KarSc | 10 Jan 16:30 2008
Picon

help - create_policy


Hi all, hope someone can give a bit of help with my application:

I have a server (orb tao) which use ssl (with no protection option) and a
client using jacorb (ssl) with the following options

jacorb.security.ssl.client.supported_options=0
jacorb.security.ssl.client.required_options=0

jacorb.security.ssl.server.supported_options=1
jacorb.security.ssl.server.required_options=0

what I want is to start an SSL (SSLIOP) connection – perform the login in
ssl and switch back to normal tcp (iiop) for normal communication:

I was thinking to 
-	start in no ssl (but still keeping the normal jacorb profile – not sure I
can do it) and just during the login force the CONFIDENTIALITY policy
-	start in ssl … perform the login … override the orb policy with NO
PROTECTION …

i have tried the following piece of code:

PolicyManager pol_manager = null;
            pol_manager = (PolicyManager)
myorb.resolve_initial_references("ORBPolicyManager");
            Any policy_value = myorb.create_any();

policy_value.insert_Value(org.omg.Security.QOP.SecQOPNoProtection);

(Continue reading)

Thomas Finneid | 10 Jan 17:27 2008
Picon
Picon

need to recompile idl for client?

Hi

Just a quick question about corba.

If I add a new method to an idl and conseaquently recompile it for the 
server, do I need to recompile at the client as well? I know there is 
some internal versioning and methods ids in a call, but does it mean 
that one needs to recompile in this situation?

regards

thomas

_______________________________________________
jacorb-developer maillist  -  jacorb-developer <at> lists.spline.inf.fu-berlin.de
http://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-developer

Jürgen Weber | 10 Jan 21:17 2008
Picon

Re: need to recompile idl for client?


Re-Hi,

no, you need not recompile the clients if your clients don't need to 
know the new operation.
A Corba request message contains an object ID (which originates from a 
server-sided object_to_string or a corbaloc) that is needed to route to 
right server and the right POA and the operation name (that the POA uses 
to find the operation implementation), but no versioning information.

 From JacORB/idl/omg/GIOP.idl:

struct RequestHeader_1_2 {
    unsigned long request_id;
    octet response_flags;
    octet reserved[3];
    TargetAddress target;
    string operation;
    // Principal not in GIOP 1.2
    IOP::ServiceContextList service_context; // 1.2 change
  };

union TargetAddress switch (AddressingDisposition) {
  case KeyAddr: sequence <octet> object_key;
  case ProfileAddr: IOP::TaggedProfile profile;
  case ReferenceAddr: IORAddressingInfo ior;
  };

Usually the object ID is a KeyAddr.

(Continue reading)

Thomas Finneid | 10 Jan 22:22 2008
Picon
Picon

Re: need to recompile idl for client?

Thank

Jürgen Weber wrote:
> Re-Hi,
> 
> no, you need not recompile the clients if your clients don't need to 
> know the new operation.

I forgot to mention that the client didn't need to know about the new
method, but you got that, so thanks.

> A Corba request message contains an object ID (which originates from a 
> server-sided object_to_string or a corbaloc) that is needed to route to 
> right server and the right POA and the operation name (that the POA uses 
> to find the operation implementation), but no versioning information.

Ok, I though it might regenerate this information with new uniqeness.

_______________________________________________
jacorb-developer maillist  -  jacorb-developer <at> lists.spline.inf.fu-berlin.de
http://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-developer

Russell Gold | 11 Jan 20:45 2008

Re: Codeset encoding problems

For compatibility with Websphere, we need JacORB to understand UCS-2  
for wchar. Yes, it is obsolete, but it is all IBM uses...

I've started taking a look, but I cannot even check out the code.  
Here's what I am doing.

durendal:projects russgold$ cvs -d :pserver:anonymous <at> www.jacorb.org/cvsroot/jacorb 
  login
Logging in to :pserver:anonymous <at> www.jacorb.org:2401/cvsroot/jacorb
CVS password:
durendal:projects russgold$ cvs -d :pserver:anonymous <at> www.jacorb.org/cvsroot/jacorb 
  co JacORB
Fatal error, aborting.
cvsuser: no such user

what is this "no such user" problem? I was successfully able to check  
out to a Windows box last month, but the regression suite doesn't run  
properly, there.

