[Design of JBoss Portal] - missing getter/setter in CASAuthenticationValve
by advaittrivedi
Hi,
In 2_6_CAS_Integration branch of jboss portal, CASAuthenticationValve has casServiceUrl, for which getter/setter are missing. It allows us to route user to service url after authentication. Due to this, even if i put casServiceUrl in context.xml it was not taking effect. I have added them in local copy, and tested, and it is working, is this issue known? How can i submit the fix?
I think author of this class is Sohil Shah. Should i mail him the fix directly? Or somebody who can commit, can make this chage, just need to add getter/setter for casServiceUrl in CASAuthenticationValve.
Thanks & Regards,
Advait Trivedi
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4054719#4054719
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4054719
18 years, 9 months
[Design of JBoss jBPM] - Re: security in the console
by tom.baeyens@jboss.com
i also removed the comments in the web.xml about the security warning around the gpd deployment servlet. that should be in the documentation, i think.
in 3.2.1 it's doing to take to long to fix this as we would have to fork and make a new release of the old designer. so in 3.2.1, i still want an open gpd deployment servlet and a warning is most appropriate in the release notes, i think.
then in 3.2.2, i want the GPD to add authentication info to the request that uploads the servlet and the servlet should be secured. then, users can control the authorization by just logging into the webapp and removing the gpd user.
this plays out nicely with the users on the login page. cause when people remove the users, then nobody will be allowed to upload a new process definition.
btw, it would be good if you could add minimal documentation for the console in the user guide. 2 or 3 pages is already a good start. it could cover deployment and usage.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4054626#4054626
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4054626
18 years, 9 months
[Design of Messaging on JBoss (Messaging/JBoss)] - DB performances for large number of messages
by garu
Hi all,
i'd like to discuss about db organization because i'm concerned that with actual db structure, messaging won't be able to handle the volume of data i'm going to pump within it.
More generally speaking i think messaging in its actual incarnation is not well suited to handle large volume data.
In a few words i need messaging to become a sort of multiplexer that taking messages from a single source should be able to distribute them to different subscribers. Of these subscribers one will always be active and the others (at least two but could be more) will be active only when needed. This means that i have to guarantee that messages on topics are persisted until the subscribers read them or a certain amount of time has passed.
No problem until now, but i have to handle tenth of topics and hundredth million messages a day. It's not a problem of data size, the average message size is less than 200 byte, but just of number of messages.
Actually, if i din't miss something, all messages for all queues/topics are handled with only two tables jbm_msg and jbm_msg_ref and this is the limit.
I don't know how experienced you are about dbms but i know by experience that doesn't matter what dbms engine you have under the cover, when a table begin to fill with tenths or hundredths millon rows, performances go down the kitchen sink.
Now we have a legacy system (non jms, just C programs) that, to avoid performance bottlenecks, divide the message flows in different tables so that each table (partitioned tables) can remain low volume in terms of rows number and insert time can remain low, but to obtain the same subdivision i'd need a messaging instance for each flow.
If i'd try to propose such an architecture, i'd be killed on place!
Obviously i'm not thinking of a single instance to handle the whole data flow, it would be unsafe to say the least, but on the other side i cannot think to have an instance for each flow.
What i'm thinking about and are proposing is a system by which when you deploy a queue/topic you can ask that the queue/topic be allocated on a different tables set than the default one. This means that choosing the queue/topic where i send i implicitly choose the tables where messages are written, allowing for performances tuning for large number of messages.
I'd like to know you opinion about that.
Thanks, Gabriele
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4054623#4054623
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4054623
18 years, 9 months
[Design of JBoss jBPM] - security in the console
by tom.baeyens@jboss.com
i think it is a plus that the webapp can also work without security. but i would like the security to be reinstalled in the console by default. also we should make sure that there is a user for each role: admin, user and manager.
only that way we can add some scenarios in the documentation, movies or tutorials and show how the console presents itself to those roles and in those scenarios.
especially the task list feature is something that we can't show properly if users don't need to log in.
the way i interpreted the feedback of the se's that we should add more focus to admins, not limit the console to administrators as seems to be the case now.
i think that exposing the usernames and passwords on the home page is good. then it's good for evaluation purposes. and also people know immediately that you can't put this into production as is. with the god identity management UI that you've added, people can easily delete all users and avoid that security risk.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4054622#4054622
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4054622
18 years, 9 months