Mailing-List: contact dev-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@activemq.apache.org
Received-SPF: pass (nike.apache.org: domain of e.semog@gmail.com designates
 209.85.216.54 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAGB5yNnb3svYwOgRLNkSvCGWvuzRbXon0YiERFxFFonKnveXxg@mail.gmail.com>
References: <05AAA2FB-2982-4AA8-8CE2-4AC94DE2C708@gmail.com>
	<CAGB5yNnb3svYwOgRLNkSvCGWvuzRbXon0YiERFxFFonKnveXxg@mail.gmail.com>
Date: Tue, 7 Jan 2014 11:48:58 -0800
Message-ID: 
 <CAGeZ+biTsErNr92NybC2w8ebVm8wXpD7KNcE4rBMdWfVZxsK2w@mail.gmail.com>
Subject: Re: [DISCUSS] Remove the old ActiveMQ Console
From: Jim Gomes <e.semog@gmail.com>
To: ActiveMQ Dev <dev@activemq.apache.org>
Content-Type: multipart/alternative; boundary=089e0149cedcd0317504ef66aa7d

--089e0149cedcd0317504ef66aa7d
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

+1 the ideas that Claus presented below.  I like the idea of a simple
drop-in install and a level playing field for replacement consoles.  By
having a default "headless" install, the security of a production
deployment goes way up.


On Mon, Jan 6, 2014 at 12:06 AM, Claus Ibsen <claus.ibsen@gmail.com> wrote:

> Hi
>
> I think the old web console should be moved into a sub-project of ActiveM=
Q.
> Other ASF projects like Felix [1], Karaf [2], etc does this with their
> web-consoles.
>
> That may also make it easier for people to contribute to the
> web-console as a sub-project if there codebase is smaller, and not
> contains the entire ActiveMQ source code. That may spark a little more
> life into the old web-console so people can help maintain it.
>
> For the standalone ActiveMQ distribution, then installing the old web
> console should be an easy step, such as unzipping a .zip file, or
> copying a .war / .jar or something to a directory, and allowing to
> editing a configuration file to configure the console (port / context
> path / or other configurations). Then other 3rd party consoles could
> have the *same* installation procedure, so there is even
> playing-field.
>
> For the embedded ActiveMQ distribution for SMX/Karaf users, its
> already easy to install the console, as its just like any other
> installation using a feature. This is the same for other 3rd party
> consoles, and thus there is already an even playing field.
>
>
>
>
> [1] -
> http://felix.apache.org/documentation/subprojects/apache-felix-web-consol=
e.html
> [2] - http://karaf.apache.org/index/subprojects/webconsole.html
>
>
> On Thu, Jan 2, 2014 at 10:59 AM, Robert Davies <rajdavies@gmail.com>
> wrote:
> > The old/original console is no longer fit for purpose, it is hard to
> maintain, the source of a lot of security issues [1] over the last few
> years.
> >
> > There is another thread about using hawtio as the console going forward=
,
> and without going into all the gory details it is probably likely that
> there may be no web console shipped at all in future releases of ActiveMQ=
.
> The JMX naming hierarchy was improved for ActiveMQ 5.8, such that its eas=
y
> to view the running status of an ActiveMQ broker from 3rd party tools suc=
h
> as jconsole, visualvm or hawtio. Regardless of the outcome of the other
> discussion [2] - It doesn=92t help the ActiveMQ project to try and mainta=
in a
> static web console any more.
> >
> > I propose we remove the old web console from the ActiveMQ 5.10 release =
-
> thoughts ?
> >
> >
> >
> > [1]
> https://issues.apache.org/jira/browse/AMQ-2714?jql=3Dproject%20%3D%20AMQ%=
20AND%20text%20~%20%22XSS%22
> > [2]
> http://activemq.2283324.n4.nabble.com/Default-Web-Console-td4675705.html
> >
> > Rob Davies
> > =97=97=97=97=97=97=97=97
> > Red Hat, Inc
> > http://hawt.io - #dontcha
> > Twitter: rajdavies
> > Blog: http://rajdavies.blogspot.com
> > ActiveMQ in Action: http://www.manning.com/snyder/
> >
>
>
>
> --
> Claus Ibsen
> -----------------
> Red Hat, Inc.
> Email: cibsen@redhat.com
> Twitter: davsclaus
> Blog: http://davsclaus.com
> Author of Camel in Action: http://www.manning.com/ibsen
> Make your Camel applications look hawt, try: http://hawt.io
>

--089e0149cedcd0317504ef66aa7d--