Ashish Jain <as...@gmail.com>.
Hi Karan,
Is there any other alternative for the same functionality where
we can restrict the access to EJB application running on the server? I tried
<gbean name="EJBNetworkService"
class="org.apache.geronimo.openejb.EjbDaemonGBean">
<attribute name="port">${PlanOpenEJBPort}</attribute>
<attribute name="host">someip other than my localmachine where
server is running</attribute>
<attribute name="threads">20</attribute>
<dependency>
<name>OpenEjbSystem</name>
</dependency>
</gbean>
Please see the host attribute.
Even than I could not restrict the access. Any user is able to access
the EJB on the server?
Any idea how it can be enabled in geronimo 2.0 or openEjb 3.0.
Thanks
Ashish
On 10/17/07, Karan Malhi <ka...@gmail.com> wrote:
>
> Ashish,
>
> I did some research and looks like the attribute was removed.
> Here are the list of attributes in Geronimo 1.2
> -name
> -port
> -host
> -allowHosts
> -logOnSuccess
> -logOnFailure
>
> You can find the exact plan.xml for Geronimo 1.2 here which describes
> the attributes used for EJBNetworkService:
>
> http://svn.apache.org/viewvc/geronimo/server/branches/1.2/configs/openejb/src/plan/plan.xml?diff_format=u&revision=476468&view=markup
>
> Here are the attributes supported by Geronimo 2.0
> -port
> -host
> -threads
> And here is the plan.xml for Geronimo 2.0:
>
> http://svn.apache.org/viewvc/geronimo/server/branches/2.0/configs/openejb/src/plan/plan.xml?diff_format=u&revision=583563&view=markup
>
>
> On 10/17/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
> > On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> > > Any help on this issue??
> >
> > I can't help you with this, but I noticed you sent it to
> > users@geronimo mailing list too and I'd expect more help there.
> >
> > Jacek
> >
> > --
> > Jacek Laskowski
> > http://www.JacekLaskowski.pl
> >
>
>
> --
> Karan Singh Malhi
>
Re: allowHosts in OpenEjb3.0
Posted by Karan Malhi <ka...@gmail.com>.
Ashish,
I did some research and looks like the attribute was removed.
Here are the list of attributes in Geronimo 1.2
-name
-port
-host
-allowHosts
-logOnSuccess
-logOnFailure
You can find the exact plan.xml for Geronimo 1.2 here which describes
the attributes used for EJBNetworkService:
http://svn.apache.org/viewvc/geronimo/server/branches/1.2/configs/openejb/src/plan/plan.xml?diff_format=u&revision=476468&view=markup
Here are the attributes supported by Geronimo 2.0
-port
-host
-threads
And here is the plan.xml for Geronimo 2.0:
http://svn.apache.org/viewvc/geronimo/server/branches/2.0/configs/openejb/src/plan/plan.xml?diff_format=u&revision=583563&view=markup
On 10/17/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
> On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> > Any help on this issue??
>
> I can't help you with this, but I noticed you sent it to
> users@geronimo mailing list too and I'd expect more help there.
>
> Jacek
>
> --
> Jacek Laskowski
> http://www.JacekLaskowski.pl
>
--
Karan Singh Malhi
Re: allowHosts in OpenEjb3.0
Posted by Jacek Laskowski <ja...@laskowski.net.pl>.
On 10/17/07, Ashish Jain <as...@gmail.com> wrote:
> Any help on this issue??
I can't help you with this, but I noticed you sent it to
users@geronimo mailing list too and I'd expect more help there.
Jacek
--
Jacek Laskowski
http://www.JacekLaskowski.pl
Re: allowHosts in OpenEjb3.0
Posted by Ashish Jain <as...@gmail.com>.
Any help on this issue??
On 10/16/07, Ashish Jain <as...@gmail.com> wrote:
>
> Hi Jackek,
>
> I am using it in Apache Geronimo. I was able to use the same in AG 1.2which has OpenEjb
> 2.1 as its EJB module.
> <module name="geronimo/openejb/1.1.1/car">
> <gbean name="EJBNetworkService">
> <attribute name="host"> 0.0.0.0</attribute>
> <attribute name="port">4201</attribute>
> <attribute name="allowHosts">127.0.0.1</attribute>
> </gbean>
> </module>
>
> But with AG 2.0 which has OpenEjb 3.0. When I try the same operation I get
> a not allowed attribute error.