_______________________________________________
jacorb-developer maillist  -  jacorb-developer <at> lists.spline.inf.fu-berlin.de
http://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-developer

Andre Spiegel | 11 Jan 22:10 2008
Picon

Re: Codeset encoding problems


On Fri, 2008-01-11 at 14:45 -0500, Russell Gold wrote:

> I've started taking a look, but I cannot even check out the code.

There has been a problem with the JacORB CVS repository for several days
already.  The staff at the university where it's hosted has been
notified, but the issue is not resolved yet.

_______________________________________________
jacorb-developer maillist  -  jacorb-developer <at> lists.spline.inf.fu-berlin.de
http://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-developer

KarSc | 13 Jan 10:39 2008
Picon

NoProtection / Confidentiality Policy


Hi all,
Does anyone can tell me if Jacorb implements NoProtection or Confidentiality
Policy?

And if it does, what is the right way to use the create_policy to set one of
them at runtime.

Thanks for any help.

Kar

--

-- 
View this message in context: http://www.nabble.com/NoProtection---Confidentiality-Policy-tp14783826p14783826.html
Sent from the JacORB - Dev mailing list archive at Nabble.com.

_______________________________________________
jacorb-developer maillist  -  jacorb-developer <at> lists.spline.inf.fu-berlin.de
http://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-developer

Christian Cardinale | 14 Jan 14:00 2008

Using Root POA and child POA simultaneously

Hi,

I created a child POA having the "Bidir" property set, under the root POA :
   RootPOA
        |
       +---> BidirPOA

I uncommented the line concerning "bidir_init" in the jacorb.properties
file.

I'm trying to activate CORBA objects under either the root POA or the child
POA, depending on a private business-related parameter : What I expected is
that CORBA objects under the root POA do not use bidir GIOP whereas objects
under my child POA do.

1) Is it a good way of processing ? I'm facing some problems (object
activation never returns sometimes) and I'm suspicious about the way I'm
using POAs.

2) I tried to activate new CORBA objects, once the POA manager is activated.
Is it correct ? Or do I have to deactivate POA manager during object
activation (and re-activate after that) ?

Thanks for your help.

Best regards,
Christian Cardinale
_______________________________________________
jacorb-developer maillist  -  jacorb-developer <at> lists.spline.inf.fu-berlin.de
http://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-developer
(Continue reading)

Thread Leak with ClientMessageReceptor threads in waitUntilConnected

Hi

I have a scenario as below

1) Server A implements one object and the same performs invocations on 4
Remote objects of Server B

2) Server B implements 4 objects on which invocations would be from
Server A and it makes invocations to the one object implmented in server
A

In Server A, from the thread dump, I see may ClientMessageReceptor
waiting with the trace as below

===========================
"ClientMessageReceptor39" daemon prio=10 tid=0x00466bd0 nid=0xc6 in
Object.wait(
) [0x6747f000..0x6747faf0]
        at java.lang.Object.wait(Native Method)
        at java.lang.Object.wait(Object.java:474)
        at
org.jacorb.orb.giop.GIOPConnection.waitUntilConnected(GIOPConnection.
java:346)
        - locked <0xd21e1698> (a java.lang.Object)
        at
org.jacorb.orb.giop.GIOPConnection.getMessage(GIOPConnection.java:388
)
        at
org.jacorb.orb.giop.GIOPConnection.receiveMessages(GIOPConnection.jav
a:519)
(Continue reading)

Russell Gold | 16 Jan 15:46 2008

Quests about regression tests

I am in the process of trying to add support of additional codesets,  
and following the TDD discipline, I naturally want to be able to run  
the regression suite on a regular basis. But I am finding the tests  
defined for Jacorb to be rather confusing. Typically, I expect to be  
able simply to run an single ant command to recompile any changed  
classes and tests and run them. That doesn't seem to work here.

Is there a normal build/test cycle supported by the ant scripts? What  
I see appears to be rather clumsy. Under what conditions are all of  
the tests in the test directory run? How long does a normal unit-test  
cycle take? Is there a way to run a sub-suite?

On a related matter, I find it rather perplexing that the junit.jar is  
sitting in test/regression/lib, yet test/regression/build.xml does not  
reference it, and complains that it is not in the classpath.

_______________________________________________
jacorb-developer maillist  -  jacorb-developer <at> lists.spline.inf.fu-berlin.de
http://lists.spline.inf.fu-berlin.de/mailman/listinfo/jacorb-developer


Gmane