Questions on installer contents

[David Jencks <da...@yahoo.com>]

apacheds-noarch does contain and I think it doesn't need:

servlet spec
commons-logging (use slf4j instead for spring)
bouncycastle:bcprov-jdk15:jar:136 (I think this MUST be removed)


It does not contain and I wonder if it should:
commons-pool for mitosis


Non apache artifacts included (I think):
antlr:antlr:jar:2.7.7
  jdbm:jdbm:jar:1.0
bouncycastle:bcprov-jdk15:jar:136 (I think this MUST be removed)
jug:jug-asl:jar:2.0.0
opensymphony:quartz:jar:1.6.0
org.springframework:spring-core:jar:2.0.6
org.springframework:spring-beans:jar:2.0.6
org.slf4j:jcl104-over-slf4j:jar:1.4.3
org.slf4j:slf4j-log4j12:jar:1.4.3
org.springframework.spring-context:jar:2.0.6
aopalliance:aopalliance:jar:1.0
tanukisoft:wrapper:jar:3.2.3

Bouncycastle -- I believe apache frowns on distributing the actual  
bouncycastle jar itself due to the claims that it includes an  
unlicensed implemenation of a software patent.  Since it includes jce  
stuff I think it might make the export classification much stickier  
also.  Its used in core TlsKeyGenerator, I can't judge how necessary  
this is.

later tonight I plan to construct the legal files for inclusion in  
the noarch installer jar using the above list of non-apache artifacts  
included.  If any of these can be left out please let me know.

thanks
david jencks

Re: Questions on installer contents

[Alex Karasulu <ak...@apache.org>]

On Tue, Apr 1, 2008 at 8:19 PM, David Jencks <da...@yahoo.com> wrote:

> apacheds-noarch does contain and I think it doesn't need:
>
> servlet spec
> commons-logging (use slf4j instead for spring)
> bouncycastle:bcprov-jdk15:jar:136 (I think this MUST be removed)
>

We need BC.  In general if there's a jar you think is not needed, you should
test a run of ApacheDS before removing it with the noarch script.  You'll
know fast whether you need that jar or not.


>
>
> It does not contain and I wonder if it should:
> commons-pool for mitosis
>

I should then.  If mitosis has the dependency.

Its used in core TlsKeyGenerator, I can't judge how necessary
> this is.
>

It's necessary for ApacheDS to create and manage the server certificate for
LDAPS and StartTLS in the DIT.


> later tonight I plan to construct the legal files for inclusion in
> the noarch installer jar using the above list of non-apache artifacts
> included.  If any of these can be left out please let me know.
>

I'm pretty much in the same boat with you in terms of looking at the
artifacts to determine what's needed and what is not.   Unless of course
it's fresh in my mind.

Alex