>
> So was not sure whether this attribute has been removed from OpenEjb 3.0or there is an alternative available for the same functionality.
>
> Thanks
> Ashish
>
> On 10/16/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
> >
> > On 10/16/07, Ashish Jain <as...@gmail.com> wrote:
> > > Hi,
> > > Is the attribute allowHosts removed in OpenEjb3.0? Is there any
> > other
> > > alternative for this attribute?
> >
> > I don't know, but openejb3 was about adding features not removing them
> > so it is available, unintentionally removed or we missed adding
> > porting it to openejb3. Could you describe how you're using the
> > feature?
> >
> > Jacek
> >
> > --
> > Jacek Laskowski
> > http://www.JacekLaskowski.pl
> >
>
>
Re: allowHosts in OpenEjb3.0
Posted by Ashish Jain <as...@gmail.com>.
Any help on this issue??
On 10/16/07, Ashish Jain <as...@gmail.com> wrote:
>
> Hi Jackek,
>
> I am using it in Apache Geronimo. I was able to use the same in AG 1.2which has OpenEjb
> 2.1 as its EJB module.
> <module name="geronimo/openejb/1.1.1/car">
> <gbean name="EJBNetworkService">
> <attribute name="host"> 0.0.0.0</attribute>
> <attribute name="port">4201</attribute>
> <attribute name="allowHosts">127.0.0.1</attribute>
> </gbean>
> </module>
>
> But with AG 2.0 which has OpenEjb 3.0. When I try the same operation I get
> a not allowed attribute error.
>
> So was not sure whether this attribute has been removed from OpenEjb 3.0or there is an alternative available for the same functionality.
>
> Thanks
> Ashish
>
> On 10/16/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
> >
> > On 10/16/07, Ashish Jain <as...@gmail.com> wrote:
> > > Hi,
> > > Is the attribute allowHosts removed in OpenEjb3.0? Is there any
> > other
> > > alternative for this attribute?
> >
> > I don't know, but openejb3 was about adding features not removing them
> > so it is available, unintentionally removed or we missed adding
> > porting it to openejb3. Could you describe how you're using the
> > feature?
> >
> > Jacek
> >
> > --
> > Jacek Laskowski
> > http://www.JacekLaskowski.pl
> >
>
>
Re: allowHosts in OpenEjb3.0
Posted by Ashish Jain <as...@gmail.com>.
Hi Jackek,
I am using it in Apache Geronimo. I was able to use the same in AG 1.2 which
has OpenEjb 2.1 as its EJB module.
<module name="geronimo/openejb/1.1.1/car">
<gbean name="EJBNetworkService">
<attribute name="host">0.0.0.0</attribute>
<attribute name="port">4201</attribute>
<attribute name="allowHosts">127.0.0.1</attribute>
</gbean>
</module>
But with AG 2.0 which has OpenEjb 3.0. When I try the same operation I get a
not allowed attribute error.
So was not sure whether this attribute has been removed from OpenEjb 3.0 or
there is an alternative available for the same functionality.
Thanks
Ashish
On 10/16/07, Jacek Laskowski <ja...@laskowski.net.pl> wrote:
>
> On 10/16/07, Ashish Jain <as...@gmail.com> wrote:
> > Hi,
> > Is the attribute allowHosts removed in OpenEjb3.0? Is there any other
> > alternative for this attribute?
>
> I don't know, but openejb3 was about adding features not removing them
> so it is available, unintentionally removed or we missed adding
> porting it to openejb3. Could you describe how you're using the
> feature?
>
> Jacek
>
> --
> Jacek Laskowski
> http://www.JacekLaskowski.pl
>
Re: allowHosts in OpenEjb3.0
Posted by Jacek Laskowski <ja...@laskowski.net.pl>.
On 10/16/07, Ashish Jain <as...@gmail.com> wrote:
> Hi,
> Is the attribute allowHosts removed in OpenEjb3.0? Is there any other
> alternative for this attribute?
I don't know, but openejb3 was about adding features not removing them
so it is available, unintentionally removed or we missed adding
porting it to openejb3. Could you describe how you're using the
feature?
Jacek
--
Jacek Laskowski
http://www.JacekLaskowski.pl