[higgins-dev] Re: About OpenXRI

["Tan, William" <William.Tan@xxxxxxxxxxx>]

Hi Paul and Steve,

From what I have read, you are looking to use OpenXRI for the 
resolution functionality. If this is not the right assumption, please 
let me know.

The OpenXRI client requires:

  - Apache Xerces (DOM3 for building, DOM2 or DOM3 at runtime)
  - Apache Xalan
  - Apache XML Security 
  - Apache Commons Logging
  - Apache Log4J
  - JUG 

but some of the functionality needed from these are libraries may be 
used in your code (eg. XML processing, logging), in which case a bit of 
porting may do the trick to remove it.

The OpenXRI syntax requires ICU4J for Internationalization. If your 
target platform is Java 1.5, we can probably make it work without ICU, 
which weighs at a hefty 3MB. However, it does seem that you are 
concerned about licences and such more so than the footprint of the 
dependencies.

I can do a more detailed analysis, but would like to give you a brief 
status first. Let me know what you think and if you need any more 
information do not hesitate to let me know.

Thanks.

=wil

Steve Churchill wrote:
> Paul (and Wil),
>
> Your XRI resolver client Java code will want to invoke the XRI resolver
> functional interface defined in Appendix E of the XRI Resolution Spec
> (WD10.)
>
> The OpenXRI resolver client package has a Java binding to this. It can be
> configured to (a) invoke a "local" resolver where the resolver algorithm is
> performed inside your JVM, or (b) forward the request off to an "HTTP proxy
> resolver" on another server.
>
> Whichever you choose, you will only need the OpenXRI client package and thus
> you will only need these dependencies. I am sure they are very light. 
>
> I have Cc'd Wil Tan of Neustar (the author) to shed some more light on this.
> Wil, what are exactly the client dependencies?
>
> Thx,
>
> ~ Steve
>
> -----Original Message-----
> From: Paul Trevithick 
>
> Hi Steven,
>
> I don't know if you've been following all this, but Higgins is in the
> process of re-implementing the IdAS Registries (see [1]). As I understand
> it, Tom of Novell and perhaps others are going to start trying to implement
> this stuff. And as you can see it depends on xri resolution.
>
> In parallel Mary and I are looking at OpenXRI from the point of view of
> putting together a CQ (Contribution Questionnaire) for Eclipse legal. In
> doing so I see that the readme says OpenXRI has the following dependencies:
>
>    - Apache Xerces (DOM3 for building, DOM2 or DOM3 at runtime)
>    - Apache Xalan
>    - Apache XML Security 
>    - Apache Commons Logging
>    - Apache Log4J
>    - IBM ICU4J
>    - JUG 
>    - JUnit (only needed for test classes)
>    - Java Servlet API (for building, server can be deployed in any 
>                        compliant servlet container)
>
> This raises a number of questions. First, from a legal review work
> minimization point of view, do you think that we need *all* of the openxri
> code (and thus all of the above 3rd party dependencies)? OpenXRI has a
> number of components (e.g. server, client, etc). Do you think we need all of
> these?
>
> If we do need all of these. We will probably need some help doing the
> following: (1) tracking down the exact version number of the above 3rd party
> libraries and comparing those versions with the versions of those components
> that have already been approved (2) making sure that all of the source files
> have headers, copyrights, licenses, etc. 
>
> [1] http://wiki.eclipse.org/index.php/IdAS_Registries_Proposal_2B   
>