Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2017-04-21

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:07 MegaMatt joined #openam
00:25 jasoninmel joined #openam
01:14 jasoninmel joined #openam
01:48 ilbot3 joined #openam
01:48 Topic for #openam is now Chat about the OpenAM project - https://forgerock.github.io - Channel logs at: http://irclog.perlgeek.de/openam/today
05:00 aldaris joined #openam
05:45 jelmd joined #openam
05:57 aldaris joined #openam
07:15 aldaris joined #openam
07:18 jamiebow_ joined #openam
07:22 aldaris joined #openam
07:46 jasoninmel joined #openam
08:29 HelgeO joined #openam
08:34 FireBurn|Work joined #openam
08:34 FireBurn|Work joined #openam
08:34 FireBurn|Work Good morning
08:41 FireBurn|Work jamiebow_ Did you see my messages from last night?
08:41 aldaris Good morning
08:41 aldaris wrt checksum mismatch?
08:41 FireBurn|Work That and the missing jars from SSOConfiguratorTools
08:42 aldaris the checksum mismatch I've explained to Jamie, so he should be able to sort that out in the repository
08:42 FireBurn|Work I think he said he fixed it
08:45 FireBurn|Work Also the tests won't run due to missing classes
08:45 FireBurn|Work https://bugster.forgerock.org/jira/browse/OPENAM-2673
08:45 aldaris what classes are missing?
08:49 FireBurn|Work com.sun.org.apache.xml.internal.security.encryption.XMLCipher
08:50 FireBurn|Work https://github.com/OpenRock/OpenAM/commit/272ac8a1a482b3baeff7293aac5de828cfd1ee69
08:50 FireBurn|Work Is the fix for 13
08:51 aldaris are you trying to build OpenAM with OpenJDK or something?
08:51 FireBurn|Work Yeah
08:51 aldaris hmm
08:51 aldaris the .internal. package means that the class should be part of the JDK
08:51 aldaris 11.0.3 was originally built using JDK6
08:52 FireBurn|Work 1.7.0_131
08:52 FireBurn|Work jamiebow_ said he was building with Java 7
08:52 aldaris but most likely he's using Oracle JDK
08:52 aldaris and 7u80 since u131 is only available for people with support contracts with RedHat/Oracle
08:54 FireBurn|Work Yeah that's what he said he was building with
08:54 FireBurn|Work Its difficult gettign a hold of Oracle's Java 7 at all now
08:55 FireBurn|Work OpenJDK 7 was installed as default on the build machine I'm using RHEL7
08:55 aldaris not that difficult really, you just need a support account with oracle without a real subscription, at least I assume that's how I got hold of it
08:55 FireBurn|Work If it requires a specific version, any chance you could add that into the docs
08:56 aldaris well, we built the original binaries with 1.6.0_45..
08:56 aldaris Oracle JDK
08:56 aldaris building with JDK7 was never really tested during the original release
08:56 FireBurn|Work Also what was the reason for picking a 5 year old version of the product for the comunity version? I'd have thought something a bit more recent would mean you'd be able to use any fixes in your for sale product too
08:57 aldaris I can't comment on business model, simply because I don't know the answers
08:57 FireBurn|Work What should I be running this version with? I'm on websphere here, had to use JDK7 for both 13 and the preview of 14
08:58 aldaris you should be able to run it with JDK7, 11 supported both JDK6 and JDK7 as runtime
08:58 FireBurn|Work Great
08:58 aldaris of course you would do a favor to yourself if you wouldn't use websphere and ibm jdk :)
08:58 FireBurn|Work Any idea how your "release" version on github was built?
08:59 FireBurn|Work Well considering my day job is WebSphere...
