RE: [higgins-dev] List of specific jardepedencyfilesforJNDIContextProvid

[Michael McIntosh <mikemci@xxxxxxxxxx>]

higgins-dev-bounces@xxxxxxxxxxx wrote on 03/03/2007 03:16:07 PM:

> Thanks for chiming in Thor. The goal of the Higgins project as with 
> all other Eclipse projects, is that, with a few obvious exceptions 
> (e.g. like Tomcat itself, the JVM, etc.), we only wish to depend on 
> libraries for which we have redistribution rights, i.e. that have 
> gone through Eclipse IP review WRT licenses, etc.  The issues you 
> see on this list are short term problems caused by the fact that at 
> present we?ve not yet gotten all of the approvals we need. I?m 
> hoping that we?ll get past all of this over the next several weeks, 
> and thus an otherwise great solution like Maven won?t be needed in 
> the long term for Higgins. -Paul

I think as the project evolves we will continue to need new libraries we 
don't know about yet - we will always be adding things to the ipZilla 
queue - which means the queue will never be empty for long.

My main problem with Maven is that it's not integrated with Eclipse, and I 
do not know how to use it. My experience with trying to get Axis2 to build 
was not pleasant.

As we have seen with our own component dependency links, owners of 
components we rely on frequently change library names, move files, remove 
file, etc. Maven can't prevent that - we still need a place were we can 
reliably get files.

It there were a plugin for Eclipse that worked like the Ant plugin, and 
someone were willing to convert the current builds to maven, I'd be 
willing to experiment with this. But as things stand it would just be one 
more set of scripts to maintain, and would not solve all of the problems 
related to getting access to dependent files.

Perhaps a middle ground might be to create a maven project that goes out 
and gets the project dependencies, and copies them into the eclipse 
project ./lib directory. Again though, this just leaves us with one more 
place to maintain information we also need somewhere else.

> From: higgins-dev-bounces@xxxxxxxxxxx [mailto:higgins-dev-
> bounces@xxxxxxxxxxx] On Behalf Of Thor Wolpert
> Sent: Friday, March 02, 2007 4:30 PM
> To: Higgins (Trust Framework) Project developer discussions
> Subject: Re: [higgins-dev] List of specific 
> jardepedencyfilesforJNDIContextProvider
> 
> Would it be worthwhile in setting up a repository and a maven build 
> for this?  Maven was created to help solve this issue.  You create a
> manifest of the jars needed to build, test, run and deploy and the 
> build process collects these from well known, project or private 
> repositories.  Site like ibiblio are one of the main open sites, but
> there are others and forge specific ones like codehause, etc. 
> 
> Thoughts?
> 
> Thor HW
> On 3/2/07, Tom Doman <TDoman@xxxxxxxxxx> wrote:
> Paula,
> 
> I just spoke with the maintainer of the Open XDAS project and it looks
> like 0.3.158 was never formally released.  I've gotten 0.3.192 and
> adjusted the JNDI CP project to reference that version and checked 
> that in.
> 
> For some reason, I cannot edit the dependencies page to reflect this
> but I have already listed the bandit jars that are required in "Version"
> column.  When I get the chance to edit the page, I think I'll switch to 
> links to the forge site.
> 
> Tom
> 
> >>> Paula K Austel <pka@xxxxxxxxxx> 03/02/07 12:37 PM >>>
> There is a problem with open XDAS. The build is looking for 
> openxdas-0.3.158.jar and this does not seem to be available on the 
website
> (even when I go to the archived versions). I have to follow several 
links
> to get to older versions and still can't find it.
> 
> On the bandit site there are lots of jars to download so I got confused 
> about which ones to download. If I look at the build errors I can see
> which jars it is looking for but it would have been nice to have a list 
in
> the dependency link. I can understand there might be an issue with which 

> version (not sure how to deal with that, perhaps the ftp link that Jim
> mentions?)
> 
> Paula
> ----------------------------------------------------------
> Paula K. Austel
> Web Services Security
> IBM T.J. Watson Research Center 
> (914)784-5025
> Tieline 863-5025
> 
> 
> 
> 
> "Jim Sermersheim" <jimse@xxxxxxxxxx>
> Sent by: higgins-dev-bounces@xxxxxxxxxxx 
> 03/01/2007 04:51 PM
> Please respond to
> "Higgins \(Trust Framework\) Project developer discussions"
> <higgins-dev@xxxxxxxxxxx>
> 
> 
> To
> < higgins-dev@xxxxxxxxxxx>
> cc
> 
> Subject
> Re: [higgins-dev] List of specific jar depedency
> filesforJNDIContextProvider
> 
> 
> 
> 
> 
> 
> Yeah, I was under the impression that you wanted to direct people to a 
> specific build number as well, which is why I think the ftp links work
> well...  In time, the downloads page might scroll the 0.2.304 versions
> off, but they will always be available via the ftp link.
> 
> >>> "Tom Doman" < TDoman@xxxxxxxxxx> 3/1/07 2:36 PM >>>
> I wasn't sure, especially for the Bandit and Open XDAS stuff that I 
wanted
> to imply a specific
> build was required.  However, I'm happy to follow the consensus and\or 
> what other component
> owners are doing on their dependency pages.
> 
> Tom
> 
> >>> "Jim Sermersheim" <jimse@xxxxxxxxxx> 03/01/07 2:25 PM >>> 
> Would it be better to put specific links to the exact jar files? Like:
> ftp://forgeftp.novell.com//bandit/BanditUtils/development/binaries/all 
> -java/bandit-config-0.2.304.jar
> ftp://forgeftp.novell.com//bandit/BanditUtils/development/binaries/all
> -java/bandit-jndi-0.2.304.jar 
> ftp://forgeftp.novell.com//bandit/BanditUtils/development/binaries/all
> -java/bandit-misc-0.2.304.jar
> 
> >>> "Tom Doman" < TDoman@xxxxxxxxxx> 3/1/07 2:15 PM >>>
> Indeed it is Paula, I meant to do so on the dependency page but forgot.
> I've added more information to that page here:
> http://wiki.eclipse.org/index.php/JNDI_Context_Provider_Dependencies
> 
> Tom
> 
> >>> Paula K Austel < pka@xxxxxxxxxx> 03/01/07 12:29 PM >>>
> The page that lists dependencies for the JNDI Context Provider only
> includes a "downloads" link and does not specify the names of the jar
> files needed. This is particularly confusing when trying to figure out 
> what to download for Bandit. Is it possible to include the names of the
> jar files that are needed?
> 
> 
> ----------------------------------------------------------
> Paula K. Austel
> Web Services Security
> IBM T.J. Watson Research Center
> (914)784-5025
> Tieline 863-5025
> 
> _______________________________________________
> higgins-dev mailing list
> higgins-dev@xxxxxxxxxxx 
> https://dev.eclipse.org/mailman/listinfo/higgins-dev
> 
> _______________________________________________
> higgins-dev mailing list
> higgins-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/higgins-dev
> _______________________________________________
> higgins-dev mailing list 
> higgins-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/higgins-dev
> 
> 
> _______________________________________________ 
> higgins-dev mailing list
> higgins-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/higgins-dev 
>  _______________________________________________
> higgins-dev mailing list
> higgins-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/higgins-dev