Re: [jetty-users] why does jetty-plus bundle not import javax.security.*

[Guofeng Zhang <guofeng@xxxxxxxxxxxxx>]

This issue is for 8.0.4. 7.5.4 works well for my application.

 

The following share what I have done for our application.

 

I deployed Jetty 8.0.4 on Felix framework 4.0.2. I used to use JAAS for my web application. When the framework deploy jetty-plus, it said that:

Caused by:

java.lang.ClassNotFoundException: javax.security.auth.login.LoginException not found by org.eclipse.jetty.plus [31]

        at org.apache.felix.framework.BundleWiringImpl.findClassOrResourceByDelegation(BundleWiringImpl.java:1460)

        .......

        at org.eclipse.jetty.xml.XmlConfiguration$JettyXmlConfiguration.newObj(XmlConfiguration.java:748)

        ....

        at org.eclipse.jetty.osgi.boot.internal.webapp.JettyContextHandlerServic

        ...

        at java.lang.Thread.run(Thread.java:662)

 

so I added javax.security.* in Import-Package for jetty-plus. For my web bundle, I need to import com.sun.security.auth.login in Import-Package for com.sun.security.auth.login.ConfigFile. I use jetty-web.xml configure JAASLoginService.

  

Then it works well.

 

It also needs to add:

com.sun.xml.internal.bind.v2,\   --- this line is for jetty-jaspi

com.sun.security.auth.login

in felix’s config.properties to make the system bundle export the required package.

 

Anyway, if jetty-plus works well, for other missing package, we could deal it with well.

 

By fixing bug 359329 (https://bugs.eclipse.org/bugs/show_bug.cgi?id=359329), and add the following in maven-bundle-plugin of jetty-jaspi’s pom.xml, JASPI also works well on Felix.

        <configuration>

          <instructions>

            <Import-Package>

              *

            </Import-Package>

            <Export-Package>

              org.eclipse.jetty.security.jaspi,

              org.eclipse.jetty.security.jaspi.modules

            </Export-Package>

          </instructions>

        </configuration>

 

I opened a bug 336140 for it.

 

Thanks

 

Guofeng

 

 

From: jetty-users-bounces@xxxxxxxxxxx [mailto:jetty-users-bounces@xxxxxxxxxxx] On Behalf Of Hugues Malphettes
Sent: Friday, December 09, 2011 12:15 PM
To: JETTY user mailing list
Subject: Re: [jetty-users] why does jetty-plus bundle not import javax.security.* package?

 

 

On Fri, Dec 9, 2011 at 11:55 AM, Guofeng Zhang <guofeng@xxxxxxxxxxxxx> wrote:

Hi,

 

In the jetty-plus’s pom file, there is the line in maven-bundle-plugin configuration:

      <Import-Package>!javax.sql.*;!javax.security.*;!.......

This means that it does not import packages under javax.security. But the classes like JAASLoginService in org.eclipse.jetty.plus.jaas and its subpackage import javax.security.auth and its sub-package.

 

So jetty-plus bundle does not work on OGSi platform when you use JAAS.

 

Right?

Perfectly right. If I remember well, we had some issues with the packaging of javax.security in orbit. We added it to orbit later as the bundle javax.security.auth.message

We probably omitted to fix the code since then.
Could you file a bug about it so we can fix it?

Even better would be if you could give it a shot and let us know if it works for you: none of the projects I work on are using JAAS in OSGi I am afraid.
Thanks,
Hugues

 

Thanks

 

Guofeng

 

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/jetty-users