08:59 aldaris Jamie should know that, I wasn't involved
08:59 FireBurn|Work I've only picked up this openam thing as we're running OpenSSO 8 and no one really owns it and we want to move it to WebSphere 8.5.5
09:00 FireBurn|Work There was  a project a few years ago to move it to OpenAM 11, but there were issues during the deployment and it went on the back burner - the contractor has left the company now
09:01 aldaris err, I'm not sure if 11 supported websphere 8.5
09:01 FireBurn|Work When I started here I was asked to look at using OpenAM 13 (though I was hoping 14 would be released)
09:01 FireBurn|Work It works
09:01 FireBurn|Work The build notes I have are for OpenAM 11, but they don't have any reasoning for anything being done and so much had changed since then
09:02 aldaris https://backstage.forgerock.com/docs/openam/11.0.3/release-notes#web-container-requirements
09:02 FireBurn|Work So it actually makes my life a little easier going with 11.0.3
09:02 aldaris ah, 8.5 was supported
09:02 FireBurn|Work Well 8.5.5 works with Java 6,7,8
09:02 FireBurn|Work WebSphere 9 I beleive is only java 8
09:02 FireBurn|Work and probably Java 9 when it's released
09:03 FireBurn|Work I've been scripting all the manual steps for configuing OpenAM in our environments
09:04 FireBurn|Work Of course I've had lots of joy with ssoadm
09:05 FireBurn|Work Is WebAgents 4 the latest version that's open?
09:11 aldaris (shrug)
09:12 aldaris I don't know, the business model is not quite clear about which products have changed since there was no official announcement
09:12 aldaris given that I haven't seen any work so far that involved old versions of agents I presume Agent 4 is still public and subject of the binary licence
09:13 aldaris so theoretically speaking you would need to build the web agents manually to be able to use it in a prod environment
09:20 FireBurn|Work That's what I'm currently doing
09:20 FireBurn|Work Notice there's 4.1 in the docs but I only have 4.0 here
09:20 FireBurn|Work Wasn't sure if I was looking in the wrong place
09:21 jamiebowen joined #openam
09:25 FireBurn|Work Is org.forgerock.util.xml.XMLUtils different from com.sun.identity.shared.xml.XMLUtils?
09:25 aldaris well they are two different classes yes
09:26 aldaris I think it is best to assume that the agents are still based on the old model, which means that the maintenance versions are still not public
09:26 aldaris 4.0.0 version was a big pile of regressions and bugs btw
09:27 FireBurn|Work I know :'(
09:27 aldaris using 4.0.0 can lead to further headaches, just saying
09:27 FireBurn|Work Seems all your stuff that' spriblic is
09:27 FireBurn|Work *that's public
09:27 aldaris 11.0.3 should be more stable
09:28 aldaris but it is an old product to be frank. The products improve over the years, it's just the community doesn't see too much of it..
09:28 FireBurn|Work SSOAdminTools seems to have org.forgerock.util.xml.XMLUtils missing but I can't find any reference to it in any of the code or poms
09:28 aldaris 12 and 13 matured the product, but at the same time introduced new sets of regressions
09:29 aldaris that would be in the forgerock-util commons project
09:29 FireBurn|Work I tried 14 or 5 or what ever it is now, and it was worse that 13 out of the box
09:29 FireBurn|Work Was causing the nodeagents to fall over and everything
09:30 aldaris I don't know much about that customers haven't quite migrated to it yet, so haven't had a large influx of tickets for it
09:30 aldaris 14 should be certainly more stable, but frankly websphere is not our most favorite platform..
09:43 FireBurn|Work these 3 don't seem to be in the zip CLASSPATH="$CLASSPATH:lib/opendj-server-2.6.4.jar" CLASSPATH="$CLASSPATH:lib/forgerock-util-1.3.5.jar" CLASSPATH="$CLASSPATH:lib/openam-rest-11.0.3.jar"
09:44 aldaris openam-rest is missing from the official release as well, but I'm not sure if it was needed in the first place
09:44 aldaris the opendj-server issue seems to be related to the fact that embedded DJ was upgraded for the community release
09:45 aldaris jamiebowen should sort that :)
09:45 aldaris not sure about forgerock-util, may have been brought in as a transitive dependency only
09:45 FireBurn|Work Found the problem
09:46 FireBurn|Work Will send another pull request
09:46 FireBurn|Work Hopefuly it won't be ignored this time
10:02 FireBurn|Work Pull request updated
10:07 FireBurn|Work Also figured out why Jamie's fix didn't seem to be working
10:08 FireBurn|Work The build was pulling in org.forgerock.opendj rather than org.forgerock.ce.opendj
10:13 FireBurn|Work jamiebowen: Are you seeing any of this?
10:13 aldaris I'll try to hunt him down in the office :)
10:14 FireBurn|Work No worries, it might have him sometime if he's working on this
10:18 FireBurn|Work *save
10:23 FireBurn|Work Build completed successfully, SSOAdminTools is looking less anemic
10:24 FireBurn|Work I'm still getting the mismatch
10:24 FireBurn|Work Will try clearing out my .m2 just in case it's picking up something it shouldn't be
10:39 FireBurn|Work There's still some weird dependency thing going on, I get build failures when I clean out my .m2 on jenkins but it builds fine if I then log onto the box and run the exact same command
10:40 FireBurn|Work [WARNING] Cannot include project artifact: org.forgerock.ce.openam:openam-distribution-kit:pom:11.0.3; it doesn't have an associated file or directory
10:40 aldaris joined #openam
10:42 aldaris couldn't find Jamie in the office, will try HipChat, but not sure if he's on holiday or something
10:45 FireBurn|Work Maybe working form home
10:47 FireBurn|Work I really need to start reading all the warnings being pumped out
10:49 FireBurn|Work https://pastebin.com/s4N2aWDa
10:59 FireBurn|Work [WARNING] 'profiles.profile[release].plugins.plugin.(groupId:artifactId)' must be unique but found duplicate declaration of plugin org.codehaus.mojo:xml-maven-plugin @ org.forgerock.ce.openam:openam-server-only:[unknown-version],
11:05 FireBurn|Work aldaris: Sorry most of these have all gone in the same pull request, I'm not down with GitHub and pull requests I'm used to sending patches to email lists
11:10 FireBurn|Work I'm still getting that mismatch :'( Installing OpenAM configuration store in /apps/was/openam/opendsAMSetupServlet.processRequest: errororg.opends.server.types.InitializationException: The OpenDJ binary version '2.6.4.2af80a949263f9233e7048de3cc57a53f1f9d410' does not match the installed version '2.6.4.c8a70c834a2ae0fc6744a7b861390bd87a3eb2a7'. Please run upgrade before continuing
11:11 FireBurn|Work But I think it's a different mismatch from the other day
11:25 aldaris joined #openam
11:32 jamiebowen joined #openam
12:04 jamiebowen Hi - been playing catchup
12:05 jamiebowen Fireburn - are you using your branch still? The latest checked in code doesn't give me sha conflicts. It's been built with the correct OpenDJ CE. If you're still using your fork I would suggest just cloning the github repo and building that.
12:06 jamiebowen You can get the same JDK as I built with here;
12:06 jamiebowen http://www.oracle.com/technetwork/java/javase/downloads/java-archive-downloads-javase7-521261.html#jdk-7u80-oth-JPR
12:07 jamiebowen Oracle state;
12:07 jamiebowen WARNING: These older versions of the JRE and JDK are provided to help developers debug issues in older systems. They are not updated with the latest security patches and are not recommended for use in production
12:07 jamiebowen http://www.oracle.com/technetwork/java/javase/downloads/java-archive-downloads-javase7-521261.html
12:07 jamiebowen But if you have the support thing with them then I guess that's not the case.
12:08 jamiebowen btw, I didn't 'Ignore' your pull request, but you were a couple of steps behind what I'd been doing to produce a working build, so it was quicker for me to check in the large commit of mine than deal with merges etc.
12:09 jamiebowen It was a good pull request though, so thanks for that and welcome pull requests in the future! :-)
12:12 jamiebowen I initially started out trying to produce the CE version with the OpenJDK but hit the same issues as you. Really you need to use that Oracle JRE - those classes have moved and changed and pinning down which versions of what JRE saw them move is not straightforward.
12:29 jasoninmel joined #openam
12:39 jasoninmel https://forum.forgerock.com/topic/saml2exception-multiple-matching-users-found/
12:40 jasoninmel this topic has no replies
12:40 jasoninmel hoping to find an answer
12:47 jamiebowen jasoninmel - I'll push the post to the dev team. Can you add some details about what version of the product you're using, environment etc?
12:54 FireBurn|Work jamiebowen: I tried using your build yesterday, it didn't work
12:54 FireBurn|Work My patches get me further
12:55 jamiebowen OK. Did you try to build with the OpenJDK? THat wouldn't have worked.
12:55 FireBurn|Work Yeah that's what I was using, I'll try the version you posted
12:59 jamiebowen Great - thanks!
13:00 jamiebowen btw I added a README.md to the github project that has a little info. I'll be fleshing that out a bit and adding a wiki page on how to prepare OpenAM CE to use the OpenDJ CE version.
13:01 gbuxton1 joined #openam
13:05 gbuxton1 left #openam
13:08 jamiebowen You need to use maven v 3.05
13:08 jamiebowen Sorry 3.0.5
13:11 FireBurn|Work I'm using 3.3.9
13:11 FireBurn|Work I think the version I was using before (the default on RHEL) was too old for OpenAM 13
13:13 jamiebowen Yes, probablly
13:23 aldaris joined #openam
13:32 jamiebowen If you're wondering about the sha1 clashes in your own fork this might help; https://github.com/ForgeRock/openam-community-edition-11.0.3/wiki
13:35 FireBurn|Work What's with the maven requirement?
13:36 jamiebowen I can't remember. I only know it's a requirement. Perhaps to do with a plugin api that changed? _aldaris may know?
13:37 jamiebowen aldaris: may know
13:37 jamiebowen - how do you mention someone in IRC?
13:38 FireBurn|Work Just say their name
13:38 FireBurn|Work Their irc client will highlight it
13:38 FireBurn|Work So if I'm talking about jamiebowen hopefully your client will highlight
13:39 jamiebowen Perfect. Thanks :-) betelgeuse betelgeuse betelgeuse
13:39 jamiebowen Showing my age now...
13:39 FireBurn|Work That's a star, not a fictional character
13:40 jamiebowen Was the film Beetlejuice?
13:40 jamiebowen Oh yeah.
13:40 jamiebowen Showing your age now ;-)
13:41 FireBurn|Work Oh yes I remember when that star was nothing but cosmic dust
13:41 FireBurn|Work ;)
13:41 jamiebowen hehe
13:42 FireBurn|Work were you building opendj using that version of java too?
13:42 FireBurn|Work And were you doing it the maven way or the ant way?
13:47 jamiebowen The ant way. Maven won't work for that version. I think they were transitioning over to maven at the time. I think I built with that same java version. It was either that or 1.6.0_45!
13:49 FireBurn|Work Is it just ant or do you need other parameters?
13:50 FireBurn|Work ant compile ?
13:56 jamiebowen just run ./build.sh
13:56 jamiebowen It should do it all for you..
14:03 FireBurn|Work You bundle ant?
14:08 FireBurn|Work Right I've added those extra steps into my build
14:08 FireBurn|Work What command do you use to publish org/forgerock/ce/opendj/opendj-server/2.6.4/opendj-server-2.6.4.jar into your maven repo?
14:11 FireBurn|Work Other random question, any idea why they put the version numbers into the repos? Surely if these get enough bug fixes you might want to bump to 11.0.4 and 2.6.5 for example
14:23 jamiebowen Ahem <marketing dept> ;-)
14:24 jamiebowen We use artifactory that has a rest api, so I just used curl to do it. Do you have a maven repository? If not you can just copy them to your ~/.m2/repository directory
14:25 jamiebowen Yes, ant is bundled I believe
14:25 jamiebowen We'll deal with the versioning question when we get to that point I guess.
14:28 jamiebowen Just added this to the OpenDJ CE README.md file
14:28 jamiebowen https://github.com/ForgeRock/opendj-community-edition-2.6.4#how-do-i-build-it
14:32 aldaris what about the maven version requirement?
14:40 FireBurn|Work jenkins really doesn't like that inclusion list in the script
15:04 FireBurn|Work I've reset my tree back to your master and reapplied what I think is still required to the tree and sent a fresh pull request
15:39 jamiebowen Thanks FireBurn|Work
15:50 FireBurn|Work right that imbedding process worked :D It's now all built with OpenJDK 1.7.0_131
15:54 FireBurn|Work More importantly it installs and SSOAdminTools and SSOConfigurationTools seem to work too
16:24 jamiebowen Yay! Happy Friday :-)
16:25 jamiebowen OpenJDK 1.7.0_131? Did you have to make any changes to get it to compile with that or does that just happen to be the OpenJDK version will all the right classes in the right places?
16:25 jamiebowen Have a good weekend all - catch you on Monday.
17:18 aldaris joined #openam
21:14 jelmd left #openam
21:18 jelmd joